{"data":{"skill":{"slug":"boulea7-chrome-extension-icons","name":"chrome-extension-icons","icon":"📦","repo":"https://github.com/Boulea7/ChromeExtensionIconsSkill/tree/main/skill/","status":"approved","author":"Boulea7","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"d5ded986-eb3c-4d4e-920a-f08121538d2b","skill_id":"6dd0e0eb-bb56-4166-9b49-0bd03a3d61ee","version":5,"content_hash":"1a09e813e6fd4f6a00fd782668f6bdb0","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"This skill is a legitimate icon generation tool for Chrome extensions. All detected patterns are false positives: documentation examples trigger command pattern detection, network requests are to the documented Iconify API, and filesystem operations are standard file writes to user-specified directories. No credential access, exfiltration, or malicious behavior present.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"scripts/generate-icons.js","line_end":92,"line_start":46}]},{"factor":"filesystem","evidence":[{"file":"scripts/generate-icons.js","line_end":246,"line_start":168}]},{"factor":"scripts","evidence":[{"file":"scripts/generate-icons.js","line_end":631,"line_start":1}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Network requests to external API","locations":[{"file":"scripts/generate-icons.js","line_end":163,"line_start":97}],"description":"The script makes HTTPS requests to api.iconify.design to search for and download icons. This is documented and expected behavior for a legitimate icon generation tool."},{"title":"Filesystem write access in user directories","locations":[{"file":"scripts/generate-icons.js","line_end":246,"line_start":200}],"description":"The script writes PNG files to user-specified output directories and modifies manifest.json. This is necessary for icon generation."}],"dangerous_patterns":[],"files_scanned":4,"total_lines":1737,"audit_model":"claude","audited_at":"2026-01-16T20:13:40.346+00:00","created_at":"2026-01-21T01:49:23.704981+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":2,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}