Audit History
web-performance-seo - 5 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v5 Latest | Jul 8, 2026, 04:47 PM | No confirmed findings | 0 | No capability change |
| v4 | Jul 8, 2026, 04:47 PM | No confirmed findings | 0 | No capability change |
| v3 | Jul 1, 2026, 02:46 AM | No confirmed findings | 0 | No capability change |
| v2 | Jul 1, 2026, 02:46 AM | No confirmed findings | 0 | External commands |
| v1 | Feb 24, 2026, 09:26 AM | 2 confirmed | 0 | Baseline |
Jul 8, 2026, 04:47 PM
All nine static findings are Markdown code fences or read-only search examples, not Ruby backtick execution. The skill provides contrast debugging guidance and shows no evidence of prompt injection, data exfiltration, network access, or destructive commands.
Risk Factors
⚙️ External commands (9)
Jul 8, 2026, 04:47 PM
All nine static findings are Markdown code fences or read-only search examples, not Ruby backtick execution. The skill provides contrast debugging guidance and shows no evidence of prompt injection, data exfiltration, network access, or destructive commands.
Risk Factors
⚙️ External commands (9)
Jul 1, 2026, 02:46 AM
Static analysis flagged Markdown code fences as shell execution and flagged weak cryptography from non-cryptographic text. Review found no executable scripts, network access, credential handling, prompt injection, or destructive behavior. The only remaining risk is that users may run read-only local search commands.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (9)
Jul 1, 2026, 02:46 AM
Static analysis flagged Markdown code fences as shell execution and flagged weak cryptography from non-cryptographic text. Review found no executable scripts, network access, credential handling, prompt injection, or destructive behavior. The only remaining risk is that users may run read-only local search commands.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (9)
Feb 24, 2026, 09:26 AM
Static analysis detected external_commands patterns and weak cryptographic algorithms. Evaluation reveals these are FALSE POSITIVES. The 'external_commands' are CLI command examples in markdown documentation (ripgrep commands for code scanning), not executable code. The 'weak cryptographic algorithm' detections are OKLCH/OKLAB CSS color space specifications misidentified as crypto algorithms. This skill provides documentation and code patterns for fixing accessibility contrast issues - no security risks present.