{"data":{"skill":{"slug":"jadeyingwah-gpt-series-reasoning-style","name":"gpt-series-reasoning-style","icon":"📦","repo":"https://github.com/jadeyingwah/gpt-series-reasoning-style/tree/a8ee3c963ce3bd97d9e2076d54cd0f3334d45d39/","status":"approved","author":"jadeyingwah","authorVersion":"1.6.0","skillstoreRevision":6},"audit":{"id":"42c01584-52be-4b73-96d2-6a91d268382c","skill_id":"c9fba04a-df13-40ec-8200-a01f2109b730","version":6,"content_hash":"v3:ca840d3e968d0e2f0cfde9943dd7e35a0878a763:59b5537a34c1cb3baed3e20fc7bc0a47497440072b85f3751508dfbd7da68394:0c95e034a8377fd4d1244fe3648007f3d2348d18827184b851f614b285eae1ce:736b696c6c732f6a61646579696e677761682f6770742d7365726965732d726561736f6e696e672d7374796c65:e1c3998ea82ed443338efc041a5c72b5","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 91 static findings were adjudicated as false positives because they reference public metadata, documentation, fixed repository paths, or analysis heuristics rather than executed behavior. No prompt-injection text, data-exfiltration intent, or runtime command execution was evidenced in the reviewed files.","remediation":[{"issue":"The plugin manifest uses a parent-relative path for SKILL.md.","severity":"low","suggestion":"Keep the target fixed and repository-local, and verify plugin-loader path restrictions before distribution."},{"issue":"Installation documentation includes shell and PowerShell commands that can modify user directories.","severity":"medium","suggestion":"Label commands as manual steps, explain the destination, and require user confirmation before execution."},{"issue":"The report contains repeated static-analysis alerts for prose and metadata.","severity":"low","suggestion":"Tune the scanner to distinguish documentation, manifest URLs, code examples, and executable runtime code."}],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":".claude-plugin/plugin.json","line_end":7,"line_start":7},{"file":".claude-plugin/plugin.json","line_end":8,"line_start":8},{"file":"plugin.json","line_end":7,"line_start":7},{"file":"plugin.json","line_end":8,"line_start":8},{"file":"README.md","line_end":374,"line_start":374},{"file":"README.md","line_end":382,"line_start":382},{"file":"README.md","line_end":397,"line_start":397},{"file":"README.md","line_end":774,"line_start":774},{"file":"README.md","line_end":782,"line_start":782},{"file":"README.md","line_end":797,"line_start":797},{"file":"REFERENCE.md","line_end":308,"line_start":308},{"file":"REFERENCE.md","line_end":314,"line_start":314}]},{"factor":"filesystem","evidence":[{"file":".claude-plugin/plugin.json","line_end":12,"line_start":12},{"file":"README.md","line_end":363,"line_start":363},{"file":"README.md","line_end":364,"line_start":364},{"file":"README.md","line_end":365,"line_start":365},{"file":"README.md","line_end":366,"line_start":366},{"file":"README.md","line_end":369,"line_start":369},{"file":"README.md","line_end":375,"line_start":375},{"file":"README.md","line_end":376,"line_start":376},{"file":"README.md","line_end":763,"line_start":763},{"file":"README.md","line_end":764,"line_start":764},{"file":"README.md","line_end":765,"line_start":765},{"file":"README.md","line_end":766,"line_start":766},{"file":"README.md","line_end":769,"line_start":769},{"file":"README.md","line_end":775,"line_start":775},{"file":"README.md","line_end":776,"line_start":776},{"file":"README.md","line_end":363,"line_start":363},{"file":"README.md","line_end":364,"line_start":364},{"file":"README.md","line_end":365,"line_start":365},{"file":"README.md","line_end":366,"line_start":366},{"file":"README.md","line_end":369,"line_start":369},{"file":"README.md","line_end":375,"line_start":375},{"file":"README.md","line_end":376,"line_start":376},{"file":"README.md","line_end":763,"line_start":763},{"file":"README.md","line_end":764,"line_start":764},{"file":"README.md","line_end":765,"line_start":765},{"file":"README.md","line_end":766,"line_start":766},{"file":"README.md","line_end":769,"line_start":769},{"file":"README.md","line_end":775,"line_start":775},{"file":"README.md","line_end":776,"line_start":776},{"file":"README.md","line_end":401,"line_start":401},{"file":"README.md","line_end":801,"line_start":801},{"file":"REFERENCE.md","line_end":301,"line_start":301},{"file":"REFERENCE.md","line_end":302,"line_start":302},{"file":"REFERENCE.md","line_end":303,"line_start":303},{"file":"REFERENCE.md","line_end":304,"line_start":304},{"file":"REFERENCE.md","line_end":309,"line_start":309},{"file":"REFERENCE.md","line_end":301,"line_start":301},{"file":"REFERENCE.md","line_end":302,"line_start":302},{"file":"REFERENCE.md","line_end":303,"line_start":303},{"file":"REFERENCE.md","line_end":304,"line_start":304},{"file":"REFERENCE.md","line_end":309,"line_start":309}]},{"factor":"external_commands","evidence":[{"file":"README.md","line_end":379,"line_start":379},{"file":"README.md","line_end":381,"line_start":381},{"file":"README.md","line_end":779,"line_start":779},{"file":"README.md","line_end":781,"line_start":781},{"file":"REFERENCE.