Audit History
prompt-engineering-patterns - 7 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v7 Latest | Jul 8, 2026, 01:23 PM | No confirmed findings | 1 | No capability change |
| v6 | Jul 8, 2026, 01:23 PM | No confirmed findings | 1 | External commands Contains scripts |
| v5 | Jul 1, 2026, 12:17 AM | 2 confirmed | 0 | Contains scripts External commands |
| v4 | Jan 17, 2026, 09:21 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 09:21 AM | No confirmed findings | 0 | External commandsFilesystem access |
| v2 | Jan 4, 2026, 05:00 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 4, 2026, 05:00 PM | No confirmed findings | 0 | Baseline |
Jul 8, 2026, 01:23 PM
The audit found one real medium-risk filesystem issue: scripts/optimize-prompt.py writes optimization results to a caller-provided filename. The remaining static hits are false positives from documentation examples, JSON snippets, Python dictionary key access, and Markdown code fences. No evidence found of malicious prompt injection or data exfiltration intent in the reviewed files.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
📁 Filesystem access (2)
⚙️ External commands (7)
Jul 8, 2026, 01:23 PM
The audit found one real medium-risk filesystem issue: scripts/optimize-prompt.py writes optimization results to a caller-provided filename. The remaining static hits are false positives from documentation examples, JSON snippets, Python dictionary key access, and Markdown code fences. No evidence found of malicious prompt injection or data exfiltration intent in the reviewed files.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
📁 Filesystem access (2)
⚙️ External commands (7)
Jul 1, 2026, 12:17 AM
Static analysis reported many high-risk indicators, but review found the command, cryptography, reconnaissance, and sensitive-file alerts are documentation false positives. The real risks are moderate: template examples interpolate untrusted text and the sample optimizer can write result files, so publication is acceptable with a security warning.
Confirmed security concerns (2)
Static false positives ignored (4)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚡ Contains scripts (2)
📁 Filesystem access (1)
Detected Patterns
Jan 17, 2026, 09:21 AM
This is a documentation-focused skill containing markdown guides and a local Python utility script for prompt optimization. The 228 static findings are false positives triggered by documentation patterns: backticks in Python code examples misinterpreted as shell commands, cryptographic terminology (SHA, MD5) mentioned in text, and references to API keys and file paths. The skill makes no network calls, has no sensitive filesystem access, and does not execute external commands. The optimize-prompt.py script uses a mock LLM client for local testing only.
Risk Factors
⚙️ External commands (169)
📁 Filesystem access (3)
Jan 17, 2026, 09:21 AM
This is a documentation-focused skill containing markdown guides and a local Python utility script for prompt optimization. The 228 static findings are false positives triggered by documentation patterns: backticks in Python code examples misinterpreted as shell commands, cryptographic terminology (SHA, MD5) mentioned in text, and references to API keys and file paths. The skill makes no network calls, has no sensitive filesystem access, and does not execute external commands. The optimize-prompt.py script uses a mock LLM client for local testing only.
Risk Factors
⚙️ External commands (169)
📁 Filesystem access (3)
Jan 4, 2026, 05:00 PM
A documentation-focused skill with a Python utility script for prompt optimization. Contains no network calls, no sensitive filesystem access, and no external command execution. The optimize-prompt.py script is a local testing utility with a mock LLM client for demonstration.
Jan 4, 2026, 05:00 PM
A documentation-focused skill with a Python utility script for prompt optimization. Contains no network calls, no sensitive filesystem access, and no external command execution. The optimize-prompt.py script is a local testing utility with a mock LLM client for demonstration.