{"data":{"skill":{"slug":"samber-devrel-strategy","name":"devrel-strategy","icon":"📦","repo":"https://github.com/samber/developer-relations-skills/tree/b8cf857a6069b89252445c82a36fcb9491fd6b20/skills/devrel-strategy","status":"approved","author":"samber","authorVersion":"1.0.1","skillstoreRevision":1},"audit":{"id":"6328ec98-8d4c-4d2c-868d-e6801cdf9182","skill_id":"c4c0cd77-af3b-4deb-950f-0ef08684853f","version":1,"content_hash":"v3:bd544b4eceb0db06e15e5c6d3d9859517aa12806:abddc00404b770a259bced69060774abac2a1c365f463b68b7d8a251d20cea9b:07b4f4ee978dc49a664b4a1acbd005f2f509fdeecc38d12945229b5c178524da:736b696c6c732f73616d6265722f64657672656c2d7374726174656779:aa998c3fe21f69c7d774f8f6c042f60b","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 39 static findings are false positives from business terminology, Markdown formatting, and related-skill references. No evidence found of executable commands, reconnaissance, data exfiltration, or prompt injection in the five reviewed files. The skill requests task-context persistence and optional public-source browsing, both related to its strategy workflow.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":155,"line_start":155},{"file":"SKILL.md","line_end":156,"line_start":156},{"file":"SKILL.md","line_end":157,"line_start":157},{"file":"SKILL.md","line_end":199,"line_start":199},{"file":"SKILL.md","line_end":203,"line_start":203},{"file":"SKILL.md","line_end":209,"line_start":209},{"file":"SKILL.md","line_end":210,"line_start":210},{"file":"SKILL.md","line_end":211,"line_start":211},{"file":"SKILL.md","line_end":212,"line_start":212},{"file":"SKILL.md","line_end":247,"line_start":247},{"file":"SKILL.md","line_end":252,"line_start":252},{"file":"SKILL.md","line_end":282,"line_start":256},{"file":"SKILL.md","line_end":314,"line_start":282},{"file":"SKILL.md","line_end":335,"line_start":314},{"file":"SKILL.md","line_end":337,"line_start":335},{"file":"SKILL.md","line_end":338,"line_start":337},{"file":"SKILL.md","line_end":339,"line_start":338},{"file":"SKILL.md","line_end":340,"line_start":339},{"file":"SKILL.md","line_end":341,"line_start":340},{"file":"SKILL.md","line_end":342,"line_start":341}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":5,"total_lines":1100,"audit_model":"codex","audited_at":"2026-10-25T12:55:18.732+00:00","created_at":"2026-10-25T13:33:23.077195+00:00","static_findings":[{"id":"blocker:evals/evals.json:153:system-reconnaissance","file":"evals/evals.json","pattern":"System reconnaissance","snippet":"\"Orders scale-stage leverage as champion and ambassador programs, then community-run events, then pa","category":"blocker","line_end":153,"severity":"low","line_start":153},{"id":"blocker:evals/evals.json:186:system-reconnaissance","file":"evals/evals.json","pattern":"System reconnaissance","snippet":"\"prompt\": \"Hestbury builds a compliance-automation platform with a public API. Two constraints you s","category":"blocker","line_end":186,"severity":"low","line_start":186},{"id":"blocker:evals/evals.json:304:system-reconnaissance","file":"evals/evals.json","pattern":"System reconnaissance","snippet":"{ \"query\": \"Design an unpaid ambassador program with a perk ladder and fixed terms.\", \"should_trigge","category":"blocker","line_end":304,"severity":"low","line_start":304},{"id":"blocker:references/build-vs-buy.md:22:system-reconnaissance","file":"references/build-vs-buy.md","pattern":"System reconnaissance","snippet":"4. **What is the setup cost before the first output?** Vendor pipelines need briefs, templates, revi","category":"blocker","line_end":22,"severity":"low","line_start":22},{"id":"blocker:references/charter-example.md:69:system-reconnaissance","file":"references/charter-example.md","pattern":"System reconnaissance","snippet":"Signal: non-paid qualified arrivals. Review: week 12.","category":"blocker","line_end":69,"severity":"low","line_start":69},{"id":"blocker:references/charter-example.md:165:system-reconnaissance","file":"references/charter-example.md","pattern":"System reconnaissance","snippet":"6. **Reach metrics only.** Views, members, attendees, stars and followers are all counts of hits, no","category":"blocker","line_end":165,"severity":"low","line_start":165},{"id":"blocker:references/charter-example.md:41:network-reconnaissance","file":"references/charter-example.md","pattern":"Network reconnaissance","snippet":"Primary: awareness - we are absent from the error-message searches that produce","category":"blocker","line_end":41,"severity":"low","line_start":41},{"id":"blocker:references/program-archetypes.md:67:system-reconnaissance","file":"references/program-archetypes.md","pattern":"System reconnaissance","snippet":"- **Fastest signal:** qualified arrivals from non-paid sources, and whether new arrivals reach first","category":"blocker","line_end":67,"severity":"low","line_start":67},{"id":"blocker:references/program-archetypes.md:77:system-reconnaissance","file":"references/program-archetypes.md","pattern":"System reconnaissance","snippet":"- **Starves:** paid reach, conference booths, gated content.","category":"blocker","line_end":77,"severity":"low","line_start":77},{"id":"blocker:references/program-archetypes.md:88:system-reconnaissance","file":"references/program-archetypes.md","pattern":"System reconnaissance","snippet":"- **Starves:** paid reach, event sponsorship.","category":"blocker","line_end":88,"severity":"low","line_start":88},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Memory: Store a few info about the current task