{"data":{"skill":{"slug":"k-dense-ai-scikit-survival","name":"scikit-survival","icon":"📦","repo":"https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/scikit-survival","status":"approved","author":"K-Dense-AI","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"475965cc-fab3-4e81-b392-9399d0b666f3","skill_id":"74440064-27ab-4fcb-8792-01877d27a213","version":5,"content_hash":"0614073aaf3f218bea0abbcacafee18c","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis reported many high and medium patterns, but review found markdown documentation and Python examples, not executable skill code. The reported weak-crypto, C2, dynamic import, and shell-execution matches are false positives from survival-analysis terminology, fenced code blocks, and inline backticks. No prompt injection, data exfiltration, command execution, or malicious intent was found.","remediation":[],"risk_factor_evidence":[{"factor":"scripts","evidence":[{"file":"references/competing-risks.md","line_end":19,"line_start":19},{"file":"references/competing-risks.md","line_end":21,"line_start":21},{"file":"references/data-handling.md","line_end":50,"line_start":44},{"file":"references/evaluation-metrics.md","line_end":312,"line_start":307},{"file":"SKILL.md","line_end":380,"line_start":372},{"file":"SKILL.md","line_end":387,"line_start":383}]},{"factor":"external_commands","evidence":[{"file":"references/competing-risks.md","line_end":70,"line_start":46},{"file":"references/competing-risks.md","line_end":82,"line_start":70},{"file":"references/competing-risks.md","line_end":99,"line_start":82},{"file":"references/competing-risks.md","line_end":103,"line_start":99},{"file":"references/competing-risks.md","line_end":120,"line_start":103},{"file":"references/competing-risks.md","line_end":126,"line_start":120},{"file":"references/competing-risks.md","line_end":164,"line_start":126},{"file":"references/competing-risks.md","line_end":172,"line_start":164},{"file":"references/competing-risks.md","line_end":178,"line_start":172},{"file":"references/competing-risks.md","line_end":186,"line_start":178},{"file":"references/competing-risks.md","line_end":216,"line_start":186},{"file":"references/competing-risks.md","line_end":227,"line_start":216},{"file":"references/competing-risks.md","line_end":234,"line_start":227},{"file":"references/competing-risks.md","line_end":238,"line_start":234},{"file":"references/competing-risks.md","line_end":348,"line_start":238},{"file":"references/competing-risks.md","line_end":388,"line_start":348},{"file":"references/cox-models.md","line_end":27,"line_start":27},{"file":"references/cox-models.md","line_end":28,"line_start":28},{"file":"references/cox-models.md","line_end":29,"line_start":29},{"file":"references/cox-models.md","line_end":48,"line_start":32},{"file":"references/cox-models.md","line_end":74,"line_start":48},{"file":"references/cox-models.md","line_end":75,"line_start":74},{"file":"references/cox-models.md","line_end":76,"line_start":75},{"file":"references/cox-models.md","line_end":77,"line_start":76},{"file":"references/cox-models.md","line_end":80,"line_start":77},{"file":"references/cox-models.md","line_end":93,"line_start":80},{"file":"references/cox-models.md","line_end":96,"line_start":93},{"file":"references/cox-models.md","line_end":113,"line_start":96},{"file":"references/cox-models.md","line_end":129,"line_start":113},{"file":"references/cox-models.md","line_end":138,"line_start":129},{"file":"references/data-handling.md","line_end":20,"line_start":11},{"file":"references/data-handling.md","line_end":43,"line_start":20},{"file":"references/data-handling.md","line_end":60,"line_start":43},{"file":"references/data-handling.md","line_end":66,"line_start":60},{"file":"references/data-handling.md","line_end":76,"line_start":66},{"file":"references/data-handling.md","line_end":80,"line_start":76},{"file":"references/data-handling.md","line_end":96,"line_start":80},{"file":"references/data-handling.md","line_end":100,"line_start":96},{"file":"references/data-handling.md","line_end":109,"line_start":100},{"file":"references/data-handling.md","line_end":117,"line_start":109},{"file":"references/data-handling.md","line_end":131,"line_start":117},{"file":"references/data-handling.md","line_end":135,"line_start":131},{"file":"references/data-handling.md","line_end":140,"line_start":135},{"file":"references/data-handling.md","line_end":144,"line_start":140},{"file":"references/data-handling.md","line_end":149,"line_start":144},{"file":"references/data-handling.md","line_end":158,"line_start":149},{"file":"references/data-handling.md","line_end":167,"line_start":158},{"file":"references/data-handling.md","