{"data":{"skill":{"slug":"ariegoldkin-api-design-framework","name":"api-design-framework","icon":"📦","repo":"https://github.com/ArieGoldkin/ai-agent-hub/tree/main/skills/api-design-framework","status":"approved","author":"AI Agent Hub","authorVersion":"1.0.0","skillstoreRevision":2},"audit":{"id":"6f3e4d18-7b3d-420f-9b18-cd273a996c19","skill_id":"58093d06-794a-40c5-aa05-c0b72340ae0b","version":9,"content_hash":"v3:89edfdc710d0846129dcee6a929477b04f08052c:05bdef2f1ba0918d9d432ccb595c40f171a18dc7f2f8dacaab446f241bfcba94:de612f2a83650b67f57f4aad8cef64674da5ccb979fcf3d31eb6a25d3d3d3284:736b696c6c732f61726965676f6c646b696e2f6170692d64657369676e2d6672616d65776f726b:1259e471d0a03d6dcf6622aeeb88efec","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 113 static findings are false positives caused by Markdown backticks, API identifiers, and illustrative URLs in documentation and templates. The files contain no executable commands, runtime network requests, system reconnaissance instructions, or prompt injection text. No semantic security issue was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":67,"line_start":59},{"file":"SKILL.md","line_end":70,"line_start":67},{"file":"SKILL.md","line_end":77,"line_start":70},{"file":"SKILL.md","line_end":80,"line_start":77},{"file":"SKILL.md","line_end":88,"line_start":80},{"file":"SKILL.md","line_end":94,"line_start":88},{"file":"SKILL.md","line_end":95,"line_start":94},{"file":"SKILL.md","line_end":96,"line_start":95},{"file":"SKILL.md","line_end":97,"line_start":96},{"file":"SKILL.md","line_end":98,"line_start":97},{"file":"SKILL.md","line_end":99,"line_start":98},{"file":"SKILL.md","line_end":100,"line_start":99},{"file":"SKILL.md","line_end":108,"line_start":100},{"file":"SKILL.md","line_end":131,"line_start":108},{"file":"SKILL.md","line_end":140,"line_start":131},{"file":"SKILL.md","line_end":143,"line_start":140},{"file":"SKILL.md","line_end":156,"line_start":143},{"file":"SKILL.md","line_end":159,"line_start":156},{"file":"SKILL.md","line_end":183,"line_start":159},{"file":"SKILL.md","line_end":188,"line_start":183},{"file":"SKILL.md","line_end":199,"line_start":188},{"file":"SKILL.md","line_end":205,"line_start":199},{"file":"SKILL.md","line_end":218,"line_start":205},{"file":"SKILL.md","line_end":226,"line_start":218},{"file":"SKILL.md","line_end":229,"line_start":226},{"file":"SKILL.md","line_end":232,"line_start":229},{"file":"SKILL.md","line_end":236,"line_start":232},{"file":"SKILL.md","line_end":239,"line_start":236},{"file":"SKILL.md","line_end":242,"line_start":239},{"file":"SKILL.md","line_end":247,"line_start":242},{"file":"SKILL.md","line_end":253,"line_start":247},{"file":"SKILL.md","line_end":256,"line_start":253},{"file":"SKILL.md","line_end":262,"line_start":256},{"file":"SKILL.md","line_end":265,"line_start":262},{"file":"SKILL.md","line_end":270,"line_start":265},{"file":"SKILL.md","line_end":277,"line_start":270},{"file":"SKILL.md","line_end":294,"line_start":277},{"file":"SKILL.md","line_end":299,"line_start":294},{"file":"SKILL.md","line_end":302,"line_start":299},{"file":"SKILL.md","line_end":305,"line_start":302},{"file":"SKILL.md","line_end":308,"line_start":305},{"file":"SKILL.md","line_end":311,"line_start":308},{"file":"SKILL.md","line_end":314,"line_start":311},{"file":"SKILL.md","line_end":323,"line_start":314},{"file":"SKILL.md","line_end":330,"line_start":323},{"file":"SKILL.md","line_end":333,"line_start":330},{"file":"SKILL.md","line_end":355,"line_start":333},{"file":"SKILL.md","line_end":358,"line_start":355},{"file":"SKILL.md","line_end":379,"line_start":358},{"file":"SKILL.md","line_end":384,"line_start":379}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":616,"line_start":616},{"file":"templates/asyncapi-template.yaml","line_end":80,"line_start":80},{"file":"templates/asyncapi-template.yaml","line_end":17,"line_start":17},{"file":"templates/asyncapi-template.yaml","line_end":21,"line_start":21},{"file":"templates/asyncapi-template.yaml","line_end":542,"line_start":542},{"file":"templates/openapi-template.yaml","line_end":22,"line_start":22},{"file":"templates/openapi-template.yaml","line_end":26,"line_start":26},{"file":"templates/openapi-template.yaml","line_end":28,"line_start":28},{"file":"templates/openapi-template.yaml","line_end":31,"line_start":31},{"file":"templates/openapi-template.yaml","line_end":33,"line_start":33},{"file":"templates/openapi-template.yaml","line_end":35,"line_start":35},{"file":"templates/openapi-template.yaml","line_end":308,"line_start":308},{"file":"templates/openapi-template.yaml","line_end":344,"line_start":344},{"file":"templates/openapi-template.yaml","line_end":370,"line_start":370}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":4,"total_lines":2047,"audit_model":"codex","audited_at":"2026-07-23T05:35:46.847+00:00","created_at":"2026-07-24T07:16:11.571587+00:00","static_findings":[{"id":"blocker:checklists/api-design-checklist.md:247:system-reconnaissance","file":"checklists/api-design-checklist.md","pattern":"System reconnaissance","snippet":"## Common API Anti-Patterns to Avoid","category":"blocker","line_end":249,"severity":"low","line_start":247},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":67,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":70,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":77,"severity":"medium","line_start":70},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":80,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":88,"severity":"medium","line_start":80},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":94,"severity":"medium","line_start":88},{"id":"external_commands:SKILL.md:94:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **GET** | Retrieve