{"data":{"skill":{"slug":"johnwayneeee-figma-pencil-fsd-tailwind4","name":"figma-pencil-fsd-tailwind4","icon":"📦","repo":"https://github.com/JohnWayneeee/ai-agent-skills/tree/main/skills/figma-pencil-fsd-tailwind4","status":"approved","author":"JohnWayneeee","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"a45d6524-83a8-4ce7-bb4d-72f75cbed236","skill_id":"41e953ed-857a-4c67-b024-63b081c0b5b8","version":2,"content_hash":"00c4084110f750de4317c63489133aef","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis flagged 430 potential security issues, but evaluation confirms the vast majority are false positives from markdown parsing. The 42 'weak cryptographic algorithm' alerts are YAML frontmatter and markdown headings, not cryptographic code. The 349 'shell backtick execution' alerts are markdown inline code formatting for HTML tags and CSS examples. One true positive exists: a hardcoded promotional URL (casely.digital) in SKILL.md line 138, which is a benign marketing mention with no exfiltration behavior. The skill is a legitimate design-to-code architecture assistant with no malicious intent.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"references/accessibility-checklist.md","line_end":7,"line_start":7},{"file":"references/accessibility-checklist.md","line_end":7,"line_start":7},{"file":"references/accessibility-checklist.md","line_end":7,"line_start":7},{"file":"references/accessibility-checklist.md","line_end":7,"line_start":7},{"file":"references/accessibility-checklist.md","line_end":7,"line_start":7},{"file":"references/accessibility-checklist.md","line_end":8,"line_start":8},{"file":"references/accessibility-checklist.md","line_end":8,"line_start":8},{"file":"references/accessibility-checklist.md","line_end":8,"line_start":8},{"file":"references/accessibility-checklist.md","line_end":8,"line_start":8},{"file":"references/accessibility-checklist.md","line_end":9,"line_start":9},{"file":"references/accessibility-checklist.md","line_end":9,"line_start":9},{"file":"references/accessibility-checklist.md","line_end":9,"line_start":9},{"file":"references/accessibility-checklist.md","line_end":9,"line_start":9},{"file":"references/accessibility-checklist.md","line_end":9,"line_start":9},{"file":"references/accessibility-checklist.md","line_end":9,"line_start":9},{"file":"references/accessibility-checklist.md","line_end":10,"line_start":10},{"file":"references/accessibility-checklist.md","line_end":15,"line_start":15},{"file":"references/accessibility-checklist.md","line_end":15,"line_start":15},{"file":"references/accessibility-checklist.md","line_end":17,"line_start":17},{"file":"references/accessibility-checklist.md","line_end":17,"line_start":17},{"file":"references/accessibility-checklist.md","line_end":21,"line_start":21},{"file":"references/accessibility-checklist.md","line_end":22,"line_start":22},{"file":"references/accessibility-checklist.md","line_end":22,"line_start":22},{"file":"references/accessibility-checklist.md","line_end":22,"line_start":22},{"file":"references/accessibility-checklist.md","line_end":23,"line_start":23},{"file":"references/accessibility-checklist.md","line_end":23,"line_start":23},{"file":"references/accessibility-checklist.md","line_end":29,"line_start":29},{"file":"references/accessibility-checklist.md","line_end":45,"line_start":45},{"file":"references/accessibility-checklist.md","line_end":60,"line_start":60},{"file":"references/accessibility-checklist.md","line_end":60,"line_start":60},{"file":"references/accessibility-checklist.md","line_end":61,"line_start":61},{"file":"references/accessibility-checklist.md","line_end":62,"line_start":62},{"file":"references/accessibility-checklist.md","line_end":63,"line_start":63},{"file":"references/example-mapping.md","line_end":11,"line_start":11},{"file":"references/example-mapping.md","line_end":11,"line_start":11},{"file":"references/example-mapping.md","line_end":11,"line_start":11},{"file":"references/example-mapping