{"data":{"skill":{"slug":"carl-312-ai-architect-lite","name":"ai-architect-lite","icon":"📦","repo":"https://github.com/Carl-312/devlog-starter/tree/main/","status":"approved","author":"Carl-312","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"4e1e1244-dccc-4a31-8074-d4d17fc12e14","skill_id":"6a227c50-84f8-44a3-a661-d73773382854","version":8,"content_hash":"v3:02f077c174c5335e2f5d02ca15e77b70d9543e58:1f62b23510599b4941527fdae6f7a4157b6ecb105a17e8e3200115f06b656213:a916ca14d4a08bf6e89706a4b010e12d705f5fe7b2fa004f36d0cc46ad40e9f1:736b696c6c732f6361726c2d3331322f61692d6172636869746563742d6c697465:86314864b93868380c07ca5019697e03","risk_level":"medium","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Most static findings are false positives caused by Markdown backticks, Chinese UTF-8 documentation, or security guidance text. No prompt injection, network behavior, secret access, or encoded binary content was found. The remaining concerns are path-scope enforcement in helper scripts and one instruction that can run an unbundled project-local Python entrypoint.","remediation":[{"issue":"Unbounded output paths in helper scripts","severity":"medium","suggestion":"Compare resolved output and root paths to the resolved project root before writing, and reject absolute paths outside that root."},{"issue":"Unbundled project-init command can execute project-local code","severity":"medium","suggestion":"Remove the command, bundle the referenced script, or require explicit user confirmation before running project-local entrypoints."},{"issue":"Hidden context files may capture sensitive task notes","severity":"low","suggestion":"Add clear .gitignore guidance for .ai_context and remind users not to store credentials or customer data in logs."}],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"README.md","line_end":164,"line_start":164}]},{"factor":"external_commands","evidence":[{"file":"scripts/append_log.py","line_end":3,"line_start":3},{"file":"scripts/append_log.py","line_end":4,"line_start":4},{"file":"SKILL.md","line_end":7,"line_start":7},{"file":"SKILL.md","line_end":10,"line_start":10},{"file":"SKILL.md","line_end":15,"line_start":15},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":36,"line_start":30},{"file":"SKILL.md","line_end":39,"line_start":36},{"file":"SKILL.md","line_end":39,"line_start":39},{"file":"SKILL.md","line_end":41,"line_start":40},{"file":"SKILL.md","line_end":42,"line_start":41},{"file":"SKILL.md","line_end":43,"line_start":42},{"file":"SKILL.md","line_end":46,"line_start":43},{"file":"SKILL.md","line_end":51,"line_start":46}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":16,"line_start":16}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":16,"line_start":16}],"confidence":0.78,"description":"2. 检查 `PROJECT_ROOT/.ai_context/03_ACTIVE_TASK.md`;缺失则按 `references/lite-protocol.md` 模板创建或运行 `pytho","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The skill instructs the agent to run a Python project-init entrypoint when context is missing. That script is not bundled here, so execution could run project-local code with filesystem side effects."},{"title":"Path Scope Is Not Fully Enforced","locations":[{"file":"scripts/plan_helper.py","line_end":28,"line_start":26},{"file":"scripts/plan_helper.py","line_end":82,"line_start":70},{"file":"scripts/append_log.py","line_end":33,"line_start":33},{"file":"scripts/append_log.py","line_end":100,"line_start":99}],"confidence":0.84,"description":"The helper scripts accept --out and --root path parameters and resolve them, but they do not enforce that writes stay under the active project root. An agent following untrusted task text could write a plan or .ai_context file outside the intended repository.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"The write paths are directly controlled by CLI parameters and no project-root containment check compares them to the current repository. The issue requires command execution with chosen arguments, so severity is medium rather than high."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":10,"total_lines":749,"audit_model":"codex","audited_at":"2026-07-05T07:31:28.081+00:00","created_at":"2026-07-16T17:11:31.797142+00:00","static_findings":[{"id":"network:README.md:164:python-http-libraries","file":"README.md","pattern":"Python HTTP libraries","snippet":"Contributions are welcome! Please feel free to submit issues or pull requests.","category":"network","line_end":164,"severity":"low","line_start":164},{"id":"external_commands:scripts/append_log.py:3:ruby-shell-backtick-execution","file":"scripts/append_log.py","pattern":"Ruby/shell backtick execution","snippet":"Creates `.ai_context/03_ACTIVE_TASK.md` if missing and appends a four-part log entry.","category":"external_commands","line_end":3,"severity":"medium","line_start":3},{"id":"external_commands:scripts/append_log.py:4:ruby-shell-backtick-execution","file":"scripts/append_log.py","pattern":"Ruby/shell