📦

Audit History

frontend-developer - 4 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v4 LatestJul 23, 2026, 11:37 PM 1 confirmed0No capability change
v3 Jul 15, 2026, 03:14 PM No confirmed findings3No capability change
v2 Jul 15, 2026, 03:14 PM No confirmed findings3No capability change
v1 Jul 15, 2026, 03:14 PM No confirmed findings3Baseline

Jul 23, 2026, 11:37 PM

Most static alerts mistake Markdown fences, inline identifiers, and TypeScript template literals for shell execution. The network, path, and environment examples are normal frontend patterns. One semantic issue remains: the authentication examples persist bearer tokens in browser storage, where injected scripts could read them.

1
Files scanned
558
Lines analyzed
4
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Insecure Browser Token Persistence
The examples read a bearer token from localStorage and persist the authentication token through Zustand. A successful XSS attack could extract the token.
The code directly reads localStorage for an Authorization header and configures Zustand persistence for the token. Browser scripts can access this storage.
Audited by: codex

Jul 15, 2026, 03:14 PM

Most static findings are false positives from Markdown fences, TypeScript template literals, relative imports, and normal frontend configuration examples. Two command blocks execute remote npm tooling, and the authentication templates persist bearer tokens in browser storage. Review package sources and replace persistent token storage before publication.

1
Files scanned
558
Lines analyzed
6
Review items
0
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution · 2 occurrences
```bash
The fenced block runs npm and npx scaffolding commands, including latest package versions. These commands download and execute remote package code.
Medium
Persistent Bearer Token Exposure
The templates read a bearer token from localStorage and persist the authentication token in Zustand state. An XSS flaw or browser extension could steal it.
The examples explicitly retrieve and persist the authentication token in browser storage, creating a clear credential-exposure pattern.
Audited by: codex

Jul 15, 2026, 03:14 PM

Most static findings are false positives from Markdown fences, TypeScript template literals, relative imports, and normal frontend configuration examples. Two command blocks execute remote npm tooling, and the authentication templates persist bearer tokens in browser storage. Review package sources and replace persistent token storage before publication.

1
Files scanned
558
Lines analyzed
6
Review items
0
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution · 2 occurrences
```bash
The fenced block runs npm and npx scaffolding commands, including latest package versions. These commands download and execute remote package code.
Medium
Persistent Bearer Token Exposure
The templates read a bearer token from localStorage and persist the authentication token in Zustand state. An XSS flaw or browser extension could steal it.
The examples explicitly retrieve and persist the authentication token in browser storage, creating a clear credential-exposure pattern.
Audited by: codex

Jul 15, 2026, 03:14 PM

Most static findings are false positives from Markdown fences, TypeScript template literals, relative imports, and normal frontend configuration examples. Two command blocks execute remote npm tooling, and the authentication templates persist bearer tokens in browser storage. Review package sources and replace persistent token storage before publication.

1
Files scanned
558
Lines analyzed
6
Review items
0
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution · 2 occurrences
```bash
The fenced block runs npm and npx scaffolding commands, including latest package versions. These commands download and execute remote package code.
Medium
Persistent Bearer Token Exposure
The templates read a bearer token from localStorage and persist the authentication token in Zustand state. An XSS flaw or browser extension could steal it.
The examples explicitly retrieve and persist the authentication token in browser storage, creating a clear credential-exposure pattern.
Audited by: codex