{"data":{"skill":{"slug":"dhturing-data-quality-assessment-expert","name":"data-quality-assessment-expert","icon":"📦","repo":"https://github.com/dhturing/turing-data-experts/tree/9c58ffa97ec5b760befef6f910eb23107cdcdbf4/skills/data-quality-assessment-expert","status":"approved","author":"图灵数盟","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"8a7db109-9f15-4ce1-82fc-a05738e34a0c","skill_id":"28023eb3-33f5-4acc-a52d-fb5acf0ee8ae","version":1,"content_hash":"v3:50b73f83991cf073cbdf3f5afad2bbac71dd3bae:a106e7cc5b5ed00c685af95c5d6719103fdecee74815da4b3392ed11064c6be2:362d252aa6641d7b50159c1a4779e2394f2dc7e783c0aab3c193c45666071f1a:736b696c6c732f6468747572696e672f646174612d7175616c6974792d6173736573736d656e742d657870657274:bc1a35513fdd342ccd9d7ce25d2a3c2e","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All twelve static findings are false positives caused by Markdown formatting, installation documentation, ordinary website links, and the entropy of Chinese-language text. No executable scripts, network requests, obfuscated payloads, prompt injection, or unsafe data-handling intent were found.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"profile.md","line_end":38,"line_start":38},{"file":"profile.md","line_end":38,"line_start":38}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":33,"line_start":33}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":6,"line_start":6},{"file":"SKILL.md","line_end":12,"line_start":12}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":4,"total_lines":391,"audit_model":"codex","audited_at":"2026-09-27T03:14:43.629+00:00","created_at":"2026-09-30T12:15:29.477526+00:00","static_findings":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","file":"profile.md","pattern":"Hidden file in home directory","snippet":"~/.claude/skills/data-quality-assessment-expert/       # Claude Code","category":"filesystem","line_end":38,"severity":"high","line_start":38},{"id":"filesystem:profile.md:38:hidden-file-access","file":"profile.md","pattern":"Hidden file access","snippet":"~/.claude/skills/data-quality-assessment-expert/       # Claude Code","category":"filesystem","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> 完整知识底座见 `references/knowledge-base.md`。","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **资料来源**:`图灵数盟内部资料库`","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"读取 `references/knowledge-base.md`(该文件为源资料逐字拷贝,权威版本)。","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"network:SKILL.md:6:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: \"https://www.turingtech.net.cn\"","category":"network","line_end":6,"severity":"low","line_start":6},{"id":"network:SKILL.md:12:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> **作者**:图灵数盟(图灵数盟(深圳)数字产业有限公司)|[官网](https://www.turingtech.net.cn)|联系邮箱:public@turingtech.net.cn","category":"network","line_end":12,"severity":"low","line_start":12},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-12-bits-possible-b","file":"profile.md","pattern":"[HEURISTIC] High file entropy (6.12 bits) - possible binary/encrypted content","snippet":"File: profile.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-7-17-bits-possible-b","file":"README.md","pattern":"[HEURISTIC] High file entropy (7.17 bits) - possible binary/encrypted content","snippet":"File: README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-20-bits-possible-b","file":"references/knowledge-base.md","pattern":"[HEURISTIC] High file entropy (7.20 bits) - possible binary/encrypted content","snippet":"File: references/knowledge-base.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-5-98-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.98 bits) - likely encoded/encrypted payload","snippet":"按GB/T 36344-2018六维模型评价数据质量，出具评分与等级并将质量分映射为评估δ系数。当用户需要数据质量评价专家相关的诊断、方案设计、SOP 执行或交...","category":"obfuscation","line_end":3,"severity":"high","line_start":3},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-35-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.35 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","reason":"The path is shown inside a fenced installation example for Claude Code. It does not instruct the skill to read, write, or modify hidden files.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:profile.md:38:hidden-file-access","reason":"This is a documented destination where a user may install the skill. No runtime hidden-file access or sensitive file operation is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The backticks format a relative Markdown file reference. They do not delimit executable Ruby or shell code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The backticks format the name of an internal reference library. The line contains no command or execution instruction.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The backticks identify a local Markdown reference file that the skill should read. No shell interpolation or external command is used.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:6:hardcoded-url","reason":"The URL is author homepage metadata in the YAML front matter. There is no instruction or code that sends a network request.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:12:hardcoded-url","reason":"The URL is a visible author website link presented with contact information. It does not transmit user data or trigger network access.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-12-bits-possible-b","reason":"The file is readable Chinese and English Markdown containing profile, contact, and installation information. No encoded, encrypted, or binary payload is present.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-7-17-bits-possible-b","reason":"The file is plain Markdown documentation in Chinese with examples and installation notes. Its character diversity explains the entropy signal without indicating obfuscation.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-20-bits-possible-b","reason":"The file is a readable Chinese knowledge base with tables, scoring guidance, and procedures. Inspection shows no binary, encoded, or encrypted content.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-5-98-bits-lik","reason":"The flagged text is a human-readable Chinese skill description in YAML. It contains no encoded payload or concealed instruction.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-35-bits-possible-b","reason":"The file is plain Chinese Markdown with YAML metadata and a content index. The entropy heuristic reflects multilingual text, not obfuscation.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","subject_content_hash":"a106e7cc5b5ed00c685af95c5d6719103fdecee74815da4b3392ed11064c6be2","subject_tree_hash":"362d252aa6641d7b50159c1a4779e2394f2dc7e783c0aab3c193c45666071f1a","subject_plugin_path":"skills/dhturing/data-quality-assessment-expert","audit_payload_hash":"bc1a35513fdd342ccd9d7ce25d2a3c2e","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","contentHash":"a106e7cc5b5ed00c685af95c5d6719103fdecee74815da4b3392ed11064c6be2","treeHash":"362d252aa6641d7b50159c1a4779e2394f2dc7e783c0aab3c193c45666071f1a","pluginPath":"skills/dhturing/data-quality-assessment-expert","auditPayloadHash":"bc1a35513fdd342ccd9d7ce25d2a3c2e"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/dhturing-data-quality-assessment-expert/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}