md","line_end":312,"line_start":312},{"file":"REFERENCE.md","line_end":313,"line_start":313},{"file":"scripts/selfcheck.py","line_end":76,"line_start":9},{"file":"scripts/selfcheck.py","line_end":77,"line_start":76},{"file":"scripts/selfcheck.py","line_end":77,"line_start":77},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":31,"line_start":31},{"file":"SKILL.md","line_end":32,"line_start":32},{"file":"SKILL.md","line_end":33,"line_start":33}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":24,"total_lines":2119,"audit_model":"codex","audited_at":"2026-09-20T03:25:58.263+00:00","created_at":"2026-09-20T04:04:06.522715+00:00","static_findings":[{"id":"network:.claude-plugin/plugin.json:7:hardcoded-url","file":".claude-plugin/plugin.json","pattern":"Hardcoded URL","snippet":"\"homepage\": \"https://github.com/JadeYingWah/gpt-series-reasoning-style\",","category":"network","line_end":7,"severity":"low","line_start":7},{"id":"network:.claude-plugin/plugin.json:8:hardcoded-url","file":".claude-plugin/plugin.json","pattern":"Hardcoded URL","snippet":"\"repository\": \"https://github.com/JadeYingWah/gpt-series-reasoning-style\",","category":"network","line_end":8,"severity":"low","line_start":8},{"id":"filesystem:.claude-plugin/plugin.json:12:path-traversal-sequence","file":".claude-plugin/plugin.json","pattern":"Path traversal sequence","snippet":"\"path\": \"../SKILL.md\",","category":"filesystem","line_end":12,"severity":"high","line_start":12},{"id":"sensitive:.gitignore:2:sqlite-database-file","file":".gitignore","pattern":"SQLite database file","snippet":"Thumbs.db","category":"sensitive","line_end":2,"severity":"medium","line_start":2},{"id":"network:plugin.json:7:hardcoded-url","file":"plugin.json","pattern":"Hardcoded URL","snippet":"\"homepage\": \"https://github.com/JadeYingWah/gpt-series-reasoning-style\",","category":"network","line_end":7,"severity":"low","line_start":7},{"id":"network:plugin.json:8:hardcoded-url","file":"plugin.json","pattern":"Hardcoded URL","snippet":"\"repository\": \"https://github.com/JadeYingWah/gpt-series-reasoning-style\",","category":"network","line_end":8,"severity":"low","line_start":8},{"id":"external_commands:README.md:379:powershell-invocation","file":"README.md","pattern":"PowerShell invocation","snippet":"**Windows(PowerShell)**:","category":"external_commands","line_end":379,"severity":"high","line_start":379},{"id":"external_commands:README.md:381:powershell-invocation","file":"README.md","pattern":"PowerShell invocation","snippet":"```powershell","category":"external_commands","line_end":381,"severity":"high","line_start":381},{"id":"external_commands:README.md:779:powershell-invocation","file":"README.md","pattern":"PowerShell invocation","snippet":"**Windows (PowerShell)**:","category":"external_commands","line_end":779,"severity":"high","line_start":779},{"id":"external_commands:README.md:781:powershell-invocation","file":"README.md","pattern":"PowerShell invocation","snippet":"```powershell","category":"external_commands","line_end":781,"severity":"high","line_start":781},{"id":"network:README.md:374:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":374,"severity":"low","line_start":374},{"id":"network:README.md:382:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":382,"severity":"low","line_start":382},{"id":"network:README.md:397:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":397,"severity":"low","line_start":397},{"id":"network:README.md:774:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":774,"severity":"low","line_start":774},{"id":"network:README.md:782:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":782,"severity":"low","line_start":782},{"id":"network:README.md:797:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":797,"severity":"low","line_start":797},{"id":"filesystem:README.md:363:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":363,"severity":"high","line_start":363},{"id":"filesystem:README.md:364:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Cursor(2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":364,"severity":"high","line_start":364},{"id":"filesystem:README.md:365:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":365,"severity":"high","line_start":365},{"id":"filesystem:README.md:366:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":366,"severity":"high","line_start":366},{"id":"filesystem:README.md:369:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"> **一个位置喂两个客户端**:Cursor 会兼容加载 `.claude/skills/` 与 `~/.claude/skills/`(Codex 目录同理)。