{"data":{"skill":{"slug":"aaron-he-zhu-report-generator","name":"report-generator","icon":"📦","repo":"https://github.com/aaron-he-zhu/aaron-marketing-skills/tree/main/influencer/measure/report-generator","status":"approved","author":"aaron-he-zhu","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"29ac3143-b9c2-4bf4-9863-3c2939d0dcc3","skill_id":"c70c9c68-6575-4c7d-be54-314f548fb7f2","version":1,"content_hash":"4ba0045dc577ec68cb4c212b06f500b8","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All static findings were adjudicated as false positives caused by Markdown links, code fences, inline backticks, homepage metadata, and report-template wording. I found no evidence of prompt injection, credential access, command execution, unsafe network calls, or malicious file-system behavior in the reviewed files.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"references/report-templates.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":45,"line_start":45},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":105,"line_start":105},{"file":"SKILL.md","line_end":106,"line_start":106},{"file":"SKILL.md","line_end":107,"line_start":107},{"file":"SKILL.md","line_end":108,"line_start":108},{"file":"SKILL.md","line_end":109,"line_start":109},{"file":"SKILL.md","line_end":110,"line_start":110},{"file":"SKILL.md","line_end":111,"line_start":111},{"file":"SKILL.md","line_end":112,"line_start":112},{"file":"SKILL.md","line_end":116,"line_start":116},{"file":"SKILL.md","line_end":120,"line_start":120},{"file":"SKILL.md","line_end":121,"line_start":121},{"file":"SKILL.md","line_end":127,"line_start":127},{"file":"SKILL.md","line_end":128,"line_start":128},{"file":"SKILL.md","line_end":129,"line_start":129},{"file":"SKILL.md","line_end":130,"line_start":130}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":28,"line_start":26},{"file":"SKILL.md","line_end":32,"line_start":28},{"file":"SKILL.md","line_end":34,"line_start":32},{"file":"SKILL.md","line_end":38,"line_start":34},{"file":"SKILL.md","line_end":38,"line_start":38},{"file":"SKILL.md","line_end":40,"line_start":39},{"file":"SKILL.md","line_end":57,"line_start":40},{"file":"SKILL.md","line_end":58,"line_start":57},{"file":"SKILL.md","line_end":59,"line_start":58},{"file":"SKILL.md","line_end":60,"line_start":59},{"file":"SKILL.md","line_end":70,"line_start":60},{"file":"SKILL.md","line_end":70,"line_start":70},{"file":"SKILL.md","line_end":76,"line_start":76},{"file":"SKILL.md","line_end":100,"line_start":84}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":10,"line_start":10},{"file":"SKILL.md","line_end":13,"line_start":13}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":644,"audit_model":"codex","audited_at":"2026-07-04T16:20:10.64+00:00","created_at":"2026-07-05T00:39:31.101284+00:00","static_findings":[{"id":"filesystem:references/report-templates.md:3:path-traversal-sequence","file":"references/report-templates.md","pattern":"Path traversal sequence","snippet":"Full audience templates, visualization recommendations, writing best practices, and a worked example","category":"filesystem","line_end":3,"severity":"high","line_start":3},{"id":"blocker:references/report-templates.md:19:system-reconnaissance","file":"references/report-templates.md","pattern":"System reconnaissance","snippet":"| Client | Results, Value | Medium | \"What did I get?\" |","category":"blocker","line_end":19,"severity":"low","line_start":19},{"id":"blocker:references/report-templates.md:457:system-reconnaissance","file":"references/report-templates.md","pattern":"System reconnaissance","snippet":"2. **Execution**: What we did","category":"blocker","line_end":458,"severity":"low","line_start":457},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **Cross-discipline (paid ads):** this is also the **paid-ads** reporting surface — build exec/clie","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":28,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":32,"severity":"medium","line_start":28},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":34,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":38,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Reads**: campaign name, reporting period, target audience, and computed metrics (reach, engageme","category":"external_commands","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Writes**: a finished report in the audience-appropriate template, saved to `memory/influencer/re","category":"external_commands","line_end":40,"severity":"medium","line_start":39},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Promotes**: durable verdicts (final ROI/ROAS, top performers, renew/drop calls, headline learnin","category":"external_commands","line_end":57,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~social platform analytics` — reach, impressions, engagement, video views per post","category":"external_commands","line_end":58,"severity":"medium","line_start":57},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~influencer database` — creator handles, tiers, fees, audience demographics","category":"external_commands","line_end":59,"severity":"medium","line_start":58},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~analytics` — link clicks, conversions, attributed