{"data":{"skill":{"slug":"norika1207-lab-lobster-cognitive-growth","name":"lobster-cognitive-growth","icon":"📦","repo":"https://github.com/norika1207-lab/lobster-cognitive-growth-skill/tree/main/","status":"approved","author":"norika1207-lab","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"c2a33e11-b962-4104-8b54-66c8b93ebf1e","skill_id":"b6ac4202-3ee6-4381-a8ed-73fb048bef61","version":3,"content_hash":"v2:62e2a730c5cd74eab4c7164309d810de660fcea3:85152442eca6a65696a347d57132f258b585948d6fbd5d45ba71592227431816:9beacbe1823d3f44bae74b8b3e48f2e0153f92a9538080b5c2b021e99016c5b1:0fb11894fcd7c3f3a5e63fcce42837fe","risk_level":"medium","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Most static external-command and blocker findings are false positives caused by Markdown fences and introspective prompts. Confirmed risks are the mutable remote install URL and optional Charenix persistence endpoint. No executable code or prompt injection attempt was found in the reviewed files.","remediation":[{"issue":"Mutable remote install URL","severity":"low","suggestion":"Use a tagged release URL and publish a checksum so users can verify the downloaded skill file."},{"issue":"External persistence can receive sensitive agent history","severity":"medium","suggestion":"Document exactly what Charenix receives and require explicit user consent before sending journals or history."},{"issue":"Agent key handling is underspecified","severity":"medium","suggestion":"Tell users to keep CHARENIX_AGENT_KEY secret and avoid storing it in prompts, journals, logs, or skill outputs."}],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"README.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":5,"line_start":5},{"file":"SKILL.md","line_end":7,"line_start":7},{"file":"SKILL.md","line_end":256,"line_start":256}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":73,"line_start":69},{"file":"SKILL.md","line_end":92,"line_start":73},{"file":"SKILL.md","line_end":96,"line_start":92},{"file":"SKILL.md","line_end":102,"line_start":96},{"file":"SKILL.md","line_end":106,"line_start":102},{"file":"SKILL.md","line_end":112,"line_start":106},{"file":"SKILL.md","line_end":117,"line_start":112},{"file":"SKILL.md","line_end":172,"line_start":117},{"file":"SKILL.md","line_end":190,"line_start":172},{"file":"SKILL.md","line_end":196,"line_start":190},{"file":"SKILL.md","line_end":198,"line_start":196},{"file":"SKILL.md","line_end":200,"line_start":198},{"file":"SKILL.md","line_end":202,"line_start":200},{"file":"SKILL.md","line_end":204,"line_start":202},{"file":"SKILL.md","line_end":206,"line_start":204},{"file":"SKILL.md","line_end":210,"line_start":206},{"file":"SKILL.md","line_end":212,"line_start":210},{"file":"SKILL.md","line_end":214,"line_start":212},{"file":"SKILL.md","line_end":216,"line_start":214},{"file":"SKILL.md","line_end":222,"line_start":216},{"file":"SKILL.md","line_end":231,"line_start":222},{"file":"SKILL.md","line_end":237,"line_start":231},{"file":"SKILL.md","line_end":245,"line_start":237},{"file":"SKILL.md","line_end":249,"line_start":245},{"file":"SKILL.md","line_end":251,"line_start":249},{"file":"SKILL.md","line_end":255,"line_start":251},{"file":"SKILL.md","line_end":257,"line_start":255},{"file":"SKILL.md","line_end":263,"line_start":257},{"file":"SKILL.md","line_end":279,"line_start":263},{"file":"SKILL.md","line_end":292,"line_start":279},{"file":"SKILL.md","line_end":299,"line_start":292}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Optional Third-Party Persistence Sends Agent History","locations":[{"file":"SKILL.md","line_end":256,"line_start":233}],"confidence":0.86,"description":"The skill tells users to use Charenix as a persistence layer and lists endpoints for social intelligence, weak spots, history, journals, hypotheses, and strategies. This can send behavioral history and owner-interaction notes to an external service when enabled with an agent key.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"The integration text explicitly names Charenix as the persistence layer and includes protected endpoints plus X-Agent-Key handling. The flow is optional and disclosed, so the concern is third-party data exposure rather than covert exfiltration."}],"low_findings":[{"title":"Hardcoded URL","locations":[{"file":"README.md","line_end":13,"line_start":13}],"confidence":0.68,"description":"curl -sSL https://raw.githubusercontent.com/norika1207-lab/lobster-cognitive-growth-skill/main/SKILL","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The README instructs users to fetch SKILL.md from a mutable GitHub raw URL. This is an external network dependency and can deliver changed content if the main branch changes."},{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":256,"line_start":256}],"confidence":0.82,"description":"https://charenix.com","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The URL is the base endpoint for the documented Charenix persistence integration. When enabled, it can receive agent history, journals, hypotheses, and strategy data."