审计历史
schema-visualizer - 8 审计
版本对比
各审计版本间的能力与发现变化，最新在前。
2026年7月5日 07:31
All static findings are false positives caused by Markdown fences, inline code formatting, and database schema keywords in SKILL.md. No prompt injection, data exfiltration intent, or bundled executable code was found.
风险因素
⚙️ 外部命令 (68)
2026年7月5日 07:31
All static findings are false positives caused by Markdown fences, inline code formatting, and database schema keywords in SKILL.md. No prompt injection, data exfiltration intent, or bundled executable code was found.
风险因素
⚙️ 外部命令 (68)
2026年6月29日 09:14
Static analysis reported many command-execution and weak-cryptography alerts, but most are false positives from Markdown code fences, inline identifiers, and schema field names. The skill is legitimate documentation guidance, but it includes database dump and ORM commands that can access sensitive schema metadata, so publication should include a medium-risk warning.
已确认安全问题 (1)
已忽略静态误报 (3)
这些静态命中已被语义复核判定为误报，或只命中了 schema 定义里的词；这里保留展示用于透明度，但不影响质量评分。
风险因素
⚙️ 外部命令 (2)
检测到的模式
2026年1月16日 23:31
All 187 static findings are FALSE POSITIVES. This is a pure documentation skill containing only markdown text and example code snippets. The scanner incorrectly flagged documentation patterns (bcrypt mentions, command examples, database terms) as security issues. No executable code, network access, filesystem access, or external command execution exists. The pre-computed report correctly assessed this as safe.
风险因素
⚙️ 外部命令 (73)
2026年1月16日 23:31
All 187 static findings are FALSE POSITIVES. This is a pure documentation skill containing only markdown text and example code snippets. The scanner incorrectly flagged documentation patterns (bcrypt mentions, command examples, database terms) as security issues. No executable code, network access, filesystem access, or external command execution exists. The pre-computed report correctly assessed this as safe.
风险因素
⚙️ 外部命令 (73)
2026年1月10日 12:57
Pure prompt-based skill with no executable code, no network access, no filesystem access, and no external command execution. Contains only AI instructions for database schema visualization.
2026年1月10日 12:57
Pure prompt-based skill with no executable code, no network access, no filesystem access, and no external command execution. Contains only AI instructions for database schema visualization.
2026年1月10日 12:57
Pure prompt-based skill with no executable code, no network access, no filesystem access, and no external command execution. Contains only AI instructions for database schema visualization.