or project context. When memory lives in a file, u","category":"external_commands","line_end":43,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:155:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- efficiency: `enablement-first > product-feedback > evaluation-support > reach-first > community-fi","category":"external_commands","line_end":155,"severity":"medium","line_start":155},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- value: `enablement-first > evaluation-support > community-first > reach-first > contributor-first ","category":"external_commands","line_end":156,"severity":"medium","line_start":156},{"id":"external_commands:SKILL.md:157:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- effort: `product-feedback > enablement-first == evaluation-support > reach-first == community-firs","category":"external_commands","line_end":157,"severity":"medium","line_start":157},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Most programs face both. Pick one for this horizon instead of splitting evenly, and state which arte","category":"external_commands","line_end":199,"severity":"medium","line_start":199},{"id":"external_commands:SKILL.md:203:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For each funded bet, choose in-house, contractor, agency or community-sourced. Partner/sponsored is ","category":"external_commands","line_end":203,"severity":"medium","line_start":203},{"id":"external_commands:SKILL.md:209:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- efficiency: `contractor > in-house > agency > community-sourced`","category":"external_commands","line_end":209,"severity":"medium","line_start":209},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- value: `in-house > community-sourced > agency > contractor`","category":"external_commands","line_end":210,"severity":"medium","line_start":210},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- effort: `contractor > agency > in-house == community-sourced`","category":"external_commands","line_end":211,"severity":"medium","line_start":211},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- compliance cost: `in-house == contractor > agency > community-sourced`","category":"external_commands","line_end":212,"severity":"medium","line_start":212},{"id":"external_commands:SKILL.md:247:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Scale** - add leverage, not headcount, in this order: `champion and ambassador programs > commun","category":"external_commands","line_end":247,"severity":"medium","line_start":247},{"id":"external_commands:SKILL.md:252:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"State the _next_ hire and the trigger that justifies it, not a twelve-month org chart. Reporting lin","category":"external_commands","line_end":252,"severity":"medium","line_start":252},{"id":"external_commands:SKILL.md:256:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":282,"severity":"medium","line_start":256},{"id":"external_commands:SKILL.md:282:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":314,"severity":"medium","line_start":282},{"id":"external_commands:SKILL.md:314:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Which numbers prove the program works is a separate decision - see `samber/developer-relations-skill","category":"external_commands","line_end":335,"severity":"medium","line_start":314},{"id":"external_commands:SKILL.md:335:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"If you can browse the web, check the Developer Relations Foundation (`dev-rel.org`, hosted by the Li","category":"external_commands","line_end":337,"severity":"medium","line_start":335},{"id":"external_commands:SKILL.md:337:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `samber/developer-relations-skills@devtools-business-model` (prerequisite): defines the product's ","category":"external_commands","line_end":338,"severity":"medium","line_start":337},{"id":"external_commands:SKILL.md:338:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `samber/developer-relations-skills@developer-first-gtm` (prerequisite): picks the adoption motion ","category":"external_commands","line_end":339,"severity":"medium","line_start":338},{"id":"external_commands:SKILL.md:339:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `samber/developer-relations-skills@developer-journey-map` (hand-off): maps the full developer jour","category":"external_commands","line_end":340,"severity":"medium","line_start":339},{"id":"external_commands:SKILL.md:340:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `samber/developer-relations-skills@devrel-metrics` (hand-off): defines the measurement framework f","category":"external_commands","line_end":341,"severity":"medium","line_start":340},{"id":"external_commands:SKILL.md:341:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `samber/developer-relations-skills@devrel-team-structure` (hand-off): designs org topology once th","category":"external_commands","line_end":342,"severity":"medium","line_start":341},{"id":"blocker:SKILL.md:25:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Developer attention is earned by usefulness, not bought. A program that outsources or automates it","category":"blocker","line_end":25,"severity":"low","line_start":25},{"id":"blocker:SKILL.md:52:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"9. What is off-limits: no travel, no paid ads, regulated claims, a competitor's community, a channel","category":"blocker","line_end":52,"severity":"low","line_start":52},{"id":"blocker:SKILL.md:186:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- A