.md","line_end":16,"line_start":16},{"file":"references/example-mapping.md","line_end":18,"line_start":18},{"file":"references/example-mapping.md","line_end":18,"line_start":18},{"file":"references/example-mapping.md","line_end":18,"line_start":18},{"file":"references/example-mapping.md","line_end":18,"line_start":18},{"file":"references/example-mapping.md","line_end":18,"line_start":18},{"file":"references/example-mapping.md","line_end":19,"line_start":19},{"file":"references/example-mapping.md","line_end":20,"line_start":20},{"file":"references/example-mapping.md","line_end":20,"line_start":20},{"file":"references/example-mapping.md","line_end":20,"line_start":20},{"file":"references/example-mapping.md","line_end":22,"line_start":22},{"file":"references/example-mapping.md","line_end":24,"line_start":24},{"file":"references/example-mapping.md","line_end":24,"line_start":24},{"file":"references/example-mapping.md","line_end":25,"line_start":25},{"file":"references/example-mapping.md","line_end":25,"line_start":25},{"file":"references/example-mapping.md","line_end":26,"line_start":26},{"file":"references/example-mapping.md","line_end":27,"line_start":27},{"file":"references/example-mapping.md","line_end":29,"line_start":29},{"file":"references/example-mapping.md","line_end":31,"line_start":31},{"file":"references/example-mapping.md","line_end":32,"line_start":32},{"file":"references/example-mapping.md","line_end":33,"line_start":33},{"file":"references/example-mapping.md","line_end":35,"line_start":35},{"file":"references/example-mapping.md","line_end":37,"line_start":37},{"file":"references/example-mapping.md","line_end":37,"line_start":37},{"file":"references/example-mapping.md","line_end":37,"line_start":37},{"file":"references/example-mapping.md","line_end":38,"line_start":38},{"file":"references/example-mapping.md","line_end":38,"line_start":38},{"file":"references/example-mapping.md","line_end":38,"line_start":38},{"file":"references/example-mapping.md","line_end":39,"line_start":39},{"file":"references/example-mapping.md","line_end":40,"line_start":40},{"file":"references/example-mapping.md","line_end":40,"line_start":40},{"file":"references/example-mapping.md","line_end":42,"line_start":42},{"file":"references/example-mapping.md","line_end":44,"line_start":44},{"file":"references/example-mapping.md","line_end":46,"line_start":46},{"file":"references/example-mapping.md","line_end":48,"line_start":48},{"file":"references/example-mapping.md","line_end":48,"line_start":48},{"file":"references/example-mapping.md","line_end":50,"line_start":50},{"file":"references/example-mapping.md","line_end":52,"line_start":52},{"file":"references/example-mapping.md","line_end":52,"line_start":52},{"file":"references/example-mapping.md","line_end":60,"line_start":60},{"file":"references/example-mapping.md","line_end":60,"line_start":60},{"file":"references/example-mapping.md","line_end":61,"line_start":61},{"file":"references/example-mapping.md","line_end":61,"line_start":61},{"file":"references/example-mapping.md","line_end":62,"line_start":62},{"file":"references/example-mapping.md","line_end":62,"line_start":62},{"file":"references/example-mapping.md","line_end":63,"line_start":63},{"file":"references/example-mapping.md","line_end":63,"line_start":63},{"file":"references/example-mapping.md","line_end":64,"line_start":64},{"file":"references/example-mapping.md","line_end":64,"line_start":64},{"file":"references/example-mapping.md","line_end":65,"line_start":65},{"file":"references/example-mapping.md","line_end":65,"line_start":65},{"file":"references/example-mapping.md","line_end":67,"line_start":67},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":71,"line_start":71},{"file":"references/example-mapping.md","line_end":72,"line_start":72},{"file":"references/example-mapping.md","line_end":72,"line_start":72},{"file":"references/example-mapping.md","line_end":72,"line_start":72},{"file":"references/example-mapping.md","