{"data":{"skill":{"slug":"avdlee-swiftui-expert-skill","name":"swiftui-expert-skill","icon":"📦","repo":"https://github.com/avdlee/swiftui-agent-skill/tree/main/swiftui-expert-skill/","status":"approved","author":"avdlee","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"ee251d59-8f43-4ece-add7-6f13a9cba0aa","skill_id":"6c28cfe2-2d6f-4d60-93e9-d883d9195567","version":2,"content_hash":"ee5708c1edbae479a8d00ebff226ff3d","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis reported many command, reconnaissance, network, and weak-crypto indicators, but review found they are SwiftUI documentation false positives. The skill contains markdown guidance and Swift examples, with no executable scripts, no command execution instructions, and no evidence of data exfiltration or prompt injection.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"False Positive Static Command Patterns","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":19,"line_start":14},{"file":"references/modern-apis.md","line_end":94,"line_start":73},{"file":"references/state-management.md","line_end":17,"line_start":7}],"confidence":0.96,"description":"The external command detections are caused by inline code formatting and Swift fenced examples, not Ruby backtick execution or shell commands. Representative locations show reference links, SwiftUI modifiers, and code samples rather than executable marketplace code.","confidence_reasoning":"The sampled locations are markdown guidance and Swift code fences. No shell command invocation, script file, or executable command path was found."},{"title":"False Positive Weak Crypto and Reconnaissance Patterns","verdict":"FALSE_POSITIVE","locations":[{"file":"references/image-optimization.md","line_end":94,"line_start":87},{"file":"references/sheet-navigation-patterns.md","line_end":136,"line_start":124},{"file":"references/view-structure.md","line_end":164,"line_start":157}],"confidence":0.94,"description":"The high blocker and reconnaissance detections map to SwiftUI terms such as NavigationStack, AnyView, UIImage(data:), and UI sizing guidance. These are application UI examples, not cryptographic primitives or system discovery behavior.","confidence_reasoning":"The reviewed contexts are SwiftUI examples about images, navigation, and view structure. I found no hashing, encryption, system probing, or malicious intent."},{"title":"Benign Documentation URL Example","verdict":"FALSE_POSITIVE","locations":[{"file":"references/text-formatting.md","line_end":224,"line_start":218}],"confidence":0.97,"description":"The single hardcoded URL is an Apple link inside a SwiftUI markdown Text example. It is not network code and does not send user data.","confidence_reasoning":"The URL appears inside a string literal demonstrating markdown links in SwiftUI Text. There is no fetch, URLSession call, webhook, or credential handling at this location."}],"dangerous_patterns":[],"files_scanned":12,"total_lines":3785,"audit_model":"codex","audited_at":"2026-06-28T11:42:34.708+00:00","created_at":"2026-06-28T12:41:22.003323+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":3,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}