📦
Audit History
alan-plan - 1 audit
Audit version 1 Latest
Aug 20, 2026, 08:31 AM
All 29 static findings are false positives caused by Markdown backticks, fenced examples, Mermaid labels, and ordinary prose. No shell execution, system reconnaissance, or prompt injection appears in SKILL.md. The remaining medium risk is intended external persistence of repository-derived plans and context identifiers to Alan.
1
Files scanned
159
Lines analyzed
2
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Repository context is persisted to an external service
The skill requires sending the full repository-derived plan plus task, conversation, and team identifiers to Alan before user approval. Plans may expose sensitive architecture or internal names.
The instructions explicitly require codebase analysis and persistence of the complete plan with context identifiers through the Alan MCP tool.
Risk Factors
⚙️ External commands (26)
SKILL.md:22 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:66 SKILL.md:81 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:89 SKILL.md:92-102 SKILL.md:102-104 SKILL.md:104-106 SKILL.md:106-132 SKILL.md:132-133 SKILL.md:133-134 SKILL.md:134-137 SKILL.md:137-140 SKILL.md:140-147 SKILL.md:147 SKILL.md:148-149 SKILL.md:149-150 SKILL.md:150-151 SKILL.md:151-157
Audited by: codex