Audit History
vector-index-tuning - 7 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v7 Latest | Jul 8, 2026, 11:55 AM | No confirmed findings | 0 | No capability change |
| v6 | Jul 8, 2026, 11:55 AM | No confirmed findings | 0 | No capability change |
| v5 | Jul 1, 2026, 01:11 AM | 1 confirmed | 1 | External commandsFilesystem access |
| v4 | Jan 17, 2026, 08:42 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 08:42 AM | No confirmed findings | 0 | No capability change |
| v2 | Jan 4, 2026, 04:40 PM | No confirmed findings | 1 | No capability change |
| v1 | Jan 4, 2026, 04:40 PM | No confirmed findings | 1 | Baseline |
Jul 8, 2026, 11:55 AM
The static findings are false positives caused by Markdown code fences, reference links, and Qdrant memmap configuration examples. No prompt injection, data exfiltration intent, or unauthorized execution behavior was found in SKILL.md.
Risk Factors
⚙️ External commands (11)
🌐 Network access (3)
📁 Filesystem access (4)
Jul 8, 2026, 11:55 AM
The static findings are false positives caused by Markdown code fences, reference links, and Qdrant memmap configuration examples. No prompt injection, data exfiltration intent, or unauthorized execution behavior was found in SKILL.md.
Risk Factors
⚙️ External commands (11)
🌐 Network access (3)
📁 Filesystem access (4)
Jul 1, 2026, 01:11 AM
Static analysis found command, network, filesystem, and weak-crypto patterns, but review shows these are documentation false positives. The skill is a Markdown guide with Python examples for vector index tuning and no evidence of prompt injection, exfiltration, or malicious behavior.
Confirmed security concerns (1)
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (11)
🌐 Network access (3)
📁 Filesystem access (4)
Jan 17, 2026, 08:42 AM
Pure documentation skill with instructional Python templates for vector index tuning. All static findings are false positives: hardcoded URLs are documentation references, weak crypto patterns matched legitimate quantization terminology, backticks are markdown formatting, and memory-mapped references are Qdrant config parameters.
Risk Factors
🌐 Network access (1)
Jan 17, 2026, 08:42 AM
Pure documentation skill with instructional Python templates for vector index tuning. All static findings are false positives: hardcoded URLs are documentation references, weak crypto patterns matched legitimate quantization terminology, backticks are markdown formatting, and memory-mapped references are Qdrant config parameters.
Risk Factors
🌐 Network access (1)
Jan 4, 2026, 04:40 PM
Pure documentation skill with instructional Python templates for vector index tuning. Contains Qdrant client examples that make network calls to user-provided database instances - this is expected and legitimate behavior for database tuning content.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
🌐 Network access (1)
Jan 4, 2026, 04:40 PM
Pure documentation skill with instructional Python templates for vector index tuning. Contains Qdrant client examples that make network calls to user-provided database instances - this is expected and legitimate behavior for database tuning content.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.