Most static alerts are false positives caused by Markdown formatting, illustrative shell syntax, reserved example URLs, and comparison headings. Confirmed concerns involve predictable shared temporary-file cleanup and guidance that may expose secrets or terminate unintended processes.
The skill recommends env or printenv without warning that full output can expose credentials and tokens in terminals, logs, or AI context.
The command explicitly prints the complete process environment, which commonly contains secrets. The surrounding text provides no redaction or scope warning.
The scanned file is a Markdown command reference for Bash and Linux usage. Static analysis flagged command, network, and filesystem examples, but I found no executable payloads, prompt injection, exfiltration logic, or hidden install behavior. Publish with caution because some examples can affect local processes, environment output, or temporary files if copied without review.
The scanned file is a Markdown command reference for Bash and Linux usage. Static analysis flagged command, network, and filesystem examples, but I found no executable payloads, prompt injection, exfiltration logic, or hidden install behavior. Publish with caution because some examples can affect local processes, environment output, or temporary files if copied without review.
Static analysis flagged many command execution patterns, but review shows they are Markdown examples in SKILL.md rather than hidden executable code. The skill is still medium risk because it intentionally teaches shell, process, network, and filesystem commands that an agent could run with local system impact.
The skill documents command chaining, file inspection, text processing, environment variables, script templates, and error handling for Bash. This is legitimate for a Bash reference, but the supported tool context includes shell access, so careless use can run commands on the local system.
The affected lines are visible Markdown examples, and the skill metadata allows Bash. That confirms operational command risk without evidence of malicious intent.
The process management section includes force-kill patterns for PIDs and ports. These commands can interrupt user workloads or services if adapted without checking the target process.
The lines explicitly show kill commands. The risk is contextual rather than malicious because the surrounding section is a process management reference.
The network section includes download, API request, POST, port check, and network interface commands. These can contact external services or reveal local network details when used with real targets.
The network commands are explicit and grouped under a network heading. I found no hidden endpoint or data exfiltration instruction.
The cleanup example removes a named file under /tmp. This is a common pattern, but users should adapt it carefully to avoid deleting the wrong path.
The line explicitly shows a file removal command. The risk is limited because it is documentation and the target is a temporary example path.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Static Analyzer False Positives in Markdown Backticks
Most Ruby backtick, command substitution, Unix shell invocation, and PowerShell invocation findings are caused by Markdown inline code and fenced Bash examples. They are documentation examples, not code executed by the skill file itself.
The file is a Markdown-only skill document, and the flagged syntax appears in documented examples. No executable source files or hidden scripts were present in the analyzed file list.
The static weak cryptographic algorithm finding points to the front matter description, which uses the word critical. No cryptographic algorithm or crypto operation is present at that line.
The cited line is visible front matter text and contains no cryptographic primitive. This is a clear scanner mismatch.
Static scanner detected 92 patterns flagged as potential security issues. After manual review, all findings are confirmed FALSE POSITIVES. The skill file is educational documentation containing bash command examples in markdown code blocks and tables. Backticks and command syntax are part of markdown formatting for documentation purposes, not executable code. No malicious intent detected, no security risks identified.
1
Files scanned
205
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.