📦

Audit History

bats-testing-patterns - 9 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v9 LatestJul 7, 2026, 07:59 AM No confirmed findings0No capability change
v8 Jul 7, 2026, 07:59 AM No confirmed findings0No capability change
v7 Jun 30, 2026, 10:08 PM No confirmed findings3No capability change
v6 Jun 30, 2026, 10:08 PM No confirmed findings3External commandsNetwork accessFilesystem access
v5 Jan 21, 2026, 06:54 PM No confirmed findings0 Network accessExternal commandsFilesystem access
v4 Jan 17, 2026, 07:33 AM No confirmed findings0No capability change
v3 Jan 17, 2026, 07:33 AM No confirmed findings0Network accessExternal commandsFilesystem access
v2 Jan 4, 2026, 04:49 PM No confirmed findings0No capability change
v1 Jan 4, 2026, 04:49 PM No confirmed findings0Baseline

Jul 7, 2026, 07:59 AM

All static findings are false positives caused by Markdown examples for Bats test files, CI snippets, and reference links. No executable skill code, prompt injection, data exfiltration intent, or malicious workflow was found in SKILL.md.

1
Files scanned
631
Lines analyzed
3
Review items
0
False positives ignored
Audited by: codex

Jul 7, 2026, 07:59 AM

All static findings are false positives caused by Markdown examples for Bats test files, CI snippets, and reference links. No executable skill code, prompt injection, data exfiltration intent, or malicious workflow was found in SKILL.md.

1
Files scanned
631
Lines analyzed
3
Review items
0
False positives ignored
Audited by: codex

Jun 30, 2026, 10:08 PM

Static analysis reported many command, filesystem, URL, path traversal, and weak crypto patterns, but review found they occur in Markdown examples for Bats test authoring. No executable helper scripts, prompt injection text, data exfiltration behavior, or malicious intent were found in SKILL.md.

1
Files scanned
631
Lines analyzed
6
Review items
1
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Documentation Examples Include Shell Commands
The skill contains many Bash and Bats snippets with command execution, command substitution, temporary directory creation, cleanup, and shell invocation. These are instructional examples for test files, not executable skill code, but users should review commands before copying them into a project.
The flagged content is clearly fenced Markdown sample code for Bats tests and installation steps. It is still relevant to disclose because copied snippets can execute local commands.
Low
Benign Relative Paths and Filesystem Test Fixtures
The path traversal and filesystem findings refer to example fixture paths, script-under-test references, /dev/null checks, and temporary test directories. These are normal Bats testing patterns and do not indicate unauthorized filesystem access by the skill itself.
The paths are inside examples that point from tests to local project scripts or test utilities. No evidence shows hidden file reads, writes outside examples, or persistence behavior.
Low
External Documentation and Installation URLs
The URL findings are references to Bats installation and documentation resources. No evidence found that the skill performs network requests or sends local data to those URLs.
The URLs are visible documentation links and a git clone installation example. There is no executable network client embedded in the skill outside Markdown examples.
Static false positives ignored (1)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Weak Crypto Static Matches Are False Positives
The weak cryptographic algorithm findings appear on descriptive Bats and testing text, not cryptographic code. No evidence found of MD5, SHA-1, insecure random generation, encryption, or credential handling.
Line context shows general documentation and test names, not cryptographic APIs. The scanner likely matched unrelated words in prose.

Detected Patterns

Filesystem Fixture Examples in Markdown
Audited by: codex

Jun 30, 2026, 10:08 PM

Static analysis reported many command, filesystem, URL, path traversal, and weak crypto patterns, but review found they occur in Markdown examples for Bats test authoring. No executable helper scripts, prompt injection text, data exfiltration behavior, or malicious intent were found in SKILL.md.

1
Files scanned
631
Lines analyzed
6
Review items
1
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Documentation Examples Include Shell Commands
The skill contains many Bash and Bats snippets with command execution, command substitution, temporary directory creation, cleanup, and shell invocation. These are instructional examples for test files, not executable skill code, but users should review commands before copying them into a project.
The flagged content is clearly fenced Markdown sample code for Bats tests and installation steps. It is still relevant to disclose because copied snippets can execute local commands.
Low
Benign Relative Paths and Filesystem Test Fixtures
The path traversal and filesystem findings refer to example fixture paths, script-under-test references, /dev/null checks, and temporary test directories. These are normal Bats testing patterns and do not indicate unauthorized filesystem access by the skill itself.
The paths are inside examples that point from tests to local project scripts or test utilities. No evidence shows hidden file reads, writes outside examples, or persistence behavior.
Low
External Documentation and Installation URLs
The URL findings are references to Bats installation and documentation resources. No evidence found that the skill performs network requests or sends local data to those URLs.
The URLs are visible documentation links and a git clone installation example. There is no executable network client embedded in the skill outside Markdown examples.
Static false positives ignored (1)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Weak Crypto Static Matches Are False Positives
The weak cryptographic algorithm findings appear on descriptive Bats and testing text, not cryptographic code. No evidence found of MD5, SHA-1, insecure random generation, encryption, or credential handling.
Line context shows general documentation and test names, not cryptographic APIs. The scanner likely matched unrelated words in prose.

Detected Patterns

Filesystem Fixture Examples in Markdown
Audited by: codex

Jan 21, 2026, 06:54 PM

Static analysis flagged 103 patterns including external commands, filesystem operations, and network references. All findings are false positives from educational code examples teaching Bats testing patterns. The skill contains no executable code, only documentation with test pattern examples. URLs reference legitimate documentation sites (GitHub, readthedocs.io). No security risks identified.

2
Files scanned
1,721
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 17, 2026, 07:33 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Files scanned
807
Lines analyzed
3
Review items
0
False positives ignored

Detected Patterns

Hardcoded URLWeak cryptographic algorithmSystem reconnaissanceRuby/shell backtick executionShell command substitutionTemplate literal with command substitutionUnix shell invocationPath traversal sequenceStandard device file accessTemp file creation
Audited by: claude

Jan 17, 2026, 07:33 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Files scanned
807
Lines analyzed
3
Review items
0
False positives ignored

Detected Patterns

Hardcoded URLWeak cryptographic algorithmSystem reconnaissanceRuby/shell backtick executionShell command substitutionTemplate literal with command substitutionUnix shell invocationPath traversal sequenceStandard device file accessTemp file creation
Audited by: claude

Jan 4, 2026, 04:49 PM

Pure documentation skill containing instructional examples for Bats testing patterns. No executable code, file exfiltration, network beacons, or malicious execution logic present. All code snippets are educational examples demonstrating testing concepts.

4
Files scanned
849
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 4, 2026, 04:49 PM

Pure documentation skill containing instructional examples for Bats testing patterns. No executable code, file exfiltration, network beacons, or malicious execution logic present. All code snippets are educational examples demonstrating testing concepts.

4
Files scanned
849
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude