{"data":{"skill":{"slug":"agentkitco-pr-description","name":"pr-description","icon":"📦","repo":"https://github.com/agentkitco/agentkit-dev-skills/tree/3de707c7875147b65ddff504d86b0d0dbf713fa7/skills/pr-description","status":"approved","author":"agentkitco","authorVersion":"1.0","skillstoreRevision":1},"audit":{"id":"58e3636f-4d21-4d5e-b348-635726fbff6b","skill_id":"2a95b03a-38ca-4b5c-84fc-3f4134d88020","version":1,"content_hash":"v3:743429f75b17204d47661a86b577a575ad67517f:0a1fbba4d9935d34f942c5c7e20fd16cb5f8095796c7fa3fa35ffb240fde3bfe:c27a38f8cda73de94c47b3d2f80fb9b03c50d6d0a25146edeb52aa6625954af3:736b696c6c732f6167656e746b6974636f2f70722d6465736372697074696f6e:793a20eaffbd42ab8c8ce471bce521f7","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All five static findings are false positives involving Markdown formatting, legitimate Git inspection, or screenshot guidance. No evidence found of prompt injection, credential theft, or unauthorized publishing. The skill explicitly requires user permission before creating a pull request.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":43,"line_start":23},{"file":"SKILL.md","line_end":51,"line_start":43}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":52,"audit_model":"codex","audited_at":"2026-10-17T19:48:10.85+00:00","created_at":"2026-10-17T20:05:58.715137+00:00","static_findings":[{"id":"external_commands:SKILL.md:16:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Find the base branch and run `git log --oneline <base>..HEAD` and `git diff --stat <base>...HEAD`","category":"external_commands","line_end":16,"severity":"medium","line_start":16},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. Look for a `.github/pull_request_template.md` or `PULL_REQUEST_TEMPLATE`. If one exists, fill it ","category":"external_commands","line_end":19,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":43,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":51,"severity":"medium","line_start":43},{"id":"blocker:SKILL.md:50:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Screenshots or output examples: say where one would help; never describe a screenshot you did not ","category":"blocker","line_end":50,"severity":"low","line_start":50}],"finding_verdicts":[{"id":"external_commands:SKILL.md:16:ruby-shell-backtick-execution","reason":"Line 16 uses Markdown inline code to document Git history and diff inspection, directly supporting description drafting. It contains no Ruby execution or shell backtick substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"Line 19 encloses repository template filenames in Markdown backticks. These are file references for formatting the description, not executable commands.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"Lines 23 through 43 form a fenced Markdown template containing PR headings and prose placeholders. The backticks delimit documentation, not executable Ruby or shell code.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"Line 43 closes the prose template; subsequent lines define writing rules. Line 51 mentions gh pr create only to prohibit execution unless requested.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:50:system-reconnaissance","reason":"Line 50 asks authors to identify useful screenshots or examples and forbids describing unseen screenshots. It requests no host enumeration or system reconnaissance.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"743429f75b17204d47661a86b577a575ad67517f","subject_content_hash":"0a1fbba4d9935d34f942c5c7e20fd16cb5f8095796c7fa3fa35ffb240fde3bfe","subject_tree_hash":"c27a38f8cda73de94c47b3d2f80fb9b03c50d6d0a25146edeb52aa6625954af3","subject_plugin_path":"skills/agentkitco/pr-description","audit_payload_hash":"793a20eaffbd42ab8c8ce471bce521f7","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"743429f75b17204d47661a86b577a575ad67517f","contentHash":"0a1fbba4d9935d34f942c5c7e20fd16cb5f8095796c7fa3fa35ffb240fde3bfe","treeHash":"c27a38f8cda73de94c47b3d2f80fb9b03c50d6d0a25146edeb52aa6625954af3","pluginPath":"skills/agentkitco/pr-description","auditPayloadHash":"793a20eaffbd42ab8c8ce471bce521f7"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/agentkitco-pr-description/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}