🔍

审计历史

hybrid-search-implementation - 5 审计

审计版本 5

最新 安全

Jan 21, 2026, 07:22 PM

All static findings are false positives. The skill contains documentation templates for hybrid search algorithms (RRF, linear fusion) with PostgreSQL, Elasticsearch, and custom RAG pipelines. Static scanner misidentified mathematical formulas as crypto operations, markdown code fences as command execution, and benign terminology as security risks. No malicious code or credential exfiltration present.

2
已扫描文件
1,169
分析行数
2
发现项
claude
审计者
未发现安全问题

风险因素

⚡ 包含脚本 (1)
📁 文件系统访问 (1)

审计版本 4

中风险

Jan 17, 2026, 09:23 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
已扫描文件
764
分析行数
2
发现项
claude
审计者
未发现安全问题

检测到的模式

Hardcoded URLWeak cryptographic algorithmSystem reconnaissanceRuby/shell backtick executionFetch API callCertificate/key files[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access

审计版本 3

中风险

Jan 17, 2026, 09:23 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
已扫描文件
764
分析行数
2
发现项
claude
审计者
未发现安全问题

检测到的模式

Hardcoded URLWeak cryptographic algorithmSystem reconnaissanceRuby/shell backtick executionFetch API callCertificate/key files[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access

审计版本 2

低风险

Jan 4, 2026, 04:30 PM

Documentation-only skill with Python templates for hybrid search. Templates show database connections (PostgreSQL, Elasticsearch) which implies network access in user implementations. No credential access, file system writes, or command execution. Risk is limited to standard template patterns.

4
已扫描文件
807
分析行数
1
发现项
claude
审计者
未发现安全问题

风险因素

审计版本 1

低风险

Jan 4, 2026, 04:30 PM

Documentation-only skill with Python templates for hybrid search. Templates show database connections (PostgreSQL, Elasticsearch) which implies network access in user implementations. No credential access, file system writes, or command execution. Risk is limited to standard template patterns.

4
已扫描文件
807
分析行数
1
发现项
claude
审计者
未发现安全问题

风险因素