{"data":{"skill":{"slug":"astro-han-karpathy-llm-wiki","name":"karpathy-llm-wiki","icon":"📦","repo":"https://github.com/astro-han/karpathy-llm-wiki/tree/eafcc77001e496cc43499e4923b663aec722c813/","status":"approved","author":"astro-han","authorVersion":null,"skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"91a2b8a3-2dac-4525-9240-273d62cb9ec7","skill_id":"be82ca54-b5da-49b5-ba1c-d8fda348f422","version":1,"content_hash":"v3:c993c6abcbffafea2683d7748b53b3dfaf438415:c154f62094738b65e91dbb1c706758137290c622e386b3204e87c60a78f75748:935419af8347835c9ad181ffdb2007b01fde38cd73ac546d001f666f8d2573ed:736b696c6c732f617374726f2d68616e2f6b617270617468792d6c6c6d2d77696b69:8f67074f512dd7261ac394341d28fe19","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 105 static findings are false positives after contextual review of the flagged files. Matches reflect Markdown formatting, project-relative links, inert test data, temporary test directories, and a local subprocess call without shell execution. No evidence found of prompt injection, credential theft, or data exfiltration in the reviewed files.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"examples/claude-code-statusline-landscape.md","line_end":4,"line_start":4},{"file":"references/archive-template.md","line_end":3,"line_start":3},{"file":"references/archive-template.md","line_end":4,"line_start":4},{"file":"references/archive-template.md","line_end":21,"line_start":21},{"file":"references/article-template.md","line_end":4,"line_start":4},{"file":"references/article-template.md","line_end":29,"line_start":29},{"file":"SKILL.md","line_end":90,"line_start":90},{"file":"SKILL.md","line_end":150,"line_start":150},{"file":"tests/test_check_evidence.py","line_end":23,"line_start":23},{"file":"tests/test_check_evidence.py","line_end":55,"line_start":55},{"file":"tests/test_check_evidence.py","line_end":63,"line_start":63},{"file":"tests/test_check_evidence.py","line_end":74,"line_start":74},{"file":"tests/test_check_evidence.py","line_end":109,"line_start":109},{"file":"tests/test_check_evidence.py","line_end":117,"line_start":117},{"file":"tests/test_check_evidence.py","line_end":125,"line_start":125},{"file":"tests/test_check_evidence.py","line_end":142,"line_start":142},{"file":"tests/test_check_evidence.py","line_end":159,"line_start":159},{"file":"tests/test_check_evidence.py","line_end":182,"line_start":182},{"file":"tests/test_check_evidence.py","line_end":496,"line_start":496},{"file":"tests/test_check_evidence.py","line_end":497,"line_start":497},{"file":"tests/test_check_evidence.py","line_end":507,"line_start":507},{"file":"tests/test_check_evidence.py","line_end":519,"line_start":519},{"file":"tests/test_check_evidence.py","line_end":539,"line_start":539},{"file":"tests/test_check_evidence.py","line_end":548,"line_start":548},{"file":"tests/test_check_evidence.py","line_end":559,"line_start":559},{"file":"tests/test_check_evidence.py","line_end":651,"line_start":651},{"file":"tests/test_check_evidence.py","line_end":3,"line_start":3},{"file":"tests/test_check_evidence.py","line_end":210,"line_start":210}]},{"factor":"external_commands","evidence":[{"file":"scripts/check_evidence.py","line_end":51,"line_start":51},{"file":"scripts/check_evidence.py","line_end":86,"line_start":58},{"file":"scripts/check_evidence.py","line_end":332,"line_start":86},{"file":"SKILL.md","line_end":8,"line_start":8},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":21,"line_start":21},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":32,"line_start":32},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":34,"line_start":34},{"file":"SKILL.md","line_end":35,"line_start":35},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":53,"line_start":53},{"file":"SKILL.md","line_end":55,"line_start":55},{"file":"SKILL.md","line_end":57,"line_start":57},{"file":"SKILL.md","line_end":58,"line_start":58},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":83,"line_start":83},{"file":"SKILL.md","line_end":87,"line_start":87},{"file":"SKILL.md","line_end":90,"line_start":90},{"file":"SKILL.md","line_end":96,"line_start":96},{"file":"SKILL.md","line_end":102,"line_start":102},{"file":"SKILL.md","line_end":104,"line_start":104},{"file":"SKILL.md","line_end":111,"line_start":106},{"file":"SKILL.md","line_end":113,"line_start":111},{"file":"SKILL.md","line_end":113,"line_start":113},{"file":"SKILL.md","line_end":118,"line_start":115},{"file":"SKILL.md","line_end":141,"line_start":118},{"file":"SKILL.md","line_end":143,"line_start":141},{"file":"SKILL.md","line_end":150,"line_start":143},{"file":"SKILL.md","line_end":150,"line_start":150},{"file":"SKILL.md","line_end":156,"line_start":153},{"file":"SKILL.md","line_end":156,"line_start":156},{"file":"SKILL.md","line_end":158,"line_start":157},{"file":"SKILL.md","line_end":160,"line_start":158},{"file":"SKILL.md","line_end":172,"line_start":160},{"file":"SKILL.md","line_end":173,"line_start":172},{"file":"SKILL.md","line_end":174,"line_start":173},{"file":"SKILL.md","line_end":195,"line_start":174},{"file":"SKILL.md","line_end":199,"line_start":195},{"file":"SKILL.md","line_end":211,"line_start":199},{"file":"SKILL.md","line_end":219,"line_start":211},{"file":"SKILL.md","line_end":221,"line_start":219},{"file":"SKILL.md","line_end":223,"line_start":221},{"file":"SKILL.md","line_end":231,"line_start":223},{"file":"SKILL.md","line_end":232,"line_start":231},{"file":"SKILL.md","line_end":233,"line_start":232}]},{"factor":"network","evidence":[{"file":"tests/test_check_evidence.py","line_end":11,"line_start":11},{"file":"tests/test_check_evidence.py","line_end":45,"line_start":45},{"file":"tests/test_check_evidence.py","line_end":98,"line_start":98},{"file":"tests/test_check_evidence.py","line_end":132,"line_start":132},{"file":"tests/test_check_evidence.py","line_end":149,"line_start":149},{"file":"tests/test_check_evidence.py","line_end":350,"line_start":350},{"file":"tests/test_check_evidence.py","line_end":622,"line_start":622}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":15,"total_lines":1989,"audit_model":"codex","audited_at":"2026-11-07T14:38:39.226+00:00","created_at":"2026-11-09T15:32:53.89129+00:00","static_findings":[{"id":"filesystem:examples/claude-code-statusline-landscape.md:4:path-traversal-sequence","file":"examples/claude-code-statusline-landscape.md","pattern":"Path traversal sequence","snippet":"> Raw: [raw/ai-coding-tools/2026-03-19-claude-code-statusline-landscape.md](../../raw/ai-coding-tool","category":"filesystem","line_end":4,"severity":"high","line_start":4},{"id":"blocker:examples/claude-code-statusline-landscape.md:75:system-reconnaissance","file":"examples/claude-code-statusline-landscape.md","pattern":"System reconnaissance","snippet":"Statusline track in March 2026 saw rapid growth (claude-hud gained 