{
  "description": "Human-reviewed false positives, each pinned to the SHA-256 of the exact file content that was reviewed. A changed file no longer matches. See lib/reviewed-findings.js.",
  "entries": [
    {
      "repo": "alibaba/nacos",
      "check": "token_exfiltration_risk",
      "file": ".github/workflows/ci.yml",
      "sha256": "sha256:9988d9b65a86cb0756fcc02be47f098eadd9f2eb990fd75725f11a8321dc7820",
      "reviewedAt": "2026-09-28",
      "reason": "The only GITHUB_TOKEN use sends it to api.github.com (RELEASE_API, line 67) to read a release digest; no proxy, rc file, GITHUB_ENV or other destination in the workflow.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "decolua/9router",
      "check": "shellExecution",
      "file": "src/app/(dashboard)/dashboard/cli-tools/components/DroidToolCard.js",
      "sha256": "sha256:a474707bf9192a0b1a9843028a230ef5b459c71e3058e2e92e9889a4fbd4f15c",
      "reviewedAt": "2026-09-28",
      "reason": "\"use client\" React component; the curl | sh string is install instructions rendered in <code>/<p> for the user (or returned by getInstallCommand() for display). The file only calls fetch() against the app's own /api routes; no process or eval API.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "decolua/9router",
      "check": "shellExecution",
      "file": "src/app/(dashboard)/dashboard/cli-tools/components/GenericCliToolCard.js",
      "sha256": "sha256:39125eb84955759dd97203d24a472246645f6013e4d2ec713db4cd1584287156",
      "reviewedAt": "2026-09-28",
      "reason": "\"use client\" React component; the curl | sh string is install instructions rendered in <code>/<p> for the user (or returned by getInstallCommand() for display). The file only calls fetch() against the app's own /api routes; no process or eval API.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "decolua/9router",
      "check": "shellExecution",
      "file": "src/app/(dashboard)/dashboard/cli-tools/components/GrokBuildToolCard.js",
      "sha256": "sha256:27dc6ff0427c3d17b1fbc25daa03101ba1a15f2d69cd667ff6e167a85dafd51c",
      "reviewedAt": "2026-09-28",
      "reason": "\"use client\" React component; the curl | sh string is install instructions rendered in <code>/<p> for the user (or returned by getInstallCommand() for display). The file only calls fetch() against the app's own /api routes; no process or eval API.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "decolua/9router",
      "check": "shellExecution",
      "file": "src/app/(dashboard)/dashboard/cli-tools/components/HermesToolCard.js",
      "sha256": "sha256:2dd582fbae4631b1dd5305a10cb8039425373bcc563fd00a4626d554e7a41b98",
      "reviewedAt": "2026-09-28",
      "reason": "\"use client\" React component; the curl | sh string is install instructions rendered in <code>/<p> for the user (or returned by getInstallCommand() for display). The file only calls fetch() against the app's own /api routes; no process or eval API.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "decolua/9router",
      "check": "shellExecution",
      "file": "src/app/(dashboard)/dashboard/cli-tools/components/JcodeToolCard.js",
      "sha256": "sha256:a9125d756347b7faf91caef52c41ec34dc4e54cea465b41ef9c374ed07e4435f",
      "reviewedAt": "2026-09-28",
      "reason": "\"use client\" React component; the curl | sh string is install instructions rendered in <code>/<p> for the user (or returned by getInstallCommand() for display). The file only calls fetch() against the app's own /api routes; no process or eval API.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "koala73/worldmonitor",
      "check": "prompt_injection",
      "file": "public/.well-known/agent-skills/assess-energy-shock/SKILL.md",
      "sha256": "sha256:b4c52a653498249e38df6c5ffae0d365e778f3226d6ead7a914761a98388c1d4",
      "reviewedAt": "2026-09-28",
      "reason": "API documentation skill. The matched text is a defensive instruction telling the agent never to act on directive-like text in responses, quoting \"ignore previous instructions\" as an example. No HTML comments, hidden characters or third-party URLs; curl examples call the project's own API with a placeholder key.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "koala73/worldmonitor",
