Audit History
threat-mitigation-mapping - 8 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v8 Latest | Jul 8, 2026, 11:37 AM | No confirmed findings | 0 | No capability change |
| v7 | Jul 8, 2026, 11:37 AM | No confirmed findings | 0 | External commandsNetwork access |
| v6 | Jul 1, 2026, 12:55 AM | 2 confirmed | 0 | No capability change |
| v5 | Jan 21, 2026, 05:12 PM | No confirmed findings | 0 | Network accessExternal commands |
| v4 | Jan 17, 2026, 08:30 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 08:30 AM | No confirmed findings | 0 | Network accessExternal commands |
| v2 | Jan 4, 2026, 04:34 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 4, 2026, 04:34 PM | No confirmed findings | 0 | Baseline |
Jul 8, 2026, 11:37 AM
All 22 static findings were adjudicated as false positives. The flagged items are markdown fences, Python examples, resource links, and in-memory identifier checks. No evidence found for prompt injection, command execution, reconnaissance, or data exfiltration.
Risk Factors
⚙️ External commands (11)
🌐 Network access (3)
Jul 8, 2026, 11:37 AM
All 22 static findings were adjudicated as false positives. The flagged items are markdown fences, Python examples, resource links, and in-memory identifier checks. No evidence found for prompt injection, command execution, reconnaissance, or data exfiltration.
Risk Factors
⚙️ External commands (11)
🌐 Network access (3)
Jul 1, 2026, 12:55 AM
Static analysis reported command, C2, weak-crypto, reconnaissance, scanning, and network indicators, but review found them in markdown diagrams, security-control examples, taxonomy labels, and reference links. No prompt injection, malicious execution path, credential access, or data exfiltration was found. A low-risk note remains because the control testing template executes caller-provided test functions if copied into a project.
Confirmed security concerns (2)
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Jan 21, 2026, 05:12 PM
This skill provides educational templates and frameworks for threat mitigation mapping. All static findings are false positives. The 62 detected patterns include references to security terms in documentation (AES, TLS, STRIDE categories) and external reference URLs to NIST, CIS, and MITRE resources. No actual network calls, command execution, or malicious code present.
Jan 17, 2026, 08:30 AM
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
Risk Factors
🌐 Network access (3)
Detected Patterns
Jan 17, 2026, 08:30 AM
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
Risk Factors
🌐 Network access (3)
Detected Patterns
Jan 4, 2026, 04:34 PM
This is a documentation and template-based skill containing no executable code. The skill provides guidance and Python dataclass templates for threat-to-control mapping. No file access, network calls, or code execution capabilities exist in the skill itself.
Jan 4, 2026, 04:34 PM
This is a documentation and template-based skill containing no executable code. The skill provides guidance and Python dataclass templates for threat-to-control mapping. No file access, network calls, or code execution capabilities exist in the skill itself.