{"data":{"skill":{"slug":"ariegoldkin-testing-strategy-builder","name":"testing-strategy-builder","icon":"📦","repo":"https://github.com/ArieGoldkin/ai-agent-hub/tree/main/skills/testing-strategy-builder","status":"approved","author":"AI Agent Hub","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"4350f281-a283-4c57-b4ef-ede8ac8e89ec","skill_id":"de6d6047-a0e1-4911-9970-7b6add9e5668","version":7,"content_hash":"54710dc86c9f7f1d31461b78b9f28e60","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All static findings were adjudicated as false positives caused by Markdown formatting, sample test commands, placeholder network examples, and QA template language. No prompt injection, data exfiltration intent, credential access, or executable malware behavior was found in the cited files.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"references/code-examples.md","line_end":313,"line_start":308},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":36,"line_start":36},{"file":"SKILL.md","line_end":37,"line_start":37},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":45,"line_start":45},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":50,"line_start":50},{"file":"SKILL.md","line_end":54,"line_start":54},{"file":"SKILL.md","line_end":55,"line_start":55},{"file":"SKILL.md","line_end":58,"line_start":58},{"file":"SKILL.md","line_end":59,"line_start":59},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":63,"line_start":63},{"file":"SKILL.md","line_end":67,"line_start":67},{"file":"SKILL.md","line_end":68,"line_start":68},{"file":"SKILL.md","line_end":71,"line_start":71},{"file":"SKILL.md","line_end":72,"line_start":72},{"file":"SKILL.md","line_end":89,"line_start":75},{"file":"SKILL.md","line_end":99,"line_start":89},{"file":"SKILL.md","line_end":109,"line_start":99},{"file":"SKILL.md","line_end":158,"line_start":109},{"file":"SKILL.md","line_end":171,"line_start":158},{"file":"SKILL.md","line_end":184,"line_start":171},{"file":"SKILL.md","line_end":197,"line_start":184},{"file":"SKILL.md","line_end":229,"line_start":197},{"file":"SKILL.md","line_end":233,"line_start":229},{"file":"SKILL.md","line_end":235,"line_start":233},{"file":"SKILL.md","line_end":245,"line_start":235},{"file":"SKILL.md","line_end":258,"line_start":245},{"file":"SKILL.md","line_end":267,"line_start":258},{"file":"SKILL.md","line_end":283,"line_start":267},{"file":"SKILL.md","line_end":295,"line_start":283},{"file":"SKILL.md","line_end":304,"line_start":295},{"file":"SKILL.md","line_end":330,"line_start":304},{"file":"SKILL.md","line_end":394,"line_start":330},{"file":"SKILL.md","line_end":400,"line_start":394},{"file":"SKILL.md","line_end":403,"line_start":400},{"file":"SKILL.md","line_end":410,"line_start":403},{"file":"SKILL.md","line_end":413,"line_start":410},{"file":"SKILL.md","line_end":421,"line_start":413},{"file":"SKILL.md","line_end":424,"line_start":421},{"file":"SKILL.md","line_end":434,"line_start":424},{"file":"SKILL.md","line_end":469,"line_start":434},{"file":"SKILL.md","line_end":478,"line_start":469}]},{"factor":"network","evidence":[{"file":"references/code-examples.md","line_end":183,"line_start":183},{"file":"references/code-examples.md","line_end":92,"line_start":92},{"file":"references/code-examples.md","line_end":112,"line_start":112},{"file":"references/code-examples.md","line_end":183,"line_start":183}]},{"factor":"filesystem","evidence":[{"file":"references/code-examples.md","line_end":254,"line_start":254}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":5,"total_lines":1675,"audit_model":"codex","audited_at":"2026-07-06T03:02:41.646+00:00","created_at":"2026-07-06T04:26:57.801346+00:00","static_findings":[{"id":"blocker:checklists/test-coverage-checklist.md:45:system-reconnaissance","file":"checklists/test-coverage-checklist.md","pattern":"System reconnaissance","snippet":"- [ ] **Input Validation**: Invalid inputs trigger appropriate errors","category":"blocker","line_end":45,"severity":"low","line_start":45},{"id":"blocker:checklists/test-coverage-checklist.md:56:system-reconnaissance","file":"checklists/test-coverage-checklist.md","pattern":"System reconnaissance","snippet":"- [ ] **Deserialization**: Parsers tested with valid and invalid input","category":"blocker","line_end":56,"severity":"low","line_start":56},{"id":"blocker:checklists/test-coverage-checklist.md:76:system-reconnaissance","file":"checklists/test-coverage-checklist.md","pattern":"System reconnaissance","snippet":"- [ ] **Request Validation**: Invalid payloads return 400/422","category":"blocker","line_end":76,"severity":"low","line_start":76},{"id":"blocker:checklists/test-coverage-checklist.md:89:network-reconnaissance","file":"checklists/test-coverage-checklist.md","pattern":"Network reconnaissance","snippet":"- [ ] **Transactions**: Rollback on failure, commit on success","category":"blocker","line_end":90,"severity":"low","line_start":89},{"id":"blocker:checklists/test-coverage-checklist.md:166:network-reconnaissance","file":"checklists/test-coverage-checklist.md","pattern":"Network reconnaissance","snippet":"- [ ] **Graceful Degradation**: System remains stable under