4,804 stars in 5 days, mainly Git","category":"blocker","line_end":75,"severity":"low","line_start":75},{"id":"filesystem:references/archive-template.md:3:path-traversal-sequence","file":"references/archive-template.md","pattern":"Path traversal sequence","snippet":"> Sources: [{Cited Article 1}](article1.md); [{Cited Article 2}](../other-topic/article2.md)","category":"filesystem","line_end":3,"severity":"high","line_start":3},{"id":"filesystem:references/archive-template.md:4:path-traversal-sequence","file":"references/archive-template.md","pattern":"Path traversal sequence","snippet":"{Paths must be relative to this file: same-topic = filename only, cross-topic = ../other-topic/filen","category":"filesystem","line_end":4,"severity":"high","line_start":4},{"id":"filesystem:references/archive-template.md:21:path-traversal-sequence","file":"references/archive-template.md","pattern":"Path traversal sequence","snippet":"- Different topic: [Other Article](../other-topic/other-article.md)}","category":"filesystem","line_end":21,"severity":"high","line_start":21},{"id":"filesystem:references/article-template.md:4:path-traversal-sequence","file":"references/article-template.md","pattern":"Path traversal sequence","snippet":"> Raw: [{source1}](../../raw/{topic1}/{filename1}.md); [{source2}](../../raw/{topic2}/{filename2}.md","category":"filesystem","line_end":4,"severity":"high","line_start":4},{"id":"filesystem:references/article-template.md:29:path-traversal-sequence","file":"references/article-template.md","pattern":"Path traversal sequence","snippet":"- Different topic: [Other Article](../other-topic/other-article.md)}","category":"filesystem","line_end":29,"severity":"high","line_start":29},{"id":"external_commands:scripts/check_evidence.py:51:ruby-shell-backtick-execution","file":"scripts/check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"INLINE_CODE_RE = re.compile(r\"`[^`\\n]*`\")","category":"external_commands","line_end":51,"severity":"medium","line_start":51},{"id":"external_commands:scripts/check_evidence.py:58:ruby-shell-backtick-execution","file":"scripts/check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"FENCE_CLOSE_RE = re.compile(r\"^ {0,3}(`{3,}|~{3,})[ \\t]*$\")","category":"external_commands","line_end":86,"severity":"medium","line_start":58},{"id":"external_commands:scripts/check_evidence.py:86:ruby-shell-backtick-execution","file":"scripts/check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"if marker[0] == \"`\" and \"`\" in info:","category":"external_commands","line_end":332,"severity":"medium","line_start":86},{"id":"external_commands:SKILL.md:8:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Build and maintain a personal knowledge base using LLMs. You manage two directories: `raw/` (immutab","category":"external_commands","line_end":8,"severity":"medium","line_start":8},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**raw/** — Immutable source material. You read, never modify. Organized by topic subdirectories (e.g","category":"external_commands","line_end":18,"severity":"medium","line_start":18},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**wiki/** — Compiled knowledge articles. You have full ownership. Organized by topic subdirectories,","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `wiki/index.md` — Global index. One row per article, grouped by topic, with link + summary + Updat","category":"external_commands","line_end":21,"severity":"medium","line_start":21},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `wiki/log.md` — Append-only operation log.","category":"external_commands","line_end":22,"severity":"medium","line_start":22},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Templates live in `references/` relative to this file. Read them when you need the exact format for ","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Triggers only on the first Ingest. Check whether `raw/` and `wiki/` exist. Create only what is missi","category":"external_commands","line_end":30,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `raw/` directory (with `.gitkeep`)","category":"external_commands","line_end":32,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `wiki/` directory (with `.gitkeep`)","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `wiki/index.md` — heading `# Knowledge Base Index`, empty body","category":"external_commands","line_end":34,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `wiki/log.md` — heading `# Wiki Log`, empty body","category":"external_commands","line_end":35,"severity":"medium","line_start":35},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Every load-bearing fact in wiki/ — numbers, dates, direct quotes — exists verbatim in the raw/ files","category":"external_commands","line_end":41,"severity":"medium","line_start":41},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. Pick a topic directory. Check existing `raw/` subdirectories first; reuse one if the topic is clo","category":"external_commands","line_end":53,"severity":"medium","line_start":53},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Save as `raw/<topic>/YYYY-MM-DD-descriptive-slug.md`.","category":"external_commands","line_end":55,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Published date unknown → omit the date prefix from the file name (e.g., `descriptive-slug.md`). Th","category":"external_commands","line_end":57,"severity":"medium","line_start":57},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If a file with the same name already exists, append a numeric suffix (e.g., `descriptive-slug-2.md","category":"external_commands","line_end":58,"severity":"medium","line_start":58},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/raw-template.md` for the exact format.","category":"external_commands","line_end":62,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"These are not mutually exclusive. A single source may warrant merging into one article while also cr","category":"external_commands","line_end":83,"severity":"medium","line_start":83},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"See `references/article-template.md` for article format. Key points:","category":"external_commands","line_end":87,"severity":"medium","line_start":87},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Relative paths from `wiki/<topic>/` use `../../raw/<topic>/<file>.md` (two levels up to project ro","category":"external_commands","line_end":90,"severity":"medium","line_start":90},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"When the new source supersedes or contradicts an existing claim, keep the old claim for the record b","category":"external_commands","line_end":96,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Update `wiki/index.md`: add or update entries for every touched article. When