Audit History
teach-impeccable - 4 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v4 Latest | Jul 6, 2026, 08:47 PM | No confirmed findings | 0 | No capability change |
| v3 | Jul 6, 2026, 08:47 PM | No confirmed findings | 0 | External commands Filesystem access |
| v2 | Jun 30, 2026, 10:44 AM | No confirmed findings | 1 | Filesystem access External commands |
| v1 | Mar 16, 2026, 08:32 AM | No confirmed findings | 0 | Baseline |
Jul 6, 2026, 08:47 PM
The three static findings are false positives caused by inline and fenced markdown backticks in SKILL.md. I found no prompt injection attempt, data exfiltration intent, or executable command path in the reviewed file. The skill does ask the assistant to write design context to local project files, which matches its stated setup purpose.
Risk Factors
⚙️ External commands (3)
Jul 6, 2026, 08:47 PM
The three static findings are false positives caused by inline and fenced markdown backticks in SKILL.md. I found no prompt injection attempt, data exfiltration intent, or executable command path in the reviewed file. The skill does ask the assistant to write design context to local project files, which matches its stated setup purpose.
Risk Factors
⚙️ External commands (3)
Jun 30, 2026, 10:44 AM
Static external command and weak cryptography findings are false positives from Markdown formatting and ordinary design vocabulary. The only confirmed concern is low-risk filesystem persistence because the skill writes design context to project files and may update an AI config file after asking.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
📁 Filesystem access (2)
Mar 16, 2026, 08:32 AM
All static analysis findings are false positives. The skill is instructional markdown that guides AI to gather design context through codebase exploration and user questions. Markdown backticks were misidentified as shell commands. No cryptographic operations exist. Safe for publication.