Audit History
code-reviewer - 3 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Jul 9, 2026, 08:31 AM
Static analysis flagged scripts, network calls, command execution, and keylogger terms, but review found they are educational examples inside code review guidance. No evidence found of active execution, data exfiltration, prompt injection, or malicious intent in the skill files.
Risk Factors
⚡ Contains scripts (6)
⚙️ External commands (21)
🌐 Network access (8)
Jul 9, 2026, 08:31 AM
Static analysis flagged scripts, network calls, command execution, and keylogger terms, but review found they are educational examples inside code review guidance. No evidence found of active execution, data exfiltration, prompt injection, or malicious intent in the skill files.
Risk Factors
⚡ Contains scripts (6)
⚙️ External commands (21)
🌐 Network access (8)
Jul 7, 2026, 02:10 AM
All 78 static findings were assessed as false positives because they occur in Markdown guidance or educational code examples. No prompt injection, executable install hooks, or hidden data-exfiltration intent was found in the reviewed files. The skill is a documentation-only review guide with intentionally vulnerable examples for education.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.