{"data":{"skill":{"slug":"hunxuankai-skill-publishing-guide","name":"skill-publishing-guide","icon":"📦","repo":"https://github.com/hunxuankai/skill-publishing-guide/tree/38ce8f6dd2a2f9a9a475cc60d093deea13551d9b/skills/skill-publishing-guide","status":"approved","author":"hunxuankai","authorVersion":"1.2.3","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"479657be-9662-4a40-af61-6120f670db83","skill_id":"6dd9aade-ece0-4997-a25e-9f9ac755688a","version":1,"content_hash":"v3:c993c6abcbffafea2683d7748b53b3dfaf438415:79e217cf44cce4a6311c1e5ff782d5d9a73f9edb78e7da551e3b1bd6e5bbe5c2:f74adb0327896f0d1d9c7fd7b95b7cf8cb823e92e8a5453c1402f04c67721d35:736b696c6c732f68756e7875616e6b61692f736b696c6c2d7075626c697368696e672d6775696465:c40f05e8c87a3eb0dd64e1e7acaa76fa","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 19 static findings are false positives involving readable multilingual documentation, Markdown formatting, placeholder links, or authorized publishing commands. The guide explicitly limits remote writes, protects credentials, and separates preparation from publication. No evidence found of prompt injection, credential exfiltration, or concealed payloads in the reviewed files.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"references/community-directories.md","line_end":16,"line_start":16}]},{"factor":"external_commands","evidence":[{"file":"references/skillhub-club.md","line_end":35,"line_start":35},{"file":"SKILL.md","line_end":34,"line_start":34}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":16,"total_lines":762,"audit_model":"codex","audited_at":"2026-11-08T06:55:09.601+00:00","created_at":"2026-11-09T15:34:42.460575+00:00","static_findings":[{"id":"blocker:references/clawhub.md:13:system-reconnaissance","file":"references/clawhub.md","pattern":"System reconnaissance","snippet":"读取当前官方 CLI 的版本和帮助,检查本次 skill 文件夹及 namespace/slug。`clawhub whoami` 可核对已有账号;`clawhub login` 涉及用户登录时再请求","category":"blocker","line_end":13,"severity":"low","line_start":13},{"id":"network:references/community-directories.md:16:hardcoded-url","file":"references/community-directories.md","pattern":"Hardcoded URL","snippet":"- **[author/skill-name](https://github.com/author/repo/path)** - Short description","category":"network","line_end":16,"severity":"low","line_start":16},{"id":"external_commands:references/skillhub-club.md:35:powershell-invocation","file":"references/skillhub-club.md","pattern":"PowerShell invocation","snippet":"```powershell","category":"external_commands","line_end":35,"severity":"high","line_start":35},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`skills.sh` 与 `agentskill.sh` 是不同网站;腾讯 `skillhub.cn`、独立平台 `skillhub.club` 和字节/企业 SkillHub 的账号与流程分别核对","category":"external_commands","line_end":34,"severity":"medium","line_start":34},{"id":"obfuscation:references/agensi.md:1:heuristic-high-file-entropy-7-73-bits-possible-b","file":"references/agensi.md","pattern":"[HEURISTIC] High file entropy (7.73 bits) - possible binary/encrypted content","snippet":"File: references/agensi.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/clawhub.md:1:heuristic-high-file-entropy-7-24-bits-possible-b","file":"references/clawhub.md","pattern":"[HEURISTIC] High file entropy (7.24 bits) - possible binary/encrypted content","snippet":"File: references/clawhub.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/community-directories.md:1:heuristic-high-file-entropy-7-02-bits-possible-b","file":"references/community-directories.md","pattern":"[HEURISTIC] High file entropy (7.02 bits) - possible binary/encrypted content","snippet":"File: references/community-directories.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/github.md:1:heuristic-high-file-entropy-7-16-bits-possible-b","file":"references/github.md","pattern":"[HEURISTIC] High file entropy (7.16 bits) - possible binary/encrypted content","snippet":"File: references/github.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/introduction-content.md:1:heuristic-high-file-entropy-7-78-bits-possible-b","file":"references/introduction-content.md","pattern":"[HEURISTIC] High file entropy (7.78 bits) - possible binary/encrypted content","snippet":"File: references/introduction-content.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/prepare-and-package.md:1:heuristic-high-file-entropy-7-47-bits-possible-b","file":"references/prepare-and-package.md","pattern":"[HEURISTIC] High file entropy (7.47 bits) - possible binary/encrypted content","snippet":"File: references/prepare-and-package.