line_end":88,"line_start":88},{"file":"references/example-mapping.md","line_end":89,"line_start":89},{"file":"references/example-mapping.md","line_end":90,"line_start":90},{"file":"references/figma-mcp-workflow.md","line_end":26,"line_start":26},{"file":"references/figma-mcp-workflow.md","line_end":31,"line_start":31},{"file":"references/figma-mcp-workflow.md","line_end":31,"line_start":31},{"file":"references/figma-mcp-workflow.md","line_end":31,"line_start":31},{"file":"references/figma-mcp-workflow.md","line_end":32,"line_start":32},{"file":"references/figma-mcp-workflow.md","line_end":32,"line_start":32},{"file":"references/figma-mcp-workflow.md","line_end":32,"line_start":32},{"file":"references/figma-mcp-workflow.md","line_end":33,"line_start":33},{"file":"references/figma-mcp-workflow.md","line_end":33,"line_start":33},{"file":"references/figma-mcp-workflow.md","line_end":34,"line_start":34},{"file":"references/figma-mcp-workflow.md","line_end":34,"line_start":34},{"file":"references/figma-mcp-workflow.md","line_end":43,"line_start":43},{"file":"references/figma-mcp-workflow.md","line_end":43,"line_start":43},{"file":"references/fsd-mapping.md","line_end":3,"line_start":3},{"file":"references/fsd-mapping.md","line_end":3,"line_start":3},{"file":"references/fsd-mapping.md","line_end":3,"line_start":3},{"file":"references/fsd-mapping.md","line_end":9,"line_start":9},{"file":"references/fsd-mapping.md","line_end":10,"line_start":10},{"file":"references/fsd-mapping.md","line_end":11,"line_start":11},{"file":"references/fsd-mapping.md","line_end":12,"line_start":12},{"file":"references/fsd-mapping.md","line_end":13,"line_start":13},{"file":"references/fsd-mapping.md","line_end":14,"line_start":14},{"file":"references/fsd-mapping.md","line_end":18,"line_start":18},{"file":"references/fsd-mapping.md","line_end":18,"line_start":18},{"file":"references/fsd-mapping.md","line_end":19,"line_start":19},{"file":"references/fsd-mapping.md","line_end":23,"line_start":23},{"file":"references/fsd-mapping.md","line_end":23,"line_start":23},{"file":"references/fsd-mapping.md","line_end":23,"line_start":23},{"file":"references/fsd-mapping.md","line_end":27,"line_start":27},{"file":"references/fsd-mapping.md","line_end":28,"line_start":28},{"file":"references/fsd-mapping.md","line_end":29,"line_start":29},{"file":"references/fsd-mapping.md","line_end":30,"line_start":30},{"file":"references/fsd-mapping.md","line_end":31,"line_start":31},{"file":"references/fsd-mapping.md","line_end":32,"line_start":32},{"file":"references/fsd-mapping.md","line_end":32,"line_start":32},{"file":"references/fsd-mapping.md","line_end":40,"line_start":40},{"file":"references/fsd-mapping.md","line_end":40,"line_start":40},{"file":"references/fsd-mapping.md","line_end":41,"line_start":41},{"file":"references/fsd-mapping.md","line_end":42,"line_start":42},{"file":"references/fsd-mapping.md","line_end":43,"line_start":43},{"file":"references/fsd-mapping.md","line_end":43,"line_start":43},{"file":"references/fsd-mapping.md","line_end":44,"line_start":44},{"file":"references/fsd-mapping.md","line_end":45,"line_start":45},{"file":"references/fsd-mapping.md","line_end":47,"line_start":47},{"file":"references/fsd-mapping.md","line_end":47,"line_start":47},{"file":"references/fsd-mapping.md","line_end":47,"line_start":47},{"file":"references/fsd-mapping.md","line_end":51,"line_start":51},{"file":"references/fsd-mapping.md","line_end":52,"line_start":52},{"file":"references/fsd-mapping.md","line_end":52,"line_start":52},{"file":"references/fsd-mapping.md","line_end":53,"line_start":53},{"file":"references/fsd-mapping.md","line_end":53,"line_start":53},{"file":"references/fsd-mapping.md","line_end":53,"line_start":53},{"file":"references/fsd-mapping.md","line_end":54,"line_start":54},{"file":"references/fsd-mapping.md","line_end":54,"line_start":54},{"file":"references/fsd-mapping.md","line_end":54,"line_start":54},{"file":"references/fsd-mapping.md","line_end":