backtick execution","snippet":"Run from project root (where `.ai_context` should live).","category":"external_commands","line_end":4,"severity":"medium","line_start":4},{"id":"blocker:scripts/append_log.py:52:system-reconnaissance","file":"scripts/append_log.py","pattern":"System reconnaissance","snippet":"ValueError: If ctx_root path is invalid or outside project","category":"blocker","line_end":52,"severity":"low","line_start":52},{"id":"blocker:scripts/append_log.py:58:system-reconnaissance","file":"scripts/append_log.py","pattern":"System reconnaissance","snippet":"print(f\"Error: Invalid path - {e}\", file=sys.stderr)","category":"blocker","line_end":58,"severity":"low","line_start":58},{"id":"blocker:scripts/plan_helper.py:4:system-reconnaissance","file":"scripts/plan_helper.py","pattern":"System reconnaissance","snippet":"Use stdout by default to avoid extra files; optionally write to a file.","category":"blocker","line_end":4,"severity":"low","line_start":4},{"id":"blocker:scripts/plan_helper.py:72:system-reconnaissance","file":"scripts/plan_helper.py","pattern":"System reconnaissance","snippet":"print(f\"Error: Invalid output path - {e}\")","category":"blocker","line_end":72,"severity":"low","line_start":72},{"id":"sensitive:SECURITY.md:35:environment-file-access","file":"SECURITY.md","pattern":"Environment file access","snippet":"- Commit `.env` files or secrets","category":"sensitive","line_end":35,"severity":"high","line_start":35},{"id":"external_commands:SKILL.md:7:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> 精简版「AI Architecture」:保留 `.ai_context` 记忆协议与 manifest 驱动调度,服务轻量项目或快速移植场景。","category":"external_commands","line_end":7,"severity":"medium","line_start":7},{"id":"external_commands:SKILL.md:10:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 新建/迁移仓库,希望用最小开销引入 `.ai_context` + slash-first 调度。","category":"external_commands","line_end":10,"severity":"medium","line_start":10},{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. 解析路径:`PROJECT_ROOT` = 当前仓库;`TOOLKIT_PATH` = 本技能所在目录(用于引用资源)。","category":"external_commands","line_end":15,"severity":"medium","line_start":15},{"id":"external_commands:SKILL.md:16:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. 检查 `PROJECT_ROOT/.ai_context/03_ACTIVE_TASK.md`;缺失则按 `references/lite-protocol.md` 模板创建或运行 `pytho","category":"external_commands","line_end":16,"severity":"medium","line_start":16},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. 阅读 `03_ACTIVE_TASK.md` 获取 Current Mission;若存在 `01/02` 则作为补充规则加载,不强制解析全部细节。","category":"external_commands","line_end":17,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. 查看 `.ai-manifest.json`:优先使用 `commands` 中的 slash 触发;若无 `cognitive_skills` 配置,则保持纯命令模式。","category":"external_commands","line_end":18,"severity":"medium","line_start":18},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 新手护栏:若拿不准流程,先快速浏览 `references/superpowers-lite.md`,按其“迷你 TDD”“快速执行模板”走一遍。","category":"external_commands","line_end":19,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 仅本技能加载时的默认动作:先输出友好欢迎语,告诉用户你已启用 AI Architect Lite,并给出 3 个可选下一步(如:1 生成迷你计划 `python scripts/plan_help","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **迷你流程(面向新手)**:用 3 步走完——1 写目标/约束/<=5 步计划(可直接在回答里列出,或运行 `python scripts/plan_helper.py --goal \\\"...","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **日志写入**:优先运行 `python scripts/append_log.py --note \"...\" --action \"...\" --changes \"...\" --outcome ","category":"external_commands","line_end":25,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **范围与安全**:仅操作 `PROJECT_ROOT`;执行前用中文说明修改/命令目的与影响,避免写入密钥。","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **上下文收敛**:长文档/规范放入 `references/`,按需加载;核心指令保持在本文件。","category":"external_commands","line_end":27,"severity":"medium","line_start":27},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":36,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":39,"severity":"medium","line_start":36},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/lite-protocol.md`:`.ai_context` 最小规范、开发日志模板、slash-first 调度要点。","category":"external_commands","line_end":39,"severity":"medium","line_start":39},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/superpowers-lite.md`:超能力精简卡,涵盖迷你 TDD、系统化调试和透明协作的最小做法。","category":"external_commands","line_end":41,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `scripts/append_log.py`:为新手准备的最小日志脚本,自动建文件并按模板追加;可作为示例扩展。","category":"external_commands","line_end":42,"severity":"medium","line_start":41},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `scripts/plan_helper.py`:生成目标/约束/步骤/验证的极简计划模板,默认输出到终端,避免额外文件。","category":"external_commands","line_end":43,"severity":"medium","line_start":42},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `assets/`:保留占位,用于未来模板/示例;当前无需加载到上下文。","category":"external_commands","line_end":46,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":51,"severity":"medium","line_start":46},{"id":"filesystem:SKILL.md:24:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- **迷你流程(面向新手)**:用 3 步走完——1 写目标/约束/<=5 步计划(可直接在回答里列出,或运行 `python scripts/plan_helper.py --goal \\\"...","category":"filesystem","line_end":24,"severity":"high","line_start":24},{"id":"filesystem:SKILL.md:16:hidden-file-access","file":"SKILL.md","pattern":"Hidden file access","snippet":"2. 