{"data":{"skill":{"slug":"internet-court-x402-erc7710","name":"x402-erc7710","icon":"📦","repo":"https://github.com/internet-court/internet-court-skill/tree/main/integrations/x402-erc7710","status":"approved","author":"internet-court","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"34d7c2ef-5ffd-4cfb-afa0-427a18af6aad","skill_id":"59d39af9-efff-4255-88dd-0d0f76dae134","version":2,"content_hash":"v3:3f6e026a3363e0954ede7bef0cfe88d4475de137:cfa213b14a4a1d6dd57bea89f211e0b5a55adc12a8268b2e29c39581b76937e5:300a53e802039b182937c6da689708480179a9b77e2baa066ea0b6728e00b09a:736b696c6c732f696e7465726e65742d636f7572742f783430322d65726337373130:97070d03e2217e8b21d084eab9564663","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"Most static alerts are false positives caused by Markdown backticks and payment-discovery language in documentation. Two confirmed high-severity findings describe exporting an agent private key in a JSON package, which can expose a bearer capability and permit unauthorized delegated spending. No prompt-injection language, data-exfiltration intent, or unscoped command execution was found.","remediation":[{"issue":"The demo exports a real agent private key in a JSON package.","severity":"high","suggestion":"Do not export private keys. Keep the demo key in an ephemeral local wallet or secure signer, and export only a public address and non-secret policy metadata."},{"issue":"The operator menu allows private-key inclusion in exported JSON.","severity":"high","suggestion":"Remove this option. Use a wallet connection, encrypted keystore controlled by the user, or a dedicated test-only signer with immediate revocation."},{"issue":"Agent-side route allowlists are not sufficient enforcement.","severity":"medium","suggestion":"For any production deployment, enforce service, route, payee, amount, budget, and expiry in a wallet caveat, smart-account module, or facilitator-bound proof."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":12,"line_start":12},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":42,"line_start":32},{"file":"SKILL.md","line_end":74,"line_start":42},{"file":"SKILL.md","line_end":76,"line_start":74},{"file":"SKILL.md","line_end":77,"line_start":76},{"file":"SKILL.md","line_end":78,"line_start":77},{"file":"SKILL.md","line_end":79,"line_start":78},{"file":"SKILL.md","line_end":89,"line_start":79},{"file":"SKILL.md","line_end":108,"line_start":89},{"file":"SKILL.md","line_end":121,"line_start":108},{"file":"SKILL.md","line_end":121,"line_start":121},{"file":"SKILL.md","line_end":134,"line_start":122},{"file":"SKILL.md","line_end":139,"line_start":134},{"file":"SKILL.md","line_end":139,"line_start":139},{"file":"SKILL.md","line_end":162,"line_start":162},{"file":"SKILL.md","line_end":167,"line_start":167},{"file":"SKILL.md","line_end":169,"line_start":169},{"file":"SKILL.md","line_end":177,"line_start":177},{"file":"SKILL.md","line_end":199,"line_start":199},{"file":"SKILL.md","line_end":226,"line_start":222}]}],"critical_findings":[],"high_findings":[{"title":"Crypto seed/private key mention","locations":[{"file":"SKILL.md","line_end":119,"line_start":119}],"confidence":0.96,"description":"- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The skill directs the demo to generate a real agent EOA and export its private key in a JSON package. Exported private keys are bearer secrets and can enable unauthorized spending if exposed."},{"title":"Crypto seed/private key mention","locations":[{"file":"SKILL.md","line_end":147,"line_start":147}],"confidence":0.87,"description":"- include private key in exported JSON or omit it;","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The implementation menu presents including a private key in exported JSON as an option. This normalizes an insecure secret-export path that can expose the delegated wallet capability."}],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":291,"audit_model":"claude","audited_at":"2026-07-21T04:50:17.853+00:00","created_at":"2026-07-21T04:54:47.794909+00:00","static_findings":[{"id":"blocker:references/demo-blueprints.md:5:system-reconnaissance","file":"references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"Goal: demonstrate an agent making repeated paid HTTP calls without asking the user to approve every ","category":"blocker","line_end":5,"severity":"low","line_start":5},{"id":"blocker:references/demo-blueprints.md:10:system-reconnaissance","file":"references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"- Buyer agent: calls the paid API and holds the delegated permission context.","category":"blocker","line_end":10,"severity":"low","line_start":10},{"id":"blocker:references/demo-blueprints.md:39:system-reconnaissance","file":"references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"- Paid but malformed report: evidence package goes to dispute.","category":"blocker","line_end":39,"severity":"low","line_start":39},{"id":"blocker:references/demo-blueprints.md:49:system-reconnaissance","file":"references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"2. Resolver calls paid data APIs through x402.","category":"blocker","line_end":49,"severity":"low","line_start":49},{"id":"blocker:references/demo-blueprints.md:62:system-reconnaissance","file":"references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"4. Fulfillment attestation records successful paid request and response.","category":"blocker","line_end":62,"severity":"low","line_start":62},{"id":"external_commands:SKILL.md:12:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- x402 