{"data":{"skill":{"slug":"huifer-health-trend-analyzer","name":"health-trend-analyzer","icon":"📦","repo":"https://github.com/huifer/Claude-Ally-Health/tree/main/.claude/skills/health-trend-analyzer","status":"approved","author":"huifer","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"7adddbbd-076b-41cd-b2dc-d23c87c38668","skill_id":"e7b68c30-4de8-401f-8200-14cca42abaf8","version":5,"content_hash":"77dcfb5bb2c3353df6104fa207d0c8ad","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"The skill is a documentation and template-based health trend analysis tool. Static findings are false positives: code examples in markdown files were flagged as 'external_commands' but are not executable. This skill does not execute any code, shell commands, or cryptographic operations.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"templates/report-template.html","line_end":38,"line_start":38},{"file":"templates/report-template.html","line_end":100,"line_start":100},{"file":"templates/custom-styles.css","line_end":87,"line_start":87}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Ruby/shell backtick execution patterns in documentation","locations":[{"file":"algorithms.md","line_end":27,"line_start":27},{"file":"data-sources.md","line_end":9,"line_start":9},{"file":"examples.md","line_end":6,"line_start":6},{"file":"SKILL.md","line_end":76,"line_start":76}],"description":"Static scanner detected backtick patterns in markdown files. These are code examples in documentation, not executable code."}],"low_findings":[{"title":"Hardcoded URLs in template files","locations":[{"file":"templates/report-template.html","line_end":9,"line_start":9},{"file":"templates/report-template.html","line_end":12,"line_start":12},{"file":"templates/report-template.html","line_end":15,"line_start":15}],"description":"Template files contain hardcoded CDN URLs for ECharts and similar resources. These are standard practice for chart visualization libraries."}],"dangerous_patterns":[],"files_scanned":9,"total_lines":8820,"audit_model":"claude","audited_at":"2026-01-21T17:13:00.132+00:00","created_at":"2026-01-21T22:38:04.986009+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"medium","confirmedFindingCount":2,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}