Audit History
tdd-orchestrator - 5 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v5 Latest | 2026年9月6日 下午12:43 | No confirmed findings | 0 | No capability change |
| v4 | 2026年7月7日 上午02:19 | No confirmed findings | 0 | No capability change |
| v3 | 2026年7月7日 上午02:19 | No confirmed findings | 0 | External commands |
| v2 | 2026年6月30日 下午06:31 | No confirmed findings | 0 | No capability change |
| v1 | 2026年2月25日 上午04:55 | No confirmed findings | 0 | Baseline |
2026年9月6日 下午12:43
All five static findings are false positives. The apparent shell execution is an inline Markdown path, and the four reconnaissance matches are ordinary TDD terminology; no malicious instructions, network activity, or data-exfiltration intent is evidenced.
Risk Factors
⚙️ External commands (1)
2026年7月7日 上午02:19
I reviewed the five static findings in SKILL.md. All are false positives: the backtick hit is a Markdown file reference, and the reconnaissance hits are TDD optimization wording. No prompt injection, data exfiltration intent, or unsafe execution instructions were found in the reviewed file.
Risk Factors
⚙️ External commands (1)
2026年7月7日 上午02:19
I reviewed the five static findings in SKILL.md. All are false positives: the backtick hit is a Markdown file reference, and the reconnaissance hits are TDD optimization wording. No prompt injection, data exfiltration intent, or unsafe execution instructions were found in the reviewed file.
Risk Factors
⚙️ External commands (1)
2026年6月30日 下午06:31
Static analysis flagged external command, weak crypto, and reconnaissance patterns, but review found prose-only TDD guidance in SKILL.md. No shell execution, cryptographic implementation, system enumeration, network access, or prompt injection attempt was found.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
2026年2月25日 上午04:55
Prompt-only skill containing no executable code. Provides guidance on TDD practices and testing methodologies. Static analysis scanned 0 files with 0 lines of code. No security risks detected. This is an informational/educational skill about software testing best practices.