{"data":{"skill":{"slug":"internet-court-web3-data","name":"web3-data","icon":"📦","repo":"https://github.com/internet-court/internet-court-skill/tree/main/vendored/chainbase/web3-data","status":"approved","author":"internet-court","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"f8b9ac73-2cfc-479b-bce3-7c4796ccd805","skill_id":"a927a14d-369d-4cd3-97e4-59426cfc362c","version":3,"content_hash":"v3:1c2ebded2116f8124f45dba86a2e567f56e64d8e:98eadfb1b4dbbcd56bd92dbff9021820378b94cdf28ca34ba9ff4b733f602c91:72044e51568b6655e49be366bcd9773578f13519ace64e9564536268efe6f86a:736b696c6c732f696e7465726e65742d636f7572742f776562332d64617461:fcb1c31441df896540a3cd449f0e8fcc","risk_level":"medium","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 96 static matches are false positives because they identify documentation links, API reference tables, environment-variable configuration, or literal CLI examples. The skill does describe an optional x402 private-key payment flow, which is a medium-risk financial side effect that requires explicit user approval and controlled credentials.","remediation":[{"issue":"The x402 workflow can authorize pay-per-call micropayments with a configured private key.","severity":"medium","suggestion":"Require explicit confirmation before using --x402, display the expected charge, and use a narrowly funded wallet or payment key."},{"issue":"The skill uses Chainbase API credentials through CLI configuration or CHAINBASE_API_KEY.","severity":"high","suggestion":"Remove demo credentials from distributed defaults, document secret storage, and avoid printing keys in command output or logs."},{"issue":"The skill instructs an agent to run external Chainbase commands and user-derived SQL.","severity":"medium","suggestion":"Use argument-safe process execution, validate addresses and options, constrain SQL to read-only queries, and require approval for unusual commands."}],"risk_factor_evidence":[{"factor":"env_access","evidence":[{"file":"CLAUDE.md","line_end":20,"line_start":20},{"file":"README.md","line_end":65,"line_start":65},{"file":"SKILL.md","line_end":26,"line_start":26}]},{"factor":"network","evidence":[{"file":"clawhub.json","line_end":10,"line_start":10},{"file":"clawhub.json","line_end":11,"line_start":11},{"file":"README.md","line_end":40,"line_start":40},{"file":"references/tops-api.md","line_end":43,"line_start":43},{"file":"references/tops-api.md","line_end":102,"line_start":102},{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":135,"line_start":135},{"file":"SKILL.md","line_end":136,"line_start":136}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":42,"line_start":30},{"file":"SKILL.md","line_end":44,"line_start":42},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":64,"line_start":63},{"file":"SKILL.md","line_end":65,"line_start":64},{"file":"SKILL.md","line_end":66,"line_start":65},{"file":"SKILL.md","line_end":67,"line_start":66},{"file":"SKILL.md","line_end":68,"line_start":67},{"file":"SKILL.md","line_end":69,"line_start":68},{"file":"SKILL.md","line_end":70,"line_start":69},{"file":"SKILL.md","line_end":71,"line_start":70},{"file":"SKILL.md","line_end":72,"line_start":71},{"file":"SKILL.md","line_end":73,"line_start":72},{"file":"SKILL.md","line_end":74,"line_start":73},{"file":"SKILL.md","line_end":75,"line_start":74},{"file":"SKILL.md","line_end":76,"line_start":75},{"file":"SKILL.md","line_end":77,"line_start":76},{"file":"SKILL.md","line_end":78,"line_start":77},{"file":"SKILL.md","line_end":79,"line_start":78},{"file":"SKILL.md","line_end":80,"line_start":79},{"file":"SKILL.md","line_end":81,"line_start":80},{"file":"SKILL.md","line_end":82,"line_start":81},{"file":"SKILL.md","line_end":88,"line_start":82},{"file":"SKILL.md","line_end":89,"line_start":88},{"file":"SKILL.md","line_end":90,"line_start":89},{"file":"SKILL.md","line_end":91,"line_start":90},{"file":"SKILL.md","line_end":92,"line_start":91},{"file":"SKILL.md","line_end":93,"line_start":92},{"file":"SKILL.md","line_end":95,"line_start":93},{"file":"SKILL.md","line_end":104,"line_start":95},{"file":"SKILL.md","line_end":104,"line_start":104},{"file":"SKILL.md","line_end":105,"line_start":105},{"file":"SKILL.md","line_end":106,"line_start":106},{"file":"SKILL.md","line_end":107,"line_start":107},{"file":"SKILL.md","line_end":108,"line_start":108},{"file":"SKILL.md","line_end":116,"line_start":114},{"file":"SKILL.md","line_end":118,"line_start":116},{"file":"SKILL.md","line_end":119,"line_start":118},{"file":"SKILL.md","line_end":120,"line_start":119},{"file":"SKILL.md","line_end":121,"line_start":120},{"file":"SKILL.md","line_end":122,"line_start":121},{"file":"SKILL.md","line_end":123,"line_start":122},{"file":"SKILL.md","line_end":127,"line_start":123},{"file":"SKILL.md","line_end":127,"line_start":127},{"file":"SKILL.md","line_end":136,"line_start":133},{"file":"SKILL.md","line_end":141,"line_start":136},{"file":"SKILL.md","line_end":159,"line_start":141}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Payment-Capable CLI Workflow","locations":[{"file":"SKILL.md","line_end":28,"line_start":28}],"confidence":0.96,"description":"SKILL.md documents the --x402 option and asks the user to configure a private key for pay-per-call micropayments. This creates a financial side effect that should require explicit approval.