{"data":{"skill":{"slug":"lllllllama-paper-context-resolver","name":"paper-context-resolver","icon":"📦","repo":"https://github.com/lllllllama/ai-paper-reproduction-skill/tree/main/skills/paper-context-resolver/","status":"approved","author":"lllllllama","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"cb732e33-0f11-4473-b44c-6057aaa2a9b1","skill_id":"8138c84a-5047-4fbf-b8d7-c57406e60084","version":4,"content_hash":"v3:b8ca75d2c0a7e7102978993058777d82b8ab2610:6e9b51104410ef5535e419c8a965e66cb16213cb5d385ded63db56f252d47ffd:ed6bd83422d2b69899f74f151dac40947f34036097ff94c6094e82326aed27f1:736b696c6c732f6c6c6c6c6c6c6c616d612f70617065722d636f6e746578742d7265736f6c766572:68818380b41cfd30136071e3768ac700","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"The static external command finding is a false positive. SKILL.md uses markdown backticks around a reference file path and does not instruct command execution. No prompt injection, data exfiltration intent, or malicious workflow behavior was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":46,"line_start":46}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":102,"audit_model":"codex","audited_at":"2026-07-06T18:30:13.463+00:00","created_at":"2026-07-17T18:39:18.408808+00:00","static_findings":[{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use `references/paper-assisted-reproduction.md`.","category":"external_commands","line_end":46,"severity":"medium","line_start":46}],"finding_verdicts":[{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"The flagged line is markdown documentation: it references `references/paper-assisted-reproduction.md` using inline backticks. There is no Ruby interpreter, shell command, subprocess call, or user-controlled command string.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"b8ca75d2c0a7e7102978993058777d82b8ab2610","subject_content_hash":"6e9b51104410ef5535e419c8a965e66cb16213cb5d385ded63db56f252d47ffd","subject_tree_hash":"ed6bd83422d2b69899f74f151dac40947f34036097ff94c6094e82326aed27f1","subject_plugin_path":"skills/lllllllama/paper-context-resolver","audit_payload_hash":"68818380b41cfd30136071e3768ac700","confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":"b8ca75d2c0a7e7102978993058777d82b8ab2610","contentHash":"6e9b51104410ef5535e419c8a965e66cb16213cb5d385ded63db56f252d47ffd","treeHash":"ed6bd83422d2b69899f74f151dac40947f34036097ff94c6094e82326aed27f1","pluginPath":"skills/lllllllama/paper-context-resolver","auditPayloadHash":"68818380b41cfd30136071e3768ac700"},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}