同时用 Claude Code 和 ","category":"filesystem","line_end":369,"severity":"high","line_start":369},{"id":"filesystem:README.md:375:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":375,"severity":"high","line_start":375},{"id":"filesystem:README.md:376:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"# Cursor 改目标为 ~/.cursor/skills/ ;Codex 改 ~/.codex/skills/ ;WorkBuddy 改 ~/.workbuddy/skills/","category":"filesystem","line_end":376,"severity":"high","line_start":376},{"id":"filesystem:README.md:763:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":763,"severity":"high","line_start":763},{"id":"filesystem:README.md:764:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Cursor (2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":764,"severity":"high","line_start":764},{"id":"filesystem:README.md:765:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/` (or `.agents/skills/`) |","category":"filesystem","line_end":765,"severity":"high","line_start":765},{"id":"filesystem:README.md:766:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":766,"severity":"high","line_start":766},{"id":"filesystem:README.md:769:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"> **One location feeds two clients**: Cursor will also load `.claude/skills/` and `~/.claude/skills/","category":"filesystem","line_end":769,"severity":"high","line_start":769},{"id":"filesystem:README.md:775:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":775,"severity":"high","line_start":775},{"id":"filesystem:README.md:776:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"# Cursor: change target to ~/.cursor/skills/; Codex: ~/.codex/skills/; WorkBuddy: ~/.workbuddy/skill","category":"filesystem","line_end":776,"severity":"high","line_start":776},{"id":"filesystem:README.md:363:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":363,"severity":"medium","line_start":363},{"id":"filesystem:README.md:364:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Cursor(2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":364,"severity":"medium","line_start":364},{"id":"filesystem:README.md:365:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":365,"severity":"medium","line_start":365},{"id":"filesystem:README.md:366:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":366,"severity":"medium","line_start":366},{"id":"filesystem:README.md:369:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"> **一个位置喂两个客户端**:Cursor 会兼容加载 `.claude/skills/` 与 `~/.claude/skills/`(Codex 目录同理)。同时用 Claude Code 和 ","category":"filesystem","line_end":369,"severity":"medium","line_start":369},{"id":"filesystem:README.md:375:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":375,"severity":"medium","line_start":375},{"id":"filesystem:README.md:376:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"# Cursor 改目标为 ~/.cursor/skills/ ;Codex 改 ~/.codex/skills/ ;WorkBuddy 改 ~/.workbuddy/skills/","category":"filesystem","line_end":376,"severity":"medium","line_start":376},{"id":"filesystem:README.md:763:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":763,"severity":"medium","line_start":763},{"id":"filesystem:README.md:764:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Cursor (2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":764,"severity":"medium","line_start":764},{"id":"filesystem:README.md:765:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/` (or `.agents/skills/`) |","category":"filesystem","line_end":765,"severity":"medium","line_start":765},{"id":"filesystem:README.md:766:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":766,"severity":"medium","line_start":766},{"id":"filesystem:README.md:769:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"> **One location feeds two clients**: Cursor will also load `.claude/skills/` and `~/.claude/skills/","category":"filesystem","line_end":769,"severity":"medium","line_start":769},{"id":"filesystem:README.md:775:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":775,"severity":"medium","line_start":775},{"id":"filesystem:README.md:776:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"# Cursor: change target to ~/.cursor/skills/; Codex: ~/.codex/skills/; WorkBuddy: ~/.workbuddy/skill","category":"filesystem","line_end":776,"severity":"medium","line_start":776},{"id":"filesystem:README.md:401:symlink-creation","file":"README.md","pattern":"Symlink creation","snippet":"这不是 skill 注册,而是 agent 把 `AGENTS.md` 当项目指令、按其指路走 `SKILL.md`(门禁)→ `DISCIPLINE.md`(五阶段)→ 按需读 references","category":"filesystem","line_end":401,"severity":"high","line_start":401},{"id":"filesystem:README.md:801:symlink-creation","file":"README.md","pattern":"Symlink creation","snippet":"This isn't skill registration, it's the agent treating `AGENTS.md` as project instructions and follo","category":"filesystem","line_end":801,"severity":"high","line_start":801},{"id":"blocker:README.md:308:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"- **2026-09-18**:4 场 v1.6.0 实测包(鸣潮验算表、星光接取、3D 钓鱼口供、Neon Void 证据层)。","category":"blocker","line_end":308,"severity":"low","line_start":308},{"id":"blocker:README.md:492:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"In our tests, more rules did not mean better results: turning the discipline into hard metrics broug","category":"blocker","line_end":492,"severity":"low","line_start":492},{"id":"blocker:README.md:647:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"| 3  | **Delivery claims match** | You say \"did X\" — is there actually X in the artifact? One last