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"The cited line explicitly describes x402 micropayments and private-key setup. The documentation does not show unauthorized payment behavior, so the finding is limited to confirmation and fund-management risk."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":8,"total_lines":853,"audit_model":"codex","audited_at":"2026-08-07T09:15:48.022+00:00","created_at":"2026-08-07T11:48:11.295473+00:00","static_findings":[{"id":"env_access:CLAUDE.md:20:generic-api-secret-keys","file":"CLAUDE.md","pattern":"Generic API/secret keys","snippet":"- 默认使用 `demo` API Key,可通过 `chainbase config set api-key` 或环境变量 `CHAINBASE_API_KEY` 覆盖","category":"env_access","line_end":20,"severity":"high","line_start":20},{"id":"network:clawhub.json:10:hardcoded-url","file":"clawhub.json","pattern":"Hardcoded URL","snippet":"\"support_url\": \"https://github.com/lxcong/web3-data-skill/issues\",","category":"network","line_end":10,"severity":"low","line_start":10},{"id":"network:clawhub.json:11:hardcoded-url","file":"clawhub.json","pattern":"Hardcoded URL","snippet":"\"homepage\": \"https://github.com/lxcong/web3-data-skill\"","category":"network","line_end":11,"severity":"low","line_start":11},{"id":"network:README.md:40:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"claude install-skill https://github.com/lxcong/web3-data-skill","category":"network","line_end":40,"severity":"low","line_start":40},{"id":"env_access:README.md:65:generic-api-secret-keys","file":"README.md","pattern":"Generic API/secret keys","snippet":"- **Web3 Data**: Uses Chainbase `demo` key by default. For higher limits, register at [console.chain","category":"env_access","line_end":65,"severity":"high","line_start":65},{"id":"blocker:references/api-endpoints.md:46:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes | Chain ID |","category":"blocker","line_end":46,"severity":"low","line_start":46},{"id":"blocker:references/api-endpoints.md:64:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":64,"severity":"low","line_start":64},{"id":"blocker:references/api-endpoints.md:74:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":74,"severity":"low","line_start":74},{"id":"blocker:references/api-endpoints.md:86:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":86,"severity":"low","line_start":86},{"id":"blocker:references/api-endpoints.md:96:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":96,"severity":"low","line_start":96},{"id":"blocker:references/api-endpoints.md:114:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":114,"severity":"low","line_start":114},{"id":"blocker:references/api-endpoints.md:124:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":124,"severity":"low","line_start":124},{"id":"blocker:references/api-endpoints.md:137:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":137,"severity":"low","line_start":137},{"id":"blocker:references/api-endpoints.md:145:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":145,"severity":"low","line_start":145},{"id":"blocker:references/api-endpoints.md:154:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":154,"severity":"low","line_start":154},{"id":"blocker:references/api-endpoints.md:171:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":171,"severity":"low","line_start":171},{"id":"blocker:references/api-endpoints.md:182:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":182,"severity":"low","line_start":182},{"id":"blocker:references/api-endpoints.md:194:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":194,"severity":"low","line_start":194},{"id":"blocker:references/api-endpoints.md:205:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | No (array, e.g. [\"ethereum\"]) |","category":"blocker","line_end":205,"severity":"low","line_start":205},{"id":"blocker:references/api-endpoints.md:218:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":218,"severity":"low","line_start":218},{"id":"blocker:references/api-endpoints.md:226:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":226,"severity":"low","line_start":226},{"id":"blocker:references/api-endpoints.md:234:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"| chain_id | Yes |","category":"blocker","line_end":234,"severity":"low","line_start":234},{"id":"blocker:references/api-endpoints.md:300:system-reconnaissance","file":"references/api-endpoints.md","pattern":"System reconnaissance","snippet":"1,000 results per page, task_id valid for 1 hour, max 100,000 records.","category":"blocker","line_end":300,"severity":"low","line_start":300},{"id":"network:references/tops-api.md:43:hardcoded-url","file":"references/tops-api.md","pattern":"Hardcoded URL","snippet":"\"tweet_urls\": [\"https://twitter.com/...