The static command findings are false positives caused by Markdown inline code and fenced prompt examples in SKILL.md. The entropy findings are also false positives caused by readable Chinese prompt text, not encoded payloads or binary content.
The static command findings are false positives caused by Markdown inline code and fenced prompt examples in SKILL.md. The entropy findings are also false positives caused by readable Chinese prompt text, not encoded payloads or binary content.
Reviewed SKILL.md as an untrusted community skill and found only Markdown guidance for Seedance 2.0 prompt writing. The external command detections are false positives from Markdown backticks, code fences, and @reference examples, not executable shell or Ruby code. The weak crypto and entropy detections are false positives from frontmatter text and dense Chinese examples; no prompt injection, exfiltration, network access, filesystem access, or credential handling evidence was found.
1
Files scanned
581
Lines analyzed
0
Review items
3
False positives ignored
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
False Positive: Markdown Backticks Flagged as External Commands
The repeated external_commands findings point to Markdown inline literals and fenced prompt examples. These lines describe Seedance @references and output formats; they do not invoke a shell, Ruby backticks, subprocesses, or user-controlled command execution.
The cited content is visible Markdown documentation and prompt text, not executable source code. No command interpreter, script file, or runtime call is present in SKILL.md.
False Positive: Weak Cryptographic Algorithm Match
The weak cryptographic algorithm finding at the frontmatter description is not supported by context. The line only describes when to use the Seedance video prompt skill and contains no hashing, encryption, cipher selection, or cryptographic API use.
Line 3 is a natural-language description field. I found no cryptographic operation or algorithm reference in that location.
False Positive: Entropy Heuristics from Chinese Prompt Text
The high entropy findings appear to come from long, dense Chinese video prompt examples and multilingual Markdown content. No encoded payload, binary blob, decompression routine, decoder, or hidden executable content was found.
The specific high-entropy line is a readable Chinese cinematic prompt example. The file is a Markdown document with normal text structure, so entropy alone is not evidence of obfuscation here.
No confirmed security findings were recorded for this completed audit.
All 103 static analysis findings are FALSE POSITIVES. The scanner incorrectly flagged backtick characters in markdown as Ruby shell commands (99 occurrences), YAML front matter as weak cryptographic algorithms, and Chinese narrative text as obfuscated payloads. This is a legitimate video prompt engineering skill with no malicious code, no external commands, no network access, and no cryptographic operations.
1
Files scanned
581
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
All 103 static findings are false positives. The scanner detected Ruby backtick syntax and cryptographic algorithms in what is actually a markdown documentation file containing video prompt examples in Chinese. The '@' symbols are reference syntax for the Seedance platform, not code execution. No actual security risks found.
1
Files scanned
581
Lines analyzed
0
Review items
3
False positives ignored
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Scanner detected 'Ruby/shell backtick execution' at multiple lines (33, 52-54, 59-63, etc.). These are actually '@' reference symbols (@图片1, @视频1) for the Seedance AI video platform. This is legitimate documentation content, not code execution.
The '@' symbols are Seedance platform reference syntax, not Ruby code. The entire file is a markdown documentation file.
Scanner reported 'weak cryptographic algorithm' at SKILL.md:3. Line 3 contains YAML frontmatter with skill description text. No cryptographic code exists.
YAML frontmatter contains only text description, no cryptographic algorithms.
Scanner reported 'very high entropy string' at SKILL.md:261 and 'high file entropy' at SKILL.md:1. These are Chinese video prompt text examples, not encoded payloads. Multilingual text naturally has higher entropy.
The content is Chinese language video prompts, not obfuscated code. High entropy is expected for non-English UTF-8 text.
No confirmed security findings were recorded for this completed audit.