{"data":{"skill":{"slug":"avdlee-swiftui-expert-skill","name":"swiftui-expert-skill","icon":"📦","repo":"https://github.com/avdlee/swiftui-agent-skill/tree/main/swiftui-expert-skill/","status":"approved","author":"avdlee","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"db87e67a-77a1-409c-89d2-cd1141870757","skill_id":"6c28cfe2-2d6f-4d60-93e9-d883d9195567","version":1,"content_hash":"ff70820aad516fb0ed6edd4436b7d4b6","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All static findings are false positives. The 'Ruby/shell backtick execution' detections are markdown code block delimiters in documentation files. The 'weak cryptographic algorithm' and 'system reconnaissance' patterns are false positives from documentation text and file paths. No actual code execution, network calls, or prompt injection attempts exist. This is a pure documentation skill containing SwiftUI best practices and reference guides.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":261,"line_start":14}]},{"factor":"network","evidence":[{"file":"references/text-formatting.md","line_end":223,"line_start":223}]}],"critical_findings":[],"high_findings":[{"title":"Ruby/Shell Backtick Execution - False Positive","locations":[{"file":"SKILL.md","line_end":261,"line_start":14},{"file":"references/image-optimization.md","line_end":287,"line_start":1},{"file":"references/layout-best-practices.md","line_end":313,"line_start":1},{"file":"references/liquid-glass.md","line_end":378,"line_start":1},{"file":"references/list-patterns.md","line_end":154,"line_start":1},{"file":"references/modern-apis.md","line_end":401,"line_start":1},{"file":"references/performance-patterns.md","line_end":378,"line_start":1},{"file":"references/scroll-patterns.md","line_end":306,"line_start":1},{"file":"references/sheet-navigation-patterns.md","line_end":293,"line_start":1},{"file":"references/state-management.md","line_end":448,"line_start":1},{"file":"references/text-formatting.md","line_end":286,"line_start":1},{"file":"references/view-structure.md","line_end":277,"line_start":1}],"confidence":0.98,"description":"Scanner detected backtick patterns in markdown files. These are code block delimiters in SwiftUI documentation, not actual shell commands. All locations are in markdown files containing Swift code examples.","confidence_reasoning":"All 669 detections are in markdown documentation files. Backticks are markdown syntax for code blocks. No actual shell or Ruby code exists in this repository."}],"medium_findings":[],"low_findings":[{"title":"Hardcoded URL in Documentation","locations":[{"file":"references/text-formatting.md","line_end":223,"line_start":223}],"confidence":0.95,"description":"Scanner detected a URL reference in text-formatting.md. This is a legitimate documentation link, not a security risk.","confidence_reasoning":"URL references in documentation are expected and pose no security risk. No network calls are made by this skill."}],"dangerous_patterns":[],"files_scanned":12,"total_lines":3785,"audit_model":"claude","audited_at":"2026-01-31T08:39:06.922+00:00","created_at":"2026-01-31T09:53:01.926088+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":2,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}