检查 `PROJECT_ROOT/.ai_context/03_ACTIVE_TASK.md`;缺失则按 `references/lite-protocol.md` 模板创建或运行 `pytho","category":"filesystem","line_end":16,"severity":"medium","line_start":16},{"id":"obfuscation:references/lite-protocol.md:1:heuristic-high-file-entropy-6-30-bits-possible-b","file":"references/lite-protocol.md","pattern":"[HEURISTIC] High file entropy (6.30 bits) - possible binary/encrypted content","snippet":"File: references/lite-protocol.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/superpowers-lite.md:1:heuristic-high-file-entropy-7-04-bits-possible-b","file":"references/superpowers-lite.md","pattern":"[HEURISTIC] High file entropy (7.04 bits) - possible binary/encrypted content","snippet":"File: references/superpowers-lite.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.06 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"network:README.md:164:python-http-libraries","reason":"The cited line is contribution text and contains no HTTP import, URL, or request logic. The network library pattern is absent in this context.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:scripts/append_log.py:3:ruby-shell-backtick-execution","reason":"The line is a Python docstring describing a Markdown file path. Backticks are documentation formatting, not shell execution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/append_log.py:4:ruby-shell-backtick-execution","reason":"The line is a Python docstring describing where the helper should run. Backticks are documentation formatting, not shell execution.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/append_log.py:52:system-reconnaissance","reason":"This is an exception description in a docstring about invalid paths. It does not collect system information or enumerate the host.","verdict":"false_positive","confidence":0.93},{"id":"blocker:scripts/append_log.py:58:system-reconnaissance","reason":"The code prints a local path-validation error to stderr. It does not perform reconnaissance or transmit host details.","verdict":"false_positive","confidence":0.9},{"id":"blocker:scripts/plan_helper.py:4:system-reconnaissance","reason":"The docstring says stdout is used by default to avoid extra files. No system information collection occurs here.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/plan_helper.py:72:system-reconnaissance","reason":"The code prints an invalid path error for a user-supplied output path. It does not probe or inventory system state.","verdict":"false_positive","confidence":0.9},{"id":"sensitive:SECURITY.md:35:environment-file-access","reason":"The line tells users not to commit .env files or secrets. It is preventative guidance, not environment-file access.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:7:ruby-shell-backtick-execution","reason":"Markdown text references .ai_context in backticks. This is documentation, not shell execution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:10:ruby-shell-backtick-execution","reason":"The line describes the .ai_context workflow in Markdown. No command invocation or shell evaluation is present.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","reason":"Backticks mark variable names for project and toolkit paths. No command is executed on this line.","verdict":"false_positive","confidence":0.95},{"id":"external_commands:SKILL.md:16:ruby-shell-backtick-execution","reason":"The skill instructs the agent to run a Python project-init entrypoint when context is missing. That script is not bundled here, so execution could run project-local code with filesystem side effects.","verdict":"confirmed","severity":"medium","confidence":0.78},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"Backticks identify local context files. The line instructs reading project notes, not invoking shell commands.","verdict":"false_positive","confidence":0.95},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","reason":"Backticks identify a manifest file and manifest keys. This is configuration reading, not command execution.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"Backticks cite a reference document. No command or shell syntax appears on this line.