Audit History
rust-async-patterns - 7 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v7 Latest | Jul 8, 2026, 01:38 PM | No confirmed findings | 0 | No capability change |
| v6 | Jul 8, 2026, 01:38 PM | No confirmed findings | 0 | External commandsNetwork access |
| v5 | Jul 1, 2026, 12:51 AM | No confirmed findings | 0 | Network accessExternal commands |
| v4 | Jan 17, 2026, 09:49 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 09:49 AM | No confirmed findings | 0 | Network accessExternal commands |
| v2 | Jan 4, 2026, 04:19 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 4, 2026, 04:19 PM | No confirmed findings | 0 | Baseline |
Jul 8, 2026, 01:38 PM
The reported external command and Ruby backtick findings are false positives from Markdown examples, inline code, and Rust Tokio task spawning APIs. The network, SQL, and obfuscation hits are documentation examples or resource links with no executable skill code. No prompt injection or malicious intent was found in SKILL.md.
Risk Factors
⚙️ External commands (39)
🌐 Network access (5)
Jul 8, 2026, 01:38 PM
The reported external command and Ruby backtick findings are false positives from Markdown examples, inline code, and Rust Tokio task spawning APIs. The network, SQL, and obfuscation hits are documentation examples or resource links with no executable skill code. No prompt injection or malicious intent was found in SKILL.md.
Risk Factors
⚙️ External commands (39)
🌐 Network access (5)
Jul 1, 2026, 12:51 AM
Static analysis reported process spawning, backtick execution, network, reconnaissance, weak crypto, and obfuscation patterns in SKILL.md. Manual review found these are Markdown, Rust documentation examples, Tokio task scheduling, resource links, and SQL examples, not executable marketplace behavior. No prompt injection attempt, data exfiltration, hidden commands, or malicious intent was found.
Static false positives ignored (4)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Jan 17, 2026, 09:49 AM
Pure educational documentation containing Rust async programming examples. All static findings are false positives: 'process spawn' refers to tokio::spawn for async task management (not command execution), 'backtick execution' refers to markdown code formatting, and 'weak cryptographic algorithm' refers to keywords in documentation fields. The skill contains no tool definitions, file access, network calls, or command execution capabilities.
Risk Factors
🌐 Network access (5)
⚙️ External commands (39)
Jan 17, 2026, 09:49 AM
Pure educational documentation containing Rust async programming examples. All static findings are false positives: 'process spawn' refers to tokio::spawn for async task management (not command execution), 'backtick execution' refers to markdown code formatting, and 'weak cryptographic algorithm' refers to keywords in documentation fields. The skill contains no tool definitions, file access, network calls, or command execution capabilities.
Risk Factors
🌐 Network access (5)
⚙️ External commands (39)
Jan 4, 2026, 04:19 PM
Pure prompt-based skill containing only educational documentation and code examples. No tool definitions, file access, network calls, or command execution capabilities. The SKILL.md file is instructional content with example Rust patterns for async programming.
Jan 4, 2026, 04:19 PM
Pure prompt-based skill containing only educational documentation and code examples. No tool definitions, file access, network calls, or command execution capabilities. The SKILL.md file is instructional content with example Rust patterns for async programming.