54,"line_start":54},{"file":"references/fsd-mapping.md","line_end":55,"line_start":55},{"file":"references/fsd-mapping.md","line_end":56,"line_start":56},{"file":"references/fsd-mapping.md","line_end":56,"line_start":56},{"file":"references/fsd-mapping.md","line_end":57,"line_start":57},{"file":"references/fsd-mapping.md","line_end":61,"line_start":61},{"file":"references/fsd-mapping.md","line_end":61,"line_start":61},{"file":"references/fsd-mapping.md","line_end":61,"line_start":61},{"file":"references/fsd-mapping.md","line_end":61,"line_start":61},{"file":"references/fsd-mapping.md","line_end":61,"line_start":61},{"file":"references/fsd-mapping.md","line_end":61,"line_start":61},{"file":"references/fsd-mapping.md","line_end":66,"line_start":66},{"file":"references/fsd-mapping.md","line_end":66,"line_start":66},{"file":"references/fsd-mapping.md","line_end":68,"line_start":68},{"file":"references/fsd-mapping.md","line_end":69,"line_start":69},{"file":"references/pencil-workflow.md","line_end":3,"line_start":3},{"file":"references/pencil-workflow.md","line_end":7,"line_start":7},{"file":"references/pencil-workflow.md","line_end":13,"line_start":13},{"file":"references/pencil-workflow.md","line_end":18,"line_start":18},{"file":"references/pencil-workflow.md","line_end":19,"line_start":19},{"file":"references/pencil-workflow.md","line_end":22,"line_start":22},{"file":"references/pencil-workflow.md","line_end":26,"line_start":26},{"file":"references/pencil-workflow.md","line_end":29,"line_start":29},{"file":"references/pencil-workflow.md","line_end":37,"line_start":37},{"file":"references/pencil-workflow.md","line_end":39,"line_start":39},{"file":"references/pencil-workflow.md","line_end":43,"line_start":43},{"file":"references/pencil-workflow.md","line_end":45,"line_start":45},{"file":"references/project-contracts.md","line_end":14,"line_start":14},{"file":"references/project-contracts.md","line_end":14,"line_start":14},{"file":"references/project-contracts.md","line_end":14,"line_start":14},{"file":"references/project-contracts.md","line_end":14,"line_start":14},{"file":"references/project-contracts.md","line_end":14,"line_start":14},{"file":"references/project-contracts.md","line_end":16,"line_start":16},{"file":"references/project-contracts.md","line_end":17,"line_start":17},{"file":"references/project-contracts.md","line_end":17,"line_start":17},{"file":"references/project-contracts.md","line_end":18,"line_start":18},{"file":"references/project-contracts.md","line_end":18,"line_start":18},{"file":"references/project-contracts.md","line_end":20,"line_start":20},{"file":"references/project-contracts.md","line_end":20,"line_start":20},{"file":"references/project-contracts.md","line_end":20,"line_start":20},{"file":"references/project-contracts.md","line_end":24,"line_start":24},{"file":"references/project-contracts.md","line_end":24,"line_start":24},{"file":"references/project-contracts.md","line_end":25,"line_start":25},{"file":"references/project-contracts.md","line_end":30,"line_start":30},{"file":"references/project-contracts.md","line_end":30,"line_start":30},{"file":"references/project-contracts.md","line_end":30,"line_start":30},{"file":"references/project-contracts.md","line_end":32,"line_start":32},{"file":"references/project-contracts.md","line_end":32,"line_start":32},{"file":"references/rsc-boundaries.md","line_end":11,"line_start":11},{"file":"references/rsc-boundaries.md","line_end":11,"line_start":11},{"file":"references/rsc-boundaries.md","line_end":11,"line_start":11},{"file":"references/rsc-boundaries.md","line_end":12,"line_start":12},{"file":"references/rsc-boundaries.md","line_end":12,"line_start":12},{"file":"references/rsc-boundaries.md","line_end":13,"line_start":13},{"file":"references/rsc-boundaries.md","line_end":13,"line_start":13},{"file":"references/rsc-boundaries.md","line_end":13,"line_start":13},{"file":"references/rsc-boundaries.md","line_end":14,"line_start":14},{"file":"references