技能 ckm:slides 審計歷史
📊

審計歷史

ckm:slides - 2 審計

審計版本 2

最新 低風險

Jun 19, 2026, 09:43 AM

The skill consists of documentation and reference files for creating HTML presentations. The static analyzer flagged 121 patterns, but all are false positives. 'Weak cryptographic algorithm' warnings match on CSS keywords like 'key' and 'signature' used in presentation contexts. 'Ruby/shell backtick execution' warnings match on markdown code formatting. Network references point to legitimate CDNs (cdn.jsdelivr.net for Chart.js, images.pexels.com for stock images). No executable scripts or malicious code patterns were found.

6
已掃描檔案
662
分析行數
3
發現項
claude
審計者
低風險問題 (2)
External CDN Resource Loading
Template loads Chart.js library from cdn.jsdelivr.net CDN. This is a standard, legitimate CDN used for open-source libraries. No malicious intent detected.
External Image References
Template references images from images.pexels.com for background images. Pexels is a legitimate stock photography platform.

審計版本 1

低風險

Jun 20, 2026, 09:13 AM

Skill is a documentation/template-only skill for creating HTML presentations. Static analyzer flagged markdown code examples as suspicious, but evaluation confirms all findings are false positives. Backticks are used for code formatting in shell command examples, not actual execution. The Chart.js CDN URL is legitimate. No executable code that poses security risk was found.

6
已掃描檔案
662
分析行數
5
發現項
claude
審計者
低風險問題 (2)
Documentation references search helper script
Multiple markdown files reference a Python search helper script (search-slides.py) with example shell commands. These are documentation examples showing users how to search the slide knowledge base, not executable code in the skill itself. Files: copywriting-formulas.md, layout-patterns.md, slide-strategies.md.
External CDN dependency in HTML template
The HTML template loads Chart.js from cdn.jsdelivr.net. This is a well-known legitimate CDN, but it introduces a third-party dependency. Users should verify CDN integrity for production use.