{"data":{"skill":{"slug":"ariegoldkin-code-review-playbook","name":"code-review-playbook","icon":"📦","repo":"https://github.com/ArieGoldkin/ai-agent-hub/tree/main/skills/code-review-playbook","status":"approved","author":"AI Agent Hub","authorVersion":"1.0.0","skillstoreRevision":2},"audit":{"id":"298cb25c-19f0-417d-b32d-3550d88d3896","skill_id":"3d817aef-a26f-47a3-9a24-4f76bcd6ac80","version":9,"content_hash":"v3:89edfdc710d0846129dcee6a929477b04f08052c:d27150a7c905f34b25bf421ff68cf8255fe2ff456d71229d17a2f38204bdc379:2bd636cc8813170caeb67263e44376bedf392d8255677baf91342527263a08e3:736b696c6c732f61726965676f6c646b696e2f636f64652d7265766965772d706c6179626f6f6b:d6e03699045e8d52fdc543b3fb291304","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 64 static findings are false positives caused by prose, Markdown formatting, TypeScript examples, or a documentation link. No prompt injection, command execution, reconnaissance, data exfiltration, or unsafe network behavior was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":74,"line_start":70},{"file":"SKILL.md","line_end":105,"line_start":74},{"file":"SKILL.md","line_end":116,"line_start":105},{"file":"SKILL.md","line_end":117,"line_start":116},{"file":"SKILL.md","line_end":119,"line_start":117},{"file":"SKILL.md","line_end":127,"line_start":119},{"file":"SKILL.md","line_end":135,"line_start":127},{"file":"SKILL.md","line_end":148,"line_start":135},{"file":"SKILL.md","line_end":152,"line_start":148},{"file":"SKILL.md","line_end":154,"line_start":152},{"file":"SKILL.md","line_end":161,"line_start":154},{"file":"SKILL.md","line_end":164,"line_start":161},{"file":"SKILL.md","line_end":165,"line_start":164},{"file":"SKILL.md","line_end":287,"line_start":165},{"file":"SKILL.md","line_end":288,"line_start":287},{"file":"SKILL.md","line_end":298,"line_start":288},{"file":"SKILL.md","line_end":299,"line_start":298},{"file":"SKILL.md","line_end":337,"line_start":299},{"file":"SKILL.md","line_end":340,"line_start":337},{"file":"SKILL.md","line_end":341,"line_start":340},{"file":"SKILL.md","line_end":344,"line_start":341},{"file":"SKILL.md","line_end":350,"line_start":344},{"file":"SKILL.md","line_end":351,"line_start":350},{"file":"SKILL.md","line_end":361,"line_start":351},{"file":"SKILL.md","line_end":363,"line_start":361},{"file":"SKILL.md","line_end":385,"line_start":363},{"file":"SKILL.md","line_end":397,"line_start":385},{"file":"SKILL.md","line_end":406,"line_start":397},{"file":"SKILL.md","line_end":408,"line_start":406},{"file":"SKILL.md","line_end":408,"line_start":408},{"file":"SKILL.md","line_end":417,"line_start":410},{"file":"SKILL.md","line_end":419,"line_start":417},{"file":"SKILL.md","line_end":451,"line_start":419},{"file":"SKILL.md","line_end":491,"line_start":451},{"file":"SKILL.md","line_end":495,"line_start":491},{"file":"SKILL.md","line_end":531,"line_start":495},{"file":"SKILL.md","line_end":600,"line_start":531},{"file":"SKILL.md","line_end":627,"line_start":600},{"file":"SKILL.md","line_end":657,"line_start":649},{"file":"SKILL.md","line_end":663,"line_start":657},{"file":"SKILL.md","line_end":703,"line_start":663},{"file":"SKILL.md","line_end":709,"line_start":703},{"file":"SKILL.md","line_end":734,"line_start":709},{"file":"SKILL.md","line_end":758,"line_start":752},{"file":"SKILL.md","line_end":764,"line_start":758},{"file":"SKILL.md","line_end":809,"line_start":764},{"file":"SKILL.md","line_end":815,"line_start":809},{"file":"SKILL.md","line_end":857,"line_start":815},{"file":"SKILL.md","line_end":863,"line_start":857},{"file":"SKILL.md","line_end":873,"line_start":863}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":598,"line_start":598}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":4,"total_lines":1983,"audit_model":"codex","audited_at":"2026-07-23T05:55:02.801+00:00","created_at":"2026-07-24T07:33:56.53783+00:00","static_findings":[{"id":"blocker:checklists/code-review-checklist.md:60:network-reconnaissance","file":"checklists/code-review-checklist.md","pattern":"Network reconnaissance","snippet":"### Correctness","category":"blocker","line_end":62,"severity":"low","line_start":60},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":74,"severity":"medium","line_start":70},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":105,"severity":"medium","line_start":74},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":116,"severity":"medium","line_start":105},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"This variable is never reassigned, so `const` would be more appropriate:","category":"external_commands","line_end":117,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":119,"severity":"medium","line_start":117},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":127,"severity":"medium","line_start":119},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":135,"severity":"medium","line_start":127},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":148,"severity":"medium","line_start":135},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"The `/api/admin/users` endpoint is missing authentication middleware.","category":"external_commands","line_end":152,"severity":"medium","line_start":148},{"id":"external_commands:SKILL.md:152:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":154,"severity":"medium","line_start":152},{"id":"external_commands:SKILL.md:154:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":161,"severity":"medium","line_start":154},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":164,"severity":"medium","line_start":161},{"id":"external_commands:SKILL.md:164:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":165,"severity":"medium","line_start":164},{"id":"external_commands:SKILL.md:165:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":287,"severity":"medium","line_start":165},{"id":"external_commands:SKILL.md:287:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] **Type Safety**: TypeScript types are specific (not `any`)","category":"external_commands","line_end":288,"severity":"medium","line_start":287},{"id":"external_commands:SKILL.md:288:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] **Nullability**: Null checks where needed (`?.