審計歷史

The static analyzer reported network, command execution, credential, and weak crypto patterns, but contextual review found these were false positives. The skill is a read-only WordPress repository detector that uses local filesystem reads and prints a structured report, so the remaining risk is limited to local repository inspection.

Read-only filesystem scanner for WordPress project detection. No network calls, no command execution, no credential access. Static scanner false positives were caused by misidentified template literals as shell backticks, path.extname() as crypto functions, and standard schema URLs as network security issues.

Read-only filesystem scanner for WordPress project detection. No network calls, no command execution, no credential access. Static scanner false positives were caused by misidentified template literals as shell backticks, path.extname() as crypto functions, and standard schema URLs as network security issues.

Read-only filesystem scanner for WordPress project detection. No network calls, no command execution, no credential access. The tool safely inspects repository structure to determine project type and available tooling.

Read-only filesystem scanner for WordPress project detection. No network calls, no command execution, no credential access. The tool safely inspects repository structure to determine project type and available tooling.

Read-only filesystem scanner for WordPress project detection. No network calls, no command execution, no credential access. The tool safely inspects repository structure to determine project type and available tooling.