{"data":{"skill":{"slug":"aaron-he-zhu-content-amplifier","name":"content-amplifier","icon":"📦","repo":"https://github.com/aaron-he-zhu/aaron-marketing-skills/tree/main/influencer/activate/content-amplifier","status":"approved","author":"aaron-he-zhu","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"d6d8e2f9-41fd-459b-a384-cef0e97303e8","skill_id":"7ca7cc30-2586-4087-86ff-319b62a0813e","version":2,"content_hash":"v2:2e36836131679643f7a49e4cfff588d67adc404b:b5e8c6679f8503c28e13163ce5db7fab273a6dc0aee81fd5bcd21e8e1ef38f07:a297f9cc3186f372a30e30433974a50840ff552232019812ef4700b9f47a4cb4:6439b702427c6c730793e3d58be6e48f","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"The static alerts are false positives from Markdown examples, local documentation links, marketing terminology, and metadata. I found no prompt injection attempt, command execution instruction, arbitrary filesystem access, or automatic network exfiltration in the reviewed files.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"references/templates.md","line_end":527,"line_start":508},{"file":"SKILL.md","line_end":29,"line_start":29},{"file":"SKILL.md","line_end":38,"line_start":35},{"file":"SKILL.md","line_end":42,"line_start":38},{"file":"SKILL.md","line_end":45,"line_start":42},{"file":"SKILL.md","line_end":54,"line_start":45},{"file":"SKILL.md","line_end":54,"line_start":54},{"file":"SKILL.md","line_end":56,"line_start":55},{"file":"SKILL.md","line_end":72,"line_start":56},{"file":"SKILL.md","line_end":73,"line_start":72},{"file":"SKILL.md","line_end":74,"line_start":73},{"file":"SKILL.md","line_end":75,"line_start":74},{"file":"SKILL.md","line_end":76,"line_start":75},{"file":"SKILL.md","line_end":103,"line_start":76},{"file":"SKILL.md","line_end":117,"line_start":103},{"file":"SKILL.md","line_end":127,"line_start":117},{"file":"SKILL.md","line_end":146,"line_start":127}]},{"factor":"filesystem","evidence":[{"file":"references/templates.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":60,"line_start":60},{"file":"SKILL.md","line_end":64,"line_start":64},{"file":"SKILL.md","line_end":78,"line_start":78},{"file":"SKILL.md","line_end":101,"line_start":101},{"file":"SKILL.md","line_end":137,"line_start":137},{"file":"SKILL.md","line_end":138,"line_start":138},{"file":"SKILL.md","line_end":139,"line_start":139},{"file":"SKILL.md","line_end":140,"line_start":140},{"file":"SKILL.md","line_end":141,"line_start":141},{"file":"SKILL.md","line_end":142,"line_start":142},{"file":"SKILL.md","line_end":146,"line_start":146},{"file":"SKILL.md","line_end":151,"line_start":151},{"file":"SKILL.md","line_end":152,"line_start":152},{"file":"SKILL.md","line_end":156,"line_start":156},{"file":"SKILL.md","line_end":157,"line_start":157}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":10,"line_start":10},{"file":"SKILL.md","line_end":13,"line_start":13}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":857,"audit_model":"codex","audited_at":"2026-07-06T16:03:52.01+00:00","created_at":"2026-07-06T23:38:07.803808+00:00","static_findings":[{"id":"blocker:references/atom-extraction.md:67:system-reconnaissance","file":"references/atom-extraction.md","pattern":"System reconnaissance","snippet":"Sort atoms by `virality_score` descending; repurpose the top of the list into paid and hero placemen","category":"blocker","line_end":67,"severity":"low","line_start":67},{"id":"external_commands:references/templates.md:508:ruby-shell-backtick-execution","file":"references/templates.md","pattern":"Ruby/shell backtick execution","snippet":"`[campaign]_[creator]_[platform]_[type]_[variation]_[date]`","category":"external_commands","line_end":527,"severity":"medium","line_start":508},{"id":"filesystem:references/templates.md:3:path-traversal-sequence","file":"references/templates.md","pattern":"Path traversal sequence","snippet":"Fill-in templates for both modes of [content-amplifier](../SKILL.md). Anchors are mode-prefixed: `pa","category":"filesystem","line_end":3,"severity":"high","line_start":3},{"id":"blocker:references/templates.md:7:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"# Mode: paid","category":"blocker","line_end":9,"severity":"low","line_start":7},{"id":"blocker:references/templates.md:9:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"Templates for extending the reach of organic creator content with paid spend.","category":"blocker","line_end":9,"severity":"low","line_start":9},{"id":"blocker:references/templates.md:39:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"| Hook quality | [%] | Paid attention capture |","category":"blocker","line_end":39,"severity":"low","line_start":39},{"id":"blocker:references/templates.md:70:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"| @[handle4] [content] | [why it's not worth paid spend] |","category":"blocker","line_end":70,"severity":"low","line_start":70},{"id":"blocker:references/templates.md:99:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"**Setup**: [ ] creator access/authorization · [ ] content approved for paid use · [ ] proper disclos","category":"blocker","line_end":99,"severity":"low","line_start":99},{"id":"blocker:references/templates.md:218:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"| CPC | $[X] | Optimize audience | Increase bid |","category":"blocker","line_end":218,"severity":"low","line_start":218},{"id":"blocker:references/templates.md:258:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"1. Creator