resource(s) | Yes | Yes | `GET /users/123` |","category":"external_commands","line_end":95,"severity":"medium","line_start":94},{"id":"external_commands:SKILL.md:95:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **POST** | Create resource | No | No | `POST /users` |","category":"external_commands","line_end":96,"severity":"medium","line_start":95},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **PUT** | Replace entire resource | Yes | No | `PUT /users/123` |","category":"external_commands","line_end":97,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:97:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **PATCH** | Partial update | No* | No | `PATCH /users/123` |","category":"external_commands","line_end":98,"severity":"medium","line_start":97},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **DELETE** | Remove resource | Yes | No | `DELETE /users/123` |","category":"external_commands","line_end":99,"severity":"medium","line_start":98},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **HEAD** | Metadata only (no body) | Yes | Yes | `HEAD /users/123` |","category":"external_commands","line_end":100,"severity":"medium","line_start":99},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **OPTIONS** | Allowed methods | Yes | Yes | `OPTIONS /users` |","category":"external_commands","line_end":108,"severity":"medium","line_start":100},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **201 Created**: Successful POST (include `Location` header)","category":"external_commands","line_end":131,"severity":"medium","line_start":108},{"id":"external_commands:SKILL.md:131:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":140,"severity":"medium","line_start":131},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":143,"severity":"medium","line_start":140},{"id":"external_commands:SKILL.md:143:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":156,"severity":"medium","line_start":143},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":159,"severity":"medium","line_start":156},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":183,"severity":"medium","line_start":159},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":188,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":199,"severity":"medium","line_start":188},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":205,"severity":"medium","line_start":199},{"id":"external_commands:SKILL.md:205:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":218,"severity":"medium","line_start":205},{"id":"external_commands:SKILL.md:218:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":226,"severity":"medium","line_start":218},{"id":"external_commands:SKILL.md:226:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":229,"severity":"medium","line_start":226},{"id":"external_commands:SKILL.md:229:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":232,"severity":"medium","line_start":229},{"id":"external_commands:SKILL.md:232:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":236,"severity":"medium","line_start":232},{"id":"external_commands:SKILL.md:236:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":239,"severity":"medium","line_start":236},{"id":"external_commands:SKILL.md:239:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":242,"severity":"medium","line_start":239},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":247,"severity":"medium","line_start":242},{"id":"external_commands:SKILL.md:247:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":253,"severity":"medium","line_start":247},{"id":"external_commands:SKILL.md:253:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":256,"severity":"medium","line_start":253},{"id":"external_commands:SKILL.md:256:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":262,"severity":"medium","line_start":256},{"id":"external_commands:SKILL.md:262:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":265,"severity":"medium","line_start":262},{"id":"external_commands:SKILL.md:265:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":270,"severity":"medium","line_start":265},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":277,"severity":"medium","line_start":270},{"id":"external_commands:SKILL.md:277:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":294,"severity":"medium","line_start":277},{"id":"external_commands:SKILL.md:294:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":299,"severity":"medium","line_start":294},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":302,"severity":"medium","line_start":299},{"id":"external_commands:SKILL.md:302:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":305,"severity":"medium","line_start":302},{"id":"external_commands:SKILL.md:305:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":308,"severity":"medium","line_start":305},{"id":"external_commands:SKILL.md:308:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":311,"severity":"medium","line_start":308},{"id":"external_commands:SKILL.md:311:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":314,"severity":"medium","line_start":311},{"id":"external_commands:SKILL.md:314:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":323,"severity":"medium","line_start":314},{"id":"external_commands:SKILL.md:323:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```graphql","category":"external_commands","line_end":330,"severity":"medium","line_start":323},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":333,"severity":"medium","line_start":330},{"id":"external_commands:SKILL.md:333:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```graphql","category":"external_commands","line_end":355,"severity":"medium","line_start":333},{"id":"external_commands:SKILL.md:355:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":358,"severity":"medium","line_start":355},{"id":"external_commands:SKILL.md:358:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```graphql","category":"external_commands","line_end":379,"severity":"medium","line_start":358},{"id":"external_commands:SKILL.md:379:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":384,"severity":"medium","line_start":379},{"id":"external_commands:SKILL.md:384:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```graphql","category":"external_commands","line_end":396,"severity":"medium","line_start":384},{"id":"external_commands:SKILL.md:396:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":399,"severity":"medium","line_start":396},{"id":"external_commands:SKILL.md:399:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```graphql","category":"external_commands","line_end":419,"severity":"medium","line_start":399},{"id":"external_commands:SKILL.md:419:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":424,"severity":"medium","line_start":419},{"id":"external_commands:SKILL.md:424:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```graphql","category":"external_commands","line_end":433,"severity":"medium","line_start":424},{"id":"external_commands:SKILL.md:433:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":436,"severity":"medium","line_start":433},{"id":"external_commands:SKILL.md:436:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":451,"severity":"medium","line_start":436},{"id":"external_commands:SKILL.md:451:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":460,"severity":"medium","line_start":451},{"id":"external_commands:SKILL.md:460:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```protobuf","category":"external_commands","line_end":535,"severity":"medium","line_start":460},{"id":"external_commands:SKILL.md:535:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":540,"severity":"medium","line_start":535},{"id":"external_commands:SKILL.md:540:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```go","category":"external_commands","line_end":550,"severity":"medium","line_start":540},{"id":"external_commands:SKILL.md:550:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":558,"severity":"medium","line_start":550},{"id":"external_commands:SKILL.md:558:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `/templates/openapi-template.yaml` for complete example.","category":"external_commands","line_end":571,"severity":"medium","line_start":558},{"id":"external_commands:SKILL.md:571:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `/templates/asyncapi-template.yaml` for complete example.","category":"external_commands","line_end":578,"severity":"medium","line_start":571},{"id":"external_commands:SKILL.md:578:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":583,"severity":"medium","line_start":578},{"id":"external_commands:SKILL.md:583:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":587,"severity":"medium","line_start":583},{"id":"external_commands:SKILL.md:587:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":597,"severity":"medium","line_start":587},{"id":"external_commands:SKILL.md:597:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":601,"severity":"medium","line_start":597},{"id":"external_commands:SKILL.md:601:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":604,"severity":"medium","line_start":601},{"id":"external_commands:SKILL.md:604:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":607,"severity":"medium","line_start":604},{"id":"external_commands:SKILL.md:607:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":611,"severity":"medium","line_start":607},{"id":"external_commands:SKILL.md:611:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":615,"severity":"medium","line_start":611},{"id":"external_commands:SKILL.md:615:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":624,"severity":"medium","line_start":615},{"id":"external_commands:SKILL.md:624:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":631,"severity":"medium","line_start":624},{"id":"external_commands:SKILL.md:631:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":634,"severity":"medium","line_start":631},{"id":"external_commands:SKILL.md:634:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":637,"severity":"medium","line_start":634},{"id":"external_commands:SKILL.md:637:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":640,"severity":"medium","line_start":637},{"id":"external_commands:SKILL.md:640:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":643,"severity":"medium","line_start":640},{"id":"external_commands:SKILL.md:643:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":646,"severity":"medium","line_start":643},{"id":"external_commands:SKILL.md:646:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":649,"severity":"medium","line_start":646},{"id":"external_commands:SKILL.md:649:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":652,"severity":"medium","line_start":649},{"id":"external_commands:SKILL.md:652:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":655,"severity":"medium","line_start":652},{"id":"external_commands:SKILL.md:655:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":658,"severity":"medium","line_start":655},{"id":"network:SKILL.md:616:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"POST