adding a new topic sec","category":"external_commands","line_end":102,"severity":"medium","line_start":102},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Append to `wiki/log.md`:","category":"external_commands","line_end":104,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":111,"severity":"medium","line_start":106},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":113,"severity":"medium","line_start":111},{"id":"external_commands:SKILL.md:113:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Omit `- Updated:` lines when no cascade updates occur. For No material, log and stop. Use a project-","category":"external_commands","line_end":113,"severity":"medium","line_start":113},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":118,"severity":"medium","line_start":115},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":141,"severity":"medium","line_start":118},{"id":"external_commands:SKILL.md:141:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Read `wiki/index.md` to locate candidate articles, then full-text search wiki/ with the topic's k","category":"external_commands","line_end":143,"severity":"medium","line_start":141},{"id":"external_commands:SKILL.md:143:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Prefer wiki content over your own training knowledge. Cite sources with markdown links: `[Article","category":"external_commands","line_end":150,"severity":"medium","line_start":143},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Write the answer as a new wiki page. See `references/archive-template.md`. When converting conver","category":"external_commands","line_end":150,"severity":"medium","line_start":150},{"id":"external_commands:SKILL.md:153:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- File name reflects the query topic, e.g., `transformer-architectures-overview.md`.","category":"external_commands","line_end":156,"severity":"medium","line_start":153},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Update `wiki/index.md`. Prefix the Summary with `[Archived]`.","category":"external_commands","line_end":156,"severity":"medium","line_start":156},{"id":"external_commands:SKILL.md:157:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. Append to `wiki/log.md`:","category":"external_commands","line_end":158,"severity":"medium","line_start":157},{"id":"external_commands:SKILL.md:158:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":160,"severity":"medium","line_start":158},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":172,"severity":"medium","line_start":160},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Index consistency** — compare `wiki/index.md` against actual wiki/ files (excluding index.md and l","category":"external_commands","line_end":173,"severity":"medium","line_start":172},{"id":"external_commands:SKILL.md:173:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- File exists but missing from index → add entry with `(no summary)` placeholder. For Updated, use t","category":"external_commands","line_end":174,"severity":"medium","line_start":173},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Index entry points to nonexistent file → mark as `[MISSING]` in the index. Do not delete the entry","category":"external_commands","line_end":195,"severity":"medium","line_start":174},{"id":"external_commands:SKILL.md:195:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Run these mechanically with `python3 <skill-dir>/scripts/check_evidence.py <project-root>` (optional","category":"external_commands","line_end":199,"severity":"medium","line_start":195},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Evidence errors** — articles the script cannot verify (missing Raw field, unresolvable Raw links, ","category":"external_commands","line_end":211,"severity":"medium","line_start":199},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Malformed Status blocks (Outdated missing its date, or either block missing its explanation; forma","category":"external_commands","line_end":219,"severity":"medium","line_start":211},{"id":"external_commands:SKILL.md:219:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Append to `wiki/log.md`:","category":"external_commands","line_end":221,"severity":"medium","line_start":219},{"id":"external_commands:SKILL.md:221:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":223,"severity":"medium","line_start":221},{"id":"external_commands:SKILL.md:223:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":231,"severity":"medium","line_start":223},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Today's date for log entries, Collected dates, and Archived dates. Updated dates reflect when the ","category":"external_commands","line_end":232,"severity":"medium","line_start":231},{"id":"external_commands:SKILL.md:232:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Inside wiki/ files, all markdown links use paths relative to the current file. In conversation out","category":"external_commands","line_end":233,"severity":"medium","line_start":232},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Ingest updates both `wiki/index.md` and `wiki/log.md` (a No material ingest updates only the log).","category":"external_commands","line_end":233,"severity":"medium","line_start":233},{"id":"filesystem:SKILL.md:90:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- Relative paths from `wiki/<topic>/` use `../../raw/<topic>/<file>.md` (two levels up to project ro","category":"filesystem","line_end":90,"severity":"high","line_start":90},{"id":"filesystem:SKILL.md:150:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"1. Write the answer as a new wiki page. See `references/archive-template.md`. When converting conver","category":"filesystem","line_end":150,"severity":"high","line_start":150},{"id":"external_commands:tests/test_check_evidence.py:200:python-subprocess-run","file":"tests/test_check_evidence.py","pattern":"Python subprocess.run","snippet":"return subprocess.run(","category":"external_commands","line_end":200,"severity":"high","line_start":200},{"id":"external_commands:tests/test_check_evidence.py:33:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"Install with `--limit 9000` after downloading.","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:tests/test_check_evidence.py:35:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":37,"severity":"medium","line_start":35},{"id":"external_commands:tests/test_check_evidence.py:37:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":80,"severity":"medium","line_start":37},{"id":"external_commands:tests/test_check_evidence.py:80:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"````text","category":"external_commands","line_end":82,"severity":"medium","line_start":80},{"id":"external_commands:tests/test_check_evidence.py:82:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"````","category":"external_commands","line_end":426,"severity":"medium","line_start":82},{"id":"external_commands:tests/test_check_evidence.py:426:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"# Wiki Log\\n\\n```markdown\\n\"","category":"external_commands","line_end":428,"severity":"medium","line_start":426},{"id":"external_commands:tests/test_check_evidence.py:428:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"- Disposition: No material\\n```\\n\"","category":"external_commands","line_end":497,"severity":"medium","line_start":428},{"id":"external_commands:tests/test_check_evidence.py:497:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"Value 42K.