team with a running content engine has already paid reach-first's standing job, so reach-first m","category":"blocker","line_end":186,"severity":"low","line_start":186},{"id":"blocker:SKILL.md:223:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- In-house and community-sourced tie on effort because both cost a standing job: one paid as salary,","category":"blocker","line_end":223,"severity":"low","line_start":223},{"id":"blocker:SKILL.md:233:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"The order starves community-sourced, high on value and high on effort, so a ratio never reaches it. ","category":"blocker","line_end":233,"severity":"low","line_start":233},{"id":"blocker:SKILL.md:239:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- A company with an editorial team already on payroll has effectively pre-paid the in-house row.","category":"blocker","line_end":239,"severity":"low","line_start":239},{"id":"blocker:SKILL.md:247:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Scale** - add leverage, not headcount, in this order: `champion and ambassador programs > commun","category":"blocker","line_end":247,"severity":"low","line_start":247},{"id":"blocker:SKILL.md:127:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- awareness","category":"blocker","line_end":128,"severity":"low","line_start":127}],"finding_verdicts":[{"id":"blocker:evals/evals.json:153:system-reconnaissance","reason":"The evaluation expectation orders ambassador programs, community events, paid writing, and contributor programs. It contains no system-inspection instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:evals/evals.json:186:system-reconnaissance","reason":"This fictional evaluation prompt describes a locked product roadmap and unavailable community channels. It asks for business planning, not host inspection.","verdict":"false_positive","confidence":0.99},{"id":"blocker:evals/evals.json:304:system-reconnaissance","reason":"The unpaid ambassador query is a negative trigger test with should_trigger set to false. It does not request operating-system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/build-vs-buy.md:22:system-reconnaissance","reason":"The setup-cost question concerns vendor briefs, templates, and review workflows paid before delivery. It contains no machine-discovery operation.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charter-example.md:69:system-reconnaissance","reason":"Non-paid qualified arrivals is an illustrative marketing signal with a review date. It is not a request to inspect a system.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charter-example.md:165:system-reconnaissance","reason":"The passage criticizes reach metrics that do not measure developer behavior. Counts of views and followers are business metrics, not reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charter-example.md:41:network-reconnaissance","reason":"Awareness refers to discoverability through error-message searches in a fictional charter. No network probe or service enumeration is requested.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/program-archetypes.md:67:system-reconnaissance","reason":"Qualified arrivals from non-paid sources measures a reach-first program. The text contains no operating-system inspection.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/program-archetypes.md:77:system-reconnaissance","reason":"Paid reach, conference booths, and gated content are deliberately excluded marketing activities. This business prioritization does not perform reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/program-archetypes.md:88:system-reconnaissance","reason":"The contributor-first archetype excludes paid reach and event sponsorship. These are spending choices, not system commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"Backticks format a suggested context filename in a task-memory instruction. The instruction requests context persistence, not Ruby or shell execution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:155:ruby-shell-backtick-execution","reason":"The backticked text is an efficiency ordering of program archetypes in Markdown. Greater-than symbols express ranking, not executable shell redirection.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","reason":"This inline Markdown span ranks program archetypes by value. No interpreter or command invocation is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:157:ruby-shell-backtick-execution","reason":"This inline Markdown span ranks program archetypes by effort and marks ties. It is explanatory notation, not executable code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","reason":"Backticks identify a related developer-segmentation skill for deeper audience analysis. There is no installation or execution command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:203:ruby-shell-backtick-execution","reason":"The formatted identifier refers sponsorship questions to another skill. The passage does not execute that identifier as a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:209:ruby-shell-backtick-execution","reason":"The inline span orders contractor, in-house, agency, and community sourcing by efficiency. This is Markdown ranking notation, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:210:ruby-shell-backtick-execution","reason":"The backticked sequence expresses sourcing value priorities. It is documentation without an execution mechanism.