\"],","category":"network","line_end":43,"severity":"low","line_start":43},{"id":"network:references/tops-api.md:102:hardcoded-url","file":"references/tops-api.md","pattern":"Hardcoded URL","snippet":"\"profile_image\": \"https://...\"","category":"network","line_end":102,"severity":"low","line_start":102},{"id":"blocker:references/tops-api.md:189:system-reconnaissance","file":"references/tops-api.md","pattern":"System reconnaissance","snippet":"| 400 | Bad Request — invalid parameters |","category":"blocker","line_end":189,"severity":"low","line_start":189},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Install**: `npm install -g chainbase-cli` (or use `npx chainbase-cli`)","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Auth**: Set API key via `chainbase config set api-key YOUR_KEY`, or env `CHAINBASE_API_KEY`. Falls","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**x402 Payment**: Supports pay-per-call micropayments via `--x402` flag. Setup: `chainbase config se","category":"external_commands","line_end":28,"severity":"medium","line_start":28},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":42,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":44,"severity":"medium","line_start":42},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use `--json` for machine-parseable output. Use `--chain <id>` to target a specific chain.","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Latest block number | `chainbase block latest` |","category":"external_commands","line_end":64,"severity":"medium","line_start":63},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Block details | `chainbase block detail <number>` |","category":"external_commands","line_end":65,"severity":"medium","line_start":64},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Transaction detail | `chainbase tx detail <hash>` |","category":"external_commands","line_end":66,"severity":"medium","line_start":65},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Wallet transaction history | `chainbase tx list <address>` |","category":"external_commands","line_end":67,"severity":"medium","line_start":66},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Token info (name, symbol, supply) | `chainbase token metadata <contract>` |","category":"external_commands","line_end":68,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Token price | `chainbase token price <contract>` |","category":"external_commands","line_end":69,"severity":"medium","line_start":68},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Historical token price | `chainbase token price-history <contract> --from <ts> --to <ts>` |","category":"external_commands","line_end":70,"severity":"medium","line_start":69},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| List of holder addresses | `chainbase token holders <contract>` |","category":"external_commands","line_end":71,"severity":"medium","line_start":70},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Top token holders / who holds a token | `chainbase token top-holders <contract>` |","category":"external_commands","line_end":72,"severity":"medium","line_start":71},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Token transfer history | `chainbase token transfers --contract <addr>` |","category":"external_commands","line_end":73,"severity":"medium","line_start":72},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Native token balance (ETH/BNB) | `chainbase balance native <address>` |","category":"external_commands","line_end":74,"severity":"medium","line_start":73},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| ERC20 token balances of wallet | `chainbase balance tokens <address>` |","category":"external_commands","line_end":75,"severity":"medium","line_start":74},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| DeFi portfolio positions | `chainbase balance portfolios <address>` |","category":"external_commands","line_end":76,"severity":"medium","line_start":75},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| ENS domains held by address | `chainbase domain ens <address>` |","category":"external_commands","line_end":77,"severity":"medium","line_start":76},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| ENS name → address | `chainbase domain ens-resolve <name>` |","category":"external_commands","line_end":78,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Address → ENS name | `chainbase domain ens-reverse <address>` |","category":"external_commands","line_end":79,"severity":"medium","line_start":78},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Space ID resolve (BSC) | `chainbase domain spaceid-resolve <domain>` |","category":"external_commands","line_end":80,"severity":"medium","line_start":79},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Space ID reverse (BSC) | `chainbase domain spaceid-reverse <address>` |","category":"external_commands","line_end":81,"severity":"medium","line_start":80},{"id":"external_commands:SKILL.md:81:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Call smart contract function | `chainbase contract call --address <contract> --function \"fn\" --abi","category":"external_commands","line_end":82,"severity":"medium","line_start":81},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| **Anything not covered above** | **SQL API**: `chainbase sql execute \"SELECT ...