{"data":{"skill":{"slug":"getcargohq-cargo-content","name":"cargo-content","icon":"📦","repo":"https://github.com/getcargohq/cargo-skills/tree/92c825ad4ba1bbbbeff96ae85e62187279f3854d/cargo-content","status":"approved","author":"getcargohq","authorVersion":"1.0.1","skillstoreRevision":1},"audit":{"id":"e8262feb-7ae2-4168-9502-320419cbe67b","skill_id":"13867b27-940d-4185-9250-7d3689eb4eb5","version":1,"content_hash":"v3:077007320a82b1991f47e729817fc2936dbdd738:7591be883bd53d94568f3533f6fb7ebd3a4a7f37ee696b81310bfe6a1d6c38f7:15aa9f12b28964f451e38b5a25985bb277ab1f329dddc83c5ffaf942cef3e7a1:736b696c6c732f676574636172676f68712f636172676f2d636f6e74656e74:8d62a014cdb906ba23b3737e95f5c3bb","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 61 static findings are false positives involving Markdown formatting, documentation links, Cargo resource identifiers, or legitimate workspace checks. No evidence found of prompt injection, unauthorized data transfer, or malicious execution in the reviewed files. The documented workflows require authenticated Cargo access and can upload, modify, or remove workspace content.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"references/examples/files.md","line_end":40,"line_start":40},{"file":"references/response-shapes.md","line_end":35,"line_start":35},{"file":"references/troubleshooting.md","line_end":15,"line_start":15},{"file":"references/troubleshooting.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":29,"line_start":29},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":57,"line_start":57},{"file":"SKILL.md","line_end":78,"line_start":78},{"file":"SKILL.md","line_end":85,"line_start":85},{"file":"SKILL.md","line_end":111,"line_start":111}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":5,"line_start":5},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":29,"line_start":29},{"file":"SKILL.md","line_end":31,"line_start":31},{"file":"SKILL.md","line_end":32,"line_start":32},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":37,"line_start":37},{"file":"SKILL.md","line_end":40,"line_start":39},{"file":"SKILL.md","line_end":44,"line_start":40},{"file":"SKILL.md","line_end":46,"line_start":44},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":53,"line_start":50},{"file":"SKILL.md","line_end":57,"line_start":53},{"file":"SKILL.md","line_end":57,"line_start":57},{"file":"SKILL.md","line_end":76,"line_start":59},{"file":"SKILL.md","line_end":78,"line_start":76},{"file":"SKILL.md","line_end":78,"line_start":78},{"file":"SKILL.md","line_end":85,"line_start":84},{"file":"SKILL.md","line_end":85,"line_start":85},{"file":"SKILL.md","line_end":107,"line_start":87},{"file":"SKILL.md","line_end":111,"line_start":107},{"file":"SKILL.md","line_end":111,"line_start":111},{"file":"SKILL.md","line_end":117,"line_start":115},{"file":"SKILL.md","line_end":120,"line_start":117}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":6,"line_start":6},{"file":"SKILL.md","line_end":18,"line_start":18}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":5,"total_lines":312,"audit_model":"codex","audited_at":"2026-10-12T17:15:15.98+00:00","created_at":"2026-10-13T17:56:45.266993+00:00","static_findings":[{"id":"filesystem:references/examples/files.md:40:path-traversal-sequence","file":"references/examples/files.md","pattern":"Path traversal sequence","snippet":"Folders are managed by the [`cargo-workspace-management`](../../../cargo-workspace-management/SKILL.","category":"filesystem","line_end":40,"severity":"high","line_start":40},{"id":"blocker:references/examples/files.md:26:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"# → file.uuid","category":"blocker","line_end":28,"severity":"low","line_start":26},{"id":"blocker:references/examples/files.md:29:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"cargo-ai ai release update-draft --agent-uuid <agent-uuid> \\","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"blocker:references/examples/files.md:33:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"cargo-ai ai release deploy-draft --agent-uuid <agent-uuid> \\","category":"blocker","line_end":33,"severity":"low","line_start":33},{"id":"blocker:references/examples/files.md:47:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"cargo-ai content file upload --file ./notes.pdf --folder-uuid <folder-uuid>","category":"blocker","line_end":47,"severity":"low","line_start":47},{"id":"blocker:references/examples/files.md:50:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"cargo-ai content file update --uuid <file-uuid> --folder-uuid <folder-uuid>","category":"blocker","line_end":50,"severity":"low","line_start":50},{"id":"blocker:references/examples/files.md:56:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"cargo-ai content file update --uuid <file-uuid> --name \"Q1 Research Notes\"","category":"blocker","line_end":56,"severity":"low","line_start":56},{"id":"blocker:references/examples/files.md:81:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"cargo-ai content library list --kind connector --connector-uuid <connector-uuid>","category":"blocker","line_end":81,"severity":"low","line_start":81},{"id":"blocker:references/examples/files.md:89:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"--connector-uuid <connector-uuid> \\","category":"blocker","line_end":89,"severity":"low","line_start":89},{"id":"blocker:references/examples/files.md:91:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"--folder-uuid <folder-uuid> \\","category":"blocker","line_end":91,"severity":"low","line_start":91},{"id":"blocker:references/examples/files.md:95:system-reconnaissance","file":"references/examples/files.md","pattern":"System reconnaissance","snippet":"cargo-ai content library update --uuid <library-uuid> --name \"Updated Name\"","category":"blocker","line_end":95,"severity":"low","line_start":95},{"id":"filesystem:references/response-shapes.md:35:path-traversal-sequence","file":"references/response-shapes.md","pattern":"Path