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/skillhub-club.md:1:heuristic-high-file-entropy-7-67-bits-possible-b","file":"references/skillhub-club.md","pattern":"[HEURISTIC] High file entropy (7.67 bits) - possible binary/encrypted content","snippet":"File: references/skillhub-club.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/skillhub-cn.md:1:heuristic-high-file-entropy-7-94-bits-possible-b","file":"references/skillhub-cn.md","pattern":"[HEURISTIC] High file entropy (7.94 bits) - possible binary/encrypted content","snippet":"File: references/skillhub-cn.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/skills-sh.md:1:heuristic-high-file-entropy-7-14-bits-possible-b","file":"references/skills-sh.md","pattern":"[HEURISTIC] High file entropy (7.14 bits) - possible binary/encrypted content","snippet":"File: references/skills-sh.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/skillstore.md:13:heuristic-very-high-entropy-string-5-70-bits-lik","file":"references/skillstore.md","pattern":"[HEURISTIC] Very high entropy string (5.70 bits) - likely encoded/encrypted payload","snippet":" 手工开一个“添加 skill”的 PR。** 官方 README 明确该仓库是平台的配套内容库，发布入口在网站；处理管线会生成自己的审核 PR。安装命令 ","category":"obfuscation","line_end":13,"severity":"high","line_start":13},{"id":"obfuscation:references/skillstore.md:1:heuristic-high-file-entropy-7-25-bits-possible-b","file":"references/skillstore.md","pattern":"[HEURISTIC] High file entropy (7.25 bits) - possible binary/encrypted content","snippet":"File: references/skillstore.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/sources-and-maintenance.md:1:heuristic-high-file-entropy-7-53-bits-possible-b","file":"references/sources-and-maintenance.md","pattern":"[HEURISTIC] High file entropy (7.53 bits) - possible binary/encrypted content","snippet":"File: references/sources-and-maintenance.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/submission-record.md:1:heuristic-high-file-entropy-7-28-bits-possible-b","file":"references/submission-record.md","pattern":"[HEURISTIC] High file entropy (7.28 bits) - possible binary/encrypted content","snippet":"File: references/submission-record.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/verification-and-recovery.md:1:heuristic-high-file-entropy-7-75-bits-possible-b","file":"references/verification-and-recovery.md","pattern":"[HEURISTIC] High file entropy (7.75 bits) - possible binary/encrypted content","snippet":"File: references/verification-and-recovery.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-24-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.24 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"blocker:references/clawhub.md:13:system-reconnaissance","reason":"Line 13 checks the official CLI version, selected skill folder, and authorized publishing identity with clawhub whoami. These are task-specific preflight checks, not host reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"network:references/community-directories.md:16:hardcoded-url","reason":"Line 16 is a fenced Markdown listing template containing a placeholder GitHub URL. It performs no network request or data transmission.","verdict":"false_positive","confidence":1},{"id":"external_commands:references/skillhub-club.md:35:powershell-invocation","reason":"Line 35 is a Markdown language label, not a PowerShell process invocation. The enclosed commands use the documented publishing CLI, with authorization and upload-scope checks stated nearby.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"Line 34 uses Markdown backticks to distinguish platform domain names in prose. There is no Ruby interpreter, shell substitution, or executable backtick expression.","verdict":"false_positive","confidence":1},{"id":"obfuscation:references/agensi.md:1:heuristic-high-file-entropy-7-73-bits-possible-b","reason":"The complete file is readable Chinese Markdown describing Agensi packaging, form fields, authorization, and review states. No encoded payload, decryption step, or concealed execution appears.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/clawhub.md:1:heuristic-high-file-entropy-7-24-bits-possible-b","reason":"The file contains readable Chinese publishing guidance and plain CLI examples for ClawHub. Its multilingual text is not an encrypted or executable payload.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/community-directories.md:1:heuristic-high-file-entropy-7-02-bits-possible-b","reason":"The file is readable Chinese documentation about directory eligibility, listing format, and authorized pull requests. No decoding routine or hidden payload appears.