\"` |","category":"external_commands","line_end":88,"severity":"medium","line_start":82},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- USDT: `0xdAC17F958D2ee523a2206206994597C13D831ec7` (ETH)","category":"external_commands","line_end":89,"severity":"medium","line_start":88},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- USDC: `0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48` (ETH)","category":"external_commands","line_end":90,"severity":"medium","line_start":89},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- WETH: `0xC02aaA39b223FE8D0A0e5c4F27eAD9083C756Cc2` (ETH)","category":"external_commands","line_end":91,"severity":"medium","line_start":90},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- DAI: `0x6B175474E89094C44Da98b954EedeAC495271d0F` (ETH)","category":"external_commands","line_end":92,"severity":"medium","line_start":91},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- WBTC: `0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599` (ETH)","category":"external_commands","line_end":93,"severity":"medium","line_start":92},{"id":"external_commands:SKILL.md:93:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If unknown, use `chainbase token metadata <contract>` or ask the user for the contract address","category":"external_commands","line_end":95,"severity":"medium","line_start":93},{"id":"external_commands:SKILL.md:95:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. **Execute** — Run the CLI command. Add `--json` when you need to parse the output programmaticall","category":"external_commands","line_end":104,"severity":"medium","line_start":95},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `--chain <id>` | Target chain | `1` (Ethereum) |","category":"external_commands","line_end":104,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `--json` | Machine-parseable JSON output | `false` |","category":"external_commands","line_end":105,"severity":"medium","line_start":105},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `--page <n>` | Page number for paginated results | `1` |","category":"external_commands","line_end":106,"severity":"medium","line_start":106},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `--limit <n>` | Results per page | `20` |","category":"external_commands","line_end":107,"severity":"medium","line_start":107},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `--x402` | Enable x402 micropayment mode | `false` |","category":"external_commands","line_end":108,"severity":"medium","line_start":108},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":116,"severity":"medium","line_start":114},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":118,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Common table patterns (replace `ethereum` with chain name):","category":"external_commands","line_end":119,"severity":"medium","line_start":118},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `{chain}.blocks` — Block data","category":"external_commands","line_end":120,"severity":"medium","line_start":119},{"id":"external_commands:SKILL.md:120:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `{chain}.transactions` — Transactions","category":"external_commands","line_end":121,"severity":"medium","line_start":120},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `{chain}.token_transfers` — ERC20 transfers","category":"external_commands","line_end":122,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:122:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `{chain}.token_metas` — Token metadata","category":"external_commands","line_end":123,"severity":"medium","line_start":122},{"id":"external_commands:SKILL.md:123:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `{chain}.logs` — Event logs","category":"external_commands","line_end":127,"severity":"medium","line_start":123},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For full command help, run `chainbase --help` or `chainbase <command> --help`.","category":"external_commands","line_end":127,"severity":"medium","line_start":127},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Query crypto social signals via `chainbase tops`. No API key required — free to use.","category":"external_commands","line_end":136,"severity":"medium","line_start":133},{"id":"external_commands:SKILL.md:136:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Base URL:** `https://api.chainbase.com/tops` (called internally by the