技能 baoyu-comic 審計歷史
🎨

審計歷史

baoyu-comic - 2 審計

審計版本 2

最新 低風險

Jan 18, 2026, 02:49 AM

Static scanner detected 168 patterns including external_commands, weak cryptographic algorithms, and C2 keywords. All findings are FALSE POSITIVES. The scanner misinterpreted markdown code block backticks as shell commands, color hex codes as cryptographic hashes, and color names as C2 indicators. The actual code is a benign PDF generation script with standard file operations and no network access.

21
已掃描檔案
1,727
分析行數
5
發現項
claude
審計者
中風險問題 (2)
Markdown code block delimiters flagged as shell execution
Markdown code block delimiters flagged as shell execution
Synchronous file operations in merge-to-pdf.ts
Synchronous file operations in merge-to-pdf.ts
低風險問題 (1)
Words like 'network', 'reconnaissance' in documentation
Words like 'network', 'reconnaissance' in documentation

審計版本 1

安全

Jan 16, 2026, 01:55 PM

All 101 static findings are FALSE POSITIVES. This skill contains ONLY markdown documentation files with no executable TypeScript code. The detected 'backtick execution' patterns are markdown code fences. The 'weak cryptographic algorithm' patterns are hex color codes (#3182CE, #1A365D) used for CSS styling. The 'reconnaissance' patterns are file path references in documentation. No security concerns present.

18
已掃描檔案
1,131
分析行數
1
發現項
claude
審計者
未發現安全問題