Skills buddy-sings Audit History
📦

Audit History

buddy-sings - 2 audits

Audit version 2

Latest Medium Risk

May 27, 2026, 05:28 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

1
Files scanned
446
Lines analyzed
3
findings
claude
Audited by
No security issues found

Detected Patterns

Ruby/shell backtick executionPython HTTP librariesHardcoded URLHidden file in home directoryHidden file accessStandard device file accessWeak cryptographic algorithmSystem reconnaissance

Audit version 1

Safe

Apr 16, 2026, 06:07 AM

All 99 static analysis findings are false positives. The scanner misinterpreted markdown code fences (```bash) in SKILL.md as Ruby backtick execution. The file is documentation containing legitimate shell command examples for AI agent use, such as mmx CLI music generation, git log queries, and audio playback commands. No malicious patterns, credential exfiltration, or user input injection vectors were found. The skill is safe for publication.

1
Files scanned
446
Lines analyzed
0
findings
claude
Audited by
No security issues found