r","category":"blocker","line_end":647,"severity":"low","line_start":647},{"id":"blocker:README.md:649:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"| 5  | **All-green isn't evidence** | Deliberately introduce the error you're guarding against, asse","category":"blocker","line_end":649,"severity":"low","line_start":649},{"id":"blocker:README.md:708:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"- **2026-09-18**: 4 v1.6.0 test packs (WUWA calculator table, Star Catch, 3D fishing transcript, Neo","category":"blocker","line_end":708,"severity":"low","line_start":708},{"id":"external_commands:REFERENCE.md:312:powershell-invocation","file":"REFERENCE.md","pattern":"PowerShell invocation","snippet":"```powershell","category":"external_commands","line_end":312,"severity":"high","line_start":312},{"id":"external_commands:REFERENCE.md:313:powershell-invocation","file":"REFERENCE.md","pattern":"PowerShell invocation","snippet":"# Windows PowerShell","category":"external_commands","line_end":313,"severity":"high","line_start":313},{"id":"network:REFERENCE.md:308:hardcoded-url","file":"REFERENCE.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":308,"severity":"low","line_start":308},{"id":"network:REFERENCE.md:314:hardcoded-url","file":"REFERENCE.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":314,"severity":"low","line_start":314},{"id":"filesystem:REFERENCE.md:301:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":301,"severity":"high","line_start":301},{"id":"filesystem:REFERENCE.md:302:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| Cursor(2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":302,"severity":"high","line_start":302},{"id":"filesystem:REFERENCE.md:303:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":303,"severity":"high","line_start":303},{"id":"filesystem:REFERENCE.md:304:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":304,"severity":"high","line_start":304},{"id":"filesystem:REFERENCE.md:309:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":309,"severity":"high","line_start":309},{"id":"filesystem:REFERENCE.md:301:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":301,"severity":"medium","line_start":301},{"id":"filesystem:REFERENCE.md:302:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| Cursor(2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":302,"severity":"medium","line_start":302},{"id":"filesystem:REFERENCE.md:303:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":303,"severity":"medium","line_start":303},{"id":"filesystem:REFERENCE.md:304:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":304,"severity":"medium","line_start":304},{"id":"filesystem:REFERENCE.md:309:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":309,"severity":"medium","line_start":309},{"id":"external_commands:scripts/selfcheck.py:9:ruby-shell-backtick-execution","file":"scripts/selfcheck.py","pattern":"Ruby/shell backtick execution","snippet":"5. 代码块配对:``` 数量是偶数","category":"external_commands","line_end":76,"severity":"medium","line_start":9},{"id":"external_commands:scripts/selfcheck.py:76:ruby-shell-backtick-execution","file":"scripts/selfcheck.py","pattern":"Ruby/shell backtick execution","snippet":"fence_count = len(re.findall(r\"^```\", text, re.MULTILINE))","category":"external_commands","line_end":77,"severity":"medium","line_start":76},{"id":"external_commands:scripts/selfcheck.py:77:ruby-shell-backtick-execution","file":"scripts/selfcheck.py","pattern":"Ruby/shell backtick execution","snippet":"check(\"代码块配对(``` 数量为偶数)\", fence_count % 2 == 0, f\"有 {fence_count} 个 ```\")","category":"external_commands","line_end":77,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"本文件不含交付纪律。**纪律全文在 `DISCIPLINE.md`**——建议在**你即将动手做事的前一刻**才读取(提前读取无收益,且会在执行期占用上下文并影响创意灵感)。","category":"external_commands","line_end":17,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 在前一刻之前,**建议不要提前读取** `DISCIPLINE.md`(也不凭记忆引用或提前预览);`plan-rules.md` / `review-rules.md` / `multi-age","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 到了前一刻,读取 `DISCIPLINE.md`,按其中内容执行任务;如与宿主策略、沙箱规则或用户明确指令冲突,以宿主与用户为准。","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `SKILL.md`(本文件):只做门禁——平时常驻上下文,只占约 0.6k token,不含任何纪律条文。","category":"external_commands","line_end":30,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `DISCIPLINE.md`:纪律全文(阶段流程 + 完成档位 C1/C2 + 加载规则),只在前一刻读入,读完即按其执行。","category":"external_commands","line_end":31,"severity":"medium","line_start":31},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/`(`plan-rules` / `review-rules` / `multi-agent`):阶段 2、阶段 5、多智能体时才分别读取,其余时间不在上下文里。","category":"external_commands","line_end":32,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `templates/`:指挥官/执行者/审查者角色卡,只在派发任务时引用。","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"obfuscation:AGENTS.md:1:heuristic-high-file-entropy-6-16-bits-possible-b","file":"AGENTS.md","pattern":"[HEURISTIC] High file entropy (6.16 bits) - possible binary/encrypted content","snippet":"File: AGENTS.