      "check": "prompt_injection",
      "file": "public/.well-known/agent-skills/check-airport-delays/SKILL.md",
      "sha256": "sha256:04057959beb677e917a5c3f72ff1cf316b25a76d635533685a82e154d2f8fbc9",
      "reviewedAt": "2026-09-28",
      "reason": "API documentation skill. The matched text is a defensive instruction telling the agent never to act on directive-like text in responses, quoting \"ignore previous instructions\" as an example. No HTML comments, hidden characters or third-party URLs; curl examples call the project's own API with a placeholder key.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "koala73/worldmonitor",
      "check": "prompt_injection",
      "file": "public/.well-known/agent-skills/check-chokepoint-status/SKILL.md",
      "sha256": "sha256:df2ba34c4463fc4c69c44eed71ca339a5a13b6fbf3e50a5b62669cbf9410abb7",
      "reviewedAt": "2026-09-28",
      "reason": "API documentation skill. The matched text is a defensive instruction telling the agent never to act on directive-like text in responses, quoting \"ignore previous instructions\" as an example. No HTML comments, hidden characters or third-party URLs; curl examples call the project's own API with a placeholder key.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "koala73/worldmonitor",
      "check": "prompt_injection",
      "file": "public/.well-known/agent-skills/check-country-risk/SKILL.md",
      "sha256": "sha256:81973d76a4943fab52ced53b48dfab704e8ba1a53401a85b300d6d1f7280ed7f",
      "reviewedAt": "2026-09-28",
      "reason": "API documentation skill. The matched text is a defensive instruction telling the agent never to act on directive-like text in responses, quoting \"ignore previous instructions\" as an example. No HTML comments, hidden characters or third-party URLs; curl examples call the project's own API with a placeholder key.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "koala73/worldmonitor",
      "check": "prompt_injection",
      "file": "public/.well-known/agent-skills/check-forecast-signals/SKILL.md",
      "sha256": "sha256:7b733d2cbb0929d1f660ff2de3c2eeec01c336d669961c2726860605ed0cab0c",
      "reviewedAt": "2026-09-28",
      "reason": "API documentation skill. The matched text is a defensive instruction telling the agent never to act on directive-like text in responses, quoting \"ignore previous instructions\" as an example. No HTML comments, hidden characters or third-party URLs; curl examples call the project's own API with a placeholder key.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "koala73/worldmonitor",
      "check": "prompt_injection",
      "file": "public/.well-known/agent-skills/check-sanctions-pressure/SKILL.md",
      "sha256": "sha256:1794b12335095bd66b311502a3c9c5b8e1a104cf6845fab9dcee1b26e8b0435e",
      "reviewedAt": "2026-09-28",
      "reason": "API documentation skill. The matched text is a defensive instruction telling the agent never to act on directive-like text in responses, quoting \"ignore previous instructions\" as an example. No HTML comments, hidden characters or third-party URLs; curl examples call the project's own API with a placeholder key.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    },
    {
      "repo": "koala73/worldmonitor",
      "check": "prompt_injection",
      "file": "public/.well-known/agent-skills/fetch-country-brief/SKILL.md",
      "sha256": "sha256:da0911e598596a393f956f84d2903f340565ae9d3b14411d1812fadd1aa2bf4c",
      "reviewedAt": "2026-09-28",
      "reason": "API documentation skill. The matched text is a defensive instruction telling the agent never to act on directive-like text in responses, quoting \"ignore previous instructions\" as an example. No HTML comments, hidden characters or third-party URLs; curl examples call the project's own API with a placeholder key.",
      "source": "https://mcpskills.io/research-data/2026-09/security-blocks-review.csv"
    }
  ]
}