traversal sequence","snippet":"**Key fields:** `uuid` (used to reference in agent release `resources` — see [`cargo-ai`](../../carg","category":"filesystem","line_end":35,"severity":"high","line_start":35},{"id":"blocker:references/response-shapes.md:39:system-reconnaissance","file":"references/response-shapes.md","pattern":"System reconnaissance","snippet":"> The exact JSON envelope isn't pinned here (capture it from a live `cargo-ai content library list` ","category":"blocker","line_end":39,"severity":"low","line_start":39},{"id":"filesystem:references/troubleshooting.md:15:path-traversal-sequence","file":"references/troubleshooting.md","pattern":"Path traversal sequence","snippet":"The folder UUID passed to `--folder-uuid` does not exist. Folders are managed by the [`cargo-workspa","category":"filesystem","line_end":15,"severity":"high","line_start":15},{"id":"filesystem:references/troubleshooting.md:23:path-traversal-sequence","file":"references/troubleshooting.md","pattern":"Path traversal sequence","snippet":"A file or library is inert until it's attached to an agent's **deployed** release. Add it to the dra","category":"filesystem","line_end":23,"severity":"high","line_start":23},{"id":"blocker:references/troubleshooting.md:15:system-reconnaissance","file":"references/troubleshooting.md","pattern":"System reconnaissance","snippet":"The folder UUID passed to `--folder-uuid` does not exist. Folders are managed by the [`cargo-workspa","category":"blocker","line_end":15,"severity":"low","line_start":15},{"id":"external_commands:SKILL.md:5:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"compatibility: Requires @cargo-ai/cli (npm). Sign in or create an account with `cargo-ai login --ema","category":"external_commands","line_end":5,"severity":"medium","line_start":5},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **New top-level domain (CLI ≥ 1.0.19).** Files and libraries moved out of the `ai` domain into the","category":"external_commands","line_end":25,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> For **attaching** a file or library to an agent (via the release `resources` array), use [`cargo-a","category":"external_commands","line_end":27,"severity":"medium","line_start":27},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> For **folders** that organize files, use [`cargo-workspace-management`](../cargo-workspace-managem","category":"external_commands","line_end":28,"severity":"medium","line_start":28},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> For batch-run **input** files (CSVs uploaded to drive a batch), that's a different surface — `carg","category":"external_commands","line_end":29,"severity":"medium","line_start":29},{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> See `references/examples/files.md` for end-to-end file, library, and attach-to-agent examples.","category":"external_commands","line_end":31,"severity":"medium","line_start":31},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> See `references/response-shapes.md` for full JSON response structures.","category":"external_commands","line_end":32,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> See `references/troubleshooting.md` for common errors and how to fix them.","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Already signed in (`cargo-ai whoami` returns a workspace)? Skip to the next section.","category":"external_commands","line_end":37,"severity":"medium","line_start":37},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":40,"severity":"medium","line_start":39},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"npm install -g @cargo-ai/cli            # no global install? prefix every command with `npx @cargo-a","category":"external_commands","line_end":44,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":46,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Every command prints JSON to stdout; failures exit non-zero with `{\"errorMessage\": \"...\"}`. Anything","category":"external_commands","line_end":46,"severity":"medium","line_start":46},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":53,"severity":"medium","line_start":50},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":57,"severity":"medium","line_start":53},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Upload files (PDFs, CSVs, text) so an agent can ground its responses in specific knowledge. The uplo","category":"external_commands","line_end":57,"severity":"medium","line_start":57},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":76,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":78,"severity":"medium","line_start":76},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **Reading content files from the context sandbox.** Uploaded content files are also available **re","category":"external_commands","line_end":78,"severity":"medium","line_start":78},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **`native`** — workspace-managed collections of uploaded files.","category":"external_commands","line_end":85,"severity":"medium","line_start":84},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **`connector`** — synced from an external source (e.g. a help center or knowledge base) through an","category":"external_commands","line_end":85,"severity":"medium","line_start":85},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":107,"severity":"medium","line_start":87},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":111,"severity":"medium","line_start":107},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Files and libraries are knowledge **resources** — they do nothing until attached to an agent via tha","category":"external_commands","line_end":111,"severity":"medium","line_start":111},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Every command supports `--help`:","category":"external_commands","line_end":117,"severity":"medium","line_start":115},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":120,"severity":"medium","line_start":117},{"id":"network:SKILL.md:6:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: