审计历史

Static analysis flagged many backtick examples as Ruby or shell execution, but the file is Markdown documentation for a CLI workflow. No malicious intent, network access, credential handling, or prompt injection was found. Risk remains medium because the skill directs agents to run external commands that can inspect and modify repository files.

This skill contains ONLY documentation (SKILL.md). The static scanner produced 37 false positives by misidentifying markdown code formatting and configuration examples as security threats. No executable code, network calls, or malicious patterns exist. All findings are dismissed as FALSE_POSITIVE.

This skill contains ONLY documentation (SKILL.md). The static scanner produced 37 false positives by misidentifying markdown code formatting and configuration examples as security threats. No executable code, network calls, or malicious patterns exist. All findings are dismissed as FALSE_POSITIVE.

This is a prompt-based documentation skill containing only a SKILL.md file. No executable code, network calls, or filesystem access patterns are present. The described shirushi CLI tool is a legitimate document ID management system with no malicious indicators.

This is a prompt-based documentation skill containing only a SKILL.md file. No executable code, network calls, or filesystem access patterns are present. The described shirushi CLI tool is a legitimate document ID management system with no malicious indicators.

This is a prompt-based documentation skill containing only a SKILL.md file. No executable code, network calls, or filesystem access patterns are present. The described shirushi CLI tool is a legitimate document ID management system with no malicious indicators.