{"data":{"skill":{"slug":"allra-fintech-allra-api-design","name":"allra-api-design","icon":"📦","repo":"https://github.com/Allra-Fintech/allra-ai-skills/tree/main/backend-plugin/skills/api-design","status":"approved","author":"Allra-Fintech","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"41b7cfe1-caf6-41c3-8b07-41744aac6b70","skill_id":"9a799613-bb16-49dd-b70e-fef9899edea7","version":5,"content_hash":"0bfa6641aed0892608fcb80a29e2decd","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Pure documentation skill containing only API design guidelines. Static scanner produced false positives: 36 'weak cryptographic algorithm' flags are Java 'record' class definitions; 31 'shell backtick execution' flags are markdown code formatting; 5 'system reconnaissance' flags are Spring @PathVariable annotations. No executable code, network access, file system access, or external commands.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":32,"line_start":24},{"file":"SKILL.md","line_end":34,"line_start":32},{"file":"SKILL.md","line_end":34,"line_start":34},{"file":"SKILL.md","line_end":34,"line_start":34},{"file":"SKILL.md","line_end":38,"line_start":34},{"file":"SKILL.md","line_end":55,"line_start":38},{"file":"SKILL.md","line_end":61,"line_start":55},{"file":"SKILL.md","line_end":62,"line_start":61},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":63,"line_start":62},{"file":"SKILL.md","line_end":64,"line_start":63},{"file":"SKILL.md","line_end":64,"line_start":64},{"file":"SKILL.md","line_end":68,"line_start":64},{"file":"SKILL.md","line_end":71,"line_start":68},{"file":"SKILL.md","line_end":71,"line_start":71},{"file":"SKILL.md","line_end":77,"line_start":71},{"file":"SKILL.md","line_end":96,"line_start":77},{"file":"SKILL.md","line_end":102,"line_start":96},{"file":"SKILL.md","line_end":137,"line_start":102},{"file":"SKILL.md","line_end":139,"line_start":137},{"file":"SKILL.md","line_end":145,"line_start":139},{"file":"SKILL.md","line_end":158,"line_start":145},{"file":"SKILL.md","line_end":165,"line_start":158},{"file":"SKILL.md","line_end":170,"line_start":165},{"file":"SKILL.md","line_end":173,"line_start":170},{"file":"SKILL.md","line_end":181,"line_start":173},{"file":"SKILL.md","line_end":199,"line_start":181},{"file":"SKILL.md","line_end":236,"line_start":199},{"file":"SKILL.md","line_end":240,"line_start":236},{"file":"SKILL.md","line_end":257,"line_start":240},{"file":"SKILL.md","line_end":268,"line_start":257}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":446,"audit_model":"claude","audited_at":"2026-01-16T15:11:09.995+00:00","created_at":"2026-01-21T01:48:29.377407+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}