\\n\\n```markdown\\n> Raw: [template](../../raw/topic/filename.md)\\n```\\n\"","category":"external_commands","line_end":497,"severity":"medium","line_start":497},{"id":"external_commands:tests/test_check_evidence.py:518:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"# A\\n\\n```text\\nthis is body content\\n```\\n\\n\"","category":"external_commands","line_end":518,"severity":"medium","line_start":518},{"id":"external_commands:tests/test_check_evidence.py:528:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"```markdown\\n# Fake\\n> Archived: 2026-01-01\\n```\\n\\n\"","category":"external_commands","line_end":528,"severity":"medium","line_start":528},{"id":"external_commands:tests/test_check_evidence.py:549:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"```text\\ninside 777K\\n``` trailing text\\nstill inside 888K\\n```\\n\"","category":"external_commands","line_end":549,"severity":"medium","line_start":549},{"id":"external_commands:tests/test_check_evidence.py:560:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"```lang`bad\\nUnsupported 666K claim.\\n```\\n\"","category":"external_commands","line_end":560,"severity":"medium","line_start":560},{"id":"external_commands:tests/test_check_evidence.py:652:ruby-shell-backtick-execution","file":"tests/test_check_evidence.py","pattern":"Ruby/shell backtick execution","snippet":"\"    ```\\n    some indented text\\n\\nUnsupported claim 777K here.\\n\"","category":"external_commands","line_end":663,"severity":"medium","line_start":652},{"id":"network:tests/test_check_evidence.py:11:hardcoded-url","file":"tests/test_check_evidence.py","pattern":"Hardcoded URL","snippet":"> Source: https://example.com/ghostty","category":"network","line_end":11,"severity":"low","line_start":11},{"id":"network:tests/test_check_evidence.py:45:hardcoded-url","file":"tests/test_check_evidence.py","pattern":"Hardcoded URL","snippet":"> Source: https://example.com/numbers","category":"network","line_end":45,"severity":"low","line_start":45},{"id":"network:tests/test_check_evidence.py:98:hardcoded-url","file":"tests/test_check_evidence.py","pattern":"Hardcoded URL","snippet":"> Source: https://example.com/x","category":"network","line_end":98,"severity":"low","line_start":98},{"id":"network:tests/test_check_evidence.py:132:hardcoded-url","file":"tests/test_check_evidence.py","pattern":"Hardcoded URL","snippet":"> Source: https://example.com/numbers","category":"network","line_end":132,"severity":"low","line_start":132},{"id":"network:tests/test_check_evidence.py:149:hardcoded-url","file":"tests/test_check_evidence.py","pattern":"Hardcoded URL","snippet":"> Source: https://example.com/plain","category":"network","line_end":149,"severity":"low","line_start":149},{"id":"network:tests/test_check_evidence.py:350:hardcoded-url","file":"tests/test_check_evidence.py","pattern":"Hardcoded URL","snippet":"> Source: https://example.com/notes","category":"network","line_end":350,"severity":"low","line_start":350},{"id":"network:tests/test_check_evidence.py:622:hardcoded-url","file":"tests/test_check_evidence.py","pattern":"Hardcoded URL","snippet":"\"> The [terminal](https://example.com) should feel invisible to users.\\n\",","category":"network","line_end":622,"severity":"low","line_start":622},{"id":"filesystem:tests/test_check_evidence.py:23:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [ghostty](../../raw/ai-research/2026-04-17-ghostty.md)","category":"filesystem","line_end":23,"severity":"high","line_start":23},{"id":"filesystem:tests/test_check_evidence.py:55:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [numbers](../../raw/t/numbers.md)","category":"filesystem","line_end":55,"severity":"high","line_start":55},{"id":"filesystem:tests/test_check_evidence.py:63:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [ghostty](../../raw/ai-research/2026-04-17-ghostty.md)","category":"filesystem","line_end":63,"severity":"high","line_start":63},{"id":"filesystem:tests/test_check_evidence.py:74:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [ghostty](../../raw/ai-research/2026-04-17-ghostty.md)","category":"filesystem","line_end":74,"severity":"high","line_start":74},{"id":"filesystem:tests/test_check_evidence.py:109:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [src](../../raw/t/src.md)","category":"filesystem","line_end":109,"severity":"high","line_start":109},{"id":"filesystem:tests/test_check_evidence.py:117:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [support](../../notes/support.md)","category":"filesystem","line_end":117,"severity":"high","line_start":117},{"id":"filesystem:tests/test_check_evidence.py:125:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [ghostty](../../raw/ai-research/2026-04-17-ghostty.md)","category":"filesystem","line_end":125,"severity":"high","line_start":125},{"id":"filesystem:tests/test_check_evidence.py:142:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [numbers](../../raw/t/numbers.md)","category":"filesystem","line_end":142,"severity":"high","line_start":142},{"id":"filesystem:tests/test_check_evidence.py:159:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [plain](../../raw/t/plain.md)","category":"filesystem","line_end":159,"severity":"high","line_start":159},{"id":"filesystem:tests/test_check_evidence.py:182:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"> Raw: [gone](../../raw/t/nonexistent.md)","category":"filesystem","line_end":182,"severity":"high","line_start":182},{"id":"filesystem:tests/test_check_evidence.py:496:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"# A\\n\\n> Sources: Example, 2026-01-01\\n> Raw: [src](../../raw/t/src.md)\\n\\n\"","category":"filesystem","line_end":496,"severity":"high","line_start":496},{"id":"filesystem:tests/test_check_evidence.py:497:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"Value 42K.\\n\\n```markdown\\n> Raw: [template](../../raw/topic/filename.md)\\n```\\n\"","category":"filesystem","line_end":497,"severity":"high","line_start":497},{"id":"filesystem:tests/test_check_evidence.py:507:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"Claims 42% growth.