{"data":{"skill":{"slug":"aykahshi-copilot-flow","name":"copilot-flow","icon":"📦","repo":"https://github.com/Aykahshi/copilot-mcp-tool/tree/main/plugins/copilot-flow/skills/copilot-flow-integration","status":"approved","author":"Aykahshi","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"eef2af87-e3f2-4e0b-875f-1c1863404bc3","skill_id":"0bf1cc21-d8f6-486e-b7e6-040df41a5019","version":5,"content_hash":"2acc113217ecb6eb848472305931606e","risk_level":"medium","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":31,"line_start":31},{"file":"SKILL.md","line_end":36,"line_start":36},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":65,"line_start":63},{"file":"SKILL.md","line_end":77,"line_start":65},{"file":"SKILL.md","line_end":81,"line_start":77},{"file":"SKILL.md","line_end":86,"line_start":81},{"file":"SKILL.md","line_end":107,"line_start":86},{"file":"SKILL.md","line_end":109,"line_start":107},{"file":"SKILL.md","line_end":120,"line_start":109},{"file":"SKILL.md","line_end":121,"line_start":120},{"file":"SKILL.md","line_end":123,"line_start":121},{"file":"SKILL.md","line_end":124,"line_start":123},{"file":"SKILL.md","line_end":144,"line_start":124}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[{"title":"Weak cryptographic algorithm","locations":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":38,"line_start":38},{"file":"SKILL.md","line_end":39,"line_start":39},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":45,"line_start":45},{"file":"SKILL.md","line_end":99,"line_start":99},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":121,"line_start":121},{"file":"SKILL.md","line_end":121,"line_start":121},{"file":"SKILL.md","line_end":151,"line_start":151},{"file":"SKILL.md","line_end":156,"line_start":156}],"description":"Weak cryptographic algorithm detected in code"},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":31,"line_start":31},{"file":"SKILL.md","line_end":36,"line_start":36},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":65,"line_start":63},{"file":"SKILL.md","line_end":77,"line_start":65},{"file":"SKILL.md","line_end":81,"line_start":77},{"file":"SKILL.md","line_end":86,"line_start":81},{"file":"SKILL.md","line_end":107,"line_start":86},{"file":"SKILL.md","line_end":109,"line_start":107},{"file":"SKILL.md","line_end":120,"line_start":109},{"file":"SKILL.md","line_end":121,"line_start":120},{"file":"SKILL.md","line_end":123,"line_start":121},{"file":"SKILL.md","line_end":124,"line_start":123},{"file":"SKILL.md","line_end":144,"line_start":124}],"description":"Ruby/shell backtick execution detected in code"},{"title":"Network reconnaissance","locations":[{"file":"SKILL.md","line_end":87,"line_start":86}],"description":"Network reconnaissance detected in code"}],"files_scanned":2,"total_lines":334,"audit_model":"claude","audited_at":"2026-01-16T18:21:02.277+00:00","created_at":"2026-01-21T01:48:58.988738+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}