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","reason":"The inline span compares sourcing effort and marks an equality. It is not an executable Ruby or shell expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","reason":"This Markdown span ranks compliance costs for sourcing options. No command execution is requested or implemented.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:247:ruby-shell-backtick-execution","reason":"Backticks format a scale-stage ordering of leverage programs. The surrounding text concerns staffing and review capacity, not command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:252:ruby-shell-backtick-execution","reason":"The inline identifier names the team-structure skill for organizational design. It is a reference, not an external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:256:ruby-shell-backtick-execution","reason":"Lines 256-282 are a fenced Markdown charter template with twelve headings. The fence encloses document structure, not a shell script.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:282:ruby-shell-backtick-execution","reason":"Line 282 closes the charter template fence; subsequent prose describes review and quality gates. No executable backtick expression exists.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:314:ruby-shell-backtick-execution","reason":"The backticked identifier points to a metrics skill, followed by failure-mode guidance and references. It does not invoke a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:335:ruby-shell-backtick-execution","reason":"The backticked domain is a public reference for optional browsing of DevRel definitions. No shell command or data-upload instruction is present.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:337:ruby-shell-backtick-execution","reason":"The business-model skill identifier is formatted as inline code in a prerequisite list. It is not an execution instruction.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:338:ruby-shell-backtick-execution","reason":"The developer-first GTM identifier names a prerequisite for adoption-motion decisions. No command runs or installs it.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:339:ruby-shell-backtick-execution","reason":"The journey-map identifier is a handoff reference for deeper planning. Backticks provide Markdown formatting only.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:340:ruby-shell-backtick-execution","reason":"The metrics identifier names a related measurement-framework skill. The text contains no interpreter invocation or executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:341:ruby-shell-backtick-execution","reason":"The team-structure and budget-allocation identifiers are scope handoffs in a reference list. Neither is presented as a shell command.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:25:system-reconnaissance","reason":"This principle warns against buying developer attention while outsourcing credibility. It is business guidance with no system-inspection behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:52:system-reconnaissance","reason":"The interview asks about prohibited travel, paid advertising, claims, and channels. It gathers program constraints, not machine information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:186:system-reconnaissance","reason":"The passage adjusts program rankings for an existing content operation whose staffing costs are already paid. It does not inspect running processes.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:223:system-reconnaissance","reason":"The text compares salary costs with recruiting and recognition costs. It describes staffing effort, not host reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:233:system-reconnaissance","reason":"The paragraph promotes community sourcing when community-building effort is already funded. Its references to paid density concern business capacity, not system access.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:239:system-reconnaissance","reason":"An existing editorial payroll changes the economics of in-house delivery. No system identity, inventory, or configuration is queried.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:247:system-reconnaissance","reason":"The scale-stage guidance orders community leverage and paid writing programs. These program choices do not inspect operating-system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:127:network-reconnaissance","reason":"Awareness and acquisition are entries in the AAARRRP business-goal taxonomy. Neither requests network scanning or target discovery.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"bd544b4eceb0db06e15e5c6d3d9859517aa12806","subject_content_hash":"abddc00404b770a259bced69060774abac2a1c365f463b68b7d8a251d20cea9b","subject_tree_hash":"07b4f4ee978dc49a664b4a1acbd005f2f509fdeecc38d12945229b5c178524da","subject_plugin_path":"skills/samber/devrel-strategy","audit_payload_hash":"aa998c3fe21f69c7d774f8f6c042f60b","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"bd544b4eceb0db06e15e5c6d3d9859517aa12806","contentHash":"abddc00404b770a259bced69060774abac2a1c365f463b68b7d8a251d20cea9b","treeHash":"07b4f4ee978dc49a664b4a1acbd005f2f509fdeecc38d12945229b5c178524da","pluginPath":"skills/samber/devrel-strategy","auditPayloadHash":"aa998c3fe21f69c7d774f8f6c042f60b"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/samber-devrel-strategy/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}