line_end":173,"line_start":167},{"file":"references/data-handling.md","line_end":181,"line_start":173},{"file":"references/data-handling.md","line_end":185,"line_start":181},{"file":"references/data-handling.md","line_end":197,"line_start":185},{"file":"references/data-handling.md","line_end":201,"line_start":197},{"file":"references/data-handling.md","line_end":208,"line_start":201},{"file":"references/data-handling.md","line_end":214,"line_start":208},{"file":"references/data-handling.md","line_end":223,"line_start":214},{"file":"references/data-handling.md","line_end":227,"line_start":223},{"file":"references/data-handling.md","line_end":237,"line_start":227},{"file":"references/data-handling.md","line_end":243,"line_start":237},{"file":"references/data-handling.md","line_end":261,"line_start":243},{"file":"references/data-handling.md","line_end":265,"line_start":261},{"file":"references/data-handling.md","line_end":333,"line_start":265},{"file":"references/data-handling.md","line_end":339,"line_start":333},{"file":"references/data-handling.md","line_end":371,"line_start":339},{"file":"references/data-handling.md","line_end":375,"line_start":371},{"file":"references/data-handling.md","line_end":400,"line_start":375},{"file":"references/data-handling.md","line_end":406,"line_start":400},{"file":"references/data-handling.md","line_end":413,"line_start":406},{"file":"references/data-handling.md","line_end":419,"line_start":413},{"file":"references/data-handling.md","line_end":440,"line_start":419},{"file":"references/data-handling.md","line_end":451,"line_start":440},{"file":"references/data-handling.md","line_end":494,"line_start":451},{"file":"references/ensemble-models.md","line_end":26,"line_start":26},{"file":"references/ensemble-models.md","line_end":30,"line_start":30},{"file":"references/ensemble-models.md","line_end":34,"line_start":34},{"file":"references/ensemble-models.md","line_end":37,"line_start":37},{"file":"references/ensemble-models.md","line_end":40,"line_start":40},{"file":"references/ensemble-models.md","line_end":45,"line_start":45},{"file":"references/ensemble-models.md","line_end":73,"line_start":49},{"file":"references/ensemble-models.md","line_end":79,"line_start":73},{"file":"references/ensemble-models.md","line_end":99,"line_start":79},{"file":"references/ensemble-models.md","line_end":153,"line_start":99},{"file":"references/ensemble-models.md","line_end":158,"line_start":153},{"file":"references/ensemble-models.md","line_end":163,"line_start":158},{"file":"references/ensemble-models.md","line_end":172,"line_start":163},{"file":"references/ensemble-models.md","line_end":173,"line_start":172},{"file":"references/ensemble-models.md","line_end":174,"line_start":173},{"file":"references/ensemble-models.md","line_end":175,"line_start":174},{"file":"references/ensemble-models.md","line_end":176,"line_start":175},{"file":"references/ensemble-models.md","line_end":177,"line_start":176},{"file":"references/ensemble-models.md","line_end":178,"line_start":177},{"file":"references/ensemble-models.md","line_end":179,"line_start":178},{"file":"references/ensemble-models.md","line_end":180,"line_start":179},{"file":"references/ensemble-models.md","line_end":184,"line_start":180},{"file":"references/ensemble-models.md","line_end":211,"line_start":184},{"file":"references/ensemble-models.md","line_end":217,"line_start":211},{"file":"references/ensemble-models.md","line_end":236,"line_start":217},{"file":"references/ensemble-models.md","line_end":240,"line_start":236},{"file":"references/ensemble-models.md","line_end":260,"line_start":240},{"file":"references/ensemble-models.md","line_end":277,"line_start":260},{"file":"references/ensemble-models.md","line_end":291,"line_start":277},{"file":"references/ensemble-models.md","line_end":307,"line_start":291},{"file":"references/ensemble-models.md","line_end":312,"line_start":307},{"file":"references/evaluation-metrics.md","line_end":43,"line_start":36},{"file":"references/evaluation-metrics.md","line_end":60,"line_start":43},{"file":"references/evaluation-metrics.md","line_end":69,"line_start":60},{"file":"references/evaluation-metrics.md","line_end":86,"line_start":69},{"file":"references/evaluation-metrics.md","line_end":97,"line_start":86},{"file":"references/evaluation-metrics.md","line_end":116,"line_start":97},{"file":"references/evaluation-metrics.md","line_end":136,"line_start":116},{"file":"references/evaluation-metrics.md","line_end":146,"line_start":136},{"file":"references/evaluation-metrics.md","line_end":157,"line_start":146},{"file":"references/evaluation-metrics.md","line_end":185,"line_start":157},{"file":"references/evaluation-metrics