审计历史
query-builder - 8 审计
版本对比
各审计版本间的能力与发现变化，最新在前。
2026年7月6日 07:18
Static command-execution and reconnaissance alerts are false positives from Markdown fences, TypeScript SQL templates, and database examples in SKILL.md. No evidence found of shell execution, host reconnaissance, prompt injection, network access, credential access, or data exfiltration intent.
风险因素
⚙️ 外部命令 (42)
2026年7月6日 07:18
Static command-execution and reconnaissance alerts are false positives from Markdown fences, TypeScript SQL templates, and database examples in SKILL.md. No evidence found of shell execution, host reconnaissance, prompt injection, network access, credential access, or data exfiltration intent.
风险因素
⚙️ 外部命令 (42)
2026年6月29日 08:57
The static analyzer reported external command, weak cryptography, and reconnaissance patterns in SKILL.md. AI review found these are false positives caused by Markdown fences and database query examples, with no executable scripts, network calls, prompt injection, or secret handling found.
已确认安全问题 (3)
已忽略静态误报 (1)
这些静态命中已被语义复核判定为误报，或只命中了 schema 定义里的词；这里保留展示用于透明度，但不影响质量评分。
2026年1月16日 23:14
Pure prompt-based skill containing only markdown documentation and query examples. No executable code, network calls, or filesystem access. The skill provides AI guidance for generating database queries. All 116 static findings are false positives from SQL syntax and markdown formatting misidentification.
风险因素
⚙️ 外部命令 (42)
2026年1月16日 23:14
Pure prompt-based skill containing only markdown documentation and query examples. No executable code, network calls, or filesystem access. The skill provides AI guidance for generating database queries. All 116 static findings are false positives from SQL syntax and markdown formatting misidentification.
风险因素
⚙️ 外部命令 (42)
2026年1月10日 12:50
Pure prompt-based skill containing only markdown documentation and query examples. No executable code, no network calls, no filesystem access. The skill provides AI guidance for generating database queries.
2026年1月10日 12:50
Pure prompt-based skill containing only markdown documentation and query examples. No executable code, no network calls, no filesystem access. The skill provides AI guidance for generating database queries.
2026年1月10日 12:50
Pure prompt-based skill containing only markdown documentation and query examples. No executable code, no network calls, no filesystem access. The skill provides AI guidance for generating database queries.