https://github.com/getcargohq/cargo-skills","category":"network","line_end":6,"severity":"low","line_start":6},{"id":"network:SKILL.md:18:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: https://github.com/getcargohq/cargo-skills","category":"network","line_end":18,"severity":"low","line_start":18},{"id":"filesystem:SKILL.md:27:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"> For **attaching** a file or library to an agent (via the release `resources` array), use [`cargo-a","category":"filesystem","line_end":27,"severity":"high","line_start":27},{"id":"filesystem:SKILL.md:28:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"> For **folders** that organize files, use [`cargo-workspace-management`](../cargo-workspace-managem","category":"filesystem","line_end":28,"severity":"high","line_start":28},{"id":"filesystem:SKILL.md:29:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"> For batch-run **input** files (CSVs uploaded to drive a batch), that's a different surface — `carg","category":"filesystem","line_end":29,"severity":"high","line_start":29},{"id":"filesystem:SKILL.md:46:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"Every command prints JSON to stdout; failures exit non-zero with `{\"errorMessage\": \"...\"}`. Anything","category":"filesystem","line_end":46,"severity":"high","line_start":46},{"id":"filesystem:SKILL.md:57:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"Upload files (PDFs, CSVs, text) so an agent can ground its responses in specific knowledge. The uplo","category":"filesystem","line_end":57,"severity":"high","line_start":57},{"id":"filesystem:SKILL.md:78:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"> **Reading content files from the context sandbox.** Uploaded content files are also available **re","category":"filesystem","line_end":78,"severity":"high","line_start":78},{"id":"filesystem:SKILL.md:85:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- **`connector`** — synced from an external source (e.g. a help center or knowledge base) through an","category":"filesystem","line_end":85,"severity":"high","line_start":85},{"id":"filesystem:SKILL.md:111:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"Files and libraries are knowledge **resources** — they do nothing until attached to an agent via tha","category":"filesystem","line_end":111,"severity":"high","line_start":111},{"id":"blocker:SKILL.md:37:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Already signed in (`cargo-ai whoami` returns a workspace)? Skip to the next section.","category":"blocker","line_end":37,"severity":"low","line_start":37},{"id":"blocker:SKILL.md:43:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"cargo-ai whoami                         # confirm the active workspace before any write","category":"blocker","line_end":43,"severity":"low","line_start":43},{"id":"blocker:SKILL.md:68:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"cargo-ai content file upload --file ./knowledge-base.pdf --folder-uuid <folder-uuid>","category":"blocker","line_end":68,"severity":"low","line_start":68},{"id":"blocker:SKILL.md:71:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"cargo-ai content file update --uuid <file-uuid> --name \"Q1 Research Notes\"","category":"blocker","line_end":71,"severity":"low","line_start":71},{"id":"blocker:SKILL.md:72:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"cargo-ai content file update --uuid <file-uuid> --folder-uuid <folder-uuid>","category":"blocker","line_end":72,"severity":"low","line_start":72},{"id":"blocker:SKILL.md:91:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"cargo-ai content library list --kind connector --connector-uuid <connector-uuid>","category":"blocker","line_end":91,"severity":"low","line_start":91},{"id":"blocker:SKILL.md:99:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"--connector-uuid <connector-uuid> \\","category":"blocker","line_end":99,"severity":"low","line_start":99},{"id":"blocker:SKILL.md:101:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"--folder-uuid <folder-uuid> \\","category":"blocker","line_end":101,"severity":"low","line_start":101},{"id":"blocker:SKILL.md:105:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"cargo-ai content library update --uuid <library-uuid> --name \"Updated Name\"","category":"blocker","line_end":105,"severity":"low","line_start":105}],"finding_verdicts":[{"id":"filesystem:references/examples/files.md:40:path-traversal-sequence","reason":"The parent-directory sequence is a Markdown link to the sibling workspace-management skill. It is not used for arbitrary file access.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:26:system-reconnaissance","reason":"The comment identifies the upload response UUID and the next workflow step. It does not enumerate host identity or system configuration.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:29:system-reconnaissance","reason":"The agent UUID selects a Cargo draft release for the documented attachment workflow. This is an application resource identifier, not host reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:33:system-reconnaissance","reason":"The command deploys the selected Cargo agent draft using an agent UUID. It contains no host information collection.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:47:system-reconnaissance","reason":"The folder UUID selects the destination for the explicitly demonstrated document upload. It is not a system identity query.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:50:system-reconnaissance","reason":"The file and folder UUIDs identify Cargo resources in a documented move operation. No host reconnaissance is requested.