is the per-request payment rail. A protected resource can respond with HTTP `402 Payment Requ","category":"external_commands","line_end":12,"severity":"medium","line_start":12},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. Confirm whether it returns `402 Payment Required`.","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Summarize the advertised x402 requirements: network, token, amount, payee, route, and `extra.asse","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":42,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":74,"severity":"medium","line_start":42},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```ts","category":"external_commands","line_end":76,"severity":"medium","line_start":74},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"delegator: `0x${string}`;","category":"external_commands","line_end":77,"severity":"medium","line_start":76},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"delegate: `0x${string}`;","category":"external_commands","line_end":78,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"token: `0x${string}`;","category":"external_commands","line_end":79,"severity":"medium","line_start":78},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"allowedPayTo: `0x${string}`;","category":"external_commands","line_end":89,"severity":"medium","line_start":79},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":108,"severity":"medium","line_start":89},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Resource: `/api/evidence/report`.","category":"external_commands","line_end":121,"severity":"medium","line_start":108},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Prefer `erc20-token-periodic` for recurring agent spend, `erc20-token-allowance` for one-shot budg","category":"external_commands","line_end":121,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:122:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- The x402 service must advertise `extra.assetTransferMethod = \"erc7710\"` or the MetaMask x402 clien","category":"external_commands","line_end":134,"severity":"medium","line_start":122},{"id":"external_commands:SKILL.md:134:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Inspect x402 resources and confirm `extra.assetTransferMethod = \"erc7710\"`.","category":"external_commands","line_end":139,"severity":"medium","line_start":134},{"id":"external_commands:SKILL.md:139:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"6. Build a GenLayer decision payload for `continue`, `warn`, `constrain`, `revoke`, or `escalate`.","category":"external_commands","line_end":139,"severity":"medium","line_start":139},{"id":"external_commands:SKILL.md:162:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Validate receipt proofs before advancing: EVM tx hashes are `0x` plus 64 hex characters, and EVM a","category":"external_commands","line_end":162,"severity":"medium","line_start":162},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For the local Internet Court x402 demo, `WalletSpendReporter` takes the Base `BridgeSender.sol` addr","category":"external_commands","line_end":167,"severity":"medium","line_start":167},{"id":"external_commands:SKILL.md:169:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For the local Internet Court x402 demo, `GenLayerDecisionReceiver.initialSourceContract` is the GenL","category":"external_commands","line_end":169,"severity":"medium","line_start":169},{"id":"external_commands:SKILL.md:177:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- decisions: `continue`, `warn`, `constrain`, `revoke`, or `escalate`;","category":"external_commands","line_end":177,"severity":"medium","line_start":177},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"6. Spend snapshot source, such as an x402 permission manager with `spent`, `requestCount`, and a gen","category":"external_commands","line_end":199,"severity":"medium","line_start":199},{"id":"external_commands:SKILL.md:222:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- A production-quality malicious-agent block needs a wallet caveat/enforcer or smart-account module ","category":"external_commands","line_end":226,"severity":"medium","line_start":222},{"id":"sensitive:SKILL.md:119:crypto-seed-private-key-mention","file":"SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p","category":"sensitive","line_end":119,"severity":"high","line_start":119},{"id":"sensitive:SKILL.md:126:crypto-seed-private-key-mention","file":"SKILL.md","pattern":"Crypto seed/private key mention","snippet":"The exported agent package is a bearer capability in demo form. Include explicit warnings, keep caps","category":"sensitive","line_end":126,"severity":"high","line_start":126},{"id":"sensitive:SKILL.md:147:crypto-seed-private-key-mention","file":"SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- include private key in exported JSON or omit it;","category":"sensitive","line_end":147,"severity":"high","line_start":147},{"id":"sensitive:SKILL.md:158:crypto-seed-private-key-mention","file":"SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- Never ask for private keys.","category":"sensitive","line_end":158,"severity":"high","line_start":158},{"id":"blocker:SKILL.md:20:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"When the user has only asked to use or inspect a paid HTTP service, stay in discovery