{"data":{"skill":{"slug":"addyosmani-performance-optimization","name":"performance-optimization","icon":"📦","repo":"https://github.com/addyosmani/agent-skills/tree/be4e44a9fbc5e8df0beaefadbb28bd22ee61cc39/skills/performance-optimization","status":"approved","author":"addyosmani","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"ca3f23f9-885b-4a00-b119-9b583c030de3","skill_id":"36401522-508e-4dbf-90d3-c10a71ca4142","version":1,"content_hash":"v3:5526951beaeca22519572a471618555839b53b05:00694d0c69bbde674d0e39de24052d90afea32d9fef9553eaee21a50a7e9b8cf:bb67dc7980db00bb8b5de892b696fc98336553b0dabfe2c12cb553e87b78d60b:736b696c6c732f616464796f736d616e692f706572666f726d616e63652d6f7074696d697a6174696f6e:08b20d344fe6fcb0a92207ce29fa4cf5","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 55 static findings are false positives caused by Markdown syntax, fixed local import examples, and relative documentation links. The skill contains performance guidance and named tooling examples, with no prompt injection, arbitrary command construction, or filesystem operation.","remediation":[],"risk_factor_evidence":[{"factor":"scripts","evidence":[{"file":"SKILL.md","line_end":303,"line_start":303},{"file":"SKILL.md","line_end":306,"line_start":306}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":38,"line_start":32},{"file":"SKILL.md","line_end":48,"line_start":38},{"file":"SKILL.md","line_end":59,"line_start":48},{"file":"SKILL.md","line_end":62,"line_start":59},{"file":"SKILL.md","line_end":71,"line_start":62},{"file":"SKILL.md","line_end":77,"line_start":71},{"file":"SKILL.md","line_end":97,"line_start":77},{"file":"SKILL.md","line_end":125,"line_start":97},{"file":"SKILL.md","line_end":136,"line_start":125},{"file":"SKILL.md","line_end":140,"line_start":136},{"file":"SKILL.md","line_end":150,"line_start":140},{"file":"SKILL.md","line_end":156,"line_start":150},{"file":"SKILL.md","line_end":160,"line_start":156},{"file":"SKILL.md","line_end":166,"line_start":160},{"file":"SKILL.md","line_end":167,"line_start":166},{"file":"SKILL.md","line_end":168,"line_start":167},{"file":"SKILL.md","line_end":168,"line_start":168},{"file":"SKILL.md","line_end":174,"line_start":172},{"file":"SKILL.md","line_end":180,"line_start":174},{"file":"SKILL.md","line_end":180,"line_start":180},{"file":"SKILL.md","line_end":182,"line_start":181},{"file":"SKILL.md","line_end":183,"line_start":182},{"file":"SKILL.md","line_end":183,"line_start":183},{"file":"SKILL.md","line_end":191,"line_start":185},{"file":"SKILL.md","line_end":200,"line_start":191},{"file":"SKILL.md","line_end":202,"line_start":200},{"file":"SKILL.md","line_end":206,"line_start":202},{"file":"SKILL.md","line_end":267,"line_start":206},{"file":"SKILL.md","line_end":271,"line_start":267},{"file":"SKILL.md","line_end":293,"line_start":271},{"file":"SKILL.md","line_end":297,"line_start":293},{"file":"SKILL.md","line_end":299,"line_start":297},{"file":"SKILL.md","line_end":315,"line_start":299},{"file":"SKILL.md","line_end":325,"line_start":315},{"file":"SKILL.md","line_end":329,"line_start":325},{"file":"SKILL.md","line_end":352,"line_start":329},{"file":"SKILL.md","line_end":362,"line_start":352},{"file":"SKILL.md","line_end":364,"line_start":362},{"file":"SKILL.md","line_end":366,"line_start":364},{"file":"SKILL.md","line_end":389,"line_start":366},{"file":"SKILL.md","line_end":401,"line_start":389},{"file":"SKILL.md","line_end":414,"line_start":401},{"file":"SKILL.md","line_end":422,"line_start":414},{"file":"SKILL.md","line_end":430,"line_start":422},{"file":"SKILL.md","line_end":433,"line_start":430},{"file":"SKILL.md","line_end":439,"line_start":433},{"file":"SKILL.md","line_end":443,"line_start":439},{"file":"SKILL.md","line_end":474,"line_start":443},{"file":"SKILL.md","line_end":474,"line_start":474}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":366,"line_start":366},{"file":"SKILL.md","line_end":443,"line_start":443}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":497,"audit_model":"codex","audited_at":"2026-09-13T13:03:26.303+00:00","created_at":"2026-09-14T00:39:34.009939+00:00","static_findings":[{"id":"scripts:SKILL.md:303:dynamic-import-expression","file":"SKILL.md","pattern":"Dynamic import() expression","snippet":"const ChartLibrary = lazy(() => import('./ChartLibrary'));","category":"scripts","line_end":303,"severity":"medium","line_start":303},{"id":"scripts:SKILL.md:306:dynamic-import-expression","file":"SKILL.md","pattern":"Dynamic import() expression","snippet":"const SettingsPage = lazy(() => import('./pages/Settings'));","category":"scripts","line_end":306,"severity":"medium","line_start":306},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":38,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":48,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":59,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":62,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":71,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":77,"severity":"medium","line_start":71},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":97,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:97:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":125,"severity":"medium","line_start":97},{"id":"external_commands:SKILL.md:125:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":136,"severity":"medium","line_start":125},{"id":"external_commands:SKILL.md:136:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":140,"severity":"medium","line_start":136},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":150,"severity":"medium","line_start":140},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":156,"severity":"medium","line_start":150},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```sql","category":"external_commands","line_end":160,"severity":"medium","line_start":156},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":166,"severity":"medium","line_start":160},{"id":"external_commands:SKILL.md:166:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `Seq Scan` on a large table where you expected an index | No usable index for this predicate |","category":"external_commands","line_end":167,"severity":"medium","line_start":166},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Estimated `rows=` off from actual by an order of magnitude | Stale statistics; the planner is choo","category":"external_commands","line_end":168,"severity":"medium","line_start":167},{"id":"external_commands:SKILL.md:168:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| A `Sort` node above the scan | The index covers the filter but not the `ORDER BY` |","category":"external_commands","line_end":168,"severity":"medium","line_start":168},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```sql","category":"external_commands","line_end":174,"severity":"medium","line_start":172},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":180,"severity":"medium","line_start":174},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Low selectivity, querying the dominant value (a `status` column that is 95% `active`, filtered on ","category":"external_commands","line_end":180,"severity":"medium","line_start":180},{"id":"external_commands:SKILL.md:181:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Leading wildcard (`LIKE '%term'`) | A B-tree cannot seek without a prefix; needs trigram or full-t","category":"external_commands","line_end":182,"severity":"medium","line_start":181},{"id":"external_commands:SKILL.md:182:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Function on the column (`WHERE lower(email) = ?`) | The plain column index is unusable; index the ","category":"external_commands","line_end":183,"severity":"medium","line_start":182},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Write-heavy table | Every index is a tax on every `INSERT`/`UPDATE`; measure the write cost, not j","category":"external_commands","line_end":183,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:185:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Re-run `EXPLAIN ANALYZE` after. An index that did not change the plan is a revert (Step 4), and it i","category":"external_commands","line_end":191,"severity":"medium","line_start":185},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":200,"severity":"medium","line_start":191},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":202,"severity":"medium","line_start":200},{"id":"external_commands:SKILL.md:202:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Bigger is not faster.** A pool larger than what the database can execute concurrently just relocat","category":"external_commands","line_end":206,"severity":"medium","line_start":202},{"id":"external_commands:SKILL.md:206:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```html","category":"external_commands","line_end":267,"severity":"medium","line_start":206},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":271,"severity":"medium","line_start":267},{"id":"external_commands:SKILL.md:271:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```tsx","category":"external_commands","line_end":293,"severity":"medium","line_start":271},{"id":"external_commands:SKILL.md:293:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":297,"severity":"medium","line_start":293},{"id":"external_commands:SKILL.md:297:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":299,"severity":"medium","line_start":297},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"// provided the dependency ships ESM and is marked `sideEffects: false` in package.json.","category":"external_commands","line_end":315,"severity":"medium","line_start":299},{"id":"external_commands:SKILL.md:315:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":325,"severity":"medium","line_start":315},{"id":"external_commands:SKILL.md:325:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| In-process (`Map`, LRU) | One instance | Small, hot, per-instance staleness is acceptable | Each i","category":"external_commands","line_end":329,"severity":"medium","line_start":325},{"id":"external_commands:SKILL.md:329:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":352,"severity":"medium","line_start":329},{"id":"external_commands:SKILL.md:352:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":362,"severity":"medium","line_start":352},{"id":"external_commands:SKILL.md:362:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Versioned keys (`user:42:profile:v7`) | Never invalidate, just stop reading old keys. Costs memory","category":"external_commands","line_end":364,"severity":"medium","line_start":362},{"id":"external_commands:SKILL.md:364:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Guard against the stampede.** A hot key expires, every concurrent request misses together, and the","category":"external_commands","line_end":366,"severity":"medium","line_start":364},{"id":"external_commands:SKILL.md:366:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Do not cache:** anything whose staleness is a correctness bug (balances, permissions, inventory at","category":"external_commands","line_end":389,"severity":"medium","line_start":366},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Correctness gates the metric.** The suite stays green *and* the number moves. An \"optimization\" th","category":"external_commands","line_end":401,"severity":"medium","line_start":389},{"id":"external_commands:SKILL.md:401:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"A section in the PR description or a `PERF.md` in the repo both work. What matters is that the next ","category":"external_commands","line_end":414,"severity":"medium","line_start":401},{"id":"external_commands:SKILL.md:414:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"attributed `web-vitals` data to locate the cause; treat CrUX's rolling window","category":"external_commands","line_end":422,"severity":"medium","line_start":414},{"id":"external_commands:SKILL.md:422:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":430,"severity":"medium","line_start":422},{"id":"external_commands:SKILL.md:430:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":433,"severity":"medium","line_start":430},{"id":"external_commands:SKILL.md:433:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":439,"severity":"medium","line_start":433},{"id":"external_commands:SKILL.md:439:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":443,"severity":"medium","line_start":439},{"id":"external_commands:SKILL.md:443:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For