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"This line lists optional next steps and command examples for bundled helpers. It does not require automatic execution, and the examples are not shell-interpolated.","verdict":"false_positive","confidence":0.72},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The command example runs the bundled plan helper with explicit arguments and stdout output. It is a documented helper use, not shell backtick execution or injection.","verdict":"false_positive","confidence":0.82},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"The command example runs the bundled logger with quoted arguments and no shell expansion. It appends to the documented project task log, which is expected behavior for this skill.","verdict":"false_positive","confidence":0.78},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"Backticks mark PROJECT_ROOT in scope guidance. The line warns about command impact and avoiding secrets, not shell execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","reason":"Backticks mark the references directory. This is documentation about context loading, not command execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"The line is a Markdown code-fence delimiter. It is not executable shell syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","reason":"The line is a Markdown code-fence delimiter. It is not executable shell syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","reason":"The line lists a reference Markdown file and .ai_context format. It does not invoke a command.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The line lists a reference Markdown file. The backticks are documentation formatting only.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","reason":"The line lists the bundled logger script as a resource. It does not contain shell execution syntax.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"The line lists the bundled plan helper script as a resource. It does not execute the script.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"The line lists the assets directory as a placeholder. It contains no command execution pattern.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"The line opens a Markdown code fence for an example log snippet. It is not executable shell syntax.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:24:path-traversal-sequence","reason":"The line contains a less-than-or-equal plan limit and a stdout-only helper example. There is no parent-directory traversal sequence or file path write on this line.","verdict":"false_positive","confidence":0.9},{"id":"filesystem:SKILL.md:16:hidden-file-access","reason":"The hidden .ai_context path is the documented local project memory location. It is not covert access to existing secrets, though users should review file creation.","verdict":"false_positive","confidence":0.82},{"id":"obfuscation:references/lite-protocol.md:1:heuristic-high-file-entropy-6-30-bits-possible-b","reason":"The file is readable Markdown with Chinese text and a small template. Higher entropy is explained by UTF-8 multilingual text, not binary or encrypted content.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:references/superpowers-lite.md:1:heuristic-high-file-entropy-7-04-bits-possible-b","reason":"The file is readable UTF-8 Markdown with a BOM and Chinese text. No encoded payload or obfuscation is present.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","reason":"The file is readable Markdown with YAML front matter and Chinese text. The entropy heuristic is caused by multilingual content, not obfuscation.","verdict":"false_positive","confidence":0.96}],"semantic_findings":[{"title":"Path Scope Is Not Fully Enforced","severity":"medium","locations":[{"file":"scripts/plan_helper.py","line_end":28,"line_start":26},{"file":"scripts/plan_helper.py","line_end":82,"line_start":70},{"file":"scripts/append_log.py","line_end":33,"line_start":33},{"file":"scripts/append_log.py","line_end":100,"line_start":99}],"confidence":0.84,"description":"The helper scripts accept --out and --root path parameters and resolve them, but they do not enforce that writes stay under the active project root. An agent following untrusted task text could write a plan or .ai_context file outside the intended repository.","confidence_reasoning":"The write paths are directly controlled by CLI parameters and no project-root containment check compares them to the current repository. The issue requires command execution with chosen arguments, so severity is medium rather than high."}],"subject_marketplace_commit_sha":"02f077c174c5335e2f5d02ca15e77b70d9543e58","subject_content_hash":"1f62b23510599b4941527fdae6f7a4157b6ecb105a17e8e3200115f06b656213","subject_tree_hash":"a916ca14d4a08bf6e89706a4b010e12d705f5fe7b2fa004f36d0cc46ad40e9f1","subject_plugin_path":"skills/carl-312/ai-architect-lite","audit_payload_hash":"86314864b93868380c07ca5019697e03","confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":"02f077c174c5335e2f5d02ca15e77b70d9543e58","contentHash":"1f62b23510599b4941527fdae6f7a4157b6ecb105a17e8e3200115f06b656213","treeHash":"a916ca14d4a08bf6e89706a4b010e12d705f5fe7b2fa004f36d0cc46ad40e9f1","pluginPath":"skills/carl-312/ai-architect-lite","auditPayloadHash":"86314864b93868380c07ca5019697e03"},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"medium","confirmedFindingCount":1,"capabilityReviewCount":1,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}