Audit History

Most alerts are false positives caused by Markdown fences, inline names, documentation links, and ordinary guidance. Four findings are confirmed because examples execute community npm packages through global installation or unversioned npx commands. No prompt injection, exfiltration intent, or malicious behavior was found.

The static backtick detections are Markdown code fences or inline-code examples in SKILL.md, not executable Ruby shell backticks. The hardcoded URLs are GitHub reference links, and the system reconnaissance hit is ordinary best-practice prose. No prompt injection, hidden exfiltration, or executable payload was found in the single-file skill.

All 72 static findings are false positives from Markdown fences, inline code, CLI examples, and reference links. No evidence found of prompt injection, credential access, exfiltration, or automatic network activity. The skill is instructional content for Claude Flow swarm orchestration.

Static analysis found many command-execution and network patterns, but most are Markdown examples for Claude Flow MCP calls rather than executable code. The real risk is instructional: the skill tells users to install an external alpha package and register an MCP server, so publishing is acceptable with a warning. The weak cryptography and system reconnaissance hits were false positives caused by ordinary text, headings, and comments.

Pure documentation skill containing only SKILL.md with MCP tool usage patterns and CLI examples. No executable code, scripts, or malicious patterns detected. All 90 static findings are FALSE POSITIVES - the markdown code blocks and GitHub URLs flagged by the analyzer are standard documentation elements, not security risks.

Pure documentation skill containing only SKILL.md with MCP tool usage patterns and CLI examples. No executable code, scripts, or malicious patterns detected. All 90 static findings are FALSE POSITIVES - the markdown code blocks and GitHub URLs flagged by the analyzer are standard documentation elements, not security risks.

Pure documentation skill containing only SKILL.md with MCP tool usage patterns. No executable code, scripts, or malicious patterns. Contains CLI command references for Claude Flow integration, which is expected for orchestration skills.

Pure documentation skill containing only SKILL.md with MCP tool usage patterns. No executable code, scripts, or malicious patterns. Contains CLI command references for Claude Flow integration, which is expected for orchestration skills.