\\n\\n> Raw: [src](../../raw/t/src.md)\\n\"","category":"filesystem","line_end":507,"severity":"high","line_start":507},{"id":"filesystem:tests/test_check_evidence.py:519:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"> Raw: [src](../../raw/t/src.md)\\n\\nValue 42K.\\n\"","category":"filesystem","line_end":519,"severity":"high","line_start":519},{"id":"filesystem:tests/test_check_evidence.py:539:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"> Raw: [src](../../raw/t/src.md)\\n\\nNo other claim.\\n\"","category":"filesystem","line_end":539,"severity":"high","line_start":539},{"id":"filesystem:tests/test_check_evidence.py:548:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"> Raw: [src](../../raw/t/src.md)\\n\\n\"","category":"filesystem","line_end":548,"severity":"high","line_start":548},{"id":"filesystem:tests/test_check_evidence.py:559:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"> Raw: [src](../../raw/t/src.md)\\n\\n\"","category":"filesystem","line_end":559,"severity":"high","line_start":559},{"id":"filesystem:tests/test_check_evidence.py:651:path-traversal-sequence","file":"tests/test_check_evidence.py","pattern":"Path traversal sequence","snippet":"\"# A\\n\\n> Sources: Example, 2026-01-01\\n> Raw: [src](../../raw/t/src.md)\\n\\n\"","category":"filesystem","line_end":651,"severity":"high","line_start":651},{"id":"filesystem:tests/test_check_evidence.py:3:temp-file-creation","file":"tests/test_check_evidence.py","pattern":"Temp file creation","snippet":"import tempfile","category":"filesystem","line_end":3,"severity":"low","line_start":3},{"id":"filesystem:tests/test_check_evidence.py:210:temp-file-creation","file":"tests/test_check_evidence.py","pattern":"Temp file creation","snippet":"self.tmp = tempfile.TemporaryDirectory()","category":"filesystem","line_end":210,"severity":"low","line_start":210},{"id":"blocker:tests/test_check_evidence.py:16:system-reconnaissance","file":"tests/test_check_evidence.py","pattern":"System reconnaissance","snippet":"The maintainer said \"the terminal should feel invisible to users\" in the interview.","category":"blocker","line_end":16,"severity":"low","line_start":16},{"id":"blocker:tests/test_check_evidence.py:28:system-reconnaissance","file":"tests/test_check_evidence.py","pattern":"System reconnaissance","snippet":"The maintainer said \"the terminal should feel invisible to users\".","category":"blocker","line_end":28,"severity":"low","line_start":28},{"id":"blocker:tests/test_check_evidence.py:169:system-reconnaissance","file":"tests/test_check_evidence.py","pattern":"System reconnaissance","snippet":"At the time, Ghostty had 999K stars and the maintainer said \"totally made up quote here\".","category":"blocker","line_end":169,"severity":"low","line_start":169},{"id":"blocker:tests/test_check_evidence.py:571:system-reconnaissance","file":"tests/test_check_evidence.py","pattern":"System reconnaissance","snippet":"'The maintainer said \"the terminal should\\nfeel invisible to users\".\\n',","category":"blocker","line_end":571,"severity":"low","line_start":571}],"finding_verdicts":[{"id":"filesystem:examples/claude-code-statusline-landscape.md:4:path-traversal-sequence","reason":"This example contains a Markdown citation from a topic article to its raw source inside the documented project layout. It is not an unauthorized traversal operation.","verdict":"false_positive","confidence":0.99},{"id":"blocker:examples/claude-code-statusline-landscape.md:75:system-reconnaissance","reason":"The paragraph describes public GitHub star growth for statusline tools. It contains no command or instruction to inspect the host system.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/archive-template.md:3:path-traversal-sequence","reason":"The template uses relative Markdown citations between topic directories in the wiki. These placeholders do not request access outside the project.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/archive-template.md:4:path-traversal-sequence","reason":"This line explains how cross-topic Markdown links are resolved relative to an archive page. The parent component addresses a sibling wiki directory.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/archive-template.md:21:path-traversal-sequence","reason":"The See Also example links to another topic within the wiki. It is ordinary navigation syntax, not an out-of-project file access request.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/article-template.md:4:path-traversal-sequence","reason":"The Raw field illustrates citations from wiki topic pages to the project raw directory. The checker resolves these paths and rejects targets outside raw.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/article-template.md:29:path-traversal-sequence","reason":"This template link addresses a sibling wiki topic in the See Also section. No sensitive destination or executable file operation is specified.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:scripts/check_evidence.py:51:ruby-shell-backtick-execution","reason":"Backticks occur inside a Python regular expression that removes Markdown inline code from evidence candidates. The expression does not invoke a shell.","verdict":"false_positive","confidence":1},{"id":"external_commands:scripts/check_evidence.py:58:ruby-shell-backtick-execution","reason":"The Python regular expression recognizes Markdown fence closers. Backticks are literal matching characters, not command substitution.","verdict":"false_positive","confidence":1},{"id":"external_commands:scripts/check_evidence.py:86:ruby-shell-backtick-execution","reason":"This Python condition compares strings while validating a Markdown fence opener. No command execution occurs in this branch.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:8:ruby-shell-backtick-execution","reason":"Backticks format the raw and wiki directory names in Markdown prose. They are not shell syntax in an executable context.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","reason":"The inline code names a sample raw topic directory. The surrounding instruction preserves source files rather than executing their names.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The backtick span documents the wiki article path convention. It contains a file path placeholder, not a shell invocation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","reason":"The line identifies the project wiki index using Markdown inline code. Updating this index is part of the stated wiki workflow.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"The backtick span names the append-only wiki operation log. It is a documented local output path, not command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The instruction points to the bundled references directory for document templates. Markdown formatting does not execute this directory name.