https://client.example.com/webhook","category":"network","line_end":616,"severity":"low","line_start":616},{"id":"blocker:SKILL.md:113:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **400 Bad Request**: Invalid request body or parameters","category":"blocker","line_end":113,"severity":"low","line_start":113},{"id":"blocker:SKILL.md:114:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **401 Unauthorized**: Missing or invalid authentication","category":"blocker","line_end":114,"severity":"low","line_start":114},{"id":"blocker:SKILL.md:310:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**Basic Auth (avoid for production):**","category":"blocker","line_end":310,"severity":"low","line_start":310},{"id":"blocker:SKILL.md:387:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"id","category":"blocker","line_end":388,"severity":"low","line_start":387},{"id":"blocker:SKILL.md:391:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"id","category":"blocker","line_end":392,"severity":"low","line_start":391},{"id":"blocker:SKILL.md:408:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"id","category":"blocker","line_end":409,"severity":"low","line_start":408},{"id":"blocker:SKILL.md:491:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"string id = 1;","category":"blocker","line_end":491,"severity":"low","line_start":491},{"id":"blocker:SKILL.md:507:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"string id = 1;","category":"blocker","line_end":507,"severity":"low","line_start":507},{"id":"blocker:SKILL.md:543:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"// INVALID_ARGUMENT: Invalid request (400 equivalent)","category":"blocker","line_end":543,"severity":"low","line_start":543},{"id":"network:templates/asyncapi-template.yaml:80:python-http-libraries","file":"templates/asyncapi-template.yaml","pattern":"Python HTTP libraries","snippet":"address: notification.requests.v1","category":"network","line_end":80,"severity":"low","line_start":80},{"id":"network:templates/asyncapi-template.yaml:17:hardcoded-url","file":"templates/asyncapi-template.yaml","pattern":"Hardcoded URL","snippet":"url: https://api.example.com/support","category":"network","line_end":17,"severity":"low","line_start":17},{"id":"network:templates/asyncapi-template.yaml:21:hardcoded-url","file":"templates/asyncapi-template.yaml","pattern":"Hardcoded URL","snippet":"url: https://opensource.org/licenses/MIT","category":"network","line_end":21,"severity":"low","line_start":21},{"id":"network:templates/asyncapi-template.yaml:542:hardcoded-url","file":"templates/asyncapi-template.yaml","pattern":"Hardcoded URL","snippet":"url: https://docs.example.com/async-api","category":"network","line_end":542,"severity":"low","line_start":542},{"id":"network:templates/openapi-template.yaml:22:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"url: https://api.company.com/support","category":"network","line_end":22,"severity":"low","line_start":22},{"id":"network:templates/openapi-template.yaml:26:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"url: https://opensource.org/licenses/MIT","category":"network","line_end":26,"severity":"low","line_start":26},{"id":"network:templates/openapi-template.yaml:28:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"termsOfService: https://company.com/terms","category":"network","line_end":28,"severity":"low","line_start":28},{"id":"network:templates/openapi-template.yaml:31:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"- url: https://api.company.com/v1","category":"network","line_end":31,"severity":"low","line_start":31},{"id":"network:templates/openapi-template.yaml:33:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"- url: https://api-staging.company.com/v1","category":"network","line_end":33,"severity":"low","line_start":33},{"id":"network:templates/openapi-template.yaml:35:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"- url: http://localhost:3000/v1","category":"network","line_end":35,"severity":"low","line_start":35},{"id":"network:templates/openapi-template.yaml:308:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"example: \"https://cdn.example.com/avatars/jane.jpg\"","category":"network","line_end":308,"severity":"low","line_start":308},{"id":"network:templates/openapi-template.yaml:344:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"example: \"https://cdn.example.com/avatars/jane.jpg\"","category":"network","line_end":344,"severity":"low","line_start":344},{"id":"network:templates/openapi-template.yaml:370:hardcoded-url","file":"templates/openapi-template.yaml","pattern":"Hardcoded URL","snippet":"example: \"https://cdn.example.com/avatars/jane-new.jpg\"","category":"network","line_end":370,"severity":"low","line_start":370},{"id":"blocker:templates/openapi-template.yaml:222:system-reconnaissance","file":"templates/openapi-template.yaml","pattern":"System reconnaissance","snippet":"format: uuid","category":"blocker","line_end":223,"severity":"low","line_start":222},{"id":"blocker:templates/openapi-template.yaml:270:system-reconnaissance","file":"templates/openapi-template.yaml","pattern":"System reconnaissance","snippet":"- id","category":"blocker","line_end":271,"severity":"low","line_start":270},{"id":"blocker:templates/openapi-template.yaml:278:system-reconnaissance","file":"templates/openapi-template.yaml","pattern":"System