authorization: video > ... > Ad settings > turn on \"Ad authorization\" > copy the authoriz","category":"blocker","line_end":258,"severity":"low","line_start":258},{"id":"blocker:references/templates.md:268:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"## Worked Example — paid","category":"blocker","line_end":270,"severity":"low","line_start":268},{"id":"blocker:references/templates.md:270:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"**User**: \"We have 5 influencer TikToks from our launch campaign. Which should we amplify with our $","category":"blocker","line_end":270,"severity":"low","line_start":270},{"id":"blocker:references/templates.md:294:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"## Tips — paid","category":"blocker","line_end":296,"severity":"low","line_start":294},{"id":"blocker:references/templates.md:296:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"1. Don't amplify bad content — paid won't fix poor creative.","category":"blocker","line_end":296,"severity":"low","line_start":296},{"id":"blocker:references/templates.md:297:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"2. Start with proven winners — organic success predicts paid success.","category":"blocker","line_end":297,"severity":"low","line_start":297},{"id":"blocker:references/templates.md:300:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"5. Optimize continuously — paid requires active management.","category":"blocker","line_end":300,"severity":"low","line_start":300},{"id":"blocker:references/templates.md:330:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"| Organic only | [#] | N/A - no paid use |","category":"blocker","line_end":330,"severity":"low","line_start":330},{"id":"blocker:references/templates.md:359:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"├─ Paid Ads: Spark Ad · FB Video · IG Reel","category":"blocker","line_end":359,"severity":"low","line_start":359},{"id":"blocker:references/templates.md:378:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"#### Paid Advertising","category":"blocker","line_end":378,"severity":"low","line_start":378},{"id":"blocker:references/templates.md:473:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"### Paid Advertising — Creative Variations","category":"blocker","line_end":473,"severity":"low","line_start":473},{"id":"blocker:references/templates.md:535:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"| Content ID | Creator | Rights Level | Paid Use | Website | Email | Expires |","category":"blocker","line_end":535,"severity":"low","line_start":535},{"id":"blocker:references/templates.md:550:system-reconnaissance","file":"references/templates.md","pattern":"System reconnaissance","snippet":"| UGC-003 | Organic only | Add paid rights | $[X] |","category":"blocker","line_end":550,"severity":"low","line_start":550},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Pick with `--mode paid` or `--mode repurpose`. If unset: \"boost / amplify / whitelisting / Spark Ads","category":"external_commands","line_end":29,"severity":"medium","line_start":29},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":38,"severity":"medium","line_start":35},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":42,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":45,"severity":"medium","line_start":42},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":54,"severity":"medium","line_start":45},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Both pull prior campaign context from `memory/hot-cache.md` when `memory-management` is active.","category":"external_commands","line_end":54,"severity":"medium","line_start":54},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Writes**: the mode's deliverable (paid: selection scorecard, strategy, targeting, budget, optimi","category":"external_commands","line_end":56,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Promotes**: durable facts — *paid*: chosen amplification mix, per-creator spend tiers, winning a","category":"external_commands","line_end":72,"severity":"medium","line_start":56},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~social platform analytics` — pull organic reach, engagement rate, and view counts (both modes) ","category":"external_commands","line_end":73,"severity":"medium","line_start":72},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~ad platform` (Meta Ads Manager, TikTok Ads Manager, Google Ads) — read live CPM/CTR/CPC/ROAS fo","category":"external_commands","line_end":74,"severity":"medium","line_start":73},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~influencer database` — verify creator audience demographics for lookalike targeting (paid); pul","category":"external_commands","line_end":75,"severity":"medium","line_start":74},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~DAM / asset library` — store and tag processed assets; enforce the naming convention (repurpose","category":"external_commands","line_end":76,"severity":"medium","line_start":75},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~CRM` — supply retargeting/exclusion audiences (paid); reconcile creator records with usage-righ","category":"external_commands","line_end":103,"severity":"medium","line_start":76},{"id":"external_commands:SKILL.md:103:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"6. **Build