Audit History
frontend-developer - 4 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v4 Latest | Jul 23, 2026, 11:37 PM | 1 confirmed | 0 | No capability change |
| v3 | Jul 15, 2026, 03:14 PM | No confirmed findings | 3 | No capability change |
| v2 | Jul 15, 2026, 03:14 PM | No confirmed findings | 3 | No capability change |
| v1 | Jul 15, 2026, 03:14 PM | No confirmed findings | 3 | Baseline |
Jul 23, 2026, 11:37 PM
Most static alerts mistake Markdown fences, inline identifiers, and TypeScript template literals for shell execution. The network, path, and environment examples are normal frontend patterns. One semantic issue remains: the authentication examples persist bearer tokens in browser storage, where injected scripts could read them.
Confirmed security concerns (1)
Risk Factors
⚙️ External commands (29)
🌐 Network access (5)
📁 Filesystem access (3)
Jul 15, 2026, 03:14 PM
Most static findings are false positives from Markdown fences, TypeScript template literals, relative imports, and normal frontend configuration examples. Two command blocks execute remote npm tooling, and the authentication templates persist bearer tokens in browser storage. Review package sources and replace persistent token storage before publication.
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (29)
🌐 Network access (5)
📁 Filesystem access (3)
Jul 15, 2026, 03:14 PM
Most static findings are false positives from Markdown fences, TypeScript template literals, relative imports, and normal frontend configuration examples. Two command blocks execute remote npm tooling, and the authentication templates persist bearer tokens in browser storage. Review package sources and replace persistent token storage before publication.
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (29)
🌐 Network access (5)
📁 Filesystem access (3)
Jul 15, 2026, 03:14 PM
Most static findings are false positives from Markdown fences, TypeScript template literals, relative imports, and normal frontend configuration examples. Two command blocks execute remote npm tooling, and the authentication templates persist bearer tokens in browser storage. Review package sources and replace persistent token storage before publication.
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.