reconnaissance","snippet":"format: uuid","category":"blocker","line_end":279,"severity":"low","line_start":278},{"id":"blocker:templates/openapi-template.yaml:446:system-reconnaissance","file":"templates/openapi-template.yaml","pattern":"System reconnaissance","snippet":"description: Authentication required or token invalid","category":"blocker","line_end":447,"severity":"low","line_start":446},{"id":"blocker:templates/openapi-template.yaml:472:system-reconnaissance","file":"templates/openapi-template.yaml","pattern":"System reconnaissance","snippet":"description: Invalid request","category":"blocker","line_end":472,"severity":"low","line_start":472},{"id":"blocker:templates/openapi-template.yaml:480:system-reconnaissance","file":"templates/openapi-template.yaml","pattern":"System reconnaissance","snippet":"message: \"Invalid request body\"","category":"blocker","line_end":480,"severity":"low","line_start":480}],"finding_verdicts":[{"id":"blocker:checklists/api-design-checklist.md:247:system-reconnaissance","reason":"This is a heading for documented API anti-patterns and corrective design advice. It does not direct the agent to inspect a host or collect system information.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:94:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:95:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:97:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:131:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:143:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:205:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:218:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:226:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:229:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:232:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:236:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:239:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:247:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:253:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:256:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:262:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:265:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:277:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:294:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:302:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:305:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:308:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:311:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:314:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:323:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:333:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:355:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:358:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:379:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:384:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:396:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:399:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:419:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:424:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:433:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:436:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:451:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:460:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:535:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:540:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:550:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:558:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:571:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:578:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:583:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:587:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:597:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:601:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:604:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:607:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:611:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:615:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:624:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:631:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:634:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:637:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:640:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:643:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:646:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:649:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:652:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:655:ruby-shell-backtick-execution","reason":"The detected backticks are Markdown formatting around API examples and template references. They do not execute Ruby, a shell, or any external command.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:616:hardcoded-url","reason":"The URL is a reserved example.com webhook target shown as documentation. The Markdown does not issue a request or instruct automatic network access.