审计历史
design-system-starter - 6 审计
审计版本 6
最新 低风险Jun 28, 2026, 09:47 AM
Static analysis reported many high-risk patterns, but context review found documentation examples, Markdown code fences, relative imports, design token color values, and public reference URLs. No malicious intent, credential access, command execution, data exfiltration, or prompt injection evidence was found. The only notable behavior is a benign example that stores a theme preference in localStorage.
低风险问题 (5)
审计版本 5
安全Jan 16, 2026, 04:30 PM
This is a pure documentation skill containing design system guidance, JSON token schemas, TypeScript component templates, and accessibility checklists. The static analyzer generated false positives by misinterpreting markdown code fences as shell backticks, JSON keys as cryptographic algorithms, and documentation patterns as reconnaissance. All findings are dismissed as false positives.
风险因素
⚙️ 外部命令 (71)
审计版本 4
安全Jan 16, 2026, 04:30 PM
This is a pure documentation skill containing design system guidance, JSON token schemas, TypeScript component templates, and accessibility checklists. The static analyzer generated false positives by misinterpreting markdown code fences as shell backticks, JSON keys as cryptographic algorithms, and documentation patterns as reconnaissance. All findings are dismissed as false positives.
风险因素
⚙️ 外部命令 (71)
审计版本 3
安全Jan 10, 2026, 10:33 AM
This is a pure documentation and template skill with no executable code, network calls, or file system access. It contains only design system guidance, JSON token schemas, TypeScript component templates, and accessibility checklists.
审计版本 2
安全Jan 10, 2026, 10:33 AM
This is a pure documentation and template skill with no executable code, network calls, or file system access. It contains only design system guidance, JSON token schemas, TypeScript component templates, and accessibility checklists.
审计版本 1
安全Jan 10, 2026, 10:33 AM
This is a pure documentation and template skill with no executable code, network calls, or file system access. It contains only design system guidance, JSON token schemas, TypeScript component templates, and accessibility checklists.