審計歷史

Static findings are false positives. The scanner incorrectly flagged markdown code blocks (using backticks) as shell execution, and legitimate document conversion patterns as suspicious. The skill is a Microsoft tool for converting documents to Markdown with expected file I/O and API access.

Static findings are false positives. The scanner incorrectly flagged markdown code blocks (using backticks) as shell execution, and legitimate document conversion patterns as suspicious. The skill is a Microsoft tool for converting documents to Markdown with expected file I/O and API access.

All 366 static findings are false positives. The analyzer incorrectly flagged documentation code examples as executed commands. This is a benign file conversion tool that wraps Microsoft's MarkItDown library for converting documents to Markdown format.

This is a file conversion wrapper skill for Microsoft's MarkItDown. Filesystem access is limited to user-specified paths for conversion. Network usage is restricted to OpenRouter API calls for optional AI image descriptions. No credential theft, exfiltration, or dangerous execution patterns detected.