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:113:system-reconnaissance","reason":"This line documents a standard HTTP client-error status and its meaning. It contains no system discovery or host inspection instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:114:system-reconnaissance","reason":"This line documents a standard HTTP client-error status and its meaning. It contains no system discovery or host inspection instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:310:system-reconnaissance","reason":"This line labels Basic Authentication as unsuitable for production before showing an HTTP example. It does not request system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:387:system-reconnaissance","reason":"The matched text is an id field selected in a GraphQL query example. It does not inspect the local system or enumerate resources.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:391:system-reconnaissance","reason":"The matched text is an id field selected in a GraphQL query example. It does not inspect the local system or enumerate resources.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:408:system-reconnaissance","reason":"The matched text is an id field selected in a GraphQL query example. It does not inspect the local system or enumerate resources.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:491:system-reconnaissance","reason":"The matched text declares an id field in a Protocol Buffers example. It is data-model documentation, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:507:system-reconnaissance","reason":"The matched text declares an id field in a Protocol Buffers example. It is data-model documentation, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:543:system-reconnaissance","reason":"This is a comment mapping a standard gRPC status to an HTTP equivalent. It does not inspect system state or execute discovery commands.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/asyncapi-template.yaml:80:python-http-libraries","reason":"The word requests appears inside the AsyncAPI channel address notification.requests.v1. It is not an import or call to a Python HTTP library.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/asyncapi-template.yaml:17:hardcoded-url","reason":"The URL is passive contact, license, or external-documentation metadata in an AsyncAPI example. The template contains no client code that contacts it.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/asyncapi-template.yaml:21:hardcoded-url","reason":"The URL is passive contact, license, or external-documentation metadata in an AsyncAPI example. The template contains no client code that contacts it.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/asyncapi-template.yaml:542:hardcoded-url","reason":"The URL is passive contact, license, or external-documentation metadata in an AsyncAPI example. The template contains no client code that contacts it.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:22:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:26:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:28:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:31:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:33:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:35:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:308:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:344:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:templates/openapi-template.yaml:370:hardcoded-url","reason":"The URL is passive metadata, a server placeholder, or example field value in an OpenAPI template. Declaring it does not perform a network request.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/openapi-template.yaml:222:system-reconnaissance","reason":"The match is an OpenAPI UUID format declaration for an identifier. It is schema metadata and performs no system inspection.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/openapi-template.yaml:270:system-reconnaissance","reason":"The match lists id as a required OpenAPI schema property. It does not enumerate local or remote system resources.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/openapi-template.yaml:278:system-reconnaissance","reason":"The match is an OpenAPI UUID format declaration for an identifier. It is schema metadata and performs no system inspection.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/openapi-template.yaml:446:system-reconnaissance","reason":"The match documents a standard API error response in an OpenAPI template. It contains no reconnaissance action or instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/openapi-template.yaml:472:system-reconnaissance","reason":"The match documents a standard API error response in an OpenAPI template. It contains no reconnaissance action or instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/openapi-template.yaml:480:system-reconnaissance","reason":"The match documents a standard API error response in an OpenAPI template. It contains no reconnaissance action or instruction.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"89edfdc710d0846129dcee6a929477b04f08052c","subject_content_hash":"05bdef2f1ba0918d9d432ccb595c40f171a18dc7f2f8dacaab446f241bfcba94","subject_tree_hash":"de612f2a83650b67f57f4aad8cef64674da5ccb979fcf3d31eb6a25d3d3d3284","subject_plugin_path":"skills/ariegoldkin/api-design-framework","audit_payload_hash":"1259e471d0a03d6dcf6622aeeb88efec","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"89edfdc710d0846129dcee6a929477b04f08052c","contentHash":"05bdef2f1ba0918d9d432ccb595c40f171a18dc7f2f8dacaab446f241bfcba94","treeHash":"de612f2a83650b67f57f4aad8cef64674da5ccb979fcf3d31eb6a25d3d3d3284","pluginPath":"skills/ariegoldkin/api-design-framework","auditPayloadHash":"1259e471d0a03d6dcf6622aeeb88efec"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/ariegoldkin-api-design-framework/audits/9/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}