審計紀錄

The static external command and sudo findings are true positives because the skill instructs agents to run ffind on user-supplied paths and use sudo for extraction. The temp directory findings are also real, while the weak cryptography findings are false positives from filesystem version text, not cryptographic code. No prompt injection or confirmed malicious intent was found, so the skill is not blocked but should not publish without human review and stronger safety guidance.

This is a documentation-only skill containing markdown instructions for the external ffind CLI tool. No executable code, network calls, or file system operations exist within the skill itself. All 41 static findings are false positives triggered by documentation patterns: sudo mentions document tool requirements, backticks are markdown code formatting, filesystem type identifiers (ext2/3/4) were misidentified as cryptographic algorithms, and temp directory references are documentation of tool behavior.

This is a documentation-only skill containing markdown instructions for the external ffind CLI tool. No executable code, network calls, or file system operations exist within the skill itself. All 41 static findings are false positives triggered by documentation patterns: sudo mentions document tool requirements, backticks are markdown code formatting, filesystem type identifiers (ext2/3/4) were misidentified as cryptographic algorithms, and temp directory references are documentation of tool behavior.

Pure prompt-based skill containing only documentation and usage instructions. No executable code, no file system access, no network calls, and no external command execution within the skill itself.

Pure prompt-based skill containing only documentation and usage instructions. No executable code, no file system access, no network calls, and no external command execution within the skill itself.

Pure prompt-based skill containing only documentation and usage instructions. No executable code, no file system access, no network calls, and no external command execution within the skill itself.