stress","category":"blocker","line_end":167,"severity":"low","line_start":166},{"id":"external_commands:references/code-examples.md:308:ruby-shell-backtick-execution","file":"references/code-examples.md","pattern":"Ruby/shell backtick execution","snippet":"it(`should calculate ${discount}% discount on ${price} correctly`, () => {","category":"external_commands","line_end":313,"severity":"medium","line_start":308},{"id":"network:references/code-examples.md:183:http-https-get","file":"references/code-examples.md","pattern":"HTTP/HTTPS get","snippet":"const res = http.get('https://api.example.com/products');","category":"network","line_end":183,"severity":"low","line_start":183},{"id":"network:references/code-examples.md:92:http-client-library","file":"references/code-examples.md","pattern":"HTTP client library","snippet":"const response = await request(app)","category":"network","line_end":92,"severity":"low","line_start":92},{"id":"network:references/code-examples.md:112:http-client-library","file":"references/code-examples.md","pattern":"HTTP client library","snippet":"const response = await request(app)","category":"network","line_end":112,"severity":"low","line_start":112},{"id":"network:references/code-examples.md:183:hardcoded-url","file":"references/code-examples.md","pattern":"Hardcoded URL","snippet":"const res = http.get('https://api.example.com/products');","category":"network","line_end":183,"severity":"low","line_start":183},{"id":"filesystem:references/code-examples.md:254:path-traversal-sequence","file":"references/code-examples.md","pattern":"Path traversal sequence","snippet":"jest.mock('../services/paymentGateway');","category":"filesystem","line_end":254,"severity":"high","line_start":254},{"id":"blocker:references/code-examples.md:13:system-reconnaissance","file":"references/code-examples.md","pattern":"System reconnaissance","snippet":"throw new Error('Invalid input');","category":"blocker","line_end":13,"severity":"low","line_start":13},{"id":"blocker:references/code-examples.md:25:system-reconnaissance","file":"references/code-examples.md","pattern":"System reconnaissance","snippet":"expect(() => calculateDiscount(-10, 20)).toThrow('Invalid input');","category":"blocker","line_end":25,"severity":"low","line_start":25},{"id":"blocker:references/code-examples.md:29:system-reconnaissance","file":"references/code-examples.md","pattern":"System reconnaissance","snippet":"expect(() => calculateDiscount(100, 150)).toThrow('Invalid input');","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"blocker:references/code-examples.md:47:system-reconnaissance","file":"references/code-examples.md","pattern":"System reconnaissance","snippet":"// Given: Cart with items and valid coupon","category":"blocker","line_end":47,"severity":"low","line_start":47},{"id":"blocker:references/code-examples.md:109:system-reconnaissance","file":"references/code-examples.md","pattern":"System reconnaissance","snippet":"it('should return 422 for invalid email', async () => {","category":"blocker","line_end":109,"severity":"low","line_start":109},{"id":"blocker:references/code-examples.md:120:system-reconnaissance","file":"references/code-examples.md","pattern":"System reconnaissance","snippet":"message: expect.stringContaining('valid email'),","category":"blocker","line_end":120,"severity":"low","line_start":120},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/code-examples.md` - Detailed testing code examples","category":"external_commands","line_end":25,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `templates/test-plan-template.md` - Comprehensive test plan template","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `templates/test-case-template.md` - Test case documentation template","category":"external_commands","line_end":27,"severity":"medium","line_start":27},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `checklists/test-coverage-checklist.md` - Coverage verification checklist","category":"external_commands","line_end":28,"severity":"medium","line_start":28},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `npm install --save-dev jest @types/jest`","category":"external_commands","line_end":36,"severity":"medium","line_start":36},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Config:** `npx jest --init`","category":"external_commands","line_end":37,"severity":"medium","line_start":37},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `npm install --save-dev vitest`","category":"external_commands","line_end":40,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `npm install --save-dev @playwright/test`","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Setup:** `npx playwright install`","category":"external_commands","line_end":45,"severity":"medium","line_start":45},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install (macOS):** `brew install k6`","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Command:** `k6 run script.js`","category":"external_commands","line_end":50,"severity":"medium","line_start":50},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `pip install pytest`","category":"external_commands","line_end":54,"severity":"medium","line_start":54},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Command:** `pytest`","category":"external_commands","line_end":55,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `pip install pytest-cov`","category":"external_commands","line_end":58,"severity":"medium","line_start":58},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Command:** `pytest --cov=.