CLI)","category":"external_commands","line_end":141,"severity":"medium","line_start":136},{"id":"external_commands:SKILL.md:141:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":159,"severity":"medium","line_start":141},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":161,"severity":"medium","line_start":159},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use `--json` for machine-parseable output.","category":"external_commands","line_end":169,"severity":"medium","line_start":161},{"id":"external_commands:SKILL.md:169:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| What's trending in crypto right now | `chainbase tops trending [--language <lang>]` |","category":"external_commands","line_end":170,"severity":"medium","line_start":169},{"id":"external_commands:SKILL.md:170:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Details / summary of a specific topic | `chainbase tops topic <topic_id>` |","category":"external_commands","line_end":171,"severity":"medium","line_start":170},{"id":"external_commands:SKILL.md:171:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Raw tweets / posts under a topic | `chainbase tops posts <topic_id>` |","category":"external_commands","line_end":172,"severity":"medium","line_start":171},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Find topics related to a narrative keyword | `chainbase tops search <keyword>` |","category":"external_commands","line_end":173,"severity":"medium","line_start":172},{"id":"external_commands:SKILL.md:173:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Recent Twitter/X mentions of a project or keyword | `chainbase tops mentions <keyword>` |","category":"external_commands","line_end":178,"severity":"medium","line_start":173},{"id":"external_commands:SKILL.md:178:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `chainbase tops trending` → get current top topics (note `id` fields)","category":"external_commands","line_end":178,"severity":"medium","line_start":178},{"id":"external_commands:SKILL.md:179:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. `chainbase tops topic <id>` → dive into summary, keywords, representative tweets","category":"external_commands","line_end":180,"severity":"medium","line_start":179},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. `chainbase tops posts <id>` → retrieve raw tweets for sentiment analysis","category":"external_commands","line_end":183,"severity":"medium","line_start":180},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `chainbase tops search <keyword>` → find candidate topics from a vague term","category":"external_commands","line_end":185,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:185:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. `chainbase tops topic <id>` → confirm topic details","category":"external_commands","line_end":188,"severity":"medium","line_start":185},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `chainbase tops mentions <keyword>` → monitor social mentions of a project/token","category":"external_commands","line_end":193,"severity":"medium","line_start":188},{"id":"external_commands:SKILL.md:193:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Story** (topic): `id`, `keyword`, `summary`, `score`, `current_rank`, `rank_status` (`new`/`up`/`d","category":"external_commands","line_end":193,"severity":"medium","line_start":193},{"id":"external_commands:SKILL.md:195:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Tweet**: `id`, `text`, `media_json`, `user` → `{user_id, name, screen_name, blue_verified, profile","category":"external_commands","line_end":195,"severity":"medium","line_start":195},{"id":"network:SKILL.md:20:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Query on-chain data via the [Chainbase CLI](https://github.com/chainbase-labs/cli).","category":"network","line_end":20,"severity":"low","line_start":20},{"id":"network:SKILL.md:26:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"**Auth**: Set API key via `chainbase config set api-key YOUR_KEY`, or env `CHAINBASE_API_KEY`. Falls","category":"network","line_end":26,"severity":"low","line_start":26},{"id":"network:SKILL.md:135:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"**Service:** [Tops](https://tops.chainbase.com) — trending narratives, topic discovery, Twitter/X me","category":"network","line_end":135,"severity":"low","line_start":135},{"id":"network:SKILL.md:136:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"**Base URL:** `https://api.chainbase.com/tops` (called internally by the CLI)","category":"network","line_end":136,"severity":"low","line_start":136},{"id":"env_access:SKILL.md:26:generic-api-secret-keys","file":"SKILL.md","pattern":"Generic API/secret keys","snippet":"**Auth**: Set API key via `chainbase config set api-key YOUR_KEY`, or env `CHAINBASE_API_KEY`. Falls","category":"env_access","line_end":26,"severity":"high","line_start":26}],"finding_verdicts":[{"id":"env_access:CLAUDE.md:20:generic-api-secret-keys","reason":"The cited text documents API-key configuration and does not transmit, reveal, or collect a secret.","verdict":"false_positive","confidence":0.98},{"id":"network:clawhub.json:10:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"network:clawhub.json:11:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:40:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"env_access:README.md:65:generic-api-secret-keys","reason":"The cited text documents API-key configuration and does not transmit, reveal, or collect a secret.