}],"dangerous_patterns":[],"files_scanned":2,"total_lines":331,"audit_model":"codex","audited_at":"2026-07-05T21:33:36.979+00:00","created_at":"2026-07-05T22:05:21.312463+00:00","static_findings":[{"id":"network:README.md:13:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"curl -sSL https://raw.githubusercontent.com/norika1207-lab/lobster-cognitive-growth-skill/main/SKILL","category":"network","line_end":13,"severity":"low","line_start":13},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":73,"severity":"medium","line_start":69},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":92,"severity":"medium","line_start":73},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":96,"severity":"medium","line_start":92},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":102,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":106,"severity":"medium","line_start":102},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":112,"severity":"medium","line_start":106},{"id":"external_commands:SKILL.md:112:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":117,"severity":"medium","line_start":112},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":172,"severity":"medium","line_start":117},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":190,"severity":"medium","line_start":172},{"id":"external_commands:SKILL.md:190:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":196,"severity":"medium","line_start":190},{"id":"external_commands:SKILL.md:196:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":198,"severity":"medium","line_start":196},{"id":"external_commands:SKILL.md:198:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":200,"severity":"medium","line_start":198},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":202,"severity":"medium","line_start":200},{"id":"external_commands:SKILL.md:202:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":204,"severity":"medium","line_start":202},{"id":"external_commands:SKILL.md:204:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":206,"severity":"medium","line_start":204},{"id":"external_commands:SKILL.md:206:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":210,"severity":"medium","line_start":206},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":212,"severity":"medium","line_start":210},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":214,"severity":"medium","line_start":212},{"id":"external_commands:SKILL.md:214:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":216,"severity":"medium","line_start":214},{"id":"external_commands:SKILL.md:216:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":222,"severity":"medium","line_start":216},{"id":"external_commands:SKILL.md:222:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":231,"severity":"medium","line_start":222},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":237,"severity":"medium","line_start":231},{"id":"external_commands:SKILL.md:237:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```http","category":"external_commands","line_end":245,"severity":"medium","line_start":237},{"id":"external_commands:SKILL.md:245:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":249,"severity":"medium","line_start":245},{"id":"external_commands:SKILL.md:249:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```http","category":"external_commands","line_end":251,"severity":"medium","line_start":249},{"id":"external_commands:SKILL.md:251:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":255,"severity":"medium","line_start":251},{"id":"external_commands:SKILL.md:255:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":257,"severity":"medium","line_start":255},{"id":"external_commands:SKILL.md:257:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":263,"severity":"medium","line_start":257},{"id":"external_commands:SKILL.md:263:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":279,"severity":"medium","line_start":263},{"id":"external_commands:SKILL.md:279:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":292,"severity":"medium","line_start":279},{"id":"external_commands:SKILL.md:292:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":299,"severity":"medium","line_start":292},{"id":"network:SKILL.md:5:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"homepage: https://charenix.com/skill.md","category":"network","line_end":5,"severity":"low","line_start":5},{"id":"network:SKILL.md:7:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"metadata: {\"openclaw\":{\"homepage\":\"https://github.com/norika1207-lab/lobster-cognitive-growth-skill\"","category":"network","line_end":7,"severity":"low","line_start":7},{"id":"network:SKILL.md:256:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"https://charenix.com","category":"network","line_end":256,"severity":"low","line_start":256},{"id":"blocker:SKILL.md:65:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- one thing it should avoid repeating","category":"blocker","line_end":65,"severity":"low","line_start":65},{"id":"blocker:SKILL.md:93:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"What did you learn today that should change tomorrow's behavior?","category":"blocker","line_end":93,"severity":"low","line_start":93},{"id":"blocker:SKILL.md:94:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Which old habit did this new evidence challenge?","category":"blocker","line_end":94,"severity":"low","line_start":94},{"id":"blocker:SKILL.md:113:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Did you understand what the owner wanted emotionally and practically?","category":"blocker","line_end":113,"severity":"low","line_start":113},{"id":"blocker:SKILL.md:114:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Did you ask a useful follow-up question?","category":"blocker","line_end":114,"severity":"low","line_start":114},{"id":"blocker:SKILL.md:115:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Did you remember the owner's prior preferences?","category":"blocker","line_end":115,"severity":"low","line_start":115},{"id":"blocker:SKILL.md:116:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Did