revenue","category":"external_commands","line_end":60,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `~~CRM` — new-customer counts and downstream revenue","category":"external_commands","line_end":70,"severity":"medium","line_start":60},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. **Pick the audience template and fill it in** — full executive, client, and internal-team templat","category":"external_commands","line_end":70,"severity":"medium","line_start":70},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"5. **Save and promote** — write the finished report to `memory/influencer/report-generator/YYYY-MM-D","category":"external_commands","line_end":76,"severity":"medium","line_start":76},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":100,"severity":"medium","line_start":84},{"id":"network:SKILL.md:10:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: \"https://github.com/aaron-he-zhu/aaron-marketing-skills\"","category":"network","line_end":10,"severity":"low","line_start":10},{"id":"network:SKILL.md:13:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"metadata: {\"author\": \"aaron-he-zhu\", \"version\": \"13.0.0\", \"discipline\": \"influencer\", \"phase\": \"meas","category":"network","line_end":13,"severity":"low","line_start":13},{"id":"filesystem:SKILL.md:20:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"> **Cross-discipline (paid ads):** this is also the **paid-ads** reporting surface — build exec/clie","category":"filesystem","line_end":20,"severity":"high","line_start":20},{"id":"filesystem:SKILL.md:45:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- **Primary next skill**: [content-quality-auditor](../../../seo-geo/optimize/content-quality-audito","category":"filesystem","line_end":45,"severity":"high","line_start":45},{"id":"filesystem:SKILL.md:49:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"> Emit the standard shape from [skill-contract.md §Handoff Summary Format](../../../references/skill","category":"filesystem","line_end":49,"severity":"high","line_start":49},{"id":"filesystem:SKILL.md:62:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"Without any of these, the skill asks you for the numbers and proceeds. See [CONNECTORS.md](../../../","category":"filesystem","line_end":62,"severity":"high","line_start":62},{"id":"filesystem:SKILL.md:105:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [skill-contract.md](../../../references/skill-contract.md) — shared contract and handoff format","category":"filesystem","line_end":105,"severity":"high","line_start":105},{"id":"filesystem:SKILL.md:106:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [state-model.md](../../../references/state-model.md) — memory tiers and save-path convention","category":"filesystem","line_end":106,"severity":"high","line_start":106},{"id":"filesystem:SKILL.md:107:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [CONNECTORS.md](../../../CONNECTORS.md) — free/keyless data recipes per connector category","category":"filesystem","line_end":107,"severity":"high","line_start":107},{"id":"filesystem:SKILL.md:108:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [performance-analyzer](../performance-analyzer/SKILL.md) — generates the metrics this report consu","category":"filesystem","line_end":108,"severity":"high","line_start":108},{"id":"filesystem:SKILL.md:109:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [roi-calculator](../roi-calculator/SKILL.md) — supplies ROI/ROAS figures","category":"filesystem","line_end":109,"severity":"high","line_start":109},{"id":"filesystem:SKILL.md:110:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [campaign-planner](../../plan/campaign-planner/SKILL.md) — original plan to compare results agains","category":"filesystem","line_end":110,"severity":"high","line_start":110},{"id":"filesystem:SKILL.md:111:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [content-amplifier](../../activate/content-amplifier/SKILL.md) — amplification results to report o","category":"filesystem","line_end":111,"severity":"high","line_start":111},{"id":"filesystem:SKILL.md:112:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [content-quality-auditor](../../../seo-geo/optimize/content-quality-auditor/SKILL.md) — quality ga","category":"filesystem","line_end":112,"severity":"high","line_start":112},{"id":"filesystem:SKILL.md:116:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"**Primary**: [content-quality-auditor](../../../seo-geo/optimize/content-quality-auditor/SKILL.md) —","category":"filesystem","line_end":116,"severity":"high","line_start":116},{"id":"filesystem:SKILL.md:120:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [performance-analyzer](../performance-analyzer/SKILL.md) — if the report exposes data gaps, re-ana","category":"filesystem","line_end":120,"severity":"high","line_start":120},{"id":"filesystem:SKILL.md:121:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [roi-calculator](../roi-calculator/SKILL.md) — recompute return figures if the financial inputs ch","category":"filesystem","line_end":121,"severity":"high","line_start":121},{"id":"filesystem:SKILL.md:127:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [performance-analyzer](../performance-analyzer/SKILL.md) - Generate