{"data":{"skill":{"slug":"bellybook-genesis","name":"genesis","icon":"📦","repo":"https://github.com/BellyBook/genesis/tree/main/","status":"approved","author":"BellyBook","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"9f644497-301b-4507-b1ae-5da596a3bc62","skill_id":"b333fcba-cd88-4439-a05c-dc497e4e69b8","version":10,"content_hash":"v3:8c3e20bba512c392d9b02ee748b18e0b09d4982c:05d9d0736b829c2eeacf4b3667b3e5175f1a71c660226ed33d175674204502c7:8adea6d7288c9ffc3da9939175f8af85d9e5c7497173cdf70d431cd55d24cf9a:736b696c6c732f62656c6c79626f6f6b2f67656e65736973:417e24d18ee07b89c0ab7f8637d16e41","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"Most alerts are false positives from documentation URLs, standard Claude paths, UTF-8 Chinese text, and Markdown syntax. Four shell blocks execute filesystem, package, script, and server commands. They use unquoted user values and explicitly bypass confirmation, creating command injection and supply-chain execution risks.","remediation":[{"issue":"Shell commands interpolate project names and target directories without validation or quoting.","severity":"high","suggestion":"Validate names against a strict lowercase-hyphen pattern and pass quoted paths through positional parameters or structured tool arguments."},{"issue":"The workflow directs agents to install dependencies and start scripts or servers without confirmation.","severity":"high","suggestion":"Show each command, explain its effects, and require explicit approval before copying files, installing packages, running scripts, or starting services."},{"issue":"Referenced templates and reference documents are absent from the audited package.","severity":"medium","suggestion":"Include every referenced file, dependency manifest, and lockfile so reviewers can verify generated code and installation scripts."},{"issue":"The sed examples require macOS or BSD command syntax.","severity":"medium","suggestion":"Use a portable project-renaming tool or provide tested commands for macOS, Linux, and Windows."}],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"README.md","line_end":29,"line_start":29},{"file":"README.md","line_end":35,"line_start":35}]},{"factor":"filesystem","evidence":[{"file":"README.md","line_end":35,"line_start":35},{"file":"README.md","line_end":41,"line_start":41},{"file":"README.md","line_end":35,"line_start":35},{"file":"README.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":60,"line_start":60},{"file":"SKILL.md","line_end":88,"line_start":88},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":149,"line_start":149},{"file":"SKILL.md","line_end":60,"line_start":60},{"file":"SKILL.md","line_end":88,"line_start":88},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":149,"line_start":149}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":45,"line_start":34},{"file":"SKILL.md","line_end":59,"line_start":45},{"file":"SKILL.md","line_end":63,"line_start":59},{"file":"SKILL.md","line_end":87,"line_start":63},{"file":"SKILL.md","line_end":91,"line_start":87},{"file":"SKILL.md","line_end":113,"line_start":91},{"file":"SKILL.md","line_end":119,"line_start":113},{"file":"SKILL.md","line_end":131,"line_start":119},{"file":"SKILL.md","line_end":132,"line_start":131},{"file":"SKILL.md","line_end":133,"line_start":132},{"file":"SKILL.md","line_end":134,"line_start":133},{"file":"SKILL.md","line_end":148,"line_start":134},{"file":"SKILL.md","line_end":155,"line_start":148}]}],"critical_findings":[],"high_findings":[{"title":"Unquoted User Values in Shell Commands","locations":[{"file":"SKILL.md","line_end":62,"line_start":60},{"file":"SKILL.md","line_end":90,"line_start":88},{"file":"SKILL.md","line_end":118,"line_start":114},{"file":"SKILL.md","line_end":154,"line_start":149}],"confidence":0.96,"description":"Project names and target directories are inserted into shell commands without strict validation or quoting. Shell metacharacters could alter commands, overwrite unintended files, or execute additional processes.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The commands visibly interpolate target-directory and project-name placeholders without quoting. The checklist suggests a naming format but does not enforce or sanitize it."},{"title":"Unconfirmed Dependency and Process Execution","locations":[{"file":"SKILL.md","line_end":62,"line_start":57},{"file":"SKILL.md","line_end":90,"line_start":85},{"file":"SKILL.md","line_end":118,"line_start":111},{"file":"SKILL.md","line_end":154,"line_start":146}],"confidence":0.98,"description":"The skill explicitly directs immediate execution without confirmation, then installs dependencies and starts scripts or servers. Package lifecycle hooks and copied scripts can execute unreviewed code.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"Each workflow says to execute without confirmation and then invokes npm, uv, a local shell script, or Go tooling. These commands cause direct side effects."}],"medium_findings":[{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":63,"line_start":59}],"confidence":0.98,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fenced Bash block copies files, edits package metadata, installs npm dependencies, and starts a development server. Although the detector mislabeled Markdown backticks, the block directs real process and filesystem execution."