{"data":{"skill":{"slug":"agentkitco-safe-refactor","name":"safe-refactor","icon":"📦","repo":"https://github.com/agentkitco/agentkit-dev-skills/tree/a5058856442fcb89bd538b1c01f94558488bfac3/skills/safe-refactor","status":"approved","author":"agentkitco","authorVersion":"1.0","skillstoreRevision":1},"audit":{"id":"99b9a585-6b29-4cdf-98b3-7bd299093d0e","skill_id":"f6edd233-3e5b-42e7-a877-306095411178","version":2,"content_hash":"v3:18efac79a818d7e997295839638fdd21906cfd1c:27d94e586faa8e2d21e9d487b98aa131f22a8f58e27e3aa6d1bbb1e60598157f:2ac924be1ad8453ab10bcdd2226cc3c437f70dd7e7cca9a3fbc83fb0d88f3e3b:736b696c6c732f6167656e746b6974636f2f736166652d7265666163746f72:686558020e6b2cc3334109082aa7dde2","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: Markdown command references are not Ruby execution, and the completion report is not system reconnaissance. No evidence found of prompt injection, data exfiltration, or malicious intent in SKILL.md.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":24,"line_start":24}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":38,"audit_model":"codex","audited_at":"2026-10-22T19:27:59.207+00:00","created_at":"2026-10-22T22:26:07.847318+00:00","static_findings":[{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. **Check the blast radius.** Search for callers and dependents (`rg`), including tests, scripts, d","category":"external_commands","line_end":19,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **After every step** run the relevant tests plus type check or lint. If red, undo the step (`git r","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"blocker:SKILL.md:31:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Report: the steps taken, tests run and results, what you deliberately did not change, bugs or smells","category":"blocker","line_end":31,"severity":"low","line_start":31}],"finding_verdicts":[{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"Line 19 uses Markdown backticks around rg to recommend searching project callers and dependents. This is ordinary refactoring preparation, not Ruby execution or command injection.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"Line 24 uses Markdown backticks around git restore while directing the agent to undo only the failed refactoring step. No Ruby code, shell interpolation, or instruction to discard unrelated changes appears.","verdict":"false_positive","confidence":0.97},{"id":"blocker:SKILL.md:31:system-reconnaissance","reason":"Line 31 requests a summary of refactoring steps, test results, unchanged scope, and remaining uncertainty. It does not request host enumeration, credential collection, or system reconnaissance.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"18efac79a818d7e997295839638fdd21906cfd1c","subject_content_hash":"27d94e586faa8e2d21e9d487b98aa131f22a8f58e27e3aa6d1bbb1e60598157f","subject_tree_hash":"2ac924be1ad8453ab10bcdd2226cc3c437f70dd7e7cca9a3fbc83fb0d88f3e3b","subject_plugin_path":"skills/agentkitco/safe-refactor","audit_payload_hash":"686558020e6b2cc3334109082aa7dde2","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"18efac79a818d7e997295839638fdd21906cfd1c","contentHash":"27d94e586faa8e2d21e9d487b98aa131f22a8f58e27e3aa6d1bbb1e60598157f","treeHash":"2ac924be1ad8453ab10bcdd2226cc3c437f70dd7e7cca9a3fbc83fb0d88f3e3b","pluginPath":"skills/agentkitco/safe-refactor","auditPayloadHash":"686558020e6b2cc3334109082aa7dde2"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/agentkitco-safe-refactor/audits/2/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}