{"data":{"skill":{"slug":"shubhamsaboo-decision-helper","name":"decision-helper","icon":"📦","repo":"https://github.com/shubhamsaboo/awesome-llm-apps/tree/main/awesome_agent_skills/decision-helper","status":"approved","author":"shubhamsaboo","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"82422cc7-dbae-4bdb-be13-e9afceb061cd","skill_id":"eb32d551-76b6-45b3-ba92-844bf3186fb7","version":1,"content_hash":"v2:412e23e39ccd9729546286287b96bb41707397cf:b21944d4812f6a8b45f852601af3f0a46f9b7e0597b21577e157161a8c3dd503:063b8701839dbf5bf83bf9b734f96296316334e2f3456799a1a100e15736eba7:0cc28314b32bdffd7c6e3f77d357c66c","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Both static findings are false positives. The markdown fence at SKILL.md:45 starts an output template, not Ruby or shell execution. The line about setting a deadline is a decision-making tip, not system reconnaissance.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":80,"line_start":45}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":93,"audit_model":"codex","audited_at":"2026-07-07T02:26:19.858+00:00","created_at":"2026-07-07T06:05:34.678892+00:00","static_findings":[{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":80,"severity":"medium","line_start":45},{"id":"blocker:SKILL.md:88:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Set a deadline** to avoid analysis paralysis","category":"blocker","line_end":88,"severity":"low","line_start":88}],"finding_verdicts":[{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"SKILL.md:45 begins a fenced markdown output template that continues through line 80. It is not Ruby backtick execution and contains no executable shell command.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:88:system-reconnaissance","reason":"SKILL.md:88 advises setting a decision deadline to avoid analysis paralysis. It does not request host, network, user, or system reconnaissance.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}