审计历史

All 400 catalogued static findings were adjudicated as false positives after targeted source review. Obfuscation alerts map to readable Chinese text, generated HTML or CSS, and ordinary collection syntax; local command and filesystem operations use bounded arguments and generated directories. No prompt injection or exfiltration intent was found, but 386 scanner matches omitted by the static cap still require cataloguing before automatic publication. Static review was capped at 400/786 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

All 400 presented static findings are false positives caused by documentation, CJK text, generated HTML, validation helpers, or bounded local report tooling. External commands use fixed argument arrays without shell interpolation, and no prompt injection, secret collection, data exfiltration, or covert network behavior was found. Static review was capped at 400/728 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

All 400 presented static findings were reviewed and judged false positives: they describe normal local report generation, validation, rendering, documentation, or repository hygiene. No prompt injection, credential exfiltration, or malicious intent was evidenced in the reviewed locations; 318 repeated or lower-priority matches remain outside the presented catalog, and no net-new semantic finding was identified. Static review was capped at 400/718 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.