{"data":{"skill":{"slug":"roin-orca-simple-brainstorm","name":"simple-brainstorm","icon":"📦","repo":"https://github.com/roin-orca/skills/tree/main/skills/simple-brainstorm/","status":"approved","author":"roin-orca","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"43c89f5b-ff14-46ab-bba2-3decfc08afca","skill_id":"0ad96454-40bf-4f8c-add5-d62afa4a1666","version":4,"content_hash":"v3:e397ce5a135369cd6def89cb6400d013e2f68f2f:e32f162d7840364b01d9407a010542767f396718d4be858a1f9dbfe873e3b5dd:c1b0a139095b0a0302bfa60a56c13b5b38043803f17f3c5a33c2ca98b29fc93a:736b696c6c732f726f696e2d6f7263612f73696d706c652d627261696e73746f726d:ace79dfb78dea6c97c59cad2ef1dfa5f","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"The single static finding is a false positive: the backticks enclose a DOT diagram, not a shell or Ruby command. The reviewed skill is prompt-only and contains no evidence of execution, data collection, or prompt injection.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":30,"line_start":17}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":53,"audit_model":"claude","audited_at":"2026-07-21T08:17:33.029+00:00","created_at":"2026-07-21T08:21:02.91316+00:00","static_findings":[{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```dot","category":"external_commands","line_end":30,"severity":"medium","line_start":17}],"finding_verdicts":[{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"Lines 17-30 are a fenced DOT graph that documents the brainstorming flow. The backticks are Markdown delimiters and do not invoke Ruby, a shell, or any command.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"e397ce5a135369cd6def89cb6400d013e2f68f2f","subject_content_hash":"e32f162d7840364b01d9407a010542767f396718d4be858a1f9dbfe873e3b5dd","subject_tree_hash":"c1b0a139095b0a0302bfa60a56c13b5b38043803f17f3c5a33c2ca98b29fc93a","subject_plugin_path":"skills/roin-orca/simple-brainstorm","audit_payload_hash":"ace79dfb78dea6c97c59cad2ef1dfa5f","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"e397ce5a135369cd6def89cb6400d013e2f68f2f","contentHash":"e32f162d7840364b01d9407a010542767f396718d4be858a1f9dbfe873e3b5dd","treeHash":"c1b0a139095b0a0302bfa60a56c13b5b38043803f17f3c5a33c2ca98b29fc93a","pluginPath":"skills/roin-orca/simple-brainstorm","auditPayloadHash":"ace79dfb78dea6c97c59cad2ef1dfa5f"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"unavailable","url":null,"status":null},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"unavailable","verificationState":"not_verified"},"isLatest":true}}