Audit History
venue-templates - 9 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v9 Latest | Jul 9, 2026, 02:35 PM | No confirmed findings | 2 | No capability change |
| v8 | Jul 9, 2026, 02:35 PM | No confirmed findings | 2 | No capability change |
| v7 | Jul 5, 2026, 05:37 PM | No confirmed findings | 2 | No capability change |
| v6 | Jul 5, 2026, 05:37 PM | No confirmed findings | 2 | Contains scripts |
| v5 | Jun 30, 2026, 06:25 AM | 2 confirmed | 0 | Contains scripts |
| v4 | Jan 17, 2026, 07:56 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 07:56 AM | No confirmed findings | 0 | Network access |
| v2 | Jan 12, 2026, 04:48 PM | No confirmed findings | 0 | External commands Contains scripts |
| v1 | Jan 5, 2026, 04:46 PM | No confirmed findings | 0 | Baseline |
Jul 9, 2026, 02:35 PM
AI review found no evidence of malicious intent, prompt injection, credential access, or data exfiltration. Most static findings are false positives from academic prose, Markdown fences, LaTeX syntax, and documentation URLs. The confirmed residual risk is limited to helper scripts that write user-selected local output files.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (74)
🌐 Network access (12)
Jul 9, 2026, 02:35 PM
AI review found no evidence of malicious intent, prompt injection, credential access, or data exfiltration. Most static findings are false positives from academic prose, Markdown fences, LaTeX syntax, and documentation URLs. The confirmed residual risk is limited to helper scripts that write user-selected local output files.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (74)
🌐 Network access (12)
Jul 5, 2026, 05:37 PM
AI review found no evidence of malicious intent, prompt injection, credential access, or data exfiltration. Most static findings are false positives from academic prose, Markdown fences, LaTeX syntax, and documentation URLs. The confirmed residual risk is limited to helper scripts that write user-selected local output files.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (74)
🌐 Network access (12)
Jul 5, 2026, 05:37 PM
AI review found no evidence of malicious intent, prompt injection, credential access, or data exfiltration. Most static findings are false positives from academic prose, Markdown fences, LaTeX syntax, and documentation URLs. The confirmed residual risk is limited to helper scripts that write user-selected local output files.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (74)
🌐 Network access (12)
Jun 30, 2026, 06:25 AM
AI review found no evidence of malicious intent or prompt injection. Most static findings are false positives from Markdown, LaTeX, citation text, and documentation URLs; residual risk comes from local helper scripts that execute fixed PDF tools and write user-selected output files.
Confirmed security concerns (2)
Static false positives ignored (5)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚡ Contains scripts (3)
⚙️ External commands (3)
📁 Filesystem access (3)
Detected Patterns
Jan 17, 2026, 07:56 AM
All 791 static findings are FALSE POSITIVES. The scanner incorrectly flagged: (1) Markdown backticks as shell commands across 400 locations in documentation files; (2) LaTeX formatting commands (\textbf, \section, \cite) as cryptographic algorithms across 300+ locations in template files; (3) Documentation URLs to journal websites as hardcoded URLs; (4) PDF validation utility calls (pdfinfo, pdffonts) as external commands; (5) Help text mentioning 'sudo apt-get' as privilege escalation. This is a legitimate academic template repository with no security risks.
Risk Factors
⚙️ External commands (400)
🌐 Network access (56)
Jan 17, 2026, 07:56 AM
All 791 static findings are FALSE POSITIVES. The scanner incorrectly flagged: (1) Markdown backticks as shell commands across 400 locations in documentation files; (2) LaTeX formatting commands (\textbf, \section, \cite) as cryptographic algorithms across 300+ locations in template files; (3) Documentation URLs to journal websites as hardcoded URLs; (4) PDF validation utility calls (pdfinfo, pdffonts) as external commands; (5) Help text mentioning 'sudo apt-get' as privilege escalation. This is a legitimate academic template repository with no security risks.
Risk Factors
⚙️ External commands (400)
🌐 Network access (56)
Jan 12, 2026, 04:48 PM
The static analysis flagged numerous 'external_commands' issues, but these are false positives. The skill legitimately uses subprocess calls to standard PDF utilities (pdfinfo, pdffonts) for document validation. The 'weak cryptographic algorithm' findings are also false positives - they reference placeholder text in LaTeX templates and documentation, not actual cryptographic implementations. The skill is safe for academic document preparation.
Risk Factors
⚙️ External commands (2)
📁 Filesystem access (2)
Jan 5, 2026, 04:46 PM
Pure documentation and template management skill with no code execution risks. Scripts only read/write within their own directory using standard Python libraries. No network access, no credential access, no external command injection vectors.