Audit History

Most static findings are false positives from Markdown fences, LaTeX examples, DOI examples, and scientific writing prose. Semantic review found real concerns: unverified Bash script execution guidance, an embedded self-audit that claims the package is safe, and promotional steering to an external service. The author should remove or constrain these behaviors before publication.

Most static findings are false positives from Markdown fences, LaTeX examples, DOI examples, and scientific writing prose. Semantic review found real concerns: unverified Bash script execution guidance, an embedded self-audit that claims the package is safe, and promotional steering to an external service. The author should remove or constrain these behaviors before publication.

Static analysis reported many high-risk patterns, but most are false positives from Markdown, LaTeX syntax, relative figure paths, and reference URLs. The remaining real risk is bounded: the skill allows Bash and gives local document-generation commands, so users should review commands before execution. No prompt injection or malicious exfiltration evidence was found.

Documentation-only skill containing markdown files and LaTeX templates. All 846 static findings are FALSE POSITIVES triggered by benign documentation syntax: markdown backticks for inline code formatting, LaTeX file path references, algorithm term references in text, and documentation URLs. No executable code exists. No security concerns present.

Documentation-only skill containing markdown files and LaTeX templates. All 846 static findings are FALSE POSITIVES triggered by benign documentation syntax: markdown backticks for inline code formatting, LaTeX file path references, algorithm term references in text, and documentation URLs. No executable code exists. No security concerns present.

Documentation-only skill with no executable code. All 822 static findings are false positives triggered by markdown formatting syntax (backticks), LaTeX template paths, and documentation references. No security concerns present.

Pure documentation skill with no executable code. Contains only markdown reference files providing scientific writing guidance. No file access, network operations, or code execution capabilities detected.