📦

审计历史

workflow-orchestration-patterns - 7 审计

版本对比

各审计版本间的能力与发现变化,最新在前。

版本日期结果复核项相对上一版变化
v7 最新2026年7月8日 12:14 无已确认发现0能力无变化
v6 2026年7月8日 12:14 无已确认发现0外部命令
v5 2026年7月1日 01:25 无已确认发现0 外部命令
v4 2026年1月17日 08:48 无已确认发现0能力无变化
v3 2026年1月17日 08:48 无已确认发现0外部命令
v2 2026年1月4日 16:43 无已确认发现0能力无变化
v1 2026年1月4日 16:43 无已确认发现0基线

2026年7月8日 12:14

All static findings are false positives from markdown fences or inline code examples in documentation. The skill provides Temporal architecture guidance and no evidence of command execution, system reconnaissance, prompt injection, or data exfiltration was found.

1
已扫描文件
287
分析行数
1
复核项
0
已忽略误报
审计者: codex

2026年7月8日 12:14

All static findings are false positives from markdown fences or inline code examples in documentation. The skill provides Temporal architecture guidance and no evidence of command execution, system reconnaissance, prompt injection, or data exfiltration was found.

1
已扫描文件
287
分析行数
1
复核项
0
已忽略误报
审计者: codex

2026年7月1日 01:25

Static analysis reported external command, weak cryptography, and reconnaissance patterns, but these are false positives in Markdown guidance. The file contains Temporal architecture documentation and no executable scripts, prompt injection text, data exfiltration, network code, or filesystem operations.

1
已扫描文件
287
分析行数
0
复核项
3
已忽略误报
已忽略静态误报 (3)

这些静态命中已被语义复核判定为误报,或只命中了 schema 定义里的词;这里保留展示用于透明度,但不影响质量评分。

低
False Positive: Markdown Backticks Flagged as Commands
Verdict: FALSE_POSITIVE. The cited backticks are Markdown code fences or inline examples explaining workflow design concepts. They do not invoke Ruby, shell execution, or any external command.
The referenced lines are Markdown fences or inline references such as deterministic time examples. No command interpreter, executable script, or user-controlled command input is present.
低
False Positive: Weak Cryptography Pattern Matched Plain Text
Verdict: FALSE_POSITIVE. The cited lines discuss workflow orchestration, design decisions, state preservation, and documentation resources. No cryptographic algorithm, hashing operation, key handling, or encryption code appears at these locations.
The static hits occur in natural language headings and bullets, not cryptographic code. The skill is a Markdown reference document and contains no implementation using weak algorithms.
低
False Positive: Reconnaissance Pattern Matched Error Guidance
Verdict: FALSE_POSITIVE. The cited line lists invalid input as a non-retryable error type. It is application design guidance and does not gather host, network, account, or environment information.
The surrounding section explains retry policy classification for Temporal activities. There is no system command, discovery behavior, or instruction to inspect the runtime environment.
此次已完成的审计未记录已确认的安全发现。
审计者: codex

2026年1月17日 08:48

Pure documentation skill containing only markdown guidance about Temporal workflow patterns. No executable code, scripts, or network activity. All 43 static findings are false positives triggered by documentation metadata and code block syntax - specifically git hash identifiers flagged as weak crypto, markdown backticks flagged as shell execution, and normal error classification flagged as reconnaissance.

2
已扫描文件
462
分析行数
1
复核项
0
已忽略误报
审计者: claude

2026年1月17日 08:48

Pure documentation skill containing only markdown guidance about Temporal workflow patterns. No executable code, scripts, or network activity. All 43 static findings are false positives triggered by documentation metadata and code block syntax - specifically git hash identifiers flagged as weak crypto, markdown backticks flagged as shell execution, and normal error classification flagged as reconnaissance.

2
已扫描文件
462
分析行数
1
复核项
0
已忽略误报
审计者: claude

2026年1月4日 16:43

This skill contains only documentation files (SKILL.md, plugin.json, marketplace-entry.json). No executable code, scripts, or network activity exist. It provides pure guidance about Temporal workflow patterns with no file system access or data handling capabilities.

4
已扫描文件
504
分析行数
0
复核项
0
已忽略误报
此次已完成的审计未记录已确认的安全发现。
审计者: claude

2026年1月4日 16:43

This skill contains only documentation files (SKILL.md, plugin.json, marketplace-entry.json). No executable code, scripts, or network activity exist. It provides pure guidance about Temporal workflow patterns with no file system access or data handling capabilities.

4
已扫描文件
504
分析行数
0
复核项
0
已忽略误报
此次已完成的审计未记录已确认的安全发现。
审计者: claude