{"data":{"skill":{"slug":"muratcankoylan-context-degradation","name":"context-degradation","icon":"📦","repo":"https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/context-degradation","status":"approved","author":"muratcankoylan","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"c0c10345-71ec-498b-b7b4-916c76af5132","skill_id":"752375b3-fb77-40f3-bf98-53186281bb8d","version":8,"content_hash":"v3:02be9409c79ca1183f7844009c14d9df684d0cf9:4e1896f641ddc99cc9cb14322606c6133b9fd520c84d3af0541e64f553c7f928:8fd3d62a266184c4c7d70ec3297eacd24ee3333185d5c9f6bc7ab6554cdd9b81:736b696c6c732f6d7572617463616e6b6f796c616e2f636f6e746578742d6465677261646174696f6e:01cc243db5498a3f9d28b63def11e95b","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 22 static findings are false positives caused by Python documentation markup, Markdown formatting, ordinary text literals, and a benign dictionary-key print. No command execution, credential handling, system reconnaissance, prompt injection, or other malicious intent was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"scripts/degradation_detector.py","line_end":123,"line_start":123},{"file":"scripts/degradation_detector.py","line_end":535,"line_start":535},{"file":"SKILL.md","line_end":21,"line_start":21},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":134,"line_start":127},{"file":"SKILL.md","line_end":137,"line_start":134},{"file":"SKILL.md","line_end":153,"line_start":137},{"file":"SKILL.md","line_end":156,"line_start":153},{"file":"SKILL.md","line_end":164,"line_start":156},{"file":"SKILL.md","line_end":167,"line_start":164},{"file":"SKILL.md","line_end":174,"line_start":167},{"file":"SKILL.md","line_end":207,"line_start":174},{"file":"SKILL.md","line_end":208,"line_start":207},{"file":"SKILL.md","line_end":209,"line_start":208},{"file":"SKILL.md","line_end":210,"line_start":209},{"file":"SKILL.md","line_end":211,"line_start":210},{"file":"SKILL.md","line_end":212,"line_start":211}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":1167,"audit_model":"codex","audited_at":"2026-08-09T09:34:17.378+00:00","created_at":"2026-08-11T01:33:29.418188+00:00","static_findings":[{"id":"external_commands:scripts/degradation_detector.py:123:ruby-shell-backtick-execution","file":"scripts/degradation_detector.py","pattern":"Ruby/shell backtick execution","snippet":"attention_distribution: Output of ``measure_attention_distribution``.","category":"external_commands","line_end":123,"severity":"medium","line_start":123},{"id":"external_commands:scripts/degradation_detector.py:535:ruby-shell-backtick-execution","file":"scripts/degradation_detector.py","pattern":"Ruby/shell backtick execution","snippet":"Full health analysis dict from ``ContextHealthAnalyzer.analyze``.","category":"external_commands","line_end":535,"severity":"medium","line_start":535},{"id":"sensitive:scripts/degradation_detector.py:614:certificate-key-files","file":"scripts/degradation_detector.py","pattern":"Certificate/key files","snippet":"print(f\"\\n  Full result keys: {list(result.keys())}\")","category":"sensitive","line_end":614,"severity":"high","line_start":614},{"id":"blocker:scripts/degradation_detector.py:372:system-reconnaissance","file":"scripts/degradation_detector.py","pattern":"System reconnaissance","snippet":"\"it is said that\",","category":"blocker","line_end":372,"severity":"low","line_start":372},{"id":"blocker:scripts/degradation_detector.py:602:system-reconnaissance","file":"scripts/degradation_detector.py","pattern":"System reconnaissance","snippet":"\"the invalid token caused an exception.\"","category":"blocker","line_end":602,"severity":"low","line_start":602},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Explaining foundational context mechanics without an active failure: `context-fundamentals`.","category":"external_commands","line_end":21,"severity":"medium","line_start":21},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Applying token-efficiency tactics after the failure pattern is known: `context-optimization`.","category":"external_commands","line_end":22,"severity":"medium","line_start":22},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Designing a compression or handoff summary strategy: `context-compression`.","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Persisting large outputs, logs, or scratch state outside the prompt: `filesystem-context`.","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":134,"severity":"medium","line_start":127},{"id":"external_commands:SKILL.md:134:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":137,"severity":"medium","line_start":134},{"id":"external_commands:SKILL.md:137:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":153,"severity":"medium","line_start":137},{"id":"external_commands:SKILL.md:153:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":156,"severity":"medium","line_start":153},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":164,"severity":"medium","line_start":156},{"id":"external_commands:SKILL.md:164:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":167,"severity":"medium","line_start":164},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":174,"severity":"medium","line_start":167},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":207,"severity":"medium","line_start":174},{"id":"external_commands:SKILL.md:207:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `context-fundamentals`: conceptual explanation of attention and context windows before a failure e","category":"external_commands","line_end":208,"severity":"medium","line_start":207},{"id":"external_commands:SKILL.md:208:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `context-optimization`: masking, caching, partitioning, and other token-efficiency tactics after