` operator)","category":"external_commands","line_end":298,"severity":"medium","line_start":288},{"id":"external_commands:SKILL.md:298:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] **Context Managers**: Using `with` for file/connection handling","category":"external_commands","line_end":299,"severity":"medium","line_start":298},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] **Exception Handling**: Specific exceptions caught (not bare `except:`)","category":"external_commands","line_end":337,"severity":"medium","line_start":299},{"id":"external_commands:SKILL.md:337:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":340,"severity":"medium","line_start":337},{"id":"external_commands:SKILL.md:340:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"If `getUserById()` returns null (user not found), this will throw:","category":"external_commands","line_end":341,"severity":"medium","line_start":340},{"id":"external_commands:SKILL.md:341:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`Cannot read property 'email' of null`","category":"external_commands","line_end":344,"severity":"medium","line_start":341},{"id":"external_commands:SKILL.md:344:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":350,"severity":"medium","line_start":344},{"id":"external_commands:SKILL.md:350:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":351,"severity":"medium","line_start":350},{"id":"external_commands:SKILL.md:351:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":361,"severity":"medium","line_start":351},{"id":"external_commands:SKILL.md:361:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":363,"severity":"medium","line_start":361},{"id":"external_commands:SKILL.md:363:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":385,"severity":"medium","line_start":363},{"id":"external_commands:SKILL.md:385:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":397,"severity":"medium","line_start":385},{"id":"external_commands:SKILL.md:397:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":406,"severity":"medium","line_start":397},{"id":"external_commands:SKILL.md:406:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":408,"severity":"medium","line_start":406},{"id":"external_commands:SKILL.md:408:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"nitpick: Rename this variable to `userInfo` instead of `userData`","category":"external_commands","line_end":408,"severity":"medium","line_start":408},{"id":"external_commands:SKILL.md:410:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":417,"severity":"medium","line_start":410},{"id":"external_commands:SKILL.md:417:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":419,"severity":"medium","line_start":417},{"id":"external_commands:SKILL.md:419:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":451,"severity":"medium","line_start":419},{"id":"external_commands:SKILL.md:451:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":491,"severity":"medium","line_start":451},{"id":"external_commands:SKILL.md:491:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":495,"severity":"medium","line_start":491},{"id":"external_commands:SKILL.md:495:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":531,"severity":"medium","line_start":495},{"id":"external_commands:SKILL.md:531:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":600,"severity":"medium","line_start":531},{"id":"external_commands:SKILL.md:600:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":627,"severity":"medium","line_start":600},{"id":"external_commands:SKILL.md:649:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`","category":"external_commands","line_end":657,"severity":"medium","line_start":649},{"id":"external_commands:SKILL.md:657:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":663,"severity":"medium","line_start":657},{"id":"external_commands:SKILL.md:663:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":703,"severity":"medium","line_start":663},{"id":"external_commands:SKILL.md:703:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":709,"severity":"medium","line_start":703},{"id":"external_commands:SKILL.md:709:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":734,"severity":"medium","line_start":709},{"id":"external_commands:SKILL.md:752:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`","category":"external_commands","line_end":758,"severity":"medium","line_start":752},{"id":"external_commands:SKILL.md:758:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":764,"severity":"medium","line_start":758},{"id":"external_commands:SKILL.md:764:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":809,"severity":"medium","line_start":764},{"id":"external_commands:SKILL.md:809:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":815,"severity":"medium","line_start":809},{"id":"external_commands:SKILL.md:815:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":857,"severity":"medium","line_start":815},{"id":"external_commands:SKILL.md:857:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":863,"severity":"medium","line_start":857},{"id":"external_commands:SKILL.md:863:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":873,"severity":"medium","line_start":863},{"id":"external_commands:SKILL.md:873:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"const decoration = comment.decoration ? ` [${comment.decoration}]` : '';","category":"external_commands","line_end":874,"severity":"medium","line_start":873},{"id":"external_commands:SKILL.md:874:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"return `${comment.label}${decoration}: ${comment.subject}\\n\\n${comment.discussion}`;","category":"external_commands","line_end":881,"severity":"medium","line_start":874},{"id":"external_commands:SKILL.md:881:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"// ```typescript","category":"external_commands","line_end":882,"severity":"medium","line_start":881},{"id":"external_commands:SKILL.md:882:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"// const query = `SELECT * FROM users WHERE name = '${searchTerm}'`;","category":"external_commands","line_end":883,"severity":"medium","line_start":882},{"id":"external_commands:SKILL.md:883:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"// ```","category":"external_commands","line_end":886,"severity":"medium","line_start":883},{"id":"external_commands:SKILL.md:886:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"// ```typescript","category":"external_commands","line_end":889,"severity":"medium","line_start":886},{"id":"external_commands:SKILL.md:889:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"// ```","category":"external_commands","line_end":890,"severity":"medium","line_start":889},{"id":"network:SKILL.md:598:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Based on [Anthropic's Extended Thinking API](https://docs.anthropic.com/en/docs/build-with-claude/ex","category":"network","line_end":598,"severity":"low","line_start":598},{"id":"blocker:SKILL.md:378:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"3. **Acknowledge