Audit History

Static command, network, and filesystem hits are documentation examples inside SKILL.md, not executable skill code. No evidence found of prompt injection, credential exfiltration, hidden network activity, or malicious intent. Operators should still adapt example incident commands before production use.

Static command, network, and filesystem hits are documentation examples inside SKILL.md, not executable skill code. No evidence found of prompt injection, credential exfiltration, hidden network activity, or malicious intent. Operators should still adapt example incident commands before production use.

Static analysis flagged many command, URL, IP address, filesystem, and weak-crypto patterns in SKILL.md. Review found these are Markdown runbook examples and false positives, not executable skill code or malicious behavior. The skill is safe to publish with a low-risk warning because operators may copy impactful production commands.

Static analysis flagged many command, URL, IP address, filesystem, and weak-crypto patterns in SKILL.md. Review found these are Markdown runbook examples and false positives, not executable skill code or malicious behavior. The skill is safe to publish with a low-risk warning because operators may copy impactful production commands.

Pure documentation skill containing only static markdown templates. No executable code, no file system access, no network calls. All 70 static findings are false positives: markdown code blocks were misidentified as Ruby/shell backticks, example URLs were flagged as hardcoded network addresses, and SQL/YAML content was misidentified as weak cryptographic algorithms. The skill generates text templates only.

Pure documentation skill containing only static markdown templates. No executable code, no file system access, no network calls. All 70 static findings are false positives: markdown code blocks were misidentified as Ruby/shell backticks, example URLs were flagged as hardcoded network addresses, and SQL/YAML content was misidentified as weak cryptographic algorithms. The skill generates text templates only.

Pure documentation skill with static markdown templates. No executable code, no file access, no network calls. Contains example commands for user reference only. Low risk due to embedded example endpoints that require manual copy-paste to execute.

Pure documentation skill with static markdown templates. No executable code, no file access, no network calls. Contains example commands for user reference only. Low risk due to embedded example endpoints that require manual copy-paste to execute.