Audit History

All static findings were adjudicated as false positives because they are Markdown fences, inline examples, TypeScript template literals, documentation links, or normal Nx configuration references. No prompt injection or data exfiltration intent was found. One semantic issue remains: the remote cache guidance shows token fields directly in configuration, which could lead users to commit real secrets.

All static findings were adjudicated as false positives because they are Markdown fences, inline examples, TypeScript template literals, documentation links, or normal Nx configuration references. No prompt injection or data exfiltration intent was found. One semantic issue remains: the remote cache guidance shows token fields directly in configuration, which could lead users to commit real secrets.

Static analysis flagged 25 command, 3 URL, 4 filesystem, and 2 weak-crypto patterns. AI review found these to be false positives from Markdown examples, Nx configuration, resource links, and unrelated text. One low-risk content issue remains because cache token placeholders may encourage committed secrets.

Static analysis flagged 25 command, 3 URL, 4 filesystem, and 2 weak-crypto patterns. AI review found these to be false positives from Markdown examples, Nx configuration, resource links, and unrelated text. One low-risk content issue remains because cache token placeholders may encourage committed secrets.

This skill contains only static documentation and configuration templates for Nx workspaces. All 41 static findings are false positives: network URLs are legitimate metadata/doc links, external commands are example bash commands in documentation code blocks, path traversal sequences are standard relative paths in JSON config examples, and cryptographic alerts are misidentified schema file paths. The skill has no executable code, no file operations, no data handling, and no network access capability.

This skill contains only static documentation and configuration templates for Nx workspaces. All 41 static findings are false positives: network URLs are legitimate metadata/doc links, external commands are example bash commands in documentation code blocks, path traversal sequences are standard relative paths in JSON config examples, and cryptographic alerts are misidentified schema file paths. The skill has no executable code, no file operations, no data handling, and no network access capability.

This skill contains only static documentation and configuration templates for Nx workspaces. No executable code, network access, file operations, or data handling is present.

This skill contains only static documentation and configuration templates for Nx workspaces. No executable code, network access, file operations, or data handling is present.