Audit History
data-quality-frameworks - 5 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v5 Latest | Jul 23, 2026, 10:15 PM | 1 confirmed | 0 | No capability change |
| v4 | Jul 8, 2026, 10:22 AM | No confirmed findings | 0 | No capability change |
| v3 | Jul 6, 2026, 10:58 PM | No confirmed findings | 0 | Network access |
| v2 | Jun 30, 2026, 02:59 PM | 1 confirmed | 0 | External commandsNetwork access |
| v1 | Feb 24, 2026, 06:43 PM | No confirmed findings | 0 | Baseline |
Jul 23, 2026, 10:15 PM
All 16 static alerts are false positives caused by Markdown references, schema fields, SQL identifiers, and ordinary safety guidance. One medium-risk semantic issue remains because an example report includes raw observed values and can print them to pipeline logs.
Confirmed security concerns (1)
Risk Factors
⚙️ External commands (2)
Jul 8, 2026, 10:22 AM
All static findings are false positives caused by data-quality terminology, Markdown resource links, or example schema fields. The reviewed files describe Great Expectations, dbt tests, and data contracts, with no evidence of system reconnaissance, network reconnaissance, command execution, prompt injection, or exfiltration intent.
Risk Factors
⚙️ External commands (2)
Jul 6, 2026, 10:58 PM
The static findings are false positives caused by headings, sample column names, inline markdown paths, and data quality examples. No prompt injection, malicious intent, or executable shell behavior was found in the reviewed files.
Risk Factors
⚙️ External commands (2)
Jun 30, 2026, 02:59 PM
The high static score is driven by markdown examples, inline framework names, and documentation links rather than executable skill code. No malicious intent, prompt injection, credential exfiltration, or hidden automation was found. Minor risk remains because the playbook includes user-run setup commands and notification examples that may expose validation details if configured poorly.
Confirmed security concerns (1)
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (30)
Feb 24, 2026, 06:43 PM
This is a documentation-only skill providing markdown guides for data quality frameworks. All static analysis findings are false positives: code blocks are markdown examples not executable code, URLs are documentation references, and pattern matches on SQL terms are not actual system calls.