{"data":{"skill":{"slug":"gbsoss-skill-from-masters","name":"skill-from-masters","icon":"📦","repo":"https://github.com/GBSOSS/skill-from-masters/tree/main/skill-from-masters/","status":"approved","author":"GBSOSS","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"4875ae7c-3da7-4811-abfc-a74bbfe160f3","skill_id":"21267537-b99e-4f1c-99b1-9036cb056095","version":8,"content_hash":"v3:a06681402992ceae98ba04d54cfd4ab004862696:31b6b04ec56e91d9a4f955d8e9c8d8ac2ec7b4c10849a99b5f6481b90f5a1445:26c3722f017bde149ae7cc54f6df655a2fd552714f8953c3e4411193d5fb5687:736b696c6c732f6762736f73732f736b696c6c2d66726f6d2d6d617374657273:5aa188136af3d37546d885799252c3bc","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All static findings are false positives caused by Markdown formatting and benign research language. No prompt injection, command execution, data exfiltration, or system reconnaissance intent was found in SKILL.md or references/methodology-database.md.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":38,"line_start":38}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":401,"audit_model":"codex","audited_at":"2026-07-06T15:25:28.44+00:00","created_at":"2026-07-17T17:01:27.435458+00:00","static_findings":[{"id":"blocker:references/methodology-database.md:12:system-reconnaissance","file":"references/methodology-database.md","pattern":"System reconnaissance","snippet":"| Barbara Minto | Pyramid Principle | Lead with conclusion, MECE structure, SCQ (Situation-Complicat","category":"blocker","line_end":12,"severity":"low","line_start":12},{"id":"blocker:references/methodology-database.md:20:system-reconnaissance","file":"references/methodology-database.md","pattern":"System reconnaissance","snippet":"| David Ogilvy | Big Idea | Headlines carry 80% of value, research first | Book: Ogilvy on Advertisi","category":"blocker","line_end":20,"severity":"low","line_start":20},{"id":"blocker:references/methodology-database.md:160:system-reconnaissance","file":"references/methodology-database.md","pattern":"System reconnaissance","snippet":"| Reid Hoffman | Blitzscaling | Speed over efficiency in winner-take-all markets | Book: Blitzscalin","category":"blocker","line_end":160,"severity":"low","line_start":160},{"id":"blocker:references/methodology-database.md:172:system-reconnaissance","file":"references/methodology-database.md","pattern":"System reconnaissance","snippet":"| David Allen | GTD | Capture everything, next actions, contexts | Book: Getting Things Done |","category":"blocker","line_end":172,"severity":"low","line_start":172},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Consult `references/methodology-database.md` for known frameworks.","category":"external_commands","line_end":38,"severity":"medium","line_start":38},{"id":"blocker:SKILL.md:123:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Did we search beyond the local database?","category":"blocker","line_end":123,"severity":"low","line_start":123},{"id":"blocker:SKILL.md:124:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Did we find primary sources, not just summaries?","category":"blocker","line_end":124,"severity":"low","line_start":124},{"id":"blocker:SKILL.md:125:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Did we find golden examples of the output?","category":"blocker","line_end":125,"severity":"low","line_start":125},{"id":"blocker:SKILL.md:126:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Did we identify common mistakes to avoid?","category":"blocker","line_end":126,"severity":"low","line_start":126},{"id":"blocker:SKILL.md:127:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Did we cross-validate across multiple experts?","category":"blocker","line_end":127,"severity":"low","line_start":127},{"id":"blocker:SKILL.md:145:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Barbara Minto: Pyramid Principle - lead with conclusion, MECE structure","category":"blocker","line_end":145,"severity":"low","line_start":145}],"finding_verdicts":[{"id":"blocker:references/methodology-database.md:12:system-reconnaissance","reason":"This line is a methodology database entry for Barbara Minto and the Pyramid Principle. It contains no system probing, host enumeration, or operational reconnaissance instruction.","verdict":"false_positive","confidence":0.97},{"id":"blocker:references/methodology-database.md:20:system-reconnaissance","reason":"This line is a copywriting methodology entry for David Ogilvy. It is benign reference material and does not direct the assistant to inspect systems or collect sensitive data.","verdict":"false_positive","confidence":0.97},{"id":"blocker:references/methodology-database.md:160:system-reconnaissance","reason":"This line documents Reid Hoffman's Blitzscaling framework in a curated expert table. It is business methodology content, not reconnaissance or security-relevant discovery.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/methodology-database.md:172:system-reconnaissance","reason":"This line lists David Allen's GTD productivity framework. It does not request system enumeration, access to local files, or collection of environment details.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The backticks are Markdown formatting around the path references/methodology-database.md. There is no Ruby execution, shell invocation, or user-controlled command string.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:123:system-reconnaissance","reason":"The checklist asks whether research went beyond the local methodology database. In context, this means source discovery for expert methods, not system reconnaissance.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:124:system-reconnaissance","reason":"The checklist asks for primary sources instead of summaries. This is a content-quality instruction and does not target systems, credentials, or infrastructure.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:125:system-reconnaissance","reason":"The checklist asks for golden examples of the user's desired output. That is ordinary research guidance and not reconnaissance of a machine or network.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:126:system-reconnaissance","reason":"The checklist asks the assistant to identify common mistakes in the domain being studied. This does not involve probing local systems or collecting sensitive information.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:127:system-reconnaissance","reason":"The checklist asks for cross-validation across multiple experts. In context, this is research validation for methodology quality, not system or network reconnaissance.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:145:system-reconnaissance","reason":"This example names Barbara Minto and summarizes the Pyramid Principle. It is benign instructional content with no command execution, exfiltration, or reconnaissance intent.","verdict":"false_positive","confidence":0.97}],"semantic_findings":[],"subject_marketplace_commit_sha":"a06681402992ceae98ba04d54cfd4ab004862696","subject_content_hash":"31b6b04ec56e91d9a4f955d8e9c8d8ac2ec7b4c10849a99b5f6481b90f5a1445","subject_tree_hash":"26c3722f017bde149ae7cc54f6df655a2fd552714f8953c3e4411193d5fb5687","subject_plugin_path":"skills/gbsoss/skill-from-masters","audit_payload_hash":"5aa188136af3d37546d885799252c3bc","confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":"a06681402992ceae98ba04d54cfd4ab004862696","contentHash":"31b6b04ec56e91d9a4f955d8e9c8d8ac2ec7b4c10849a99b5f6481b90f5a1445","treeHash":"26c3722f017bde149ae7cc54f6df655a2fd552714f8953c3e4411193d5fb5687","pluginPath":"skills/gbsoss/skill-from-masters","auditPayloadHash":"5aa188136af3d37546d885799252c3bc"},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":true}}