Audit History
python-testing-patterns - 8 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v8 Latest | Jul 8, 2026, 01:38 PM | No confirmed findings | 0 | No capability change |
| v7 | Jul 8, 2026, 01:38 PM | No confirmed findings | 0 | No capability change |
| v6 | Jul 1, 2026, 12:28 AM | No confirmed findings | 3 | No capability change |
| v5 | Jul 1, 2026, 12:28 AM | No confirmed findings | 3 | No capability change |
| v4 | Jan 17, 2026, 09:29 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 09:29 AM | No confirmed findings | 0 | Network accessExternal commandsEnv variables |
| v2 | Jan 4, 2026, 05:02 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 4, 2026, 05:02 PM | No confirmed findings | 0 | Baseline |
Jul 8, 2026, 01:38 PM
The static findings are false positives caused by Markdown code fences and illustrative pytest examples. Reviewed SKILL.md and found no prompt injection, malware intent, exfiltration workflow, or executable installer behavior.
Risk Factors
⚙️ External commands (37)
🌐 Network access (15)
🔑 Env variables (23)
Jul 8, 2026, 01:38 PM
The static findings are false positives caused by Markdown code fences and illustrative pytest examples. Reviewed SKILL.md and found no prompt injection, malware intent, exfiltration workflow, or executable installer behavior.
Risk Factors
⚙️ External commands (37)
🌐 Network access (15)
🔑 Env variables (23)
Jul 1, 2026, 12:28 AM
Static analysis reported command execution, network, environment, and heuristic critical findings, but manual review found a documentation-only pytest guide. The cited patterns are fenced code examples, mocked API tests, fake local database URLs, placeholder keys, and public documentation links. No prompt injection, malicious intent, data exfiltration, or executable payload was found.
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (37)
🌐 Network access (15)
🔑 Env variables (23)
Jul 1, 2026, 12:28 AM
Static analysis reported command execution, network, environment, and heuristic critical findings, but manual review found a documentation-only pytest guide. The cited patterns are fenced code examples, mocked API tests, fake local database URLs, placeholder keys, and public documentation links. No prompt injection, malicious intent, data exfiltration, or executable payload was found.
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (37)
🌐 Network access (15)
🔑 Env variables (23)
Jan 17, 2026, 09:29 AM
Pure documentation skill containing only instructional examples for Python testing patterns. No executable code, scripts, or network operations in the skill logic itself. Static findings are false positives from example code blocks in documentation.
Risk Factors
🌐 Network access (15)
⚙️ External commands (37)
🔑 Env variables (23)
Jan 17, 2026, 09:29 AM
Pure documentation skill containing only instructional examples for Python testing patterns. No executable code, scripts, or network operations in the skill logic itself. Static findings are false positives from example code blocks in documentation.
Risk Factors
🌐 Network access (15)
⚙️ External commands (37)
🔑 Env variables (23)
Jan 4, 2026, 05:02 PM
Pure documentation skill with no executable code. Contains only instructional examples for testing patterns. No scripts, no network calls, no file operations beyond reading its own markdown files.
Jan 4, 2026, 05:02 PM
Pure documentation skill with no executable code. Contains only instructional examples for testing patterns. No scripts, no network calls, no file operations beyond reading its own markdown files.