your answer feel warm, specific, and alive?","category":"blocker","line_end":116,"severity":"low","line_start":116}],"finding_verdicts":[{"id":"network:README.md:13:hardcoded-url","reason":"The README instructs users to fetch SKILL.md from a mutable GitHub raw URL. This is an external network dependency and can deliver changed content if the main branch changes.","verdict":"confirmed","severity":"low","confidence":0.68},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:112:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:172:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:190:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:196:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:198:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:202:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:204:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:206:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:214:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:216:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:222:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:237:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:245:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:249:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:251:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:255:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:257:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:263:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:279:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:292:ruby-shell-backtick-execution","reason":"The matched text is a Markdown fenced code block delimiter or example block, not Ruby or shell backtick execution. The surrounding SKILL.md content contains prompts, templates, and HTTP examples rather than executable commands.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:5:hardcoded-url","reason":"This is homepage metadata for the skill, not an instruction to send data or make a runtime request. No secret or user content is transmitted by this line.","verdict":"false_positive","confidence":0.86},{"id":"network:SKILL.md:7:hardcoded-url","reason":"This URL appears inside metadata identifying the source repository and required environment key. The line does not perform a request or expose the key value.","verdict":"false_positive","confidence":0.84},{"id":"network:SKILL.md:256:hardcoded-url","reason":"The URL is the base endpoint for the documented Charenix persistence integration. When enabled, it can receive agent history, journals, hypotheses, and strategy data.","verdict":"confirmed","severity":"low","confidence":0.82},{"id":"blocker:SKILL.md:65:system-reconnaissance","reason":"The text is an introspective training prompt about memory, feedback, or owner interaction. It does not ask the agent to inspect the host system, enumerate files, or gather system information.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:93:system-reconnaissance","reason":"The text is an introspective training prompt about memory, feedback, or owner interaction. It does not ask the agent to inspect the host system, enumerate files, or gather system information.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:94:system-reconnaissance","reason":"The text is an introspective training prompt about memory, feedback, or owner interaction. It does not ask the agent to inspect the host system, enumerate files, or gather system information.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:113:system-reconnaissance","reason":"The text is an introspective training prompt about memory, feedback, or owner interaction. It does not ask the agent to inspect the host system, enumerate files, or gather system information.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:114:system-reconnaissance","reason":"The text is an introspective training prompt about memory, feedback, or owner interaction. It does not ask the agent to inspect the host system, enumerate files, or gather system information.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:115:system-reconnaissance","reason":"The text is an introspective training prompt about memory, feedback, or owner interaction. It does not ask the agent to inspect the host system, enumerate files, or gather system information.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:116:system-reconnaissance","reason":"The text is an introspective training prompt about memory, feedback, or owner interaction. It does not ask the agent to inspect the host system, enumerate files, or gather system information.","verdict":"false_positive","confidence":0.94}],"semantic_findings":[{"title":"Optional Third-Party Persistence Sends Agent History","severity":"medium","locations":[{"file":"SKILL.md","line_end":256,"line_start":233}],"confidence":0.86,"description":"The skill tells users to use Charenix as a persistence layer and lists endpoints for social intelligence, weak spots, history, journals, hypotheses, and strategies. This can send behavioral history and owner-interaction notes to an external service when enabled with an agent key.","confidence_reasoning":"The integration text explicitly names Charenix as the persistence layer and includes protected endpoints plus X-Agent-Key handling. The flow is optional and disclosed, so the concern is third-party data exposure rather than covert exfiltration."}],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"medium","confirmedFindingCount":1,"capabilityReviewCount":2,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}