data for reports","category":"filesystem","line_end":127,"severity":"high","line_start":127},{"id":"filesystem:SKILL.md:128:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [roi-calculator](../roi-calculator/SKILL.md) - Calculate ROI figures","category":"filesystem","line_end":128,"severity":"high","line_start":128},{"id":"filesystem:SKILL.md:129:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [campaign-planner](../../plan/campaign-planner/SKILL.md) - Reference original plans","category":"filesystem","line_end":129,"severity":"high","line_start":129},{"id":"filesystem:SKILL.md:130:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- [content-amplifier](../../activate/content-amplifier/SKILL.md) - Report on amplification results","category":"filesystem","line_end":130,"severity":"high","line_start":130},{"id":"blocker:SKILL.md:20:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"> **Cross-discipline (paid ads):** this is also the **paid-ads** reporting surface — build exec/clie","category":"blocker","line_end":20,"severity":"low","line_start":20},{"id":"blocker:SKILL.md:76:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"5. **Save and promote** — write the finished report to `memory/influencer/report-generator/YYYY-MM-D","category":"blocker","line_end":76,"severity":"low","line_start":76},{"id":"blocker:SKILL.md:123:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**Termination note** (visited-set): if a recommended skill has already been invoked this session, st","category":"blocker","line_end":123,"severity":"low","line_start":123}],"finding_verdicts":[{"id":"filesystem:references/report-templates.md:3:path-traversal-sequence","reason":"The ../SKILL.md text is a static Markdown link back to the skill documentation. It is not runtime file access, path joining, or a user-controlled traversal vector.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/report-templates.md:19:system-reconnaissance","reason":"The phrase is a client-reporting question inside an audience-needs table. It does not ask the agent to inspect system state or enumerate host information.","verdict":"false_positive","confidence":0.95},{"id":"blocker:references/report-templates.md:457:system-reconnaissance","reason":"The word Execution appears as a narrative-arc heading for report writing. It is not an instruction to execute commands or perform system reconnaissance.","verdict":"false_positive","confidence":0.95},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","reason":"The match is Markdown backtick syntax or inline code formatting, not Ruby shell execution. There is no command interpreter call, executable script, or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:10:hardcoded-url","reason":"The URL is repository metadata for the GitHub homepage. The skill contains no fetch, curl, webhook, or other network request logic tied to this value.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:13:hardcoded-url","reason":"The URL is repository metadata for the GitHub homepage. The skill contains no fetch, curl, webhook, or other network request logic tied to this value.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:20:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:45:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:49:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:62:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:105:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:106:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:107:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:108:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:109:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:110:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:111:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:112:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:116:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:120:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:121:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:127:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:128:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:129:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:130:path-traversal-sequence","reason":"The matched ../ sequence is in a Markdown cross-reference to another repository skill or reference file. It documents navigation only and does not direct arbitrary file reads or writes.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:20:system-reconnaissance","reason":"The text uses exec as shorthand for executive reports in a paid-ads reporting note. It does not request system discovery or privileged inspection.","verdict":"false_positive","confidence":0.95},{"id":"blocker:SKILL.md:76:system-reconnaissance","reason":"The line tells the skill to save a report to a bounded memory path and promote report conclusions. It does not ask for host reconnaissance.","verdict":"false_positive","confidence":0.95},{"id":"blocker:SKILL.md:123:system-reconnaissance","reason":"The visited-set instruction is loop-prevention guidance for skill chaining. It does not direct system enumeration or environment probing.","verdict":"false_positive","confidence":0.95}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}