Audit History
pci-compliance - 8 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v8 Latest | Jul 8, 2026, 01:05 PM | No confirmed findings | 0 | No capability change |
| v7 | Jul 8, 2026, 01:05 PM | No confirmed findings | 0 | External commandsEnv variables |
| v6 | Jul 1, 2026, 01:19 AM | 1 confirmed | 0 | No capability change |
| v5 | Jan 21, 2026, 07:45 PM | No confirmed findings | 0 | External commandsEnv variables |
| v4 | Jan 17, 2026, 09:05 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 09:05 AM | No confirmed findings | 0 | External commandsEnv variables |
| v2 | Jan 4, 2026, 04:53 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 4, 2026, 04:53 PM | No confirmed findings | 0 | Baseline |
Jul 8, 2026, 01:05 PM
The detected command, secret, key-file, and reconnaissance patterns are false positives caused by Markdown code fences and PCI documentation examples. No prompt injection text, data exfiltration intent, or bundled credential material was found in SKILL.md.
Risk Factors
⚙️ External commands (17)
🔑 Env variables (1)
Jul 8, 2026, 01:05 PM
The detected command, secret, key-file, and reconnaissance patterns are false positives caused by Markdown code fences and PCI documentation examples. No prompt injection text, data exfiltration intent, or bundled credential material was found in SKILL.md.
Risk Factors
⚙️ External commands (17)
🔑 Env variables (1)
Jul 1, 2026, 01:19 AM
Static findings were reviewed against SKILL.md context. The reported command execution, sensitive-file, weak-crypto, reconnaissance, and Windows SAM matches are false positives caused by Markdown fences, PCI terminology, cookie settings, resource names, and defensive examples; no prompt injection or malicious behavior was found. A low-risk documentation concern remains because examples include placeholder payment secrets and card data that should not be copied into production.
Confirmed security concerns (1)
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Jan 21, 2026, 07:45 PM
Educational PCI DSS compliance skill. All static findings are false positives. The skill provides documentation and code examples for implementing payment card security requirements. No actual vulnerable code or malicious patterns present.
Jan 17, 2026, 09:05 AM
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
Risk Factors
⚙️ External commands (17)
🔑 Env variables (1)
Detected Patterns
Jan 17, 2026, 09:05 AM
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
Risk Factors
⚙️ External commands (17)
🔑 Env variables (1)
Detected Patterns
Jan 4, 2026, 04:53 PM
Pure documentation skill containing only educational content about PCI DSS compliance. No executable scripts, filesystem access, environment access, network calls, or code execution capabilities exist. All code snippets are illustrative examples within markdown documentation.
Jan 4, 2026, 04:53 PM
Pure documentation skill containing only educational content about PCI DSS compliance. No executable scripts, filesystem access, environment access, network calls, or code execution capabilities exist. All code snippets are illustrative examples within markdown documentation.