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/github.md:1:heuristic-high-file-entropy-7-16-bits-possible-b","reason":"The file contains readable Chinese GitHub release instructions and a plain gh release create template. The content is documentation rather than encrypted or binary data.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/introduction-content.md:1:heuristic-high-file-entropy-7-78-bits-possible-b","reason":"The file is readable Chinese Markdown with tables and checklists for synchronizing listing descriptions. There is no encoded content or concealed execution mechanism.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/prepare-and-package.md:1:heuristic-high-file-entropy-7-47-bits-possible-b","reason":"The file is readable packaging guidance with URL examples, archive layouts, and explicit git archive command templates. No encrypted payload or decoding operation appears.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/skillhub-club.md:1:heuristic-high-file-entropy-7-67-bits-possible-b","reason":"The file contains readable Chinese documentation of web import, CLI publishing, file filters, and verification limits. Its commands are plain text and contain no obfuscated payload.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/skillhub-cn.md:1:heuristic-high-file-entropy-7-94-bits-possible-b","reason":"The file is readable Chinese documentation of Tencent SkillHub forms, client observations, and content verification. URLs and field names are contextual references, not encrypted instructions.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/skills-sh.md:1:heuristic-high-file-entropy-7-14-bits-possible-b","reason":"The file is readable Chinese guidance on skills.sh discovery, installation sources, telemetry choices, and isolated verification. No decoding mechanism or concealed payload appears.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/skillstore.md:13:heuristic-very-high-entropy-string-5-70-bits-lik","reason":"Line 13 is readable Chinese prose distinguishing website submission from manual repository pull requests and installation commands. It contains no encoded or encrypted string payload.","verdict":"false_positive","confidence":1},{"id":"obfuscation:references/skillstore.md:1:heuristic-high-file-entropy-7-25-bits-possible-b","reason":"The file contains readable Chinese guidance on Skillstore source URLs, review receipts, and public verification. Its links and manifest field examples do not conceal executable content.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/sources-and-maintenance.md:1:heuristic-high-file-entropy-7-53-bits-possible-b","reason":"The file is readable Chinese source documentation and version history with explicit evidence boundaries. No encrypted data, decoding routine, or audit-override instruction appears.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/submission-record.md:1:heuristic-high-file-entropy-7-28-bits-possible-b","reason":"The file is a readable Chinese release-record template with blank tables and content placeholders. It explicitly excludes credentials and contains no hidden payload.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:references/verification-and-recovery.md:1:heuristic-high-file-entropy-7-75-bits-possible-b","reason":"The file contains readable Chinese state-verification and retry guidance, including warnings against duplicate submissions. No encoded instructions or concealed execution appears.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-24-bits-possible-b","reason":"The file contains ordinary YAML metadata and readable Chinese workflow instructions with Markdown links. It requires authorized publishing and credential protection rather than concealed execution.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"c993c6abcbffafea2683d7748b53b3dfaf438415","subject_content_hash":"79e217cf44cce4a6311c1e5ff782d5d9a73f9edb78e7da551e3b1bd6e5bbe5c2","subject_tree_hash":"f74adb0327896f0d1d9c7fd7b95b7cf8cb823e92e8a5453c1402f04c67721d35","subject_plugin_path":"skills/hunxuankai/skill-publishing-guide","audit_payload_hash":"c40f05e8c87a3eb0dd64e1e7acaa76fa","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"c993c6abcbffafea2683d7748b53b3dfaf438415","contentHash":"79e217cf44cce4a6311c1e5ff782d5d9a73f9edb78e7da551e3b1bd6e5bbe5c2","treeHash":"f74adb0327896f0d1d9c7fd7b95b7cf8cb823e92e8a5453c1402f04c67721d35","pluginPath":"skills/hunxuankai/skill-publishing-guide","auditPayloadHash":"c40f05e8c87a3eb0dd64e1e7acaa76fa"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/hunxuankai-skill-publishing-guide/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}