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:56:system-reconnaissance","reason":"The UUID identifies the file being renamed in Cargo. This application update does not collect system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:81:system-reconnaissance","reason":"The connector UUID filters the Cargo library list by its data connector. The query concerns workspace resources, not host configuration.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:89:system-reconnaissance","reason":"The connector UUID parameter selects the configured source for a new library. It does not inspect system identity.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:91:system-reconnaissance","reason":"The folder UUID parameter places the new library in a Cargo folder. This is application organization, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/examples/files.md:95:system-reconnaissance","reason":"The UUID identifies the Cargo library whose name is updated. No host information is queried.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/response-shapes.md:35:path-traversal-sequence","reason":"The parent-directory sequence links to documentation for attaching resources to agents. It is a Markdown reference, not a filesystem traversal operation.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/response-shapes.md:39:system-reconnaissance","reason":"The prose recommends inspecting a library-list response to establish its fields. Its UUIDs identify application resources and do not collect host information.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:references/troubleshooting.md:15:path-traversal-sequence","reason":"The relative path is a Markdown link to folder-management documentation. The surrounding advice fixes an invalid Cargo folder UUID.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/troubleshooting.md:23:path-traversal-sequence","reason":"The parent-directory sequence links to the agent-management skill. It documents attachment and deployment rather than unauthorized filesystem access.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/troubleshooting.md:15:system-reconnaissance","reason":"Listing Cargo folders resolves a missing folder identifier. The UUID parameter and folder list are application operations, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:5:ruby-shell-backtick-execution","reason":"Backticks format the documented Cargo login command in compatibility metadata. No Ruby execution or shell command substitution appears.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"Inline backticks distinguish CLI domains, commands, and an error message in prose. They are Markdown formatting, not shell substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","reason":"The backticks label the resources field and a related skill link. No executable backtick expression is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","reason":"The backticks format a skill name and folder command within explanatory prose. They are not shell command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","reason":"The inline command and related skill name are Markdown-formatted workflow references. No Ruby or shell backtick execution is shown.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","reason":"Backticks enclose the examples document path for readability. The text does not execute that path.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"Backticks format the response-shapes reference path. This is documentation navigation, not command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The troubleshooting path is enclosed in Markdown inline-code delimiters. No shell substitution or Ruby expression appears.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","reason":"Backticks format cargo-ai whoami as an application authentication check. They do not invoke shell substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","reason":"The detected backticks open a Markdown Bash code block. They are presentation delimiters, not executable shell syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The block documents installing and authenticating the required Cargo CLI. Backticks only format the npx alternative in a comment, not shell substitution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"The triple backticks close a Markdown code block. The following inline examples describe command output, not backtick execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"Inline backticks format an error object, flags, a command name, and a documentation link. No executable shell substitution is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","reason":"Triple backticks fence examples that list Cargo files and libraries. The delimiters are Markdown, not Ruby or shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","reason":"The detected text closes a Markdown block and later formats an upload response field. Neither use executes a backtick expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","reason":"The uuid field and linked skill name use inline-code formatting. The prose explains how uploaded knowledge is referenced by agents.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"Triple backticks fence normal Cargo file-management examples. No Ruby code or shell command substitution occurs within the block.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The detected delimiters close a Markdown block and format subsequent sandbox guidance. They are not shell substitution syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","reason":"The inline example lists the documented read-only .files directory using a command and explicit arguments. Backticks are Markdown formatting, not shell substitution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","reason":"Backticks label native and connector library kinds in prose. They do not execute either value.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","reason":"Inline-code spans label the connector kind, extractor flag, identifier, and related skill. No executable backtick expression appears.