Audit History
istio-traffic-management - 7 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v7 Latest | Jul 7, 2026, 07:39 AM | No confirmed findings | 0 | No capability change |
| v6 | Jul 7, 2026, 07:39 AM | No confirmed findings | 0 | No capability change |
| v5 | Jul 1, 2026, 01:19 AM | 1 confirmed | 0 | No capability change |
| v4 | Jan 17, 2026, 09:30 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 09:30 AM | No confirmed findings | 0 | Network accessExternal commands |
| v2 | Jan 4, 2026, 04:32 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 4, 2026, 04:32 PM | No confirmed findings | 0 | Baseline |
Jul 7, 2026, 07:39 AM
The static findings are false positives caused by Markdown fences, YAML examples, documentation URLs, and a non-executed bash troubleshooting block. No prompt injection, credential access, hidden network calls, or executable skill code was found in SKILL.md. The skill is documentation, but users should review generated Istio policies before applying them to clusters.
Risk Factors
⚙️ External commands (19)
🌐 Network access (3)
Jul 7, 2026, 07:39 AM
The static findings are false positives caused by Markdown fences, YAML examples, documentation URLs, and a non-executed bash troubleshooting block. No prompt injection, credential access, hidden network calls, or executable skill code was found in SKILL.md. The skill is documentation, but users should review generated Istio policies before applying them to clusters.
Risk Factors
⚙️ External commands (19)
🌐 Network access (3)
Jul 1, 2026, 01:19 AM
Static analysis reported many high-risk patterns, but review found these are false positives from Markdown fences, Istio resource names, and official documentation links. The skill is a documentation-only guide with sample YAML and non-destructive istioctl diagnostic commands. No prompt injection, malware intent, credential access, or data exfiltration evidence was found.
Confirmed security concerns (1)
Static false positives ignored (4)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (1)
🌐 Network access (1)
Jan 17, 2026, 09:30 AM
This skill contains only static documentation with YAML configuration templates for Istio traffic management. No executable code, data access, network communication, or file manipulation is present. The 57 static findings are all false positives caused by YAML field names being misinterpreted as cryptographic terms, code block markers being flagged as shell backticks, and hash values being flagged as weak algorithms.
Risk Factors
🌐 Network access (3)
⚙️ External commands (19)
Jan 17, 2026, 09:30 AM
This skill contains only static documentation with YAML configuration templates for Istio traffic management. No executable code, data access, network communication, or file manipulation is present. The 57 static findings are all false positives caused by YAML field names being misinterpreted as cryptographic terms, code block markers being flagged as shell backticks, and hash values being flagged as weak algorithms.
Risk Factors
🌐 Network access (3)
⚙️ External commands (19)
Jan 4, 2026, 04:32 PM
The skill contains only static documentation and YAML configuration examples for Istio traffic management. No executable code, data access, network communication, or file manipulation is present. This is purely educational content.
Jan 4, 2026, 04:32 PM
The skill contains only static documentation and YAML configuration examples for Istio traffic management. No executable code, data access, network communication, or file manipulation is present. This is purely educational content.