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":91,"line_start":87}],"confidence":0.98,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fenced Bash block copies and edits a project, resolves Python dependencies, and launches a local script. These commands create filesystem, dependency, and process side effects."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":119,"line_start":113}],"confidence":0.98,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fenced Bash block copies a Taro project, rewrites configuration, installs npm dependencies, and starts a WeChat development process. These are real external-command side effects."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":155,"line_start":148}],"confidence":0.98,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fenced Bash block copies a Go project, rewrites multiple files, resolves modules, and starts an API process. These commands have broad filesystem and process effects."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":427,"audit_model":"codex","audited_at":"2026-07-23T10:55:26.954+00:00","created_at":"2026-07-24T09:11:53.369422+00:00","static_findings":[{"id":"network:README.md:29:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"帮我安装 Genesis Skill:https://github.com/BellyBook/genesis","category":"network","line_end":29,"severity":"low","line_start":29},{"id":"network:README.md:35:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/BellyBook/genesis.git ~/.claude/skills/genesis","category":"network","line_end":35,"severity":"low","line_start":35},{"id":"filesystem:README.md:35:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/BellyBook/genesis.git ~/.claude/skills/genesis","category":"filesystem","line_end":35,"severity":"high","line_start":35},{"id":"filesystem:README.md:41:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"ls ~/.claude/skills/genesis/SKILL.md","category":"filesystem","line_end":41,"severity":"high","line_start":41},{"id":"filesystem:README.md:35:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/BellyBook/genesis.git ~/.claude/skills/genesis","category":"filesystem","line_end":35,"severity":"medium","line_start":35},{"id":"filesystem:README.md:41:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"ls ~/.claude/skills/genesis/SKILL.md","category":"filesystem","line_end":41,"severity":"medium","line_start":41},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **A. 模板复制** | 直接复制 `templates/` 下的现成项目 | 快速启动、标准项目、不需要定制 |","category":"external_commands","line_end":18,"severity":"medium","line_start":18},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **B. AI 生成**  | 根据 `references/` 文档从零构建    | 深度定制、学习过程、特殊需求   |","category":"external_commands","line_end":19,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":45,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":59,"severity":"medium","line_start":45},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":63,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":87,"severity":"medium","line_start":63},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":91,"severity":"medium","line_start":87},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":113,"severity":"medium","line_start":91},{"id":"external_commands:SKILL.md:113:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":119,"severity":"medium","line_start":113},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":131,"severity":"medium","line_start":119},{"id":"external_commands:SKILL.md:131:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 微信小程序 (`npm run dev:weapp`)","category":"external_commands","line_end":132,"severity":"medium","line_start":131},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 支付宝小程序 (`npm run dev:alipay`)","category":"external_commands","line_end":133,"severity":"medium","line_start":132},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 抖音小程序 (`npm run dev:tt`)","category":"external_commands","line_end":134,"severity":"medium","line_start":133},{"id":"external_commands:SKILL.md:134:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- H5 (`npm run dev:h5`)","category":"external_commands","line_end":148,"severity":"medium","line_start":134},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":155,"severity":"medium","line_start":148},{"id":"filesystem:SKILL.md:60:hidden-file-in-home-directory","file":"SKILL.md","pattern":"Hidden file in home directory","snippet":"cp -r ~/.claude/skills/genesis/templates/web-react {目标目录}","category":"filesystem","line_end":60,"severity":"high","line_start":60},{"id":"filesystem:SKILL.md:88:hidden-file-in-home-directory","file":"SKILL.md","pattern":"Hidden file in home directory","snippet":"cp -r ~/.claude/skills/genesis/templates/backend-python {目标目录}","category":"filesystem","line_end":88,"severity":"high","line_start":88},{"id":"filesystem:SKILL.md:114:hidden-file-in-home-directory","file":"SKILL.md","pattern":"Hidden file in home directory","snippet":"cp -r ~/.claude/skills/genesis/templates/miniapp {目标目录}","category":"filesystem","line_end":114,"severity":"high","line_start":114},{"id":"filesystem:SKILL.md:149:hidden-file-in-home-directory","file":"SKILL.md","pattern":"Hidden file in home directory","snippet":"cp -r ~/.claude/skills/genesis/templates/backend-go {目标目录}","category":"filesystem","line_end":149,"severity":"high","line_start":149},{"id":"filesystem:SKILL.md:60:hidden-file-access","file":"SKILL.md","pattern":"Hidden