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"Inline code identifies project directories checked during first-ingest initialization. The instruction explicitly forbids overwriting existing files.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"This initialization checklist names the raw directory and its placeholder file. Backticks are Markdown formatting, not an executable expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"This initialization checklist names the wiki directory and its placeholder file. It specifies expected project outputs without invoking a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"Backticks identify the wiki index path and initial Markdown heading. Both are document content, not commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","reason":"Backticks identify the wiki log path and its initial heading. The line documents initialization content rather than shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","reason":"The inline path names the bundled read-only evidence checker. The prose describes literal matching against linked sources, not backtick-based execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","reason":"The backtick span names raw subdirectories used for source organization. It supplies no shell command or external execution target.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"This inline code is a source filename template under raw. It describes the intended save location, not an executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","reason":"Backticks format an example filename and the Unknown metadata value. These are inert document conventions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","reason":"The inline filename demonstrates collision avoidance through numeric suffixes. It neither executes a command nor overwrites an existing source.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The backtick span references a bundled raw document template. Reading a local template is expected skill behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","reason":"The inline path references the article template for conflict annotations. The instruction concerns source attribution and contains no shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","reason":"This line points to the bundled article format template. Backticks simply mark a local reference path.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","reason":"The inline code explains relative Markdown citations from wiki pages to raw sources. It is path documentation, not command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"The reference path identifies the status annotation template. The surrounding instruction preserves outdated claims and attributes disagreements.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","reason":"Inline code names the wiki index and index template for post-ingest maintenance. These are expected local documentation updates, not shell instructions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"The line directs appending an operation record to the wiki log. Backticks format the log path and do not execute it.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","reason":"This marker opens a fenced Markdown example containing an ingest log entry. The example has no shell interpreter or executable command.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","reason":"This marker closes the ingest log example fence. It is Markdown structure, not a backtick execution expression.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:113:ruby-shell-backtick-execution","reason":"Inline code formats a log field and an example project-relative raw path. The instruction defines log contents without executing them.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","reason":"This fence opens an example No material ingest record. Its contents are Markdown log text, not shell code.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","reason":"This fence closes the No material log example. It provides no executable operation.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:141:ruby-shell-backtick-execution","reason":"The backtick span identifies the wiki index used to find relevant articles. The step requests local knowledge retrieval, not shell command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:143:ruby-shell-backtick-execution","reason":"Inline code illustrates a Markdown citation to a wiki article. It does not execute the link or send data externally.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","reason":"Backticks format the archive template and citation path examples. The workflow requires an explicit archive request and writes within the wiki.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:153:ruby-shell-backtick-execution","reason":"The inline string is a sample archive filename. No shell command or executable expression is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","reason":"Inline code names the wiki index and the Archived summary prefix. It specifies document metadata rather than execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:157:ruby-shell-backtick-execution","reason":"The instruction appends a requested archive operation to the wiki log. Backticks only format the destination filename.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:158:ruby-shell-backtick-execution","reason":"This marker opens a fenced archive log heading example. It contains document syntax rather than shell code.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","reason":"This is the closing fence for the archive log heading example. It performs no execution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","reason":"The backtick span identifies the wiki index for a consistency check. Comparing local wiki files is an advertised lint function.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:173:ruby-shell-backtick-execution","reason":"The inline text is a no summary placeholder for an index entry. It is not executable syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","reason":"Backticks format the MISSING label used for broken index entries. The instruction explicitly preserves the entry for user review.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:195:ruby-shell-backtick-execution","reason":"The documented Python command runs the bundled read-only evidence checker against the selected project. Backticks delimit Markdown, and the checker performs no shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","reason":"The inline path names the raw directory as the evidence boundary. The instruction requires reporting escaping links rather than following them as evidence.