.md","line_end":196,"line_start":185},{"file":"references/evaluation-metrics.md","line_end":200,"line_start":196},{"file":"references/evaluation-metrics.md","line_end":209,"line_start":200},{"file":"references/evaluation-metrics.md","line_end":221,"line_start":209},{"file":"references/evaluation-metrics.md","line_end":237,"line_start":221},{"file":"references/evaluation-metrics.md","line_end":243,"line_start":237},{"file":"references/evaluation-metrics.md","line_end":253,"line_start":243},{"file":"references/evaluation-metrics.md","line_end":257,"line_start":253},{"file":"references/evaluation-metrics.md","line_end":269,"line_start":257},{"file":"references/evaluation-metrics.md","line_end":273,"line_start":269},{"file":"references/evaluation-metrics.md","line_end":300,"line_start":273},{"file":"references/evaluation-metrics.md","line_end":306,"line_start":300},{"file":"references/evaluation-metrics.md","line_end":352,"line_start":306},{"file":"references/svm-models.md","line_end":37,"line_start":37},{"file":"references/svm-models.md","line_end":39,"line_start":39},{"file":"references/svm-models.md","line_end":40,"line_start":40},{"file":"references/svm-models.md","line_end":41,"line_start":41},{"file":"references/svm-models.md","line_end":52,"line_start":43},{"file":"references/svm-models.md","line_end":64,"line_start":52},{"file":"references/svm-models.md","line_end":65,"line_start":64},{"file":"references/svm-models.md","line_end":66,"line_start":65},{"file":"references/svm-models.md","line_end":67,"line_start":66},{"file":"references/svm-models.md","line_end":71,"line_start":67},{"file":"references/svm-models.md","line_end":72,"line_start":71},{"file":"references/svm-models.md","line_end":73,"line_start":72},{"file":"references/svm-models.md","line_end":74,"line_start":73},{"file":"references/svm-models.md","line_end":75,"line_start":74},{"file":"references/svm-models.md","line_end":76,"line_start":75},{"file":"references/svm-models.md","line_end":77,"line_start":76},{"file":"references/svm-models.md","line_end":79,"line_start":77},{"file":"references/svm-models.md","line_end":94,"line_start":79},{"file":"references/svm-models.md","line_end":106,"line_start":94},{"file":"references/svm-models.md","line_end":107,"line_start":106},{"file":"references/svm-models.md","line_end":109,"line_start":107},{"file":"references/svm-models.md","line_end":118,"line_start":109},{"file":"references/svm-models.md","line_end":133,"line_start":118},{"file":"references/svm-models.md","line_end":142,"line_start":133},{"file":"references/svm-models.md","line_end":153,"line_start":142},{"file":"references/svm-models.md","line_end":162,"line_start":153},{"file":"references/svm-models.md","line_end":168,"line_start":162},{"file":"references/svm-models.md","line_end":189,"line_start":168},{"file":"references/svm-models.md","line_end":193,"line_start":189},{"file":"references/svm-models.md","line_end":214,"line_start":193},{"file":"references/svm-models.md","line_end":228,"line_start":214},{"file":"references/svm-models.md","line_end":231,"line_start":228},{"file":"references/svm-models.md","line_end":251,"line_start":231},{"file":"references/svm-models.md","line_end":257,"line_start":251},{"file":"references/svm-models.md","line_end":279,"line_start":257},{"file":"references/svm-models.md","line_end":283,"line_start":279},{"file":"references/svm-models.md","line_end":317,"line_start":283},{"file":"references/svm-models.md","line_end":321,"line_start":317},{"file":"references/svm-models.md","line_end":363,"line_start":321},{"file":"references/svm-models.md","line_end":371,"line_start":363},{"file":"references/svm-models.md","line_end":377,"line_start":371},{"file":"SKILL.md","line_end":39,"line_start":39},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":47,"line_start":47},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":50,"line_start":50},{"file":"SKILL.md","line_end":52,"line_start":52},{"file":"SKILL.md","line_end":56,"line_start":56},{"file":"SKILL.md","line_end":57,"line_start":57},{"file":"SKILL.md","line_end":58,"line_start":58},{"file":"SKILL.md","line_end":59,"line_start":59},{"file":"SKILL.md","line_end":61,"line_start":61},{"file":"SKILL.md","line_end":83,"line_start":65},{"file":"SKILL.md","line_end":90,"line_start":83},{"file":"SKILL.md","line_end":98,"line_start":90},{"file":"SKILL.md","line_end":107,"line_start":98},{"file":"SKILL.md","line_end":118,"line_start":107},{"file":"SKILL.md","line_end":126,"line_start":118},{"file":"SKILL.md","line_end":131,"line_start":126},{"file":"SKILL.md","line_end":136,"line_start":131},{"file":"SKILL.md","line_end":141,"line_start":136},{"file":"SKILL.md","line_end":145