the content library** — folder structure, the `[campaign]_[creator]_[platform]_[type]_[va","category":"external_commands","line_end":117,"severity":"medium","line_start":103},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":127,"severity":"medium","line_start":117},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":146,"severity":"medium","line_start":127},{"id":"network:SKILL.md:10:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: \"https://github.com/aaron-he-zhu/aaron-marketing-skills\"","category":"network","line_end":10,"severity":"low","line_start":10},{"id":"network:SKILL.md:13:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"metadata: {\"author\": \"aaron-he-zhu\", \"version\": \"16.0.0\", \"discipline\": \"influencer\", \"phase\": \"acti","category":"network","line_end":13,"severity":"low","line_start":13},{"id":"filesystem:SKILL.md:18:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"Extract more value from live, approved creator content. Two modes: **paid** (extend reach with paid ","category":"filesystem","line_end":18,"severity":"high","line_start":18},{"id":"filesystem:SKILL.md:20:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"**Scope guard**: this skill does NOT score a deliverable for brand alignment, message accuracy, or F","category":"filesystem","line_end":20,"severity":"high","line_start":20},{"id":"filesystem:SKILL.md:60:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- **Primary next skill**: *paid* → [performance-analyzer](../../measure/performance-analyzer/SKILL.m","category":"filesystem","line_end":60,"severity":"high","line_start":60},{"id":"filesystem:SKILL.md:64:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"> Emit the standard shape from [skill-contract.md §Handoff Summary Format](../../../references/skill","category":"filesystem","line_end":64,"severity":"high","line_start":64},{"id":"filesystem:SKILL.md:78:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"See [CONNECTORS.md](../../../CONNECTORS.md) for the verified free/keyless recipe per category. None ","category":"filesystem","line_end":78,"severity":"high","line_start":78},{"id":"filesystem:SKILL.md:101:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"4. **Specify format transformations** — give aspect ratio, duration, and modification specs for vide","category":"filesystem","line_end":101,"severity":"high","line_start":101},{"id":"filesystem:SKILL.md:137:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- Per-platform format & placement specs: [tiktok](../../../references/platforms/tiktok.md) · [youtub","category":"filesystem","line_end":137,"severity":"high","line_start":137},{"id":"filesystem:SKILL.md:138:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [c3-benchmark.md](../../../references/c3-benchmark.md) — the C3 framework; the ART veto (T1 FTC di","category":"filesystem","line_end":138,"severity":"high","line_start":138},{"id":"filesystem:SKILL.md:139:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [skill-contract.md](../../../references/skill-contract.md) — shared contract and Handoff Summary f","category":"filesystem","line_end":139,"severity":"high","line_start":139},{"id":"filesystem:SKILL.md:140:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [state-model.md](../../../references/state-model.md) — HOT/WARM/COLD memory tiers and save convent","category":"filesystem","line_end":140,"severity":"high","line_start":140},{"id":"filesystem:SKILL.md:141:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [CONNECTORS.md](../../../CONNECTORS.md) — free/keyless data recipe per connector category.","category":"filesystem","line_end":141,"severity":"high","line_start":141},{"id":"filesystem:SKILL.md:142:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- Sibling skills: [content-reviewer](../content-reviewer/SKILL.md), [contract-helper](../contract-he","category":"filesystem","line_end":142,"severity":"high","line_start":142},{"id":"filesystem:SKILL.md:146:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"After delivering findings, ask: \"Save these results for future sessions?\" If yes, write `memory/infl","category":"filesystem","line_end":146,"severity":"high","line_start":146},{"id":"filesystem:SKILL.md:151:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- *paid mode* → [performance-analyzer](../../measure/performance-analyzer/SKILL.md) — measure amplif","category":"filesystem","line_end":151,"severity":"high","line_start":151},{"id":"filesystem:SKILL.md:152:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- *repurpose mode* → [landing-optimizer](../../measure/landing-optimizer/SKILL.md) — drop the repurp","category":"filesystem","line_end":152,"severity":"high","line_start":152},{"id":"filesystem:SKILL.md:156:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [contract-helper](../contract-helper/SKILL.md) — secure or expand usage rights before reuse (repur","category":"filesystem","line_end":156,"severity":"high","line_start":156},{"id":"filesystem:SKILL.md:157:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [budget-optimizer](../../plan/budget-optimizer/SKILL.md) — reallocate paid budget across the recom","category":"filesystem","line_end":157,"severity":"high","line_start":157},{"id":"blocker:SKILL.md:6:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"description: 