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","reason":"The path references the article template for checking status annotation formatting. No executable operation is embedded in the backtick span.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:219:ruby-shell-backtick-execution","reason":"The inline path identifies the local log for recording lint results. This is documented bookkeeping, not command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:221:ruby-shell-backtick-execution","reason":"This marker opens a fenced lint log example. The enclosed heading is document text rather than executable code.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:223:ruby-shell-backtick-execution","reason":"This marker closes the lint log example fence. It is Markdown punctuation without an execution context.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","reason":"Backticks format the Unknown value for unavailable publication dates. This is a metadata convention, not a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:232:ruby-shell-backtick-execution","reason":"Inline code illustrates project-relative citation paths in conversation output. No shell evaluation is requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","reason":"Backticks name the wiki index and log as workflow outputs. The line also explicitly states that plain queries never write files.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:90:path-traversal-sequence","reason":"The parent components move from a wiki topic directory to the project root before entering raw. This documents normal in-project source citations.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:150:path-traversal-sequence","reason":"The instruction converts conversation citations into file-relative links for an explicitly requested archive page. The example addresses another wiki topic, not a sensitive external path.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:tests/test_check_evidence.py:200:python-subprocess-run","reason":"The test helper invokes sys.executable with the repository checker path and fixture arguments as a list. No shell is enabled, and output is captured for assertions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:tests/test_check_evidence.py:33:ruby-shell-backtick-execution","reason":"The apparent install flag is inline code inside a Python Markdown fixture string. Tests verify that its number is ignored, not executed.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:35:ruby-shell-backtick-execution","reason":"These backticks open a Markdown fence within a Python fixture string. They test code-block exclusion and do not execute fixture contents.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:37:ruby-shell-backtick-execution","reason":"These backticks close a fenced Markdown example in fixture data. Python treats the entire example as a string.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:80:ruby-shell-backtick-execution","reason":"The four-backtick fence is fixture content for testing alternate Markdown fences. It is never evaluated as a command.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:82:ruby-shell-backtick-execution","reason":"This closes the four-backtick fence inside a Python string fixture. The test passes the text to the Markdown evidence parser.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:426:ruby-shell-backtick-execution","reason":"The string writes a fenced example into a temporary test log. It verifies that fenced log headings cannot suppress inventory reports.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:428:ruby-shell-backtick-execution","reason":"The closing fence is part of the temporary log fixture. It is text used in a parser regression test, not shell code.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:497:ruby-shell-backtick-execution","reason":"The fixture embeds a fenced Raw template to ensure body examples do not become metadata. Backticks remain string data throughout the test.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:518:ruby-shell-backtick-execution","reason":"This Python string contains a fenced body section for a document-structure regression test. No interpreter runs its contents.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:528:ruby-shell-backtick-execution","reason":"The fenced fake title and Archived field test that code examples cannot exempt an ordinary article. The text is inert fixture data.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:549:ruby-shell-backtick-execution","reason":"The string deliberately contains a malformed Markdown fence closer for parser testing. It does not reach a shell or evaluator.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:560:ruby-shell-backtick-execution","reason":"The malformed fence info string is a negative parser test. Backticks are fixture characters, not command substitution.","verdict":"false_positive","confidence":1},{"id":"external_commands:tests/test_check_evidence.py:652:ruby-shell-backtick-execution","reason":"Indented backticks are supplied as string data to test fence indentation rules. The fixture is parsed as Markdown and never executed.","verdict":"false_positive","confidence":1},{"id":"network:tests/test_check_evidence.py:11:hardcoded-url","reason":"The example.com URL is source metadata inside RAW_CONTENT fixture text. Neither the test nor the checker fetches the URL.","verdict":"false_positive","confidence":1},{"id":"network:tests/test_check_evidence.py:45:hardcoded-url","reason":"This example.com URL labels a numeric evidence fixture. It is stored as text and does not initiate a network request.","verdict":"false_positive","confidence":1},{"id":"network:tests/test_check_evidence.py:98:hardcoded-url","reason":"The example.com URL appears in a raw metadata parsing fixture. The checker reads the local fixture body without fetching its Source URL.","verdict":"false_positive","confidence":1},{"id":"network:tests/test_check_evidence.py:132:hardcoded-url","reason":"This URL is inert metadata for number-boundary tests. The implementation has no HTTP client or request to this destination.","verdict":"false_positive","confidence":1},{"id":"network:tests/test_check_evidence.py:149:hardcoded-url","reason":"The example.com URL belongs to PLAIN_RAW test data. It serves as a sample source label and is not contacted.","verdict":"false_positive","confidence":1},{"id":"network:tests/test_check_evidence.py:350:hardcoded-url","reason":"This example.com source URL is part of the unreferenced raw file fixture. Inventory checking uses local files only.","verdict":"false_positive","confidence":1},{"id":"network:tests/test_check_evidence.py:622:hardcoded-url","reason":"The URL is a Markdown link target in a quote-extraction test. The parser removes link targets and does not fetch them.","verdict":"false_positive","confidence":1},{"id":"filesystem:tests/test_check_evidence.py:23:path-traversal-sequence","reason":"The fixture link resolves from a temporary wiki topic to a temporary raw source created by make_wiki. It models the documented project layout.