file access","snippet":"cp -r ~/.claude/skills/genesis/templates/web-react {目标目录}","category":"filesystem","line_end":60,"severity":"medium","line_start":60},{"id":"filesystem:SKILL.md:88:hidden-file-access","file":"SKILL.md","pattern":"Hidden file access","snippet":"cp -r ~/.claude/skills/genesis/templates/backend-python {目标目录}","category":"filesystem","line_end":88,"severity":"medium","line_start":88},{"id":"filesystem:SKILL.md:114:hidden-file-access","file":"SKILL.md","pattern":"Hidden file access","snippet":"cp -r ~/.claude/skills/genesis/templates/miniapp {目标目录}","category":"filesystem","line_end":114,"severity":"medium","line_start":114},{"id":"filesystem:SKILL.md:149:hidden-file-access","file":"SKILL.md","pattern":"Hidden file access","snippet":"cp -r ~/.claude/skills/genesis/templates/backend-go {目标目录}","category":"filesystem","line_end":149,"severity":"medium","line_start":149},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-22-bits-possible-b","file":"README.md","pattern":"[HEURISTIC] High file entropy (6.22 bits) - possible binary/encrypted content","snippet":"File: README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-39-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (6.39 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"network:README.md:29:hardcoded-url","reason":"The URL is a visible link to the skill's declared GitHub repository in installation documentation. It does not transmit data or contact an unrelated service.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:35:hardcoded-url","reason":"The URL is the declared repository used by an explicit git clone installation command. The network destination is transparent and expected for this operation.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:35:hidden-file-in-home-directory","reason":"The destination is the standard Claude skill installation directory. The command does not access unrelated hidden files or user secrets.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:41:hidden-file-in-home-directory","reason":"The command only lists the installed skill's SKILL.md file to verify installation. This is read-only access to the documented installation path.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:35:hidden-file-access","reason":"The hidden path is the expected Claude skills directory and is used as an explicit installation destination. No arbitrary hidden-file access is requested.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:41:hidden-file-access","reason":"This is a read-only existence check for the installed SKILL.md file. It does not enumerate or modify unrelated hidden content.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","reason":"The backticks delimit the Markdown path templates/. They are not Ruby or shell command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"The backticks format the Markdown path references/. No command execution occurs on this line.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"This is an opening Markdown fence for a plain-text decision diagram. It contains no executable shell or Ruby expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"This is a Markdown fence closing a decision diagram, followed by descriptive project guidance. The backticks are not an execution primitive.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The fenced Bash block copies files, edits package metadata, installs npm dependencies, and starts a development server. Although the detector mislabeled Markdown backticks, the block directs real process and filesystem execution.","verdict":"confirmed","severity":"medium","confidence":0.98},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","reason":"This line closes the preceding Bash fence; the cited span then contains explanatory prose and links. The actual command block is adjudicated separately.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","reason":"The fenced Bash block copies and edits a project, resolves Python dependencies, and launches a local script. These commands create filesystem, dependency, and process side effects.","verdict":"confirmed","severity":"medium","confidence":0.98},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","reason":"This is a closing Markdown fence followed by descriptive Python and Taro guidance. It is not itself Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:113:ruby-shell-backtick-execution","reason":"The fenced Bash block copies a Taro project, rewrites configuration, installs npm dependencies, and starts a WeChat development process. These are real external-command side effects.","verdict":"confirmed","severity":"medium","confidence":0.98},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"This line closes a Markdown command example; the cited continuation is prose about supported platforms. The executable block is covered by the preceding confirmed verdict.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:131:ruby-shell-backtick-execution","reason":"The npm command is inline documentation naming the WeChat development target. Markdown backticks do not execute it.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","reason":"The npm command is inline documentation naming the Alipay development target. It is not shell command substitution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","reason":"The npm command is inline documentation naming the Douyin development target. It is not executed by the Markdown.