{"data":{"skill":{"slug":"bellybook-genesis","name":"genesis","icon":"📦","repo":"https://github.com/BellyBook/genesis/tree/main/","status":"approved","author":"BellyBook","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"f9f17554-4499-4b39-8fe7-7c3f6244cfeb","skill_id":"b333fcba-cd88-4439-a05c-dc497e4e69b8","version":4,"content_hash":"ad0c84b50a92f974b8a6584b98bd0ceb","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Legitimate project scaffolding skill with standard development tools. Shell commands and script execution are directly related to project initialization purpose. No credential theft, network exfiltration, or obfuscation patterns detected. Static findings are false positives from pattern matching limitations on documentation and configuration files.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":63,"line_start":59},{"file":"SKILL.md","line_end":91,"line_start":87},{"file":"SKILL.md","line_end":155,"line_start":148},{"file":"README.md","line_end":30,"line_start":28}]},{"factor":"scripts","evidence":[{"file":"templates/backend-python/local-run.sh","line_end":7,"line_start":1}]},{"factor":"network","evidence":[{"file":"README.md","line_end":29,"line_start":29},{"file":"references/backend-go.md","line_end":24,"line_start":24}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"verdict":"false_positive","category":"network","locations":["README.md:29","references/backend-go.md:24"],"reasoning":"Static documentation links, not dynamic URL fetching","description":"Hardcoded URL references in documentation"}],"dangerous_patterns":[],"files_scanned":76,"total_lines":7058,"audit_model":"claude","audited_at":"2026-01-16T18:46:48.494+00:00","created_at":"2026-01-20T01:03:08.792927+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":1,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}