Valid Points**: Accept feedback graciously","category":"blocker","line_end":378,"severity":"low","line_start":378},{"id":"blocker:SKILL.md:546:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| **Time to Merge (after approval)** | < 2 hours | Avoid stale branches |","category":"blocker","line_end":546,"severity":"low","line_start":546},{"id":"blocker:SKILL.md:567:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- Reviews for architectural soundness","category":"blocker","line_end":568,"severity":"low","line_start":567},{"id":"blocker:templates/review-feedback-template.md:111:system-reconnaissance","file":"templates/review-feedback-template.md","pattern":"System reconnaissance","snippet":"1. **Q:** Why did you choose to use a Map instead of an object in `UserCache`?","category":"blocker","line_end":111,"severity":"low","line_start":111},{"id":"blocker:templates/review-feedback-template.md:181:system-reconnaissance","file":"templates/review-feedback-template.md","pattern":"System reconnaissance","snippet":"- ⚠️ Missing tests for error scenarios (API timeout, invalid response)","category":"blocker","line_end":181,"severity":"low","line_start":181}],"finding_verdicts":[{"id":"blocker:checklists/code-review-checklist.md:60:network-reconnaissance","reason":"This location is a Correctness heading followed by ordinary logic and edge-case checks. It neither performs reconnaissance nor directs the agent to probe networks.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:152:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:154:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:164:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:165:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:287:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:288:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:298:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:337:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:340:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:341:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:344:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:350:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:351:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:361:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:363:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:385:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:397:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:406:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:408:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:410:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:417:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:419:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:451:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:491:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:495:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:531:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:600:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:649:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:657:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:663:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:703:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:709:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:752:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:758:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:764:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:809:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:815:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:857:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:863:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:873:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:874:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:881:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:882:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:883:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:886:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:889:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown formatting or TypeScript template literals inside illustrative code-review examples. No Ruby or shell command is executed or requested.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:598:hardcoded-url","reason":"This is an HTTPS link to Anthropic documentation cited as a source for the example. It does not initiate a request or transmit user data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:378:system-reconnaissance","reason":"This line advises authors to acknowledge valid review feedback. It contains no system discovery command or reconnaissance instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:546:system-reconnaissance","reason":"This line states a review metric for merge time after approval. It does not inspect the host system or request system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:567:network-reconnaissance","reason":"This passage describes architectural review responsibilities for an agent role. It contains no network probing, enumeration, or discovery instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/review-feedback-template.md:111:system-reconnaissance","reason":"This is an example clarification question about choosing a Map data structure. It does not request host details or perform system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:templates/review-feedback-template.md:181:system-reconnaissance","reason":"This checklist example recommends tests for API timeout and invalid-response cases. Mentioning failure scenarios is not system reconnaissance.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"89edfdc710d0846129dcee6a929477b04f08052c","subject_content_hash":"d27150a7c905f34b25bf421ff68cf8255fe2ff456d71229d17a2f38204bdc379","subject_tree_hash":"2bd636cc8813170caeb67263e44376bedf392d8255677baf91342527263a08e3","subject_plugin_path":"skills/ariegoldkin/code-review-playbook","audit_payload_hash":"d6e03699045e8d52fdc543b3fb291304","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"89edfdc710d0846129dcee6a929477b04f08052c","contentHash":"d27150a7c905f34b25bf421ff68cf8255fe2ff456d71229d17a2f38204bdc379","treeHash":"2bd636cc8813170caeb67263e44376bedf392d8255677baf91342527263a08e3","pluginPath":"skills/ariegoldkin/code-review-playbook","auditPayloadHash":"d6e03699045e8d52fdc543b3fb291304"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/ariegoldkin-code-review-playbook/audits/9/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}