{"data":{"skill":{"slug":"k-dense-ai-markitdown","name":"markitdown","icon":"📦","repo":"https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/markitdown","status":"approved","author":"K-Dense-AI","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"0b6f5965-eed9-4a48-bb03-4e4aebd9c5e8","skill_id":"a1d7b061-3659-49bf-a122-421f34fa16c5","version":3,"content_hash":"6283059c4f85c51992a37a9161d311ab","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static findings are false positives. The scanner incorrectly flagged markdown code blocks (using backticks) as shell execution, and legitimate document conversion patterns as suspicious. The skill is a Microsoft tool for converting documents to Markdown with expected file I/O and API access.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"scripts/batch_convert.py","line_end":46,"line_start":46},{"file":"scripts/convert_literature.py","line_end":116,"line_start":116},{"file":"scripts/convert_with_ai.py","line_end":130,"line_start":130}]},{"factor":"network","evidence":[{"file":"scripts/convert_with_ai.py","line_end":96,"line_start":96}]},{"factor":"env_access","evidence":[{"file":"scripts/convert_with_ai.py","line_end":217,"line_start":217}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":8,"total_lines":4355,"audit_model":"claude","audited_at":"2026-01-17T06:20:17.356+00:00","created_at":"2026-01-20T01:06:32.391447+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}