mode:","category":"blocker","line_end":20,"severity":"low","line_start":20},{"id":"blocker:SKILL.md:25:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"4. State that no paid request has been made.","category":"blocker","line_end":25,"severity":"low","line_start":25},{"id":"blocker:SKILL.md:33:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"I found the paid endpoint and its x402 requirements.","category":"blocker","line_end":33,"severity":"low","line_start":33},{"id":"blocker:SKILL.md:41:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"I have not made a paid request. Do you want me to help set up bounded payment authority for this tas","category":"blocker","line_end":41,"severity":"low","line_start":41},{"id":"blocker:SKILL.md:123:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Support multiple allowed HTTP resources in the exported agent package when the service exposes mor","category":"blocker","line_end":123,"severity":"low","line_start":123},{"id":"blocker:SKILL.md:215:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"For paid report or API-resource demos using x402 plus review guardrails:","category":"blocker","line_end":215,"severity":"low","line_start":215},{"id":"blocker:SKILL.md:217:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- The x402 paid response should include a service-signed receipt with stable JSON canonicalization, ","category":"blocker","line_end":217,"severity":"low","line_start":217},{"id":"blocker:SKILL.md:219:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Reject evidence before review unless the paid request returned HTTP 200, produced an x402 payment ","category":"blocker","line_end":219,"severity":"low","line_start":219}],"finding_verdicts":[{"id":"blocker:references/demo-blueprints.md:5:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/demo-blueprints.md:10:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/demo-blueprints.md:39:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/demo-blueprints.md:49:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/demo-blueprints.md:62:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:12:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:122:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:134:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:139:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:162:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:169:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:177:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:222:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown inline-code or TypeScript template-literal syntax in documentation. No Ruby, shell command, subprocess invocation, or executable instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:SKILL.md:119:crypto-seed-private-key-mention","reason":"The skill directs the demo to generate a real agent EOA and export its private key in a JSON package. Exported private keys are bearer secrets and can enable unauthorized spending if exposed.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"sensitive:SKILL.md:126:crypto-seed-private-key-mention","reason":"This text warns that the export is a bearer capability, requires tiny caps, and prohibits production private-key export. It is a safety control rather than secret collection or disclosure.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:SKILL.md:147:crypto-seed-private-key-mention","reason":"The implementation menu presents including a private key in exported JSON as an option. This normalizes an insecure secret-export path that can expose the delegated wallet capability.","verdict":"confirmed","severity":"high","confidence":0.87},{"id":"sensitive:SKILL.md:158:crypto-seed-private-key-mention","reason":"The instruction explicitly says never to ask for private keys. It reduces credential-exposure risk and does not request or handle a secret.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:20:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:25:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:33:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:41:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:123:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:215:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:217:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:219:system-reconnaissance","reason":"The referenced text describes scoped payment discovery, policy enforcement, or demo roles. It does not instruct host, network, credential, or system reconnaissance.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"3f6e026a3363e0954ede7bef0cfe88d4475de137","subject_content_hash":"cfa213b14a4a1d6dd57bea89f211e0b5a55adc12a8268b2e29c39581b76937e5","subject_tree_hash":"300a53e802039b182937c6da689708480179a9b77e2baa066ea0b6728e00b09a","subject_plugin_path":"skills/internet-court/x402-erc7710","audit_payload_hash":"97070d03e2217e8b21d084eab9564663","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3f6e026a3363e0954ede7bef0cfe88d4475de137","contentHash":"cfa213b14a4a1d6dd57bea89f211e0b5a55adc12a8268b2e29c39581b76937e5","treeHash":"300a53e802039b182937c6da689708480179a9b77e2baa066ea0b6728e00b09a","pluginPath":"skills/internet-court/x402-erc7710","auditPayloadHash":"97070d03e2217e8b21d084eab9564663"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"unavailable","url":null,"status":null},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":2,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"unavailable","verificationState":"not_verified"},"isLatest":true}}