{"data":{"skill":{"slug":"ammarcodes-planning-with-files","name":"planning-with-files","icon":"📦","repo":"https://github.com/AmmarCodes/dotfiles/tree/master/opencode/skill/planning-with-files","status":"approved","author":"AmmarCodes","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"586ef012-b1ba-4fa4-956a-f870a4c6691d","skill_id":"4bf2a104-923c-45a1-b96d-bd827a619744","version":6,"content_hash":"b6aca88661478e9783953bb3d54cea1f","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis reported many command-execution patterns, weak-crypto indicators, a browser-storage reference, reconnaissance indicators, and one hardcoded URL. Manual review found these are markdown examples and documentation text, not executable code or instructions to exfiltrate data. The skill does encourage creating, reading, and editing local markdown files, so the main residual risk is expected filesystem use during workflow planning.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":17,"line_start":14},{"file":"SKILL.md","line_end":27,"line_start":21},{"file":"SKILL.md","line_end":138,"line_start":120},{"file":"reference.md","line_end":18,"line_start":13},{"file":"reference.md","line_end":94,"line_start":87},{"file":"examples.md","line_end":44,"line_start":40}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":56,"line_start":42},{"file":"examples.md","line_end":44,"line_start":40},{"file":"examples.md","line_end":53,"line_start":49},{"file":"examples.md","line_end":213,"line_start":194},{"file":"reference.md","line_end":94,"line_start":83}]},{"factor":"network","evidence":[{"file":"reference.md","line_end":116,"line_start":113},{"file":"examples.md","line_end":44,"line_start":40}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Filesystem-Oriented Workflow Instructions","verdict":"TRUE_POSITIVE","locations":[{"file":"SKILL.md","line_end":17,"line_start":14},{"file":"SKILL.md","line_end":27,"line_start":21},{"file":"SKILL.md","line_end":138,"line_start":120},{"file":"reference.md","line_end":94,"line_start":87}],"confidence":0.93,"description":"The skill intentionally asks the assistant to create, read, write, and edit local markdown files such as task_plan.md and notes.md. This is core functionality and not malicious, but users should expect filesystem changes in the working directory.","confidence_reasoning":"The source repeatedly instructs the assistant to use local markdown files for planning and notes. The behavior is explicit and legitimate for the skill purpose, with no evidence of unsafe file targets."},{"title":"Documentation Examples Mistaken for Shell Execution","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":56,"line_start":42},{"file":"examples.md","line_end":44,"line_start":40},{"file":"examples.md","line_end":53,"line_start":49},{"file":"examples.md","line_end":213,"line_start":194},{"file":"reference.md","line_end":94,"line_start":83}],"confidence":0.9,"description":"Static analysis flagged many fenced blocks as Ruby or shell backtick execution. Manual review shows they are human-readable workflow examples such as Read task_plan.md and Write notes.md, not executable scripts or command substitution.","confidence_reasoning":"The flagged text appears inside markdown documentation blocks and names assistant tool-like operations. No executable code file, shell invocation, or user-controlled command construction was found."},{"title":"External URL Used as Source Citation","verdict":"FALSE_POSITIVE","locations":[{"file":"reference.md","line_end":116,"line_start":113}],"confidence":0.88,"description":"The only hardcoded URL is a citation to Manus context engineering documentation. It does not instruct the assistant to send data to the URL or make an automatic network request.","confidence_reasoning":"The URL is under a Source heading and is presented as reference material. There is no nearby credential access, upload instruction, or automated request logic."},{"title":"Static Weak-Crypto and Browser-Storage Alerts Are Contextual False Positives","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":3,"line_start":1},{"file":"SKILL.md","line_end":67,"line_start":62},{"file":"reference.md","line_end":11,"line_start":1},{"file":"examples.md","line_end":136,"line_start":132}],"confidence":0.84,"description":"Weak-cryptography and browser-storage alerts come from prose and example planning notes, including markdown filename references and a dark mode example mentioning localStorage. No hashing implementation or sensitive browser data access is present.","confidence_reasoning":"The suspicious terms are embedded in markdown documentation and an illustrative UI planning example. I found no cryptographic operation, no credential handling, and no instruction to inspect real browser storage."}],"dangerous_patterns":[{"title":"False Positive: Fenced Workflow Blocks","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":36,"line_start":31},{"file":"SKILL.md","line_end":56,"line_start":42},{"file":"examples.md","line_end":13,"line_start":9},{"file":"examples.md","line_end":45,"line_start":40}],"confidence":0.91,"description":"Fenced blocks labeled bash or markdown describe assistant workflow operations and plan templates. They are not executable shell scripts and do not contain command chaining, downloads, or arbitrary code execution.","confidence_reasoning":"The patterns are markdown examples showing reads and writes to task files. They lack executable syntax that would run system commands in this repository."}],"files_scanned":3,"total_lines":531,"audit_model":"codex","audited_at":"2026-06-28T09:16:15.215+00:00","created_at":"2026-06-28T09:35:05.255703+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"low","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":3,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}