Audit History
devops-sre-engineer - 4 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v4 Latest | Jul 23, 2026, 11:32 PM | 4 confirmed | 1 | External commandsNetwork accessFilesystem access |
| v3 | Jul 15, 2026, 03:08 PM | No confirmed findings | 0 | No capability change |
| v2 | Jul 15, 2026, 03:08 PM | No confirmed findings | 0 | No capability change |
| v1 | Jul 15, 2026, 03:08 PM | No confirmed findings | 0 | Baseline |
Jul 23, 2026, 11:32 PM
Most alerts are false positives caused by Markdown backticks, placeholders, standard device handling, readable Chinese text, and routine local diagnostics. The Docker Bench example grants a remote image Docker socket and host namespace access, creating critical host compromise risk. Unpinned cluster installation, ungated destructive commands, and unrestricted load testing require correction before publication.
Confirmed security concerns (4)
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (50)
🌐 Network access (7)
📁 Filesystem access (3)
Detected Patterns
Jul 15, 2026, 03:08 PM
Most static alerts are false positives caused by Markdown fences, inline code, placeholders, and diagnostic examples. The Docker Bench command exposes host namespaces and the Docker socket, while the kube-bench command applies a mutable remote manifest. Destructive and high-rate operations also lack consistent approval and authorization controls.
Jul 15, 2026, 03:08 PM
Most static alerts are false positives caused by Markdown fences, inline code, placeholders, and diagnostic examples. The Docker Bench command exposes host namespaces and the Docker socket, while the kube-bench command applies a mutable remote manifest. Destructive and high-rate operations also lack consistent approval and authorization controls.
Jul 15, 2026, 03:08 PM
Most static alerts are false positives caused by Markdown fences, inline code, placeholders, and diagnostic examples. The Docker Bench command exposes host namespaces and the Docker socket, while the kube-bench command applies a mutable remote manifest. Destructive and high-rate operations also lack consistent approval and authorization controls.