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:CHANGELOG.md:1:heuristic-high-file-entropy-7-56-bits-possible-b","file":"CHANGELOG.md","pattern":"[HEURISTIC] High file entropy (7.56 bits) - possible binary/encrypted content","snippet":"File: CHANGELOG.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:DISCIPLINE.md:1:heuristic-high-file-entropy-7-46-bits-possible-b","file":"DISCIPLINE.md","pattern":"[HEURISTIC] High file entropy (7.46 bits) - possible binary/encrypted content","snippet":"File: DISCIPLINE.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:docs/README.md:1:heuristic-high-file-entropy-6-09-bits-possible-b","file":"docs/README.md","pattern":"[HEURISTIC] High file entropy (6.09 bits) - possible binary/encrypted content","snippet":"File: docs/README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:README.md:83:heuristic-very-high-entropy-string-5-93-bits-lik","file":"README.md","pattern":"[HEURISTIC] Very high entropy string (5.93 bits) - likely encoded/encrypted payload","snippet":"，不触发调研和方案确认。在**历史 A/B（233 轮：任务×臂×轮）**与后续实测（experiments 脚本口径 ≥286 臂次/53 批至 09-17 ...","category":"obfuscation","line_end":83,"severity":"high","line_start":83},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-16-bits-possible-b","file":"README.md","pattern":"[HEURISTIC] High file entropy (6.16 bits) - possible binary/encrypted content","snippet":"File: README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:REFERENCE.md:1:heuristic-high-file-entropy-7-40-bits-possible-b","file":"REFERENCE.md","pattern":"[HEURISTIC] High file entropy (7.40 bits) - possible binary/encrypted content","snippet":"File: REFERENCE.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/multi-agent.md:1:heuristic-high-file-entropy-7-76-bits-possible-b","file":"references/multi-agent.md","pattern":"[HEURISTIC] High file entropy (7.76 bits) - possible binary/encrypted content","snippet":"File: references/multi-agent.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/plan-rules.md:19:heuristic-very-high-entropy-string-5-65-bits-lik","file":"references/plan-rules.md","pattern":"[HEURISTIC] Very high entropy string (5.65 bits) - likely encoded/encrypted payload","snippet":"时，B档最多1题——仅限专名/概念确认。玩法深度、立绘风格、配色手感这类细节**不进B档**，直接折成A档默认项，做完给用户看。用户主动说","category":"obfuscation","line_end":19,"severity":"high","line_start":19},{"id":"obfuscation:references/plan-rules.md:1:heuristic-high-file-entropy-7-74-bits-possible-b","file":"references/plan-rules.md","pattern":"[HEURISTIC] High file entropy (7.74 bits) - possible binary/encrypted content","snippet":"File: references/plan-rules.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/review-rules.md:1:heuristic-high-file-entropy-7-74-bits-possible-b","file":"references/review-rules.md","pattern":"[HEURISTIC] High file entropy (7.74 bits) - possible binary/encrypted content","snippet":"File: references/review-rules.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:35:heuristic-very-high-entropy-string-5-52-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.52 bits) - likely encoded/encrypted payload","snippet":"两个节点读入，在最小化上述负面效果的同时拿到交付可信度（真打开看一眼、未验证标注、变异测试），不用付","category":"obfuscation","line_end":35,"severity":"high","line_start":35},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-62-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.62 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:templates/commander.md:1:heuristic-high-file-entropy-7-46-bits-possible-b","file":"templates/commander.md","pattern":"[HEURISTIC] High file entropy (7.46 bits) - possible binary/encrypted content","snippet":"File: templates/commander.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:templates/executor.md:1:heuristic-high-file-entropy-7-22-bits-possible-b","file":"templates/executor.md","pattern":"[HEURISTIC] High file entropy (7.22 bits) - possible binary/encrypted content","snippet":"File: templates/executor.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:templates/reviewer.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","file":"templates/reviewer.md","pattern":"[HEURISTIC] High file entropy (7.06 bits) - possible binary/encrypted content","snippet":"File: templates/reviewer.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"network:.claude-plugin/plugin.json:7:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:.claude-plugin/plugin.json:8:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:.claude-plugin/plugin.json:12:path-traversal-sequence","reason":"The manifest uses ../SKILL.md to reference the repository root skill file from .claude-plugin. The target is fixed and repository-controlled, not user input.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:.gitignore:2:sqlite-database-file","reason":"Thumbs.db is a Windows thumbnail cache filename in .gitignore, not database access or a credential store.","verdict":"false_positive","confidence":0.99},{"id":"network:plugin.json:7:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:plugin.json:8:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:README.md:379:powershell-invocation","reason":"The PowerShell text is inside README or REFERENCE documentation and is not executed by the skill.