{"data":{"skill":{"slug":"shubhamsaboo-meeting-notes","name":"meeting-notes","icon":"📦","repo":"https://github.com/shubhamsaboo/awesome-llm-apps/tree/main/awesome_agent_skills/meeting-notes","status":"approved","author":"shubhamsaboo","authorVersion":"1.0.0","skillstoreRevision":1},"audit":{"id":"ebf87b7f-326e-44e1-a702-4746af44fc83","skill_id":"53867345-a9bc-4037-9e0f-6d21e8b2b184","version":2,"content_hash":"v3:412e23e39ccd9729546286287b96bb41707397cf:3132217ddf2e86cf585c78f18c22582b4559647bb4785ef525df745f91e69976:b1ded531c3a7e418d26eea2e184d8f646884caad6bcccba91a275bc278