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:55:path-traversal-sequence","reason":"This Markdown fixture links to the numeric raw source under the temporary project. It is an expected evidence reference, not unauthorized traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:63:path-traversal-sequence","reason":"The status annotation fixture cites its temporary raw source through the standard relative path. Tests keep the referenced files inside the temporary project.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:74:path-traversal-sequence","reason":"The fence-variant article fixture uses a normal in-project Raw citation. The link supplies evidence for a Markdown parsing test.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:109:path-traversal-sequence","reason":"The body-metadata fixture points to a raw file created under the temporary root. Its parent components remain within that project.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:117:path-traversal-sequence","reason":"This deliberately escaping Raw link is negative test data. RawEscapeTest asserts that the checker reports the boundary violation instead of accepting the outside file as evidence.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:125:path-traversal-sequence","reason":"The deduplication fixture cites the raw source created within its temporary project. The path is ordinary wiki evidence linking.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:142:path-traversal-sequence","reason":"The boundary-matching test reads a temporary raw numbers file through this relative citation. No sensitive or out-of-project destination is involved.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:159:path-traversal-sequence","reason":"This fixture link targets the plain raw file created by the test setup. It follows the documented wiki-to-raw project structure.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:182:path-traversal-sequence","reason":"The nonexistent raw filename intentionally tests broken-link reporting. The checker reports an evidence error without accessing a file outside raw.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:496:path-traversal-sequence","reason":"The fixture header cites its temporary raw source before embedding a fake template in the body. The path is a valid local evidence reference.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:497:path-traversal-sequence","reason":"The path appears inside a fenced template in fixture body text. The test verifies that the checker ignores it as a Raw metadata link.","verdict":"false_positive","confidence":1},{"id":"filesystem:tests/test_check_evidence.py:507:path-traversal-sequence","reason":"This body-positioned Raw line tests that only header metadata supplies evidence links. The checker rejects the article as missing its Raw field.","verdict":"false_positive","confidence":1},{"id":"filesystem:tests/test_check_evidence.py:519:path-traversal-sequence","reason":"The fixture places this Raw line after a body fence to test metadata boundaries. The checker does not promote the line into a source reference.","verdict":"false_positive","confidence":1},{"id":"filesystem:tests/test_check_evidence.py:539:path-traversal-sequence","reason":"The title-candidate test supplies a standard citation to its temporary raw source. Its purpose is checking title facts, not reaching outside the project.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:548:path-traversal-sequence","reason":"The malformed-fence test uses a valid local Raw citation in the article header. The referenced raw file is created inside the temporary project.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:559:path-traversal-sequence","reason":"This citation supplies temporary local evidence for an invalid fence-opener test. Parent components connect the wiki topic to the project raw directory.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:651:path-traversal-sequence","reason":"The indentation fixture links to a raw source created under the temporary test root. The path does not escape the test project.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:tests/test_check_evidence.py:3:temp-file-creation","reason":"This imports the Python standard library tempfile module for isolated test fixtures. The import itself creates no file or security exposure.","verdict":"false_positive","confidence":1},{"id":"filesystem:tests/test_check_evidence.py:210:temp-file-creation","reason":"TemporaryDirectory provides an isolated fixture root for each test. tearDown explicitly cleans it up, and it is not used for shared secret storage.","verdict":"false_positive","confidence":0.99},{"id":"blocker:tests/test_check_evidence.py:16:system-reconnaissance","reason":"The maintainer quotation is prose inside a raw source fixture. It tests quotation matching and performs no host inspection.","verdict":"false_positive","confidence":1},{"id":"blocker:tests/test_check_evidence.py:28:system-reconnaissance","reason":"This quote appears in the article fixture to match a raw quotation. It contains no reconnaissance command or instruction.","verdict":"false_positive","confidence":1},{"id":"blocker:tests/test_check_evidence.py:169:system-reconnaissance","reason":"The fabricated quotation is deliberate archive-page test data. It verifies archive handling and does not inspect the system.","verdict":"false_positive","confidence":1},{"id":"blocker:tests/test_check_evidence.py:571:system-reconnaissance","reason":"The multiline quote fixture tests whitespace normalization across a paragraph. The word maintainer describes an interview subject, not a host reconnaissance action.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"c993c6abcbffafea2683d7748b53b3dfaf438415","subject_content_hash":"c154f62094738b65e91dbb1c706758137290c622e386b3204e87c60a78f75748","subject_tree_hash":"935419af8347835c9ad181ffdb2007b01fde38cd73ac546d001f666f8d2573ed","subject_plugin_path":"skills/astro-han/karpathy-llm-wiki","audit_payload_hash":"8f67074f512dd7261ac394341d28fe19","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"c993c6abcbffafea2683d7748b53b3dfaf438415","contentHash":"c154f62094738b65e91dbb1c706758137290c622e386b3204e87c60a78f75748","treeHash":"935419af8347835c9ad181ffdb2007b01fde38cd73ac546d001f666f8d2573ed","pluginPath":"skills/astro-han/karpathy-llm-wiki","auditPayloadHash":"8f67074f512dd7261ac394341d28fe19"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/astro-han-karpathy-llm-wiki/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}