d","category":"external_commands","line_end":209,"severity":"medium","line_start":208},{"id":"external_commands:SKILL.md:209:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `context-compression`: structured summaries and handoffs when accumulated context must be compacte","category":"external_commands","line_end":210,"severity":"medium","line_start":209},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `filesystem-context`: offloading raw outputs, logs, and scratch state so poisoned or bulky context","category":"external_commands","line_end":211,"severity":"medium","line_start":210},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `multi-agent-patterns`: isolating tasks into separate contexts to prevent confusion and clash.","category":"external_commands","line_end":212,"severity":"medium","line_start":211}],"finding_verdicts":[{"id":"external_commands:scripts/degradation_detector.py:123:ruby-shell-backtick-execution","reason":"The matched backticks are Sphinx-style documentation around a Python function name inside a docstring, not shell execution syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:scripts/degradation_detector.py:535:ruby-shell-backtick-execution","reason":"The matched backticks format a Python method name in a return-value docstring and are never evaluated as code.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:scripts/degradation_detector.py:614:certificate-key-files","reason":"This line prints the names of keys in an in-memory analysis result; it does not access certificate files, private keys, or secret values.","verdict":"false_positive","confidence":0.99},{"id":"blocker:scripts/degradation_detector.py:372:system-reconnaissance","reason":"The text is one phrase in a fixed list of hallucination markers and performs no system inspection or reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:scripts/degradation_detector.py:602:system-reconnaissance","reason":"The text is synthetic demonstration input for the local poisoning detector and does not inspect the host system.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","reason":"The backticks apply Markdown inline-code formatting to a related skill name and do not invoke a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"The backticks apply Markdown inline-code formatting to a related skill name and do not invoke a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"The backticks apply Markdown inline-code formatting to a related skill name and do not invoke a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The backticks apply Markdown inline-code formatting to a related skill name and do not invoke a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","reason":"This is the opening fence for a static YAML documentation example, not shell or Ruby execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:134:ruby-shell-backtick-execution","reason":"This is a Markdown code-fence boundary between documentation examples and does not execute its contents.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:137:ruby-shell-backtick-execution","reason":"This is the opening fence for a static Markdown layout example, not executable shell syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:153:ruby-shell-backtick-execution","reason":"This is a Markdown code-fence boundary around a documentation example and has no execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","reason":"This is the opening fence for a plain-text recovery example and does not invoke an external process.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:164:ruby-shell-backtick-execution","reason":"This is a Markdown code-fence boundary around static text and has no command-execution semantics.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","reason":"This is the opening fence for a static YAML conflict example, not a shell command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","reason":"This is the closing Markdown fence for a documentation example and is not evaluated by the skill.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:207:ruby-shell-backtick-execution","reason":"The backticks format a related skill identifier in prose and contain no executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:208:ruby-shell-backtick-execution","reason":"The backticks format a related skill identifier in prose and contain no executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:209:ruby-shell-backtick-execution","reason":"The backticks format a related skill identifier in prose and contain no executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","reason":"The backticks format a related skill identifier in prose and contain no executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","reason":"The backticks format a related skill identifier in prose and contain no executable command.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"02be9409c79ca1183f7844009c14d9df684d0cf9","subject_content_hash":"4e1896f641ddc99cc9cb14322606c6133b9fd520c84d3af0541e64f553c7f928","subject_tree_hash":"8fd3d62a266184c4c7d70ec3297eacd24ee3333185d5c9f6bc7ab6554cdd9b81","subject_plugin_path":"skills/muratcankoylan/context-degradation","audit_payload_hash":"01cc243db5498a3f9d28b63def11e95b","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"02be9409c79ca1183f7844009c14d9df684d0cf9","contentHash":"4e1896f641ddc99cc9cb14322606c6133b9fd520c84d3af0541e64f553c7f928","treeHash":"8fd3d62a266184c4c7d70ec3297eacd24ee3333185d5c9f6bc7ab6554cdd9b81","pluginPath":"skills/muratcankoylan/context-degradation","auditPayloadHash":"01cc243db5498a3f9d28b63def11e95b"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/muratcankoylan-context-degradation/audits/8/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}