{"data":{"skill":{"slug":"aykahshi-copilot-flow","name":"copilot-flow","icon":"📦","repo":"https://github.com/Aykahshi/copilot-mcp-tool/tree/main/plugins/copilot-flow/skills/copilot-flow-integration","status":"approved","author":"Aykahshi","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"70ea089d-c1c1-40f3-a681-8d0701e78def","skill_id":"0bf1cc21-d8f6-486e-b7e6-040df41a5019","version":6,"content_hash":"29866d199b7f403bb20a68935f24564a","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All static findings are false positives. The skill is a legitimate AI collaboration workflow orchestrator that coordinates development tasks between Claude and Copilot. Static scanner detected patterns in metadata fields (hash values, URLs) and documentation file references that do not represent security risks.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":87,"line_start":86}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":629,"audit_model":"claude","audited_at":"2026-01-21T16:57:49.735+00:00","created_at":"2026-01-21T22:37:37.753155+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}