Audit History
test-automator - 5 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v5 Latest | 2026年7月7日 上午03:22 | No confirmed findings | 0 | No capability change |
| v4 | 2026年7月7日 上午03:22 | No confirmed findings | 0 | External commands |
| v3 | 2026年6月30日 下午08:10 | No confirmed findings | 0 | No capability change |
| v2 | 2026年6月30日 下午08:10 | No confirmed findings | 0 | No capability change |
| v1 | 2026年2月25日 上午06:00 | No confirmed findings | 0 | Baseline |
2026年7月7日 上午03:22
All three static findings are false positives in Markdown prose. The external command signal is inline code around a local path, and the reconnaissance signals are testing terminology. No evidence found for prompt injection, data exfiltration, or malicious intent in SKILL.md.
Risk Factors
⚙️ External commands (1)
2026年7月7日 上午03:22
All three static findings are false positives in Markdown prose. The external command signal is inline code around a local path, and the reconnaissance signals are testing terminology. No evidence found for prompt injection, data exfiltration, or malicious intent in SKILL.md.
Risk Factors
⚙️ External commands (1)
2026年6月30日 下午08:10
Static analysis reported external command, weak cryptography, and system reconnaissance patterns in SKILL.md. Review found no executable code, network access, credential handling, cryptographic implementation, or reconnaissance instructions. The reported matches are natural-language Markdown guidance and filename references, so the skill is safe to publish with low residual risk.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
2026年6月30日 下午08:10
Static analysis reported external command, weak cryptography, and system reconnaissance patterns in SKILL.md. Review found no executable code, network access, credential handling, cryptographic implementation, or reconnaissance instructions. The reported matches are natural-language Markdown guidance and filename references, so the skill is safe to publish with low residual risk.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
2026年2月25日 上午06:00
Prompt-only skill containing no executable code, scripts, or external command invocations. Static analysis scanned 0 files and found 0 security issues. The skill provides test automation guidance through natural language instructions only. No network access, filesystem operations, or code execution patterns detected. Safe for publication.