{"data":{"skill":{"slug":"dhturing-data-business-model-expert","name":"data-business-model-expert","icon":"📦","repo":"https://github.com/dhturing/turing-data-experts/tree/9c58ffa97ec5b760befef6f910eb23107cdcdbf4/skills/data-business-model-expert","status":"approved","author":"图灵数盟","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"b275c226-bb92-441c-968d-85b75bbeffb1","skill_id":"bd84a01f-d8fa-4433-b259-e85c3e86159d","version":1,"content_hash":"v3:50b73f83991cf073cbdf3f5afad2bbac71dd3bae:fee4cd9331f9458b6098ec698baca5a053f3f3ea06c2c38ded0cff831d85b520:ccaebb55d0cdfa9c53cc118ff8609aee9ef972251981f4e5510a630e3d4310b7:736b696c6c732f6468747572696e672f646174612d627573696e6573732d6d6f64656c2d657870657274:a48946f16b883ceb0b0e5c173ad8140a","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 12 static findings are false positives caused by Markdown syntax, documented installation paths, ordinary website links, and the entropy profile of Chinese text. No executable code, network request, obfuscated payload, prompt injection, or malicious intent was found.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"profile.md","line_end":38,"line_start":38},{"file":"profile.md","line_end":38,"line_start":38}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":33,"line_start":33}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":6,"line_start":6},{"file":"SKILL.md","line_end":12,"line_start":12}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":4,"total_lines":450,"audit_model":"codex","audited_at":"2026-09-27T03:17:09.839+00:00","created_at":"2026-09-30T12:12:56.887207+00:00","static_findings":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","file":"profile.md","pattern":"Hidden file in home directory","snippet":"~/.claude/skills/data-business-model-expert/       # Claude Code","category":"filesystem","line_end":38,"severity":"high","line_start":38},{"id":"filesystem:profile.md:38:hidden-file-access","file":"profile.md","pattern":"Hidden file access","snippet":"~/.claude/skills/data-business-model-expert/       # Claude Code","category":"filesystem","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> 完整知识底座见 `references/knowledge-base.md`。","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **资料来源**:`图灵数盟内部资料库`","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"读取 `references/knowledge-base.md`(该文件为源资料逐字拷贝,权威版本)。","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"network:SKILL.md:6:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: \"https://www.turingtech.net.cn\"","category":"network","line_end":6,"severity":"low","line_start":6},{"id":"network:SKILL.md:12:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> **作者**:图灵数盟(图灵数盟(深圳)数字产业有限公司)|[官网](https://www.turingtech.net.cn)|联系邮箱:public@turingtech.net.cn","category":"network","line_end":12,"severity":"low","line_start":12},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-26-bits-possible-b","file":"profile.md","pattern":"[HEURISTIC] High file entropy (6.26 bits) - possible binary/encrypted content","snippet":"File: profile.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-7-16-bits-possible-b","file":"README.md","pattern":"[HEURISTIC] High file entropy (7.16 bits) - possible binary/encrypted content","snippet":"File: README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-42-bits-possible-b","file":"references/knowledge-base.md","pattern":"[HEURISTIC] High file entropy (7.42 bits) - possible binary/encrypted content","snippet":"File: references/knowledge-base.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-6-01-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (6.01 bits) - likely encoded/encrypted payload","snippet":"以DMaaS定位与1+4+N架构设计数据商业模式，配齐六类收入与会员渠道并规划进化路线。当用户需要数据商业模式设计专家相关的诊断、方案设计、SOP 执行或交付物...","category":"obfuscation","line_end":3,"severity":"high","line_start":3},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-37-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.37 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","reason":"The path is shown inside a fenced text block as the documented Claude Code installation destination. It does not instruct the skill to read, write, or conceal files at runtime.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:profile.md:38:hidden-file-access","reason":"The hidden directory appears only as an installation example in profile.md. No filesystem operation or automatic access is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline-code delimiters around a relative document path. The line contains no Ruby expression, shell command, or execution instruction.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The backticks format a Chinese source label as inline code. There is no executable command or interpolation context.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The line tells the agent to read a bundled Markdown reference and uses backticks only for formatting. It does not invoke a shell or external process.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:6:hardcoded-url","reason":"The URL is author homepage metadata in YAML frontmatter. No request, download, credential transfer, or other network action is specified.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:12:hardcoded-url","reason":"The URL is a visible author website link next to contact information. It is not used as an endpoint and does not cause network access.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-26-bits-possible-b","reason":"profile.md is readable Chinese and English marketplace documentation with a metadata table and installation examples. No encoded, encrypted, or binary payload is present.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-7-16-bits-possible-b","reason":"README.md is readable Chinese documentation describing features, examples, installation, and packaging. Its entropy reflects multilingual text and line encoding, not obfuscation.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-42-bits-possible-b","reason":"The reference is a readable Chinese business-model playbook with tables, lists, and process guidance. Inspection found no encoded content, encrypted data, or concealed instructions.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-6-01-bits-lik","reason":"The flagged string is a readable Chinese skill description in YAML frontmatter. It summarizes capabilities and contains no encoded or encrypted payload.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-37-bits-possible-b","reason":"SKILL.md is readable YAML and Chinese Markdown describing the skill and its output rules. No binary data, ciphertext, or obfuscated executable content is present.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","subject_content_hash":"fee4cd9331f9458b6098ec698baca5a053f3f3ea06c2c38ded0cff831d85b520","subject_tree_hash":"ccaebb55d0cdfa9c53cc118ff8609aee9ef972251981f4e5510a630e3d4310b7","subject_plugin_path":"skills/dhturing/data-business-model-expert","audit_payload_hash":"a48946f16b883ceb0b0e5c173ad8140a","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","contentHash":"fee4cd9331f9458b6098ec698baca5a053f3f3ea06c2c38ded0cff831d85b520","treeHash":"ccaebb55d0cdfa9c53cc118ff8609aee9ef972251981f4e5510a630e3d4310b7","pluginPath":"skills/dhturing/data-business-model-expert","auditPayloadHash":"a48946f16b883ceb0b0e5c173ad8140a"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/dhturing-data-business-model-expert/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}