{"data":{"skill":{"slug":"agentkitco-prove-it-ran","name":"prove-it-ran","icon":"📦","repo":"https://github.com/agentkitco/agentkit-dev-skills/tree/a5058856442fcb89bd538b1c01f94558488bfac3/skills/prove-it-ran","status":"approved","author":"agentkitco","authorVersion":"1.0","skillstoreRevision":1},"audit":{"id":"e669966f-1367-4b60-9047-5eb864c44221","skill_id":"a03abdff-1c80-4737-865d-8825e4aecadd","version":2,"content_hash":"v3:18efac79a818d7e997295839638fdd21906cfd1c:98a43a94108ae106c67ec038400a24ca9921c8affe6e4950e16f0c94a5f3922c:5a2d03d6684b0704a7e970e504cc4fca81d81f08ca064a5f33b3362d51c2f5d4:736b696c6c732f6167656e746b6974636f2f70726f76652d69742d72616e:3578fdc7e042f9da77cb3cb7d98ff3a5","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All six static findings are false positives: Markdown formatting, local verification commands, and reporting guidance do not establish malicious execution or reconnaissance. No evidence found of prompt injection, credential access, or data exfiltration in SKILL.md. The regression procedure temporarily changes source files, so users should preserve unrelated edits.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":35,"line_start":29}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":43,"audit_model":"codex","audited_at":"2026-10-22T19:21:55.936+00:00","created_at":"2026-10-22T22:25:42.6931+00:00","static_findings":[{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Check the exit code, not just the wording (`echo $?` right after the command, or the runner's summ","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. **Confirm it covers the change.** For a bug fix, the test must fail without the fix: temporarily ","category":"external_commands","line_end":22,"severity":"medium","line_start":22},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"5. **Check for silent skips.** Search output for `skipped`, `xfail`, `pending`, `todo`, and your own","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":35,"severity":"medium","line_start":29},{"id":"blocker:SKILL.md:25:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"7. **Report in a table** and be explicit about anything you did not or could not run.","category":"blocker","line_end":25,"severity":"low","line_start":25},{"id":"blocker:SKILL.md:39:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- \"Should work\" and \"looks right\" are not evidence. Replace them with a command and its output or sa","category":"blocker","line_end":39,"severity":"low","line_start":39}],"finding_verdicts":[{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The backticks format an inline Markdown example, echo $?, which reads the previous command status. This is routine verification, not Ruby execution or command injection.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"The Markdown example suggests temporarily stashing only the source fix, testing, and restoring it. This scoped regression workflow provides no evidence of malicious execution.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"Backticks delimit skip markers and a fixed ripgrep search for disabled tests. The command inspects local test text without executing matched content.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","reason":"Lines 29 through 35 contain a fenced Markdown table with illustrative verification results. The backticks are code fences, not executable shell substitutions.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:25:system-reconnaissance","reason":"Line 25 requests a table and honest disclosure of checks not run. It contains no system inspection command or reconnaissance instruction.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:39:system-reconnaissance","reason":"Line 39 requires command output as evidence or an admission that verification was not performed. This reporting rule does not request system reconnaissance.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"18efac79a818d7e997295839638fdd21906cfd1c","subject_content_hash":"98a43a94108ae106c67ec038400a24ca9921c8affe6e4950e16f0c94a5f3922c","subject_tree_hash":"5a2d03d6684b0704a7e970e504cc4fca81d81f08ca064a5f33b3362d51c2f5d4","subject_plugin_path":"skills/agentkitco/prove-it-ran","audit_payload_hash":"3578fdc7e042f9da77cb3cb7d98ff3a5","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"18efac79a818d7e997295839638fdd21906cfd1c","contentHash":"98a43a94108ae106c67ec038400a24ca9921c8affe6e4950e16f0c94a5f3922c","treeHash":"5a2d03d6684b0704a7e970e504cc4fca81d81f08ca064a5f33b3362d51c2f5d4","pluginPath":"skills/agentkitco/prove-it-ran","auditPayloadHash":"3578fdc7e042f9da77cb3cb7d98ff3a5"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/agentkitco-prove-it-ran/audits/2/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}