審計紀錄

Static findings for external commands, sudo usage, and network scanning are true positives in context: the skill instructs agents to run nmap scans, including all-port, stealth, UDP, and vulnerability scans. No prompt injection, credential theft, or covert exfiltration was found, so this is high-risk dual-use security tooling rather than confirmed malicious content.

This is a legitimate network reconnaissance skill for authorized security testing. The static analyzer flagged network scanning patterns because this skill IS designed for port scanning. All nmap commands are legitimate tool usage with hardcoded templates, not command injection risks. The skill explicitly requires authorization and documents ethical usage guidelines. Risk is inherent to security reconnaissance tools but appropriate for the marketplace.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Pure prompt-based skill providing nmap guidance. No executable code. Emphasizes authorization and ethical use. Legitimate security testing tool documentation.

Pure prompt-based skill providing nmap guidance. No executable code. Emphasizes authorization and ethical use. Legitimate security testing tool documentation.

Pure prompt-based skill providing nmap guidance. No executable code. Emphasizes authorization and ethical use. Legitimate security testing tool documentation.