{"data":{"skill":{"slug":"agentkitco-prove-it-ran","name":"prove-it-ran","icon":"📦","repo":"https://github.com/agentkitco/agentkit-dev-skills/tree/3de707c7875147b65ddff504d86b0d0dbf713fa7/skills/prove-it-ran","status":"approved","author":"agentkitco","authorVersion":"1.0","skillstoreRevision":1},"audit":{"id":"72cfce72-79f0-46bc-96b1-5017ea14a21b","skill_id":"a03abdff-1c80-4737-865d-8825e4aecadd","version":1,"content_hash":"v3:743429f75b17204d47661a86b577a575ad67517f:98a43a94108ae106c67ec038400a24ca9921c8affe6e4950e16f0c94a5f3922c:5a2d03d6684b0704a7e970e504cc4fca81d81f08ca064a5f33b3362d51c2f5d4:736b696c6c732f6167656e746b6974636f2f70726f76652d69742d72616e:76e33c187f80fc238ba93f55b9c53947","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All six static findings are false positives involving Markdown formatting, scoped verification commands, or evidence-reporting instructions. No evidence found of prompt injection, credential collection, exfiltration, or malicious command execution. Temporary source changes require care, but the procedure explicitly limits their scope and requires restoration.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":35,"line_start":29}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":43,"audit_model":"codex","audited_at":"2026-10-17T19:49:32.336+00:00","created_at":"2026-10-17T20:06:07.280655+00:00","static_findings":[{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Check the exit code, not just the wording (`echo $?` right after the command, or the runner's summ","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. **Confirm it covers the change.** For a bug fix, the test must fail without the fix: temporarily ","category":"external_commands","line_end":22,"severity":"medium","line_start":22},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"5. **Check for silent skips.** Search output for `skipped`, `xfail`, `pending`, `todo`, and your own","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":35,"severity":"medium","line_start":29},{"id":"blocker:SKILL.md:25:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"7. **Report in a table** and be explicit about anything you did not or could not run.","category":"blocker","line_end":25,"severity":"low","line_start":25},{"id":"blocker:SKILL.md:39:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- \"Should work\" and \"looks right\" are not evidence. Replace them with a command and its output or sa","category":"blocker","line_end":39,"severity":"low","line_start":39}],"finding_verdicts":[{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The backticks delimit Markdown containing echo $?, which reads the previous command's exit status. This is verification guidance, not Ruby execution or command injection.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"The inline git stash reference supports a regression check limited to the source change, followed by restoration. No shell substitution or arbitrary payload appears.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"Backticks mark skip labels and a read-only rg search for disabled tests. The command uses a literal search pattern without dynamic shell evaluation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","reason":"Lines 29-35 contain a fenced Markdown report table with placeholder commands and example results. The fence is documentation syntax, not executable backtick substitution.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:25:system-reconnaissance","reason":"The line requests a verification table and disclosure of checks that could not run. It contains no host enumeration or system reconnaissance.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:39:system-reconnaissance","reason":"The rule requires command output or an explicit statement that verification was not performed. It does not request system information or reconnaissance.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"743429f75b17204d47661a86b577a575ad67517f","subject_content_hash":"98a43a94108ae106c67ec038400a24ca9921c8affe6e4950e16f0c94a5f3922c","subject_tree_hash":"5a2d03d6684b0704a7e970e504cc4fca81d81f08ca064a5f33b3362d51c2f5d4","subject_plugin_path":"skills/agentkitco/prove-it-ran","audit_payload_hash":"76e33c187f80fc238ba93f55b9c53947","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"743429f75b17204d47661a86b577a575ad67517f","contentHash":"98a43a94108ae106c67ec038400a24ca9921c8affe6e4950e16f0c94a5f3922c","treeHash":"5a2d03d6684b0704a7e970e504cc4fca81d81f08ca064a5f33b3362d51c2f5d4","pluginPath":"skills/agentkitco/prove-it-ran","auditPayloadHash":"76e33c187f80fc238ba93f55b9c53947"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/agentkitco-prove-it-ran/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}