`","category":"external_commands","line_end":59,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `pip install locust`","category":"external_commands","line_end":62,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Command:** `locust -f locustfile.py`","category":"external_commands","line_end":63,"severity":"medium","line_start":63},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `npm install --save-dev c8`","category":"external_commands","line_end":67,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Command:** `c8 npm test`","category":"external_commands","line_end":68,"severity":"medium","line_start":68},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Install:** `npm install --save-dev nyc`","category":"external_commands","line_end":71,"severity":"medium","line_start":71},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Command:** `nyc npm test`","category":"external_commands","line_end":72,"severity":"medium","line_start":72},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":89,"severity":"medium","line_start":75},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":99,"severity":"medium","line_start":89},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":109,"severity":"medium","line_start":99},{"id":"external_commands:SKILL.md:109:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":158,"severity":"medium","line_start":109},{"id":"external_commands:SKILL.md:158:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for detailed unit test examples.","category":"external_commands","line_end":171,"severity":"medium","line_start":158},{"id":"external_commands:SKILL.md:171:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for API integration test examples.","category":"external_commands","line_end":184,"severity":"medium","line_start":171},{"id":"external_commands:SKILL.md:184:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for complete E2E test examples.","category":"external_commands","line_end":197,"severity":"medium","line_start":184},{"id":"external_commands:SKILL.md:197:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for k6 load test examples.","category":"external_commands","line_end":229,"severity":"medium","line_start":197},{"id":"external_commands:SKILL.md:229:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":233,"severity":"medium","line_start":229},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":235,"severity":"medium","line_start":233},{"id":"external_commands:SKILL.md:235:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"This pattern keeps tests clear and focused. See `references/code-examples.md` for implementation exa","category":"external_commands","line_end":245,"severity":"medium","line_start":235},{"id":"external_commands:SKILL.md:245:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for test factory and fixture examples.","category":"external_commands","line_end":258,"severity":"medium","line_start":245},{"id":"external_commands:SKILL.md:258:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for detailed AAA pattern examples.","category":"external_commands","line_end":267,"severity":"medium","line_start":258},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for test isolation patterns.","category":"external_commands","line_end":283,"severity":"medium","line_start":267},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for mocking examples.","category":"external_commands","line_end":295,"severity":"medium","line_start":283},{"id":"external_commands:SKILL.md:295:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/code-examples.md` for parameterized test patterns.","category":"external_commands","line_end":304,"severity":"medium","line_start":295},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":330,"severity":"medium","line_start":304},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":394,"severity":"medium","line_start":330},{"id":"external_commands:SKILL.md:394:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":400,"severity":"medium","line_start":394},{"id":"external_commands:SKILL.md:400:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":403,"severity":"medium","line_start":400},{"id":"external_commands:SKILL.md:403:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":410,"severity":"medium","line_start":403},{"id":"external_commands:SKILL.md:410:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":413,"severity":"medium","line_start":410},{"id":"external_commands:SKILL.md:413:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":421,"severity":"medium","line_start":413},{"id":"external_commands:SKILL.md:421:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":424,"severity":"medium","line_start":421},{"id":"external_commands:SKILL.md:424:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":434,"severity":"medium","line_start":424},{"id":"external_commands:SKILL.md:434:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":469,"severity":"medium","line_start":434},{"id":"external_commands:SKILL.md:469:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] Create