detailed performance checklists, optimization commands, and anti-pattern reference, see `../../r","category":"external_commands","line_end":474,"severity":"medium","line_start":443},{"id":"external_commands:SKILL.md:474:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `React.memo` and `useMemo` everywhere (overusing is as bad as underusing)","category":"external_commands","line_end":474,"severity":"medium","line_start":474},{"id":"filesystem:SKILL.md:366:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"**Do not cache:** anything whose staleness is a correctness bug (balances, permissions, inventory at","category":"filesystem","line_end":366,"severity":"high","line_start":366},{"id":"filesystem:SKILL.md:443:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"For detailed performance checklists, optimization commands, and anti-pattern reference, see `../../r","category":"filesystem","line_end":443,"severity":"high","line_start":443},{"id":"blocker:SKILL.md:159:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"WHERE owner_id = 42 ORDER BY created_at DESC LIMIT 20;","category":"blocker","line_end":159,"severity":"low","line_start":159},{"id":"blocker:SKILL.md:185:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Re-run `EXPLAIN ANALYZE` after. An index that did not change the plan is a revert (Step 4), and it i","category":"blocker","line_end":185,"severity":"low","line_start":185}],"finding_verdicts":[{"id":"scripts:SKILL.md:303:dynamic-import-expression","reason":"This is a documented React lazy-loading example with a fixed local module path. It does not import a user-controlled expression or execute arbitrary code.","verdict":"false_positive","confidence":0.99},{"id":"scripts:SKILL.md:306:dynamic-import-expression","reason":"This is a documented React lazy-loading example with a fixed local module path. It does not import a user-controlled expression or execute arbitrary code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:97:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:125:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:136:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:166:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:168:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:181:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:182:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:185:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:202:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:206:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:271:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:293:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:297:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:315:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:325:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:329:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:352:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:362:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:364:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:366:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:401:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:414:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:422:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:430:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:433:ruby-shell-backtick-execution","reason":"The flagged span is a Markdown bash fence containing named npx performance tools. It is not Ruby backtick execution or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:439:ruby-shell-backtick-execution","reason":"The flagged span is a Markdown bash fence containing named npx performance tools. It is not Ruby backtick execution or user-controlled command construction.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:443:ruby-shell-backtick-execution","reason":"The match is inline Markdown around a relative documentation link. It contains no shell backtick operator, command substitution, or process execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:474:ruby-shell-backtick-execution","reason":"The match is Markdown fencing or inline code in explanatory performance examples. No Ruby backtick operator or shell command substitution appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:366:path-traversal-sequence","reason":"The traversal sequence belongs to a relative Markdown link to supporting documentation. No filesystem API reads, writes, deletes, or resolves this path.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:443:path-traversal-sequence","reason":"The traversal sequence belongs to a relative Markdown link to supporting documentation. No filesystem API reads, writes, deletes, or resolves this path.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:159:system-reconnaissance","reason":"This is a fixed SQL example for measuring an indexed application query. It does not collect host, network, account, or environment information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:185:system-reconnaissance","reason":"EXPLAIN ANALYZE is discussed for comparing a database query plan before and after indexing. The guidance is scoped to performance measurement, not system reconnaissance.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"5526951beaeca22519572a471618555839b53b05","subject_content_hash":"00694d0c69bbde674d0e39de24052d90afea32d9fef9553eaee21a50a7e9b8cf","subject_tree_hash":"bb67dc7980db00bb8b5de892b696fc98336553b0dabfe2c12cb553e87b78d60b","subject_plugin_path":"skills/addyosmani/performance-optimization","audit_payload_hash":"08b20d344fe6fcb0a92207ce29fa4cf5","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"5526951beaeca22519572a471618555839b53b05","contentHash":"00694d0c69bbde674d0e39de24052d90afea32d9fef9553eaee21a50a7e9b8cf","treeHash":"bb67dc7980db00bb8b5de892b696fc98336553b0dabfe2c12cb553e87b78d60b","pluginPath":"skills/addyosmani/performance-optimization","auditPayloadHash":"08b20d344fe6fcb0a92207ce29fa4cf5"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/addyosmani-performance-optimization/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}