{"data":{"skill":{"slug":"internet-court-x402","name":"x402 Payments skill","icon":"📦","repo":"https://github.com/internet-court/internet-court-skill/tree/main/vendored/chaingpt/x402","status":"approved","author":"internet-court","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"247253be-1981-4d53-8ff7-323e9dc8bd4d","skill_id":"6651aa7f-996b-43d4-af41-e54240361c58","version":1,"content_hash":"809125b0d812dc95334fa96cf503e8fc","risk_level":"low","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"Manual review of SKILL.md found a prompt-only payment workflow description with no executable code, network code, or prompt injection text. The static unscanned-file warning is a metadata parsing issue from the frontmatter, not a confirmed security risk.","remediation":[{"issue":"Invalid frontmatter blocked static scanning.","severity":"low","suggestion":"Quote or shorten the SKILL.md description so YAML frontmatter parses cleanly before publication."}],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Unscanned file (invalid_frontmatter) — manual review required","locations":[{"file":"SKILL.md","line_end":1,"line_start":1}],"confidence":1,"description":"[unscanned: invalid_frontmatter]","review_kind":"security","source_category":"metadata","source_severity":"low","confidence_reasoning":"Force-confirmed metadata/low static finding; AI false-positive verdict rejected."}],"dangerous_patterns":[],"files_scanned":0,"total_lines":0,"audit_model":"codex","audited_at":"2026-07-10T00:22:37.777+00:00","created_at":"2026-07-10T07:43:57.552969+00:00","static_findings":[{"id":"metadata:SKILL.md:1:unscanned-file-invalid-frontmatter-manual-review","file":"SKILL.md","pattern":"Unscanned file (invalid_frontmatter) — manual review required","snippet":"[unscanned: invalid_frontmatter]","category":"metadata","line_end":1,"severity":"low","line_start":1}],"finding_verdicts":[{"id":"metadata:SKILL.md:1:unscanned-file-invalid-frontmatter-manual-review","reason":"SKILL.md was manually reviewed and contains documentation-style guidance for x402 flows. The invalid frontmatter blocks automated scanning, but no dangerous instructions or executable content were found.","verdict":"false_positive","confidence":0.86}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"low","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}