test plan (see `templates/test-plan-template.md`)","category":"external_commands","line_end":478,"severity":"medium","line_start":469},{"id":"blocker:templates/test-case-template.md:41:system-reconnaissance","file":"templates/test-case-template.md","pattern":"System reconnaissance","snippet":"| User email | test@example.com | Valid test user |","category":"blocker","line_end":41,"severity":"low","line_start":41},{"id":"blocker:templates/test-case-template.md:53:system-reconnaissance","file":"templates/test-case-template.md","pattern":"System reconnaissance","snippet":"- User has valid payment method on file","category":"blocker","line_end":53,"severity":"low","line_start":53},{"id":"blocker:templates/test-case-template.md:174:system-reconnaissance","file":"templates/test-case-template.md","pattern":"System reconnaissance","snippet":"**Variation 3: Invalid Coupon Code**","category":"blocker","line_end":174,"severity":"low","line_start":174},{"id":"blocker:templates/test-case-template.md:114:network-reconnaissance","file":"templates/test-case-template.md","pattern":"Network reconnaissance","snippet":"- [ ] Email sent to user's email address","category":"blocker","line_end":115,"severity":"low","line_start":114}],"finding_verdicts":[{"id":"blocker:checklists/test-coverage-checklist.md:45:system-reconnaissance","reason":"The checklist item is ordinary QA guidance about validation and error handling. It does not collect system details or perform reconnaissance.","verdict":"false_positive","confidence":0.96},{"id":"blocker:checklists/test-coverage-checklist.md:56:system-reconnaissance","reason":"The checklist item is ordinary QA guidance about validation and error handling. It does not collect system details or perform reconnaissance.","verdict":"false_positive","confidence":0.96},{"id":"blocker:checklists/test-coverage-checklist.md:76:system-reconnaissance","reason":"The checklist item is ordinary QA guidance about validation and error handling. It does not collect system details or perform reconnaissance.","verdict":"false_positive","confidence":0.96},{"id":"blocker:checklists/test-coverage-checklist.md:89:network-reconnaissance","reason":"The checklist item describes normal database, resilience, or performance validation. It does not instruct network discovery or reconnaissance against real systems.","verdict":"false_positive","confidence":0.96},{"id":"blocker:checklists/test-coverage-checklist.md:166:network-reconnaissance","reason":"The checklist item describes normal database, resilience, or performance validation. It does not instruct network discovery or reconnaissance against real systems.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:references/code-examples.md:308:ruby-shell-backtick-execution","reason":"The cited line is a JavaScript template literal inside a test name, not Ruby or shell backtick execution. It does not execute commands or process untrusted shell input.","verdict":"false_positive","confidence":0.98},{"id":"network:references/code-examples.md:183:http-https-get","reason":"The URL appears in a k6 load-testing example using the reserved example.com domain. It is illustrative documentation, not skill code that performs unauthorized network access.","verdict":"false_positive","confidence":0.88},{"id":"network:references/code-examples.md:92:http-client-library","reason":"The request(app) calls are Supertest-style in-process API test examples. They do not contact external hosts or exfiltrate data.","verdict":"false_positive","confidence":0.95},{"id":"network:references/code-examples.md:112:http-client-library","reason":"The request(app) calls are Supertest-style in-process API test examples. They do not contact external hosts or exfiltrate data.","verdict":"false_positive","confidence":0.95},{"id":"network:references/code-examples.md:183:hardcoded-url","reason":"The URL appears in a k6 load-testing example using the reserved example.com domain. It is illustrative documentation, not skill code that performs unauthorized network access.","verdict":"false_positive","confidence":0.88},{"id":"filesystem:references/code-examples.md:254:path-traversal-sequence","reason":"The ../ sequence appears in a Jest mock module path for a testing example. It is not a filesystem read, write, deletion, or path traversal sink.","verdict":"false_positive","confidence":0.97},{"id":"blocker:references/code-examples.md:13:system-reconnaissance","reason":"The cited text is part of benign sample test code for validation and expected behavior. It contains no reconnaissance workflow or attempt to inspect the host system.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/code-examples.md:25:system-reconnaissance","reason":"The cited text is part of benign sample test code for validation and expected behavior. It contains no reconnaissance workflow or attempt to inspect the host system.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/code-examples.md:29:system-reconnaissance","reason":"The cited text is part of benign sample test code for validation and expected behavior. It contains no reconnaissance workflow or attempt to inspect the host system.