{"data":{"skill":{"slug":"artemxtech-tasknotes","name":"tasknotes","icon":"📦","repo":"https://github.com/ArtemXTech/personal-os-skills/tree/main/skills/tasknotes","status":"approved","author":"ArtemXTech","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"21e4ee8e-1ab9-4495-9f4f-aeb9eea80df2","skill_id":"1933699a-e180-4527-b819-30a18f1c94c5","version":4,"content_hash":"e2dafa67227f7b8fb73130e567682122","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Standard task management tool with minimal risk. All 89 static findings are false positives. Network calls go exclusively to localhost (Obsidian TaskNotes API), not external endpoints. Environment variables are for local configuration only. No dangerous patterns, data exfiltration, or credential exfiltration detected.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"scripts/tasks.py","line_end":66,"line_start":49}]},{"factor":"filesystem","evidence":[{"file":"scripts/tasks.py","line_end":35,"line_start":32}]},{"factor":"env_access","evidence":[{"file":"scripts/tasks.py","line_end":38,"line_start":37}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":672,"audit_model":"claude","audited_at":"2026-01-16T17:15:52.661+00:00","created_at":"2026-01-20T01:02:40.311773+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}