{"data":{"skill":{"slug":"dhturing-public-data-registration-expert","name":"public-data-registration-expert","icon":"📦","repo":"https://github.com/dhturing/turing-data-experts/tree/9c58ffa97ec5b760befef6f910eb23107cdcdbf4/skills/public-data-registration-expert","status":"approved","author":"图灵数盟","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"0c0582a0-2491-4fd0-aa47-6bbf4f015c8e","skill_id":"45d3c6cd-6e66-4672-abc3-ac1f1c2f02b4","version":1,"content_hash":"v3:50b73f83991cf073cbdf3f5afad2bbac71dd3bae:32bb99fb526d5423146f724eeebb3e1661f4107227f189a2b608dc3802239eb2:e47013344188adce5f74e3eec5388b1705e93e3157de9ce7518684c204f5406a:736b696c6c732f6468747572696e672f7075626c69632d646174612d726567697374726174696f6e2d657870657274:54d1bbb1d0af8e04895da6459b7cc3b1","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"全部静态发现均为文档内容触发的误报。文件仅包含安装路径示例、Markdown 行内代码、官网链接和中文政策材料，未发现执行、联网、混淆载荷或提示注入行为。","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"profile.md","line_end":38,"line_start":38},{"file":"profile.md","line_end":38,"line_start":38}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":33,"line_start":33}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":6,"line_start":6},{"file":"SKILL.md","line_end":12,"line_start":12}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":4,"total_lines":398,"audit_model":"codex","audited_at":"2026-09-27T03:06:16.371+00:00","created_at":"2026-09-30T12:17:58.233458+00:00","static_findings":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","file":"profile.md","pattern":"Hidden file in home directory","snippet":"~/.claude/skills/public-data-registration-expert/       # Claude Code","category":"filesystem","line_end":38,"severity":"high","line_start":38},{"id":"filesystem:profile.md:38:hidden-file-access","file":"profile.md","pattern":"Hidden file access","snippet":"~/.claude/skills/public-data-registration-expert/       # Claude Code","category":"filesystem","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> 完整知识底座见 `references/knowledge-base.md`。","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **资料来源**:`图灵数盟内部资料库`","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"读取 `references/knowledge-base.md`(该文件为源资料逐字拷贝,权威版本)。","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"network:SKILL.md:6:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: \"https://www.turingtech.net.cn\"","category":"network","line_end":6,"severity":"low","line_start":6},{"id":"network:SKILL.md:12:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> **作者**:图灵数盟(图灵数盟(深圳)数字产业有限公司)|[官网](https://www.turingtech.net.cn)|联系邮箱:public@turingtech.net.cn","category":"network","line_end":12,"severity":"low","line_start":12},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-10-bits-possible-b","file":"profile.md","pattern":"[HEURISTIC] High file entropy (6.10 bits) - possible binary/encrypted content","snippet":"File: profile.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-7-04-bits-possible-b","file":"README.md","pattern":"[HEURISTIC] High file entropy (7.04 bits) - possible binary/encrypted content","snippet":"File: README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-08-bits-possible-b","file":"references/knowledge-base.md","pattern":"[HEURISTIC] High file entropy (7.08 bits) - possible binary/encrypted content","snippet":"File: references/knowledge-base.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-5-96-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.96 bits) - likely encoded/encrypted payload","snippet":"把公共数据的目录、使用、运营按规定登记备案：界定范围、组织安全评估，衔接3年有效期与授权运营。当用户需要公共数据登记专家相关的诊断、方案设计、SOP 执行或交付...","category":"obfuscation","line_end":3,"severity":"high","line_start":3},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-30-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.30 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"filesystem:profile.md:38:hidden-file-in-home-directory","reason":"profile.md 第 38 行仅展示 Claude Code 的技能安装目录。文档没有读取、写入或遍历该主目录路径。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:profile.md:38:hidden-file-access","reason":"该路径位于纯文本安装示例中，没有文件访问代码或操作指令。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"反引号是 Markdown 行内代码格式，仅引用 references/knowledge-base.md。该行不包含 Ruby 或 shell 执行。","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"反引号仅格式化资料来源名称“图灵数盟内部资料库”。该行没有命令、解释器或可执行内容。","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"反引号仅标记要读取的本地参考文档路径。该行不调用 shell，也不执行动态输入。","verdict":"false_positive","confidence":1},{"id":"network:SKILL.md:6:hardcoded-url","reason":"URL 是 YAML 元数据中的作者主页，不是网络请求端点。技能中没有请求代码或数据传输逻辑。","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:12:hardcoded-url","reason":"URL 是作者联系信息中的 Markdown 链接。它不会自动发起请求或发送用户数据。","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:profile.md:1:heuristic-high-file-entropy-6-10-bits-possible-b","reason":"profile.md 是可读的中英文发布说明和安装文档。高熵来自 UTF-8 中文及混合标点，不存在编码或加密载荷。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-7-04-bits-possible-b","reason":"README.md 是可读的中文功能、示例和安装说明。未发现密文、编码块或隐藏可执行内容。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:references/knowledge-base.md:1:heuristic-high-file-entropy-7-08-bits-possible-b","reason":"knowledge-base.md 是结构化中文政策知识库，包含表格和清单。内容可直接阅读，没有混淆或编码载荷。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:SKILL.md:3:heuristic-very-high-entropy-string-5-96-bits-lik","reason":"该字符串是可读的中文技能描述。字符多样性触发熵规则，但内容不是编码、加密或隐藏指令。","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-30-bits-possible-b","reason":"SKILL.md 是可读的 YAML 元数据和中文操作指南。未发现二进制、密文或经过混淆的指令。","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","subject_content_hash":"32bb99fb526d5423146f724eeebb3e1661f4107227f189a2b608dc3802239eb2","subject_tree_hash":"e47013344188adce5f74e3eec5388b1705e93e3157de9ce7518684c204f5406a","subject_plugin_path":"skills/dhturing/public-data-registration-expert","audit_payload_hash":"54d1bbb1d0af8e04895da6459b7cc3b1","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"50b73f83991cf073cbdf3f5afad2bbac71dd3bae","contentHash":"32bb99fb526d5423146f724eeebb3e1661f4107227f189a2b608dc3802239eb2","treeHash":"e47013344188adce5f74e3eec5388b1705e93e3157de9ce7518684c204f5406a","pluginPath":"skills/dhturing/public-data-registration-expert","auditPayloadHash":"54d1bbb1d0af8e04895da6459b7cc3b1"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/dhturing-public-data-registration-expert/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}