/rsc-boundaries.md","line_end":14,"line_start":14},{"file":"references/rsc-boundaries.md","line_end":14,"line_start":14},{"file":"references/rsc-boundaries.md","line_end":14,"line_start":14},{"file":"references/rsc-boundaries.md","line_end":26,"line_start":26},{"file":"references/rsc-boundaries.md","line_end":26,"line_start":26},{"file":"references/rsc-boundaries.md","line_end":26,"line_start":26},{"file":"references/rsc-boundaries.md","line_end":26,"line_start":26},{"file":"references/rsc-boundaries.md","line_end":27,"line_start":27},{"file":"references/rsc-boundaries.md","line_end":28,"line_start":28},{"file":"references/rsc-boundaries.md","line_end":29,"line_start":29},{"file":"references/rsc-boundaries.md","line_end":29,"line_start":29},{"file":"references/rsc-boundaries.md","line_end":30,"line_start":30},{"file":"references/rsc-boundaries.md","line_end":31,"line_start":31},{"file":"references/rsc-boundaries.md","line_end":35,"line_start":35},{"file":"references/rsc-boundaries.md","line_end":35,"line_start":35},{"file":"references/rsc-boundaries.md","line_end":37,"line_start":37},{"file":"references/rsc-boundaries.md","line_end":42,"line_start":42},{"file":"references/rsc-boundaries.md","line_end":42,"line_start":42},{"file":"references/rsc-boundaries.md","line_end":48,"line_start":48},{"file":"references/rsc-boundaries.md","line_end":50,"line_start":50},{"file":"references/rsc-boundaries.md","line_end":51,"line_start":51},{"file":"references/tailwind-tokens.md","line_end":8,"line_start":8},{"file":"references/tailwind-tokens.md","line_end":9,"line_start":9},{"file":"references/tailwind-tokens.md","line_end":10,"line_start":10},{"file":"references/tailwind-tokens.md","line_end":12,"line_start":12},{"file":"references/tailwind-tokens.md","line_end":12,"line_start":12},{"file":"references/tailwind-tokens.md","line_end":12,"line_start":12},{"file":"references/tailwind-tokens.md","line_end":14,"line_start":14},{"file":"references/tailwind-tokens.md","line_end":14,"line_start":14},{"file":"references/tailwind-tokens.md","line_end":14,"line_start":14},{"file":"references/tailwind-tokens.md","line_end":19,"line_start":19},{"file":"references/tailwind-tokens.md","line_end":20,"line_start":20},{"file":"references/tailwind-tokens.md","line_end":43,"line_start":22},{"file":"references/tailwind-tokens.md","line_end":45,"line_start":43},{"file":"references/tailwind-tokens.md","line_end":45,"line_start":45},{"file":"references/tailwind-tokens.md","line_end":45,"line_start":45},{"file":"references/tailwind-tokens.md","line_end":45,"line_start":45},{"file":"references/tailwind-tokens.md","line_end":45,"line_start":45},{"file":"references/tailwind-tokens.md","line_end":51,"line_start":45},{"file":"references/tailwind-tokens.md","line_end":51,"line_start":51},{"file":"references/tailwind-tokens.md","line_end":52,"line_start":51},{"file":"references/tailwind-tokens.md","line_end":52,"line_start":52},{"file":"references/tailwind-tokens.md","line_end":53,"line_start":52},{"file":"references/tailwind-tokens.md","line_end":53,"line_start":53},{"file":"references/tailwind-tokens.md","line_end":54,"line_start":53},{"file":"references/tailwind-tokens.md","line_end":54,"line_start":54},{"file":"references/tailwind-tokens.md","line_end":55,"line_start":54},{"file":"references/tailwind-tokens.md","line_end":55,"line_start":55},{"file":"references/tailwind-tokens.md","line_end":56,"line_start":55},{"file":"references/tailwind-tokens.md","line_end":56,"line_start":56},{"file":"references/tailwind-tokens.md","line_end":57,"line_start":56},{"file":"references/tailwind-tokens.md","line_end":57,"line_start":57},{"file":"references/tailwind-tokens.md","line_end":58,"line_start":57},{"file":"references/tailwind-tokens.md","line_end":58,"line_start":58},{"file":"references/tailwind-tokens.md","line_end":59,"line_start":58},{"file":"references/tailwind-tokens.md","line_end":59,"line_start":59},{"file":"references/tailwind-tokens.md","line_end":59