{"data":{"skill":{"slug":"ibelick-fixing-metadata","name":"fixing-metadata","icon":"📦","repo":"https://github.com/ibelick/ui-skills/tree/main/skills/fixing-metadata/","status":"approved","author":"ibelick","authorVersion":"1.0.1","skillstoreRevision":2},"audit":{"id":"0250b1b3-74f2-4c6a-895e-593a0059af19","skill_id":"728601c1-ea75-43d9-b6d4-5293021a2bfb","version":5,"content_hash":"v3:ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006:b8315ff95a92dcfa48c33e2b4838a31d9448bd46252aab45726549ce865d6547:516def42c1b83074e65ff3ad3a29d1e12f4e530860fe33bc3ab2fa36ebea1b8e:736b696c6c732f6962656c69636b2f666978696e672d6d65746164617461:09e04638195aae67dd1c309026120339","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All five static alerts are false positives caused by ordinary metadata guidance in SKILL.md. No reconnaissance, prompt injection, or other harmful intent was found.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":113,"audit_model":"codex","audited_at":"2026-07-23T18:41:07.748+00:00","created_at":"2026-07-25T12:06:37.403636+00:00","static_findings":[{"id":"blocker:SKILL.md:47:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- define metadata in one place per page, avoid competing systems","category":"blocker","line_end":47,"severity":"low","line_start":47},{"id":"blocker:SKILL.md:57:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- keep titles short and readable, avoid stuffing","category":"blocker","line_end":57,"severity":"low","line_start":57},{"id":"blocker:SKILL.md:82:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- manifest must be valid and referenced when used","category":"blocker","line_end":82,"severity":"low","line_start":82},{"id":"blocker:SKILL.md:83:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- set theme-color intentionally to avoid mismatched UI chrome","category":"blocker","line_end":83,"severity":"low","line_start":83},{"id":"blocker:SKILL.md:89:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- JSON-LD must be valid and reflect what is actually rendered","category":"blocker","line_end":89,"severity":"low","line_start":89}],"finding_verdicts":[{"id":"blocker:SKILL.md:47:system-reconnaissance","reason":"Line 47 recommends defining page metadata in one place to prevent duplication. It does not request system discovery or access.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:57:system-reconnaissance","reason":"Line 57 advises readable page titles and avoiding keyword stuffing. This is standard SEO guidance without reconnaissance behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:82:system-reconnaissance","reason":"Line 82 requires a valid referenced web manifest. It does not inspect the host system or collect sensitive information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:83:system-reconnaissance","reason":"Line 83 discusses the HTML theme-color setting for browser interface consistency. It contains no system reconnaissance instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:89:system-reconnaissance","reason":"Line 89 requires valid JSON-LD that matches rendered page content. This is structured-data integrity guidance, not reconnaissance.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","subject_content_hash":"b8315ff95a92dcfa48c33e2b4838a31d9448bd46252aab45726549ce865d6547","subject_tree_hash":"516def42c1b83074e65ff3ad3a29d1e12f4e530860fe33bc3ab2fa36ebea1b8e","subject_plugin_path":"skills/ibelick/fixing-metadata","audit_payload_hash":"09e04638195aae67dd1c309026120339","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","contentHash":"b8315ff95a92dcfa48c33e2b4838a31d9448bd46252aab45726549ce865d6547","treeHash":"516def42c1b83074e65ff3ad3a29d1e12f4e530860fe33bc3ab2fa36ebea1b8e","pluginPath":"skills/ibelick/fixing-metadata","auditPayloadHash":"09e04638195aae67dd1c309026120339"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/ibelick-fixing-metadata/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}