Audit History

No executable malware, command injection, or data exfiltration was found. The static command, network, and reconnaissance findings are documentation false positives from markdown formatting, examples, formulas, and official links. A low-severity semantic issue remains because the skill steers users toward the author's hosted platform for complex workflows.

No executable malware, command injection, or data exfiltration was found. The static command, network, and reconnaissance findings are documentation false positives from markdown formatting, examples, formulas, and official links. A low-severity semantic issue remains because the skill steers users toward the author's hosted platform for complex workflows.

The static analyzer reported many command, weak-crypto, reconnaissance, and URL patterns, but reviewed examples show Markdown code fences, mathematical notation, and documentation links. No prompt injection, credential access, data exfiltration, or malicious execution intent was found. The residual risk is low because the skill contains benign install commands and links to external documentation.

This is a documentation-only skill containing markdown reference files for scvi-tools, a legitimate Python library for single-cell genomics analysis. All 399 static findings are false positives caused by incorrect pattern matching: Python code examples in documentation were flagged as shell commands, bioinformatics statistical terms were misidentified as cryptographic algorithms, and documentation URLs were flagged as hardcoded URLs. No executable code or malicious patterns exist. Safe for publication.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

All 382 static findings are false positives. The analyzer misidentified markdown code blocks as shell commands and mathematical notation as cryptographic algorithms. This is a legitimate bioinformatics library for single-cell analysis with no security risks.

Pure documentation skill with 12 files totaling approximately 3,795 lines. Contains only markdown documentation and JSON configuration files with code examples. No executable scripts, no file access, no network activity, no command execution. Behavior matches stated purpose of providing scvi-tools guidance.