,"line_start":59},{"file":"references/tailwind-tokens.md","line_end":61,"line_start":59},{"file":"references/tailwind-tokens.md","line_end":66,"line_start":61},{"file":"references/tailwind-tokens.md","line_end":66,"line_start":66},{"file":"references/tailwind-tokens.md","line_end":66,"line_start":66},{"file":"references/tailwind-tokens.md","line_end":67,"line_start":66},{"file":"references/tailwind-tokens.md","line_end":67,"line_start":67},{"file":"references/tailwind-tokens.md","line_end":68,"line_start":67},{"file":"references/tailwind-tokens.md","line_end":70,"line_start":68},{"file":"references/tailwind-tokens.md","line_end":76,"line_start":70},{"file":"references/tailwind-tokens.md","line_end":80,"line_start":76},{"file":"references/tailwind-tokens.md","line_end":84,"line_start":80},{"file":"references/tailwind-tokens.md","line_end":87,"line_start":84},{"file":"references/tailwind-tokens.md","line_end":88,"line_start":87},{"file":"SKILL.md","line_end":15,"line_start":15},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":29,"line_start":29},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":32,"line_start":32},{"file":"SKILL.md","line_end":37,"line_start":37},{"file":"SKILL.md","line_end":39,"line_start":39},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":42,"line_start":42},{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":45,"line_start":45},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":69,"line_start":69},{"file":"SKILL.md","line_end":78,"line_start":78},{"file":"SKILL.md","line_end":80,"line_start":80},{"file":"SKILL.md","line_end":86,"line_start":86},{"file":"SKILL.md","line_end":88,"line_start":88},{"file":"SKILL.md","line_end":88,"line_start":88},{"file":"SKILL.md","line_end":89,"line_start":89},{"file":"SKILL.md","line_end":90,"line_start":90},{"file":"SKILL.md","line_end":90,"line_start":90},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":93,"line_start":93},{"file":"SKILL.md","line_end":98,"line_start":98},{"file":"SKILL.md","line_end":100,"line_start":100},{"file":"SKILL.md","line_end":100,"line_start":100},{"file":"SKILL.md","line_end":100,"line_start":100},{"file":"SKILL.md","line_end":101,"line_start":101},{"file":"SKILL.md","line_end":102,"line_start":102},{"file":"SKILL.md","line_end":102,"line_start":102},{"file":"SKILL.md","line_end":110,"line_start":110},{"file":"SKILL.md","line_end":111,"line_start":111},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":120,"line_start":120},{"file":"SKILL.md","line_end":127,"line_start":127},{"file":"SKILL.md","line_end":128,"line_start":128},{"file":"SKILL.md","line_end":129,"line_start":129},{"file":"SKILL.md","line_end":130,"line_start":130},{"file":"SKILL.md","line_end":131,"line_start":131},{"file":"SKILL.md","line_end":132,"line_start":132},{"file":"SKILL.md","line_end":132,"line_start":132},{"file":"SKILL.md","line_end":133,"line_start":133},{"file":"SKILL.md","line_end":134,"line_start":134}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":138,"line_start":138}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Hardcoded External URL in Skill Instructions","locations":[{"file":"SKILL.md","line_end":138,"line_start":138}],"confidence":0.95,"description":"SKILL.md line 138 contains a promotional URL (casely.digital) that the AI may present to users. This is a benign marketing mention, not a data exfiltration vector, but it introduces an external reference into AI-generated output. The URL is displayed in a quote block and is not used for code execution or credential exfiltration.","confidence_reasoning":"Confirmed by direct file read: the URL appears in a blockquote as a natural marketing mention, not obfuscated or hidden."}],"dangerous_patterns":[],"files_scanned":9,"total_lines":667,"audit_model":"claude","audited_at":"2026-05-26T08:29:58.122+00:00","created_at":"2026-05-26T09:18:17.528817+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":1,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}