,"line_start":141},{"file":"SKILL.md","line_end":147,"line_start":145},{"file":"SKILL.md","line_end":153,"line_start":147},{"file":"SKILL.md","line_end":158,"line_start":153},{"file":"SKILL.md","line_end":165,"line_start":158},{"file":"SKILL.md","line_end":172,"line_start":165},{"file":"SKILL.md","line_end":176,"line_start":172},{"file":"SKILL.md","line_end":179,"line_start":176},{"file":"SKILL.md","line_end":183,"line_start":179},{"file":"SKILL.md","line_end":189,"line_start":183},{"file":"SKILL.md","line_end":215,"line_start":189},{"file":"SKILL.md","line_end":219,"line_start":215},{"file":"SKILL.md","line_end":236,"line_start":219},{"file":"SKILL.md","line_end":240,"line_start":236},{"file":"SKILL.md","line_end":261,"line_start":240},{"file":"SKILL.md","line_end":265,"line_start":261},{"file":"SKILL.md","line_end":291,"line_start":265},{"file":"SKILL.md","line_end":297,"line_start":291},{"file":"SKILL.md","line_end":316,"line_start":297},{"file":"SKILL.md","line_end":346,"line_start":316},{"file":"SKILL.md","line_end":347,"line_start":346},{"file":"SKILL.md","line_end":348,"line_start":347},{"file":"SKILL.md","line_end":349,"line_start":348},{"file":"SKILL.md","line_end":350,"line_start":349},{"file":"SKILL.md","line_end":351,"line_start":350},{"file":"SKILL.md","line_end":359,"line_start":351},{"file":"SKILL.md","line_end":364,"line_start":359},{"file":"SKILL.md","line_end":396,"line_start":364}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":357,"line_start":357},{"file":"SKILL.md","line_end":358,"line_start":358},{"file":"SKILL.md","line_end":360,"line_start":360}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Markdown code examples misclassified as shell execution","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":43,"line_start":39},{"file":"references/cox-models.md","line_end":48,"line_start":32},{"file":"references/data-handling.md","line_end":60,"line_start":43},{"file":"references/evaluation-metrics.md","line_end":300,"line_start":273}],"confidence":0.97,"risk_level":"low","description":"The external command findings are false positives. The cited lines are markdown inline backticks or fenced Python examples that document scikit-survival usage and are not executed by the skill.","confidence_reasoning":"The reviewed locations are markdown documentation and Python snippets. No shell command invocation, subprocess use, or runtime execution path is present."},{"title":"Survival analysis terms misclassified as high-risk indicators","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":43,"line_start":37},{"file":"references/competing-risks.md","line_end":23,"line_start":19},{"file":"references/evaluation-metrics.md","line_end":152,"line_start":146},{"file":"references/svm-models.md","line_end":37,"line_start":29}],"confidence":0.96,"risk_level":"low","description":"High-risk findings for weak cryptography and C2 keywords are false positives caused by domain terms and variable names such as Cox models, CIF, IPCW, and auc2.","confidence_reasoning":"The suspicious tokens appear in ordinary survival-analysis explanations and model examples. The context does not reference cryptography, command-and-control behavior, or malware operations."},{"title":"Python import blocks misclassified as dynamic imports","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":383,"line_start":372},{"file":"references/data-handling.md","line_end":50,"line_start":43},{"file":"references/evaluation-metrics.md","line_end":312,"line_start":306}],"confidence":0.98,"risk_level":"low","description":"The dynamic import findings are false positives. The cited code blocks use normal Python import syntax for scikit-survival modules inside documentation examples.","confidence_reasoning":"The inspected lines are fenced Python examples with explicit library imports. They are not JavaScript import expressions and do not load user-controlled modules."},{"title":"Documentation links to external resources","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":360,"line_start":357}],"confidence":0.99,"risk_level":"low","description":"The hardcoded URL findings point to official scikit-survival documentation and repository links. They are static reference links and do not perform network requests.","confidence_reasoning":"The lines are plain markdown links to project documentation. There is no code that fetches these URLs or transmits user data."}],"dangerous_patterns":[],"files_scanned":7,"total_lines":2594,"audit_model":"codex","audited_at":"2026-06-30T05:34:26.113+00:00","created_at":"2026-06-30T06:56:27.540982+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":4,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}