'Use when the user asks to \"amplify influencer content with paid media\", \"set up whitel","category":"blocker","line_end":6,"severity":"low","line_start":6},{"id":"blocker:SKILL.md:11:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"when_to_use: \"Use when a brand has live, approved creator content and wants to extract more value fr","category":"blocker","line_end":11,"severity":"low","line_start":11},{"id":"blocker:SKILL.md:18:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Extract more value from live, approved creator content. Two modes: **paid** (extend reach with paid ","category":"blocker","line_end":18,"severity":"low","line_start":18},{"id":"blocker:SKILL.md:20:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**Scope guard**: this skill does NOT score a deliverable for brand alignment, message accuracy, or F","category":"blocker","line_end":20,"severity":"low","line_start":20},{"id":"blocker:SKILL.md:26:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| **paid** (default) | Extend the reach of organic creator content with paid spend | Content-selecti","category":"blocker","line_end":26,"severity":"low","line_start":26},{"id":"blocker:SKILL.md:29:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Pick with `--mode paid` or `--mode repurpose`. If unset: \"boost / amplify / whitelisting / Spark Ads","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"blocker:SKILL.md:36:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Which influencer content should we amplify from [campaign]?          # paid","category":"blocker","line_end":37,"severity":"low","line_start":36},{"id":"blocker:SKILL.md:43:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"--mode paid: Create a paid amplification plan for our influencer campaign with $5,000 across TikTok ","category":"blocker","line_end":43,"severity":"low","line_start":43},{"id":"blocker:SKILL.md:73:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- `~~ad platform` (Meta Ads Manager, TikTok Ads Manager, Google Ads) — read live CPM/CTR/CPC/ROAS fo","category":"blocker","line_end":73,"severity":"low","line_start":73},{"id":"blocker:SKILL.md:84:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"### Mode: paid","category":"blocker","line_end":86,"severity":"low","line_start":84},{"id":"blocker:SKILL.md:86:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"1. **Assess available content** — build the content inventory: campaign, piece count, budget, and a ","category":"blocker","line_end":86,"severity":"low","line_start":86},{"id":"blocker:SKILL.md:87:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"2. **Select content for amplification** — weight selection criteria (organic performance, hook quali","category":"blocker","line_end":87,"severity":"low","line_start":87},{"id":"blocker:SKILL.md:88:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"3. **Develop amplification strategy** — pick the mix across three methods: whitelisting / Spark Ads ","category":"blocker","line_end":88,"severity":"low","line_start":88},{"id":"blocker:SKILL.md:89:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"4. **Set up targeting** — primary lookalike off the creator's engaged audience, plus expansion segme","category":"blocker","line_end":89,"severity":"low","line_start":89},{"id":"blocker:SKILL.md:90:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"5. **Allocate budget** — split the stated budget by content, by objective, and by platform (with CPM","category":"blocker","line_end":90,"severity":"low","line_start":90},{"id":"blocker:SKILL.md:91:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"6. **Optimization playbook** — KPI table (CPM, CTR, CPC, CVR, ROAS) with below/above-target actions,","category":"blocker","line_end":91,"severity":"low","line_start":91},{"id":"blocker:SKILL.md:92:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"7. **Platform-specific setup** — creator authorization + campaign steps for Meta Partnership Ads, Ti","category":"blocker","line_end":92,"severity":"low","line_start":92},{"id":"blocker:SKILL.md:102:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"5. **Apply channel guidelines** — website, email, paid (incl. a creative testing matrix), and organi","category":"blocker","line_end":102,"severity":"low","line_start":102},{"id":"blocker:SKILL.md:115:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**paid** — *User*: \"We have 5 influencer TikToks from our launch campaign. Which should we amplify w","category":"blocker","line_end":115,"severity":"low","line_start":115},{"id":"blocker:SKILL.md:151:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- *paid mode* → [performance-analyzer](../../measure/performance-analyzer/SKILL.md) — measure amplif","category":"blocker","line_end":151,"severity":"low","line_start":151},{"id":"blocker:SKILL.md:155:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [content-amplifier --mode paid](SKILL.md) — when repurposed ad variations are ready for paid spend","category":"blocker","line_end":155,"severity":"low","line_start":155},{"id":"blocker:SKILL.md:157:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [budget-optimizer](../../plan/budget-optimizer/SKILL.md) — reallocate paid budget across the