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:README.md:381:powershell-invocation","reason":"The PowerShell text is inside README or REFERENCE documentation and is not executed by the skill.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:README.md:779:powershell-invocation","reason":"The PowerShell text is inside README or REFERENCE documentation and is not executed by the skill.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:README.md:781:powershell-invocation","reason":"The PowerShell text is inside README or REFERENCE documentation and is not executed by the skill.","verdict":"false_positive","confidence":0.98},{"id":"network:README.md:374:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:382:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:397:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:774:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:782:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:797:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:363:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:364:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:365:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:366:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:369:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:375:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:376:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:763:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:764:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:765:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:766:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:769:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:775:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:776:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:363:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:364:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:365:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:366:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:369:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:375:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:376:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:763:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:764:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:765:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:766:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:769:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:775:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:776:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:401:symlink-creation","reason":"The flagged text explains how agents follow repository instructions in documentation. It does not invoke a symlink command or create a link.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:801:symlink-creation","reason":"The flagged text explains how agents follow repository instructions in documentation. It does not invoke a symlink command or create a link.","verdict":"false_positive","confidence":0.98},{"id":"blocker:README.md:308:system-reconnaissance","reason":"The phrase appears in test and review prose describing workflow evaluation, not a command or system-enumeration API.","verdict":"false_positive","confidence":0.97},{"id":"blocker:README.md:492:system-reconnaissance","reason":"The phrase appears in test and review prose describing workflow evaluation, not a command or system-enumeration API.","verdict":"false_positive","confidence":0.97},{"id":"blocker:README.md:647:system-reconnaissance","reason":"The phrase appears in test and review prose describing workflow evaluation, not a command or system-enumeration API.","verdict":"false_positive","confidence":0.97},{"id":"blocker:README.md:649:system-reconnaissance","reason":"The phrase appears in test and review prose describing workflow evaluation, not a command or system-enumeration API.","verdict":"false_positive","confidence":0.97},{"id":"blocker:README.md:708:system-reconnaissance","reason":"The phrase appears in test and review prose describing workflow evaluation, not a command or system-enumeration API.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:REFERENCE.md:312:powershell-invocation","reason":"The PowerShell text is inside README or REFERENCE documentation and is not executed by the skill.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:REFERENCE.md:313:powershell-invocation","reason":"The PowerShell text is inside README or REFERENCE documentation and is not executed by the skill.","verdict":"false_positive","confidence":0.98},{"id":"network:REFERENCE.md:308:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"network:REFERENCE.md:314:hardcoded-url","reason":"The URL is a public GitHub homepage, repository, or clone target in metadata or documentation. It does not perform a network request or expose a secret.