{"data":{"skill":{"slug":"hmmhmmhm-align","name":"align","icon":"📦","repo":"https://github.com/hmmhmmhm/align.md/tree/b68ffcfe0e495f43ccd7c33a721aaaf21aa62e42/skills/align","status":"approved","author":"hmmhmmhm","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"b2ee3aac-bcb6-455f-aba0-49f28e85fb44","skill_id":"3acf1d92-43ee-42b1-a61e-1b0c25d1892e","version":1,"content_hash":"v3:8a2eeb88c8f9499e24713e1fb2caafe4a7568aa5:e4f15a14a3353453ca39a002cce03fb600d9972bac2e4b16a184b87cacc21a93:57c1770518bfbbb394ed0c794bd5f97b8c275e15c3f890cda5f2444deb54db47:736b696c6c732f686d6d686d6d686d2f616c69676e:da7cc61535323baf42acbd6c51f9a190","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 14 static findings are false positives: Markdown formatting, a read-only Git check, and duplicate-section guidance. No evidence found of prompt injection, credential access, data exfiltration, or malicious execution. The skill requires authorized agreement changes, preserves existing instructions, and prohibits silent hooks or global configuration changes.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":10,"line_start":10},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":21,"line_start":21},{"file":"SKILL.md","line_end":59,"line_start":59},{"file":"SKILL.md","line_end":79,"line_start":79},{"file":"SKILL.md","line_end":80,"line_start":80},{"file":"SKILL.md","line_end":89,"line_start":89},{"file":"SKILL.md","line_end":94,"line_start":94},{"file":"SKILL.md","line_end":95,"line_start":95},{"file":"SKILL.md","line_end":98,"line_start":98},{"file":"SKILL.md","line_end":100,"line_start":100},{"file":"SKILL.md","line_end":111,"line_start":111},{"file":"SKILL.md","line_end":117,"line_start":117}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":153,"audit_model":"codex","audited_at":"2026-10-12T00:43:34.629+00:00","created_at":"2026-10-12T01:02:30.658968+00:00","static_findings":[{"id":"external_commands:SKILL.md:10:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"current agreement in `ALIGN.md`, separate from task lists and general agent","category":"external_commands","line_end":10,"severity":"medium","line_start":10},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`ALIGN.md`, relevant project documentation, and available conversation context.","category":"external_commands","line_end":17,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`git -C <project> rev-parse --is-inside-work-tree`. Distinguish no repository","category":"external_commands","line_end":21,"severity":"medium","line_start":21},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Create or update the project-root `ALIGN.md` after the user confirms the draft","category":"external_commands","line_end":59,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use the stable footer label `Last aligned:` even when the document body is","category":"external_commands","line_end":79,"severity":"medium","line_start":79},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"translated. End with `Last aligned: YYYY-MM-DD HH:mm (time zone)` when the user","category":"external_commands","line_end":80,"severity":"medium","line_start":80},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"say `Last aligned: Not yet confirmed.` A full reconfirmation may update the","category":"external_commands","line_end":89,"severity":"medium","line_start":89},{"id":"external_commands:SKILL.md:94:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"After saving an agreement, preserve existing `AGENTS.md` instructions and add a concise reference to","category":"external_commands","line_end":94,"severity":"medium","line_start":94},{"id":"external_commands:SKILL.md:95:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`ALIGN.md` with the operating rules below; create `AGENTS.md` if it is absent.","category":"external_commands","line_end":95,"severity":"medium","line_start":95},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Record these instructions in `AGENTS.md`:","category":"external_commands","line_end":98,"severity":"medium","line_start":98},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Read `ALIGN.md` at the start of work and apply it to scope, key decisions,","category":"external_commands","line_end":100,"severity":"medium","line_start":100},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"5. Keep current criteria in `ALIGN.md` and previous versions in Git. Update the","category":"external_commands","line_end":111,"severity":"medium","line_start":111},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"this skill does not guarantee every agent reads `AGENTS.md` or runs it on every","category":"external_commands","line_end":117,"severity":"medium","line_start":117},{"id":"blocker:SKILL.md:96:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Avoid duplicate sections on later invocations.","category":"blocker","line_end":96,"severity":"low","line_start":96}],"finding_verdicts":[{"id":"external_commands:SKILL.md:10:ruby-shell-backtick-execution","reason":"The backticks format the ALIGN.md filename in Markdown prose. This is not Ruby or shell execution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"The backticks identify an agreement file to read for project context. There is no executable expression or shell substitution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","reason":"Markdown presents a read-only Git work-tree check scoped to the target project. The surrounding instructions prohibit Git initialization and distinguish access failures.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The backticks format the agreement filename, not a command. Writing the agreement requires user confirmation or explicit authorization of lasting changes.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","reason":"Last aligned: is a document footer label formatted as inline Markdown. It contains no executable command.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","reason":"The backticks enclose a human-readable timestamp template. The surrounding text requires actual user confirmation rather than executing the template.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","reason":"The backticks mark a literal footer for unconfirmed drafts. This is document content, not command execution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:94:ruby-shell-backtick-execution","reason":"AGENTS.md is a Markdown-formatted filename for the documented agreement reference. The instructions preserve existing agent rules and do not invoke a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:95:ruby-shell-backtick-execution","reason":"The line names agreement and agent instruction files using Markdown backticks. Creating the local reference is disclosed workflow behavior, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","reason":"The backticks identify the destination for project operating instructions. The following rules explicitly respect the applicable instruction hierarchy.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","reason":"The backticks name the agreement file to consult during project work. The next line preserves instruction hierarchy; neither line executes a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","reason":"The line describes current criteria in ALIGN.md and previous versions in Git. Nearby instructions forbid unsolicited Git initialization or alternative history files.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The backticks format AGENTS.md in a limitation about agent compatibility. The following guidance prohibits silent hooks and global setting changes.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:96:system-reconnaissance","reason":"The sentence only asks the agent to avoid duplicate document sections on later invocations. No system information collection or reconnaissance is requested.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"8a2eeb88c8f9499e24713e1fb2caafe4a7568aa5","subject_content_hash":"e4f15a14a3353453ca39a002cce03fb600d9972bac2e4b16a184b87cacc21a93","subject_tree_hash":"57c1770518bfbbb394ed0c794bd5f97b8c275e15c3f890cda5f2444deb54db47","subject_plugin_path":"skills/hmmhmmhm/align","audit_payload_hash":"da7cc61535323baf42acbd6c51f9a190","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"8a2eeb88c8f9499e24713e1fb2caafe4a7568aa5","contentHash":"e4f15a14a3353453ca39a002cce03fb600d9972bac2e4b16a184b87cacc21a93","treeHash":"57c1770518bfbbb394ed0c794bd5f97b8c275e15c3f890cda5f2444deb54db47","pluginPath":"skills/hmmhmmhm/align","auditPayloadHash":"da7cc61535323baf42acbd6c51f9a190"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/hmmhmmhm-align/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}