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:134:ruby-shell-backtick-execution","reason":"The inline npm command documents the H5 target, and the remaining cited text is descriptive guidance. No backtick-based execution occurs.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","reason":"The fenced Bash block copies a Go project, rewrites multiple files, resolves modules, and starts an API process. These commands have broad filesystem and process effects.","verdict":"confirmed","severity":"medium","confidence":0.98},{"id":"filesystem:SKILL.md:60:hidden-file-in-home-directory","reason":"The source path is the skill's own expected template directory under the standard Claude installation path. It does not target unrelated hidden user data.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:88:hidden-file-in-home-directory","reason":"The source path points to this skill's expected Python template under the standard Claude skills directory. The separate copy and execution risks are covered elsewhere.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:114:hidden-file-in-home-directory","reason":"The source path points to this skill's expected Taro template under the standard Claude skills directory. It is not an attempt to inspect arbitrary hidden files.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:149:hidden-file-in-home-directory","reason":"The source path points to this skill's expected Go template under the standard Claude skills directory. This path is part of the documented installation layout.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:60:hidden-file-access","reason":"The command accesses only the skill's named web-react template path. It does not read unrelated hidden content.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:88:hidden-file-access","reason":"The command accesses only the skill's named backend-python template path. The path itself is expected skill content.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:114:hidden-file-access","reason":"The command accesses only the skill's named miniapp template path. It does not request broad hidden-directory access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:149:hidden-file-access","reason":"The command accesses only the skill's named backend-go template path. The external command effects are assessed separately.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-22-bits-possible-b","reason":"README.md is readable UTF-8 Chinese and English Markdown with tables and examples. No encoded, encrypted, or binary payload is present.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-39-bits-possible-b","reason":"SKILL.md is readable UTF-8 Chinese and English Markdown containing structured instructions. Its character diversity explains the entropy without evidence of obfuscation.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[{"title":"Unquoted User Values in Shell Commands","severity":"high","locations":[{"file":"SKILL.md","line_end":62,"line_start":60},{"file":"SKILL.md","line_end":90,"line_start":88},{"file":"SKILL.md","line_end":118,"line_start":114},{"file":"SKILL.md","line_end":154,"line_start":149}],"confidence":0.96,"description":"Project names and target directories are inserted into shell commands without strict validation or quoting. Shell metacharacters could alter commands, overwrite unintended files, or execute additional processes.","confidence_reasoning":"The commands visibly interpolate target-directory and project-name placeholders without quoting. The checklist suggests a naming format but does not enforce or sanitize it."},{"title":"Unconfirmed Dependency and Process Execution","severity":"high","locations":[{"file":"SKILL.md","line_end":62,"line_start":57},{"file":"SKILL.md","line_end":90,"line_start":85},{"file":"SKILL.md","line_end":118,"line_start":111},{"file":"SKILL.md","line_end":154,"line_start":146}],"confidence":0.98,"description":"The skill explicitly directs immediate execution without confirmation, then installs dependencies and starts scripts or servers. Package lifecycle hooks and copied scripts can execute unreviewed code.","confidence_reasoning":"Each workflow says to execute without confirmation and then invokes npm, uv, a local shell script, or Go tooling. These commands cause direct side effects."}],"subject_marketplace_commit_sha":"8c3e20bba512c392d9b02ee748b18e0b09d4982c","subject_content_hash":"05d9d0736b829c2eeacf4b3667b3e5175f1a71c660226ed33d175674204502c7","subject_tree_hash":"8adea6d7288c9ffc3da9939175f8af85d9e5c7497173cdf70d431cd55d24cf9a","subject_plugin_path":"skills/bellybook/genesis","audit_payload_hash":"417e24d18ee07b89c0ab7f8637d16e41","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"8c3e20bba512c392d9b02ee748b18e0b09d4982c","contentHash":"05d9d0736b829c2eeacf4b3667b3e5175f1a71c660226ed33d175674204502c7","treeHash":"8adea6d7288c9ffc3da9939175f8af85d9e5c7497173cdf70d431cd55d24cf9a","pluginPath":"skills/bellybook/genesis","auditPayloadHash":"417e24d18ee07b89c0ab7f8637d16e41"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/bellybook-genesis/audits/10/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":2,"capabilityReviewCount":4,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}