{"data":{"skill":{"slug":"dhturing-data-asset-capitalization-team","name":"data-asset-capitalization-team","icon":"📦","repo":"https://github.com/dhturing/turing-data-experts/tree/9c58ffa97ec5b760befef6f910eb23107cdcdbf4/skills/data-asset-capitalization-team","status":"approved","author":"图灵数盟","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"0970804a-b52e-4252-bede-e64871525277","skill_id":"98b98f4c-9cdd-45ee-8440-06f9ddaf070a","version":1,"content_hash":"v3:50b73f83991cf073cbdf3f5afad2bbac71dd3bae:571e5aeedc11ab1e717fe6b9b3fcaab6a15ee8acdb0cfe7803b15ddb6cbbd5e3:8f4edb37d4214b39895623460ea7a2a3bfb6d0edec1728ffd21354c815c8ef12:736b696c6c732f6468747572696e672f646174612d61737365742d6361706974616c697a6174696f6e2d7465616d:699e6d3aa1892657dacbfb9b8f70149f","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All static findings are false positives caused by documentation paths, Markdown backticks, ordinary website links, or entropy heuristics on Chinese text. No executable code, network request, obfuscated payload, prompt injection, or harmful intent was found.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"profile.md","line_end":38,"line_start":38},{"file":"profile.md","line_end":38,"line_start":38}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":31,"line_start":31}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":6,"line_start":6},{"file":"SKILL.md","line_end":12,"line_start":12}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":4,"total_lines":254,"audit_model":"codex","audited_at":"2026-09-27T03:17:23.262+00:00","created_at":"2026-09-30T12:11:27.692925+00:00","static_findings":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","file":"profile.md","pattern":"Hidden file in home directory","snippet":"~/.claude/skills/data-asset-capitalization-team/       # Claude Code","category":"filesystem","line_end":38,"severity":"high","line_start":38},{"id":"filesystem:profile.md:38:hidden-file-access","file":"profile.md","pattern":"Hidden file access","snippet":"~/.claude/skills/data-asset-capitalization-team/       # Claude Code","category":"filesystem","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> 完整知识底座见 `references/knowledge-base.md`。","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **团队构成**:主理人 1 名(范全程 / data-asset-capitalization-team-lead)+ 团员 7 名(详见 `references/01-团队知识底座.md`)","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"需要成员路由、政策文号、SOP 步骤、交付物清单、质量校验项与风险提示时,读取 `references/01-团队知识底座.md`。","category":"external_commands","line_end":31,"severity":"medium","line_start":31},{"id":"network:SKILL.md:6:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: \"https://www.turingtech.net.cn\"","category":"network","line_end":6,"severity":"low","line_start":6},{"id":"network:SKILL.md:12:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> **作者**:图灵数盟(图灵数盟(深圳)数字产业有限公司)|[官网](https://www.turingtech.net.cn)|联系邮箱:public@turingtech.net.cn","category":"network","line_end":12,"severity":"low","line_start":12},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-15-bits-possible-b","file":"profile.md","pattern":"[HEURISTIC] High file entropy (6.15 bits) - possible binary/encrypted content","snippet":"File: profile.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-67-bits-possible-b","file":"references/knowledge-base.md","pattern":"[HEURISTIC] High file entropy (7.67 bits) - possible binary/encrypted content","snippet":"File: references/knowledge-base.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-5-65-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.65 bits) - likely encoded/encrypted payload","snippet":"企业数据资源资产化入表端到端交付：盘点、治理、质量评价、成本归集、评估、入表方案与台账，全程可审计。当用户需要组建跨角色团队完成端到端交付时使用。","category":"obfuscation","line_end":3,"severity":"high","line_start":3},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.06 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","reason":"The line only documents a conventional Claude Code installation directory. It does not read, write, or modify any home-directory file.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:profile.md:38:hidden-file-access","reason":"The hidden path appears inside a text installation example. No file-access operation or instruction to inspect unrelated hidden data is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The backticks are Markdown formatting around a relative documentation path. The line contains no shell or Ruby execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The backticks format a referenced Markdown filename in prose. They are not an executable command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","reason":"This line instructs the agent to read a bundled reference document. Markdown backticks do not invoke a shell or external process.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:6:hardcoded-url","reason":"The URL is author homepage metadata. No request, download, credential transfer, or automatic network action is specified.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:12:hardcoded-url","reason":"The URL is a visible author website link in documentation. It does not cause network access or transmit user data.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-15-bits-possible-b","reason":"Direct inspection shows a readable Chinese Markdown profile with tables and installation text. It contains no binary, encrypted, or encoded payload.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-67-bits-possible-b","reason":"Direct inspection shows a readable Chinese knowledge base containing workflows, policy references, and checklists. The entropy signal reflects dense multilingual text, not obfuscation.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-5-65-bits-lik","reason":"The flagged string is a readable Chinese skill description. It contains no encoded instructions, ciphertext, or hidden payload.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","reason":"Direct inspection shows ordinary YAML metadata and Chinese Markdown guidance. No obfuscated or executable content is present.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","subject_content_hash":"571e5aeedc11ab1e717fe6b9b3fcaab6a15ee8acdb0cfe7803b15ddb6cbbd5e3","subject_tree_hash":"8f4edb37d4214b39895623460ea7a2a3bfb6d0edec1728ffd21354c815c8ef12","subject_plugin_path":"skills/dhturing/data-asset-capitalization-team","audit_payload_hash":"699e6d3aa1892657dacbfb9b8f70149f","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","contentHash":"571e5aeedc11ab1e717fe6b9b3fcaab6a15ee8acdb0cfe7803b15ddb6cbbd5e3","treeHash":"8f4edb37d4214b39895623460ea7a2a3bfb6d0edec1728ffd21354c815c8ef12","pluginPath":"skills/dhturing/data-asset-capitalization-team","auditPayloadHash":"699e6d3aa1892657dacbfb9b8f70149f"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/dhturing-data-asset-capitalization-team/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}