{"data":{"skill":{"slug":"carl-312-ai-architect-lite","name":"ai-architect-lite","icon":"📦","repo":"https://github.com/Carl-312/devlog-starter/tree/main/","status":"approved","author":"Carl-312","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"eb1f1818-262b-498b-95d4-79f207028003","skill_id":"6a227c50-84f8-44a3-a661-d73773382854","version":1,"content_hash":null,"risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Pure prompt-based Claude skill with two local utility scripts. Scripts access local filesystem only within project root with proper path traversal protection. No network calls, no credential access, no external command execution. Minimal security footprint with Python standard library only.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"scripts/append_log.py","line_end":78,"line_start":67},{"file":"scripts/append_log.py","line_end":94,"line_start":90},{"file":"scripts/plan_helper.py","line_end":82,"line_start":68}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Local filesystem access in utility scripts","locations":[{"file":"scripts/append_log.py","line_end":78,"line_start":67},{"file":"scripts/append_log.py","line_end":94,"line_start":90},{"file":"scripts/plan_helper.py","line_end":82,"line_start":68}],"description":"Both Python scripts access the local filesystem to create and write files within the project root. append_log.py creates `.ai_context/03_ACTIVE_TASK.md` and appends log entries. plan_helper.py writes plan templates to files. These operations include path traversal protection (lines 76-79 in plan_helper.py, lines 62-75 in append_log.py) and are scoped to the project directory as documented. This is necessary for the skill's purpose of maintaining project context."}],"dangerous_patterns":[],"files_scanned":11,"total_lines":699,"audit_model":"claude","audited_at":"2026-01-10T12:02:04.881+00:00","created_at":"2026-01-11T02:53:01.240097+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":1,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}