Audit History
app-store-screenshots - 6 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v6 Latest | Jul 9, 2026, 07:31 AM | No confirmed findings | 0 | No capability change |
| v5 | Jul 9, 2026, 07:31 AM | No confirmed findings | 0 | No capability change |
| v4 | Jul 5, 2026, 08:53 PM | No confirmed findings | 1 | No capability change |
| v3 | Jul 5, 2026, 08:53 PM | No confirmed findings | 1 | Network accessFilesystem access |
| v2 | Jun 30, 2026, 10:45 AM | 2 confirmed | 0 | External commandsNetwork accessFilesystem access |
| v1 | Mar 11, 2026, 12:14 AM | No confirmed findings | 0 | Baseline |
Jul 9, 2026, 07:31 AM
The high screen-capture detections are false positives: the skill asks for local app screenshot files and uses local DOM capture for export. The external-command detections are Markdown setup examples, inline code, or TypeScript snippets with fixed commands and no dynamic execution path. Manual review of mockup.png found a normal phone-frame PNG asset.
Risk Factors
⚙️ External commands (45)
Jul 9, 2026, 07:31 AM
The high screen-capture detections are false positives: the skill asks for local app screenshot files and uses local DOM capture for export. The external-command detections are Markdown setup examples, inline code, or TypeScript snippets with fixed commands and no dynamic execution path. Manual review of mockup.png found a normal phone-frame PNG asset.
Risk Factors
⚙️ External commands (45)
Jul 5, 2026, 08:53 PM
Most static findings are false positives caused by Markdown code fences, inline code, and TSX template literals. The only confirmed issue is the setup block that tells an agent to run package-manager commands, which is legitimate but can download dependencies and change the workspace. The screen-capture, system-reconnaissance, and binary-file findings were not supported by the reviewed context.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (45)
Jul 5, 2026, 08:53 PM
Most static findings are false positives caused by Markdown code fences, inline code, and TSX template literals. The only confirmed issue is the setup block that tells an agent to run package-manager commands, which is legitimate but can download dependencies and change the workspace. The screen-capture, system-reconnaissance, and binary-file findings were not supported by the reviewed context.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (45)
Jun 30, 2026, 10:45 AM
Static analysis reported many high-risk patterns, but review shows most are Markdown false positives from inline code, screenshot terminology, and words that matched cryptography heuristics. The confirmed risk is legitimate operational behavior: package installation, project scaffolding, filesystem writes, and local image export. No evidence found of prompt injection, credential access, obfuscation, malicious network exfiltration, or unauthorized screenshot upload.
Confirmed security concerns (2)
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (1)
🌐 Network access (2)
📁 Filesystem access (2)
Detected Patterns
Mar 11, 2026, 12:14 AM
Static analysis detected 75 potential issues across 335 lines, all of which are false positives upon review. The findings consist of bash command examples in markdown code blocks (instructional documentation), legitimate use of html-to-image library for screenshot generation (core functionality), and MD5 hashes used for content integrity verification. No executable code, no network exfiltration, no credential access, and no malicious intent detected. This is a legitimate skill for generating App Store marketing assets.