📦

Audit History

e2e-testing-patterns - 9 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v9 LatestJul 7, 2026, 07:43 AM No confirmed findings0No capability change
v8 Jul 7, 2026, 07:43 AM No confirmed findings0No capability change
v7 Jul 1, 2026, 12:22 AM No confirmed findings3No capability change
v6 Jul 1, 2026, 12:22 AM No confirmed findings3External commandsNetwork accessEnv variables
v5 Jan 21, 2026, 07:18 PM No confirmed findings0 Network accessExternal commandsEnv variables
v4 Jan 17, 2026, 08:37 AM No confirmed findings0No capability change
v3 Jan 17, 2026, 08:37 AM No confirmed findings0Network accessExternal commandsEnv variables
v2 Jan 4, 2026, 05:09 PM No confirmed findings0No capability change
v1 Jan 4, 2026, 05:09 PM No confirmed findings0Baseline

Jul 1, 2026, 12:22 AM

Static analysis flagged command execution, network, environment access, weak crypto, and reconnaissance patterns, but review found them inside Markdown documentation and TypeScript test examples. No prompt injection, malicious intent, credential exfiltration, or executable skill script was found, so the residual risk is low and publication is acceptable with normal review.

1
Files scanned
548
Lines analyzed
6
Review items
1
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Static Command Findings Are Documentation Examples
Verdict: FALSE_POSITIVE. The reported backtick and command patterns are Markdown fences, inline code, TypeScript examples, and documented npx debugging commands rather than code executed by the skill.
The reviewed locations are visibly inside Markdown code blocks or comments. No executable script file or runtime hook is present in the scanned file.
Low
Network Patterns Are Local Test Configuration
Verdict: FALSE_POSITIVE. The network findings show localhost base URLs, route interception, response waiting, and Cypress request examples used to teach E2E testing patterns.
The URLs and request calls are limited to example test flows and local application routes. I found no external collection endpoint or data exfiltration behavior.
Low
Environment Access Is CI And Test Credential Guidance
Verdict: FALSE_POSITIVE. process.env.CI controls Playwright retries and workers, and process.env.ADMIN_PASSWORD is a placeholder for test credentials in fixture guidance.
The environment variable references are embedded in configuration snippets. They do not read or transmit secrets from an executable skill component.
Static false positives ignored (1)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Weak Crypto And Reconnaissance Signals Are Keyword Matches
Verdict: FALSE_POSITIVE. The weak crypto and reconnaissance detections appear to match ordinary testing words, browser device names, shard examples, selector guidance, and debugging text.
The cited lines contain prose or framework configuration, not cryptographic operations or host reconnaissance commands. No evidence of malicious semantic intent was found.

Detected Patterns

Example Shell Commands In MarkdownExample Environment Variable ReadsExample Request Interception And API Calls
Audited by: codex

Jul 1, 2026, 12:22 AM

Static analysis flagged command execution, network, environment access, weak crypto, and reconnaissance patterns, but review found them inside Markdown documentation and TypeScript test examples. No prompt injection, malicious intent, credential exfiltration, or executable skill script was found, so the residual risk is low and publication is acceptable with normal review.

1
Files scanned
548
Lines analyzed
6
Review items
1
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Static Command Findings Are Documentation Examples
Verdict: FALSE_POSITIVE. The reported backtick and command patterns are Markdown fences, inline code, TypeScript examples, and documented npx debugging commands rather than code executed by the skill.
The reviewed locations are visibly inside Markdown code blocks or comments. No executable script file or runtime hook is present in the scanned file.
Low
Network Patterns Are Local Test Configuration
Verdict: FALSE_POSITIVE. The network findings show localhost base URLs, route interception, response waiting, and Cypress request examples used to teach E2E testing patterns.
The URLs and request calls are limited to example test flows and local application routes. I found no external collection endpoint or data exfiltration behavior.
Low
Environment Access Is CI And Test Credential Guidance
Verdict: FALSE_POSITIVE. process.env.CI controls Playwright retries and workers, and process.env.ADMIN_PASSWORD is a placeholder for test credentials in fixture guidance.
The environment variable references are embedded in configuration snippets. They do not read or transmit secrets from an executable skill component.
Static false positives ignored (1)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Weak Crypto And Reconnaissance Signals Are Keyword Matches
Verdict: FALSE_POSITIVE. The weak crypto and reconnaissance detections appear to match ordinary testing words, browser device names, shard examples, selector guidance, and debugging text.
The cited lines contain prose or framework configuration, not cryptographic operations or host reconnaissance commands. No evidence of malicious semantic intent was found.

Detected Patterns

Example Shell Commands In MarkdownExample Environment Variable ReadsExample Request Interception And API Calls
Audited by: codex

Jan 21, 2026, 07:18 PM

This skill provides educational content for end-to-end testing patterns with Playwright and Cypress. All static findings are false positives: weak crypto detections are from filename patterns, backtick executions are code examples in documentation, environment variable access is legitimate test configuration, and hardcoded URLs are localhost test endpoints. No security risks identified.

2
Files scanned
1,286
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 17, 2026, 08:37 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Files scanned
725
Lines analyzed
3
Review items
0
False positives ignored

Detected Patterns

Hardcoded URLWeak cryptographic algorithmRuby/shell backtick executionHTTP client libraryEnvironment variable access (dot notation)Environment variable objectEnvironment file accessSystem reconnaissance[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
Audited by: claude

Jan 17, 2026, 08:37 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Files scanned
725
Lines analyzed
3
Review items
0
False positives ignored

Detected Patterns

Hardcoded URLWeak cryptographic algorithmRuby/shell backtick executionHTTP client libraryEnvironment variable access (dot notation)Environment variable objectEnvironment file accessSystem reconnaissance[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
Audited by: claude

Jan 4, 2026, 05:09 PM

Pure documentation skill with no executable code. Contains instructional content and code examples for E2E testing patterns. No data theft, exfiltration, or malicious execution capabilities detected.

4
Files scanned
768
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 4, 2026, 05:09 PM

Pure documentation skill with no executable code. Contains instructional content and code examples for E2E testing patterns. No data theft, exfiltration, or malicious execution capabilities detected.

4
Files scanned
768
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude