Audit History
android-jetpack-compose-expert - 5 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v5 Latest | Jul 23, 2026, 07:08 PM | No confirmed findings | 0 | No capability change |
| v4 | Jul 8, 2026, 08:15 AM | No confirmed findings | 0 | No capability change |
| v3 | Jul 6, 2026, 08:08 PM | No confirmed findings | 0 | External commands |
| v2 | Jun 30, 2026, 11:04 AM | No confirmed findings | 0 | No capability change |
| v1 | Feb 24, 2026, 05:45 PM | No confirmed findings | 0 | Baseline |
Jul 23, 2026, 07:08 PM
All 22 static findings are false positives caused by Markdown backticks or ordinary Android terminology. SKILL.md contains instructional Kotlin examples, with no executable shell commands, system reconnaissance, or prompt injection.
Risk Factors
Jul 8, 2026, 08:15 AM
Static analysis flagged Markdown backticks and Android guidance as command execution or reconnaissance. Manual review found only Compose instructional content, Kotlin examples, and no prompt injection, data exfiltration, shell execution, network access, or filesystem access.
Risk Factors
Jul 6, 2026, 08:08 PM
All 22 static findings are false positives from Markdown inline code, fenced Kotlin examples, and benign Compose terminology. No prompt injection, exfiltration intent, network behavior, or real command execution was found in SKILL.md.
Risk Factors
Jun 30, 2026, 11:04 AM
Static analysis reported command execution, weak cryptography, and reconnaissance indicators. AI review dismissed these as false positives from Markdown backticks, Compose examples, and Android UI terminology. No executable scripts, network access, secret handling, prompt injection text, or malicious intent were found in SKILL.md.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Feb 24, 2026, 05:45 PM
This skill contains documentation-only content (Kotlin code examples for Android Jetpack Compose). All 33 static analysis findings are false positives: backticks detected are markdown formatting and Kotlin syntax, not shell command execution. No executable code, network access, or file system operations present.