{"data":{"skill":{"slug":"alexmacapple-synthese-multi-llm","name":"synthese-multi-llm","icon":"📦","repo":"https://github.com/Alexmacapple/Synthese-Council/tree/main/skills/synthese-multi-llm","status":"approved","author":"Alexmacapple","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"f94392d0-df15-4dd9-b4fb-1a47ca8d6f7e","skill_id":"bdadc5d1-75ac-4fb5-9cf6-6acadb73456d","version":3,"content_hash":"08e61b290087f92f17e949feb664f96f","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Legitimate multi-LLM synthesis tool. Capabilities align with stated purpose. Subprocess and network calls are documented and expected for calling external LLM services. Input sanitization and validation present. No malicious patterns detected.","remediation":[],"risk_factor_evidence":[{"factor":"scripts","evidence":[{"file":"scripts/synthese.py","line_end":1500,"line_start":1},{"file":"scripts/config.py","line_end":534,"line_start":1},{"file":"scripts/retry.py","line_end":611,"line_start":1}]},{"factor":"network","evidence":[{"file":"scripts/backends/anthropic_backend.py","line_end":321,"line_start":1},{"file":"wrappers/claude_wrapper.sh","line_end":50,"line_start":20},{"file":"wrappers/ollama_wrapper.sh","line_end":46,"line_start":40}]},{"factor":"filesystem","evidence":[{"file":"scripts/config.py","line_end":177,"line_start":175},{"file":"scripts/synthese.py","line_end":724,"line_start":634}]},{"factor":"env_access","evidence":[{"file":"scripts/backends/anthropic_backend.py","line_end":108,"line_start":106},{"file":"scripts/backends/cli_backend.py","line_end":152,"line_start":151}]},{"factor":"external_commands","evidence":[{"file":"scripts/synthese.py","line_end":89,"line_start":64},{"file":"scripts/backends/cli_backend.py","line_end":224,"line_start":127}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Subprocess execution for LLM calls","locations":[{"file":"scripts/synthese.py","line_end":70,"line_start":70}],"description":"The code executes subprocess calls to invoke external CLI commands (claude, gemini, codex). This is a legitimate capability for an LLM orchestration tool. Callers are hardcoded CLI tools, not user-controlled input. Code: `asyncio.create_subprocess_exec(*cmd)` at scripts/synthese.py:70"},{"title":"Network calls to external APIs","locations":[{"file":"wrappers/claude_wrapper.sh","line_end":50,"line_start":40}],"description":"The code makes HTTP requests to external LLM APIs (Anthropic, Ollama). Endpoints are documented and expected: https://api.anthropic.com/v1/messages and http://localhost:11434/api/generate. Required for core functionality."}],"dangerous_patterns":[],"files_scanned":14,"total_lines":4642,"audit_model":"claude","audited_at":"2026-01-10T10:15:14.019+00:00","created_at":"2026-01-13T06:46:55.024039+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":2,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}