{"data":{"skill":{"slug":"langgenius-frontend-code-review","name":"frontend-code-review","icon":"📦","repo":"https://github.com/langgenius/dify/tree/main/.agents/skills/frontend-code-review/","status":"approved","author":"langgenius","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"1763bcab-d045-4e83-9b18-055d85532aed","skill_id":"9d3f8ee5-38b9-449c-a7d4-fafd63645434","version":1,"content_hash":"68b82031b31e5cc6e97d71f23fac920d","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Documentation-only skill with no executable code. Static scanner flagged text patterns in markdown files (backticks for code formatting, URLs in references, technical terms in documentation). All 45 detected patterns are FALSE POSITIVES - markdown documentation cannot execute commands, make network calls, or contain exploitable code. Safe for publication.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Documentation Pattern False Positives","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":9,"line_start":9},{"file":"SKILL.md","line_end":58,"line_start":30},{"file":"references/business-logic.md","line_end":9,"line_start":9},{"file":"references/business-logic.md","line_end":11,"line_start":11},{"file":"references/business-logic.md","line_end":15,"line_start":15},{"file":"references/code-quality.md","line_end":10,"line_start":8},{"file":"references/code-quality.md","line_end":17,"line_start":14},{"file":"references/performance.md","line_end":10,"line_start":8}],"confidence":0.98,"description":"Static scanner incorrectly flagged text patterns in markdown files. Backticks are markdown code formatting, not shell execution. URLs are documentation references, not network calls. Technical term mentions are not actual cryptographic code.","confidence_reasoning":"All files are markdown documentation (.md) that cannot execute code. Pattern matching on documentation text is inappropriate - backticks format code, URLs are references, technical terms are explanatory text."}],"dangerous_patterns":[],"files_scanned":4,"total_lines":181,"audit_model":"claude","audited_at":"2026-01-29T08:51:38.807+00:00","created_at":"2026-01-29T09:56:04.689718+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":1,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}