審計紀錄
security-guardian - 6 審計
審計版本 6
最新 中風險Jun 28, 2026, 03:16 PM
Static analysis detected many dangerous command, network, filesystem, script, and secret patterns. Manual review found these are primarily security-training examples and audit checklists, not executable code or hidden exfiltration. The skill is publishable with a medium dual-use warning because it documents exploit payloads and sensitive target examples.
中風險問題 (2)
低風險問題 (3)
風險因素
⚙️ 外部命令 (3)
🌐 網路存取 (3)
⚡ 包含腳本 (3)
📁 檔案系統存取 (3)
🔑 環境變數 (1)
偵測到的模式
審計版本 5
安全Jan 16, 2026, 07:37 PM
This skill is purely security documentation and guidance. All 1546 static findings are FALSE POSITIVES because they come from markdown documentation files containing examples of vulnerable code patterns for educational purposes. The skill provides read-only analysis tools (Read, Grep, Glob, Bash) to help developers identify and fix security issues.
風險因素
審計版本 4
安全Jan 16, 2026, 07:37 PM
This skill is purely security documentation and guidance. All 1546 static findings are FALSE POSITIVES because they come from markdown documentation files containing examples of vulnerable code patterns for educational purposes. The skill provides read-only analysis tools (Read, Grep, Glob, Bash) to help developers identify and fix security issues.
風險因素
審計版本 3
安全Jan 10, 2026, 11:28 AM
Pure prompt-based skill containing only markdown documentation about security best practices. No executable code, no scripts, no network operations, no data collection. Provides educational guidance on OWASP Top 10, authentication, authorization, cryptography, and vulnerability detection.
審計版本 2
安全Jan 10, 2026, 11:28 AM
Pure prompt-based skill containing only markdown documentation about security best practices. No executable code, no scripts, no network operations, no data collection. Provides educational guidance on OWASP Top 10, authentication, authorization, cryptography, and vulnerability detection.
審計版本 1
安全Jan 10, 2026, 11:28 AM
Pure prompt-based skill containing only markdown documentation about security best practices. No executable code, no scripts, no network operations, no data collection. Provides educational guidance on OWASP Top 10, authentication, authorization, cryptography, and vulnerability detection.