Audit History
vue-options-api-best-practices - 4 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v4 Latest | Jul 7, 2026, 06:56 AM | No confirmed findings | 0 | No capability change |
| v3 | Jul 7, 2026, 06:56 AM | No confirmed findings | 0 | External commandsNetwork access |
| v2 | Jun 30, 2026, 10:55 PM | No confirmed findings | 0 | No capability change |
| v1 | Feb 12, 2026, 08:56 AM | No confirmed findings | 0 | Baseline |
Jul 7, 2026, 06:56 AM
The static alerts are false positives caused by Markdown code fences, TypeScript template literals, Vue documentation links, and DOM event property names. No prompt injection, secret handling, command execution, or executable network behavior was found in the reviewed skill content.
Risk Factors
⚙️ External commands (8)
🌐 Network access (1)
Jul 7, 2026, 06:56 AM
The static alerts are false positives caused by Markdown code fences, TypeScript template literals, Vue documentation links, and DOM event property names. No prompt injection, secret handling, command execution, or executable network behavior was found in the reviewed skill content.
Risk Factors
⚙️ External commands (8)
🌐 Network access (1)
Jun 30, 2026, 10:55 PM
Static analysis reported 258 issues, but targeted review found they are false positives from Markdown examples and documentation links. The skill is documentation-only and contains no executable scripts, credential access, network exfiltration, or prompt injection attempts. Safe to publish.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Feb 12, 2026, 08:56 AM
Static analysis detected 258 potential security issues, all are false positives from markdown code blocks. The 'Ruby/shell backtick execution' findings are JavaScript code examples in markdown fences. 'Hardcoded URL' findings are Vue.js documentation links. 'Weak cryptographic algorithm' findings trigger on the word 'key' in event.key and YAML frontmatter. No actual security risks exist.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.