{"data":{"skill":{"slug":"expo-use-dom","name":"use-dom","icon":"📦","repo":"https://github.com/expo/skills/tree/main/plugins/expo-app-design/skills/use-dom/","status":"approved","author":"expo","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"a07fb216-d9f9-40b0-a12e-6d57dd390ee6","skill_id":"873ce7d8-db9d-48ed-bd97-a90194a5e39c","version":1,"content_hash":"36f080d35b58647feabbcde481e3a5fa","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All 63 static findings are false positives. Detected patterns are markdown formatting (backticks for inline code) and TypeScript type annotations (import() for type references) in documentation examples. No executable code with security implications present.","remediation":[],"risk_factor_evidence":[{"factor":"scripts","evidence":[{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":75,"line_start":75},{"file":"SKILL.md","line_end":140,"line_start":140},{"file":"SKILL.md","line_end":168,"line_start":168},{"file":"SKILL.md","line_end":195,"line_start":195},{"file":"SKILL.md","line_end":224,"line_start":224},{"file":"SKILL.md","line_end":253,"line_start":253},{"file":"SKILL.md","line_end":275,"line_start":275},{"file":"SKILL.md","line_end":321,"line_start":321},{"file":"SKILL.md","line_end":346,"line_start":346},{"file":"SKILL.md","line_end":365,"line_start":365}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":10,"line_start":10},{"file":"SKILL.md","line_end":29,"line_start":29},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":56,"line_start":35},{"file":"SKILL.md","line_end":60,"line_start":56},{"file":"SKILL.md","line_end":66,"line_start":60},{"file":"SKILL.md","line_end":68,"line_start":66},{"file":"SKILL.md","line_end":70,"line_start":68},{"file":"SKILL.md","line_end":81,"line_start":70},{"file":"SKILL.md","line_end":83,"line_start":81},{"file":"SKILL.md","line_end":85,"line_start":83},{"file":"SKILL.md","line_end":103,"line_start":85},{"file":"SKILL.md","line_end":109,"line_start":103},{"file":"SKILL.md","line_end":128,"line_start":109},{"file":"SKILL.md","line_end":130,"line_start":128},{"file":"SKILL.md","line_end":152,"line_start":130},{"file":"SKILL.md","line_end":158,"line_start":152},{"file":"SKILL.md","line_end":178,"line_start":158},{"file":"SKILL.md","line_end":180,"line_start":178},{"file":"SKILL.md","line_end":209,"line_start":180},{"file":"SKILL.md","line_end":215,"line_start":209},{"file":"SKILL.md","line_end":232,"line_start":215},{"file":"SKILL.md","line_end":236,"line_start":232},{"file":"SKILL.md","line_end":261,"line_start":236},{"file":"SKILL.md","line_end":265,"line_start":261},{"file":"SKILL.md","line_end":267,"line_start":265},{"file":"SKILL.md","line_end":286,"line_start":267},{"file":"SKILL.md","line_end":292,"line_start":286},{"file":"SKILL.md","line_end":293,"line_start":292},{"file":"SKILL.md","line_end":294,"line_start":293},{"file":"SKILL.md","line_end":295,"line_start":294},{"file":"SKILL.md","line_end":296,"line_start":295},{"file":"SKILL.md","line_end":297,"line_start":296},{"file":"SKILL.md","line_end":301,"line_start":297},{"file":"SKILL.md","line_end":312,"line_start":301},{"file":"SKILL.md","line_end":314,"line_start":312},{"file":"SKILL.md","line_end":332,"line_start":314},{"file":"SKILL.md","line_end":338,"line_start":332},{"file":"SKILL.md","line_end":350,"line_start":338},{"file":"SKILL.md","line_end":356,"line_start":350},{"file":"SKILL.md","line_end":369,"line_start":356},{"file":"SKILL.md","line_end":375,"line_start":369},{"file":"SKILL.md","line_end":398,"line_start":375},{"file":"SKILL.md","line_end":408,"line_start":398}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":360,"line_start":360}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":418,"audit_model":"claude","audited_at":"2026-01-23T08:08:53.438+00:00","created_at":"2026-01-23T08:20:38.977498+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}