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","reason":"Triple backticks fence Cargo library-management commands. The examples contain no shell backtick substitution or Ruby execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","reason":"The detected text closes a Markdown block and formats the subsequent attachment guidance. These delimiters do not execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","reason":"Backticks format the resources field, skill link, commands, and examples path in prose. No shell substitution is shown.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","reason":"The help flag uses Markdown inline-code formatting, followed by a fenced example. Neither delimiter is an executable backtick expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The fenced Bash block demonstrates Cargo upload and library help commands. Triple backticks are Markdown delimiters, not shell substitution.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:6:hardcoded-url","reason":"The URL identifies the upstream GitHub repository in homepage metadata. It is not a data-transfer endpoint or credential destination.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:18:hardcoded-url","reason":"The repeated GitHub homepage belongs to the documented skill repository. No network request or data payload is associated with this metadata.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:27:path-traversal-sequence","reason":"The parent-directory sequence is a Markdown link to the sibling agent-management skill. It is not used to access arbitrary files.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:28:path-traversal-sequence","reason":"The relative path links to the sibling workspace-management skill for folder operations. This is documentation navigation, not a traversal exploit.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:29:path-traversal-sequence","reason":"The parent-directory sequence points to documentation for batch input uploads. It is not passed to any filesystem operation.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:46:path-traversal-sequence","reason":"The parent-relative path links to bundled prerequisites documentation. The line does not perform arbitrary filesystem reads or writes.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:57:path-traversal-sequence","reason":"The relative link directs readers to agent attachment documentation. The upload explanation does not use that path for file access.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:78:path-traversal-sequence","reason":"The parent-relative sequence appears in a link to the context skill. The separate command lists the documented read-only .files directory without traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:85:path-traversal-sequence","reason":"The relative path links to connection-management documentation for obtaining a connector UUID. It is not a filesystem operation.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:111:path-traversal-sequence","reason":"The parent-relative path links to the agent-management skill for release wiring. No traversal-based file access is requested.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:37:system-reconnaissance","reason":"cargo-ai whoami checks Cargo authentication and workspace selection. It is not the host whoami command and does not inspect operating-system identity.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:43:system-reconnaissance","reason":"The Cargo identity check explicitly confirms the active workspace before writes. This reduces wrong-workspace changes rather than collecting host information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:68:system-reconnaissance","reason":"The folder UUID selects the destination of a documented knowledge-file upload. It is not a system identification query.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:71:system-reconnaissance","reason":"The UUID selects the Cargo file whose name is updated. This application identifier does not expose host configuration.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:72:system-reconnaissance","reason":"The file and folder UUIDs identify Cargo resources for an organization operation. No host identity or system inventory is requested.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:91:system-reconnaissance","reason":"The connector UUID filters Cargo libraries by source connector. It is not an operating-system identity query.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:99:system-reconnaissance","reason":"The connector UUID parameter identifies the source used to create a knowledge library. No host reconnaissance is involved.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:101:system-reconnaissance","reason":"The folder UUID parameter selects where the new Cargo library belongs. It does not gather system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:105:system-reconnaissance","reason":"The UUID selects the library for a documented rename operation. It is an application resource identifier, not host reconnaissance.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"077007320a82b1991f47e729817fc2936dbdd738","subject_content_hash":"7591be883bd53d94568f3533f6fb7ebd3a4a7f37ee696b81310bfe6a1d6c38f7","subject_tree_hash":"15aa9f12b28964f451e38b5a25985bb277ab1f329dddc83c5ffaf942cef3e7a1","subject_plugin_path":"skills/getcargohq/cargo-content","audit_payload_hash":"8d62a014cdb906ba23b3737e95f5c3bb","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"077007320a82b1991f47e729817fc2936dbdd738","contentHash":"7591be883bd53d94568f3533f6fb7ebd3a4a7f37ee696b81310bfe6a1d6c38f7","treeHash":"15aa9f12b28964f451e38b5a25985bb277ab1f329dddc83c5ffaf942cef3e7a1","pluginPath":"skills/getcargohq/cargo-content","auditPayloadHash":"8d62a014cdb906ba23b3737e95f5c3bb"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/getcargohq-cargo-content/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}