Audit History
vue-testing-best-practices - 4 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v4 Latest | Jul 7, 2026, 07:07 AM | No confirmed findings | 0 | No capability change |
| v3 | Jul 7, 2026, 07:07 AM | No confirmed findings | 0 | No capability change |
| v2 | Jun 30, 2026, 11:04 PM | 1 confirmed | 3 | Contains scriptsExternal commandsNetwork accessEnv variables |
| v1 | Feb 11, 2026, 09:15 AM | No confirmed findings | 0 | Baseline |
Jul 7, 2026, 07:07 AM
I found no evidence of malicious intent or prompt injection. The static findings are false positives from documentation examples: local dynamic imports, CI flags, localhost URLs, and Markdown backticks. No remediation is required before publication from this audit.
Risk Factors
⚡ Contains scripts (5)
⚙️ External commands (4)
🌐 Network access (6)
🔑 Env variables (10)
Jul 7, 2026, 07:07 AM
I found no evidence of malicious intent or prompt injection. The static findings are false positives from documentation examples: local dynamic imports, CI flags, localhost URLs, and Markdown backticks. No remediation is required before publication from this audit.
Risk Factors
⚡ Contains scripts (5)
⚙️ External commands (4)
🌐 Network access (6)
🔑 Env variables (10)
Jun 30, 2026, 11:04 PM
Static analysis reported many dynamic import, command, URL, environment, and weak-crypto patterns, but review shows they are documentation examples for Vue testing. The files contain Markdown guidance, local development commands, CI flag examples, and official documentation links; no prompt injection, malicious execution, credential exfiltration, or hidden network behavior was found.
Confirmed security concerns (1)
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚡ Contains scripts (5)
⚙️ External commands (6)
🌐 Network access (5)
Feb 11, 2026, 09:15 AM
All static findings are false positives. This is a documentation skill containing Vue.js testing best practices. The scanner misinterpreted markdown code examples and Vite configuration patterns as security threats. No malicious code, credential access, or data exfiltration patterns exist.