{"data":{"skill":{"slug":"halt-catch-fire-storyboard-creation","name":"storyboard-creation","icon":"📦","repo":"https://github.com/halt-catch-fire/skills/tree/main/guides/video/storyboard-creation/","status":"approved","author":"halt-catch-fire","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"5ce3e17f-625e-4bf1-864a-f86193e29d9d","skill_id":"8079638c-97f5-43ff-ba02-42a9470f7bf3","version":1,"content_hash":"103e6a1d3a5b6604b7cbb241989179af","risk_level":"medium","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Static backtick findings are false positives caused by Markdown command examples, code fences, and inline CLI names. The skill is transparent about using the `belt` CLI, but its wildcard `Bash(belt *)` permission creates a broader execution surface than the documented workflow needs.","remediation":[{"issue":"Broad `belt` command permission","severity":"medium","suggestion":"Replace `Bash(belt *)` with the smallest set of `belt` subcommands required for login, image generation, stitching, and app browsing."},{"issue":"External AI service sends prompt content off device","severity":"low","suggestion":"Add a clear note that storyboard prompts may be sent to inference.sh or model providers, and advise users not to include confidential scripts."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":7,"line_start":7},{"file":"SKILL.md","line_end":15,"line_start":15},{"file":"SKILL.md","line_end":32,"line_start":17},{"file":"SKILL.md","line_end":50,"line_start":32},{"file":"SKILL.md","line_end":71,"line_start":50},{"file":"SKILL.md","line_end":107,"line_start":71},{"file":"SKILL.md","line_end":115,"line_start":107},{"file":"SKILL.md","line_end":123,"line_start":115},{"file":"SKILL.md","line_end":127,"line_start":123},{"file":"SKILL.md","line_end":133,"line_start":127},{"file":"SKILL.md","line_end":136,"line_start":133},{"file":"SKILL.md","line_end":157,"line_start":136},{"file":"SKILL.md","line_end":172,"line_start":157},{"file":"SKILL.md","line_end":180,"line_start":172},{"file":"SKILL.md","line_end":190,"line_start":180},{"file":"SKILL.md","line_end":196,"line_start":190},{"file":"SKILL.md","line_end":217,"line_start":196},{"file":"SKILL.md","line_end":221,"line_start":217},{"file":"SKILL.md","line_end":238,"line_start":221},{"file":"SKILL.md","line_end":261,"line_start":238},{"file":"SKILL.md","line_end":266,"line_start":261},{"file":"SKILL.md","line_end":268,"line_start":266}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":11,"line_start":11},{"file":"SKILL.md","line_end":15,"line_start":15}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Broad External CLI Permission","locations":[{"file":"SKILL.md","line_end":4,"line_start":4}],"confidence":0.78,"description":"The skill declares `Bash(belt *)`, which permits any `belt` subcommand during skill use. The workflow needs the CLI, but a narrower command allowlist would reduce unintended network or account actions.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"The wildcard tool permission is directly declared on line 4 and applies to a network-enabled CLI. No malicious command is shown, so the concern is permission scope rather than hostile intent."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":270,"audit_model":"codex","audited_at":"2026-07-03T13:12:55.563+00:00","created_at":"2026-07-03T13:32:59.321716+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"medium","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}