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:46:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:64:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:74:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:86:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:96:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:114:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:124:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:137:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:145:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:154:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:171:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:182:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:194:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:205:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:218:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:226:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:234:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/api-endpoints.md:300:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"network:references/tops-api.md:43:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"network:references/tops-api.md:102:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/tops-api.md:189:system-reconnaissance","reason":"The cited text is an API schema or limit description, not reconnaissance of a host or system.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:81:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:93:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:95:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:120:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:122:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:123:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:136:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:141:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:169:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:170:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:171:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:173:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:178:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:179:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:185:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:193:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:195:ruby-shell-backtick-execution","reason":"The cited backticks are documentation examples for the intended Chainbase CLI and do not themselves execute commands.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:20:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:26:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:135:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:136:hardcoded-url","reason":"The cited URL is a documentation or repository link, not executable network behavior.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:26:generic-api-secret-keys","reason":"The cited text documents API-key configuration and does not transmit, reveal, or collect a secret.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[{"title":"Payment-Capable CLI Workflow","severity":"medium","locations":[{"file":"SKILL.md","line_end":28,"line_start":28}],"confidence":0.96,"description":"SKILL.md documents the --x402 option and asks the user to configure a private key for pay-per-call micropayments. This creates a financial side effect that should require explicit approval.","confidence_reasoning":"The cited line explicitly describes x402 micropayments and private-key setup. The documentation does not show unauthorized payment behavior, so the finding is limited to confirmation and fund-management risk."}],"subject_marketplace_commit_sha":"1c2ebded2116f8124f45dba86a2e567f56e64d8e","subject_content_hash":"98eadfb1b4dbbcd56bd92dbff9021820378b94cdf28ca34ba9ff4b733f602c91","subject_tree_hash":"72044e51568b6655e49be366bcd9773578f13519ace64e9564536268efe6f86a","subject_plugin_path":"skills/internet-court/web3-data","audit_payload_hash":"fcb1c31441df896540a3cd449f0e8fcc","confirmed_risk_level":"medium","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"1c2ebded2116f8124f45dba86a2e567f56e64d8e","contentHash":"98eadfb1b4dbbcd56bd92dbff9021820378b94cdf28ca34ba9ff4b733f602c91","treeHash":"72044e51568b6655e49be366bcd9773578f13519ace64e9564536268efe6f86a","pluginPath":"skills/internet-court/web3-data","auditPayloadHash":"fcb1c31441df896540a3cd449f0e8fcc"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/internet-court-web3-data/audits/3/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"medium","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}