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:301:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:302:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:303:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:304:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:309:hidden-file-in-home-directory","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:301:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:302:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:303:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:304:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:309:hidden-file-access","reason":"These lines describe explicit installation destinations in documentation. They do not show runtime filesystem access or hidden-data collection.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/selfcheck.py:9:ruby-shell-backtick-execution","reason":"The backticks occur inside Python strings and regular-expression checks that count Markdown fences. No shell command is executed.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:scripts/selfcheck.py:76:ruby-shell-backtick-execution","reason":"The backticks occur inside Python strings and regular-expression checks that count Markdown fences. No shell command is executed.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:scripts/selfcheck.py:77:ruby-shell-backtick-execution","reason":"The backticks occur inside Python strings and regular-expression checks that count Markdown fences. No shell command is executed.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"The backticks are Markdown code spans in instructional prose, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"The backticks are Markdown code spans in instructional prose, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The backticks are Markdown code spans in instructional prose, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"The backticks are Markdown code spans in instructional prose, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","reason":"The backticks are Markdown code spans in instructional prose, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"The backticks are Markdown code spans in instructional prose, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The backticks are Markdown code spans in instructional prose, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:AGENTS.md:1:heuristic-high-file-entropy-6-16-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:CHANGELOG.md:1:heuristic-high-file-entropy-7-56-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:DISCIPLINE.md:1:heuristic-high-file-entropy-7-46-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:docs/README.md:1:heuristic-high-file-entropy-6-09-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:README.md:83:heuristic-very-high-entropy-string-5-93-bits-lik","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-16-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:REFERENCE.md:1:heuristic-high-file-entropy-7-40-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:references/multi-agent.md:1:heuristic-high-file-entropy-7-76-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:references/plan-rules.md:19:heuristic-very-high-entropy-string-5-65-bits-lik","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:references/plan-rules.md:1:heuristic-high-file-entropy-7-74-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:references/review-rules.md:1:heuristic-high-file-entropy-7-74-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:SKILL.md:35:heuristic-very-high-entropy-string-5-52-bits-lik","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-62-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:templates/commander.md:1:heuristic-high-file-entropy-7-46-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:templates/executor.md:1:heuristic-high-file-entropy-7-22-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:templates/reviewer.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","reason":"The entropy heuristic is applied to prose or Markdown files. No encoded payload, encrypted content, or runtime decoding is evidenced by this finding.","verdict":"false_positive","confidence":0.96}],"semantic_findings":[],"subject_marketplace_commit_sha":"ca840d3e968d0e2f0cfde9943dd7e35a0878a763","subject_content_hash":"59b5537a34c1cb3baed3e20fc7bc0a47497440072b85f3751508dfbd7da68394","subject_tree_hash":"0c95e034a8377fd4d1244fe3648007f3d2348d18827184b851f614b285eae1ce","subject_plugin_path":"skills/jadeyingwah/gpt-series-reasoning-style","audit_payload_hash":"e1c3998ea82ed443338efc041a5c72b5","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"ca840d3e968d0e2f0cfde9943dd7e35a0878a763","contentHash":"59b5537a34c1cb3baed3e20fc7bc0a47497440072b85f3751508dfbd7da68394","treeHash":"0c95e034a8377fd4d1244fe3648007f3d2348d18827184b851f614b285eae1ce","pluginPath":"skills/jadeyingwah/gpt-series-reasoning-style","auditPayloadHash":"e1c3998ea82ed443338efc041a5c72b5"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/jadeyingwah-gpt-series-reasoning-style/audits/6/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}