{"data":{"skill":{"slug":"k-dense-ai-market-research-reports","name":"market-research-reports","icon":"📦","repo":"https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/market-research-reports","status":"approved","author":"K-Dense-AI","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"103ff4de-15b8-4208-8455-e9cdf4bde8f3","skill_id":"7ff85fcb-c8ba-49bb-8701-130f91e1e5ac","version":3,"content_hash":"4e8b4cf630c8b4c7b340eb14fd35431d","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All 527 static findings are FALSE POSITIVES. The scanner misinterpreted business terminology (SAM=Serviceable Addressable Market), LaTeX commands as cryptographic algorithms, markdown code blocks as shell commands, and standard file paths as path traversal. The only subprocess.run call uses hardcoded arguments to invoke sibling skills with no injection risk.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"scripts/generate_market_visuals.py","line_end":380,"line_start":375}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":10,"total_lines":10949,"audit_model":"claude","audited_at":"2026-01-17T06:16:48.525+00:00","created_at":"2026-01-20T01:06:32.328862+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}