📦

审计历史

dependency-upgrade - 5 审计

审计版本 5

最新 低风险

Jan 21, 2026, 07:15 PM

This skill provides documentation and guidance for dependency management workflows. All static findings are false positives: the external commands are example bash/npm commands in documentation, filesystem operations are example migration scripts, and weak crypto detections are from the word 'MD5' in version strings. The skill contains no executable code and poses no security risk.

2
已扫描文件
1,190
分析行数
1
发现项
claude
审计者
低风险问题 (1)
Documentation Contains Command Examples
The SKILL.md file contains numerous example bash commands for dependency management (npm, yarn, git). These are educational examples showing proper dependency upgrade workflows, not executable code. Users must manually execute these commands in their own environments.

审计版本 2

安全

Jan 4, 2026, 05:06 PM

Pure documentation skill providing guidance on dependency upgrades. Contains no executable code, network calls, file access, or command execution. All commands shown are illustrative examples for user reference.

4
已扫描文件
605
分析行数
0
发现项
claude
审计者
未发现安全问题

审计版本 1

安全

Jan 4, 2026, 05:06 PM

Pure documentation skill providing guidance on dependency upgrades. Contains no executable code, network calls, file access, or command execution. All commands shown are illustrative examples for user reference.

4
已扫描文件
605
分析行数
0
发现项
claude
审计者
未发现安全问题