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/code-examples.md:47:system-reconnaissance","reason":"The cited text is part of benign sample test code for validation and expected behavior. It contains no reconnaissance workflow or attempt to inspect the host system.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/code-examples.md:109:system-reconnaissance","reason":"The cited text is part of benign sample test code for validation and expected behavior. It contains no reconnaissance workflow or attempt to inspect the host system.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/code-examples.md:120:system-reconnaissance","reason":"The cited text is part of benign sample test code for validation and expected behavior. It contains no reconnaissance workflow or attempt to inspect the host system.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","reason":"The cited text is a documented install or test command for common QA tools. It is not Ruby backtick execution and contains no command injection vector.","verdict":"false_positive","confidence":0.87},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","reason":"The cited Markdown fence contains version-check commands and a testing diagram. The skill does not execute these commands or interpolate user-controlled input into a shell.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","reason":"The cited Markdown fence contains version-check commands and a testing diagram. The skill does not execute these commands or interpolate user-controlled input into a shell.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","reason":"The cited Markdown fence contains version-check commands and a testing diagram. The skill does not execute these commands or interpolate user-controlled input into a shell.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:109:ruby-shell-backtick-execution","reason":"The cited Markdown fence contains version-check commands and a testing diagram. The skill does not execute these commands or interpolate user-controlled input into a shell.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:158:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:171:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:184:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:197:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:229:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:235:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:245:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:258:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:295:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","reason":"The cited YAML block is an example CI test pipeline with standard npm test commands. It is documentation, not hidden execution performed by the skill.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","reason":"The cited YAML block is an example CI test pipeline with standard npm test commands. It is documentation, not hidden execution performed by the skill.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:394:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:400:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:403:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:410:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:413:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:421:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:424:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:434:ruby-shell-backtick-execution","reason":"The cited lines are TypeScript testing examples inside Markdown code fences. They do not execute shell commands or invoke dangerous process APIs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:469:ruby-shell-backtick-execution","reason":"The cited backticks are Markdown formatting around resource paths, references, or examples. They are not executable shell backticks and do not create an external command risk.","verdict":"false_positive","confidence":0.94},{"id":"blocker:templates/test-case-template.md:41:system-reconnaissance","reason":"The template line is ordinary test data or an edge-case label. It does not gather system information or contain malicious instructions.","verdict":"false_positive","confidence":0.95},{"id":"blocker:templates/test-case-template.md:53:system-reconnaissance","reason":"The template line is ordinary test data or an edge-case label. It does not gather system information or contain malicious instructions.","verdict":"false_positive","confidence":0.95},{"id":"blocker:templates/test-case-template.md:174:system-reconnaissance","reason":"The template line is ordinary test data or an edge-case label. It does not gather system information or contain malicious instructions.","verdict":"false_positive","confidence":0.95},{"id":"blocker:templates/test-case-template.md:114:network-reconnaissance","reason":"The template line documents an expected email or integration result for a test case. It does not scan networks, enumerate services, or contact unauthorized systems.","verdict":"false_positive","confidence":0.95}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}