recom","category":"blocker","line_end":157,"severity":"low","line_start":157}],"finding_verdicts":[{"id":"blocker:references/atom-extraction.md:67:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:references/templates.md:508:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:references/templates.md:3:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"blocker:references/templates.md:7:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:9:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:39:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:70:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:99:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:218:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:258:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:268:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:270:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:294:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:296:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:297:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:300:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:330:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:359:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:378:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:473:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:535:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/templates.md:550:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:103:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, prompt examples, connector labels, or an asset naming template. It does not invoke a shell, execute Ruby backticks, or pass user input to a command.","verdict":"false_positive","confidence":0.96},{"id":"network:SKILL.md:10:hardcoded-url","reason":"The hardcoded URL is GitHub homepage metadata for attribution. The skill contains no instruction to send data to that URL or make an automatic network request.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:13:hardcoded-url","reason":"The hardcoded URL is GitHub homepage metadata for attribution. The skill contains no instruction to send data to that URL or make an automatic network request.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:18:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:20:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:60:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:64:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:78:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:101:path-traversal-sequence","reason":"The line points to a local reference directory for platform specs. It does not instruct filesystem traversal or access to user-controlled paths.","verdict":"false_positive","confidence":0.93},{"id":"filesystem:SKILL.md:137:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:138:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:139:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:140:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:141:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:142:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:146:path-traversal-sequence","reason":"The line describes a fixed memory save or promotion flow that requires user approval. It does not accept arbitrary paths or instruct traversal outside the intended memory location.","verdict":"false_positive","confidence":0.88},{"id":"filesystem:SKILL.md:151:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:152:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:156:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:157:path-traversal-sequence","reason":"The flagged sequence appears in Markdown links to local reference files or fixed documentation paths. It is not used to traverse user-controlled paths or read sensitive files.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:6:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:11:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:18:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:20:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:26:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:29:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:36:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:43:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:73:system-reconnaissance","reason":"The line lists optional marketing data connectors for user-authorized campaign metrics. It is not system reconnaissance against the host environment.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:84:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:86:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:87:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:88:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:89:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:90:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:91:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:92:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:102:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:115:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:151:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:155:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:157:system-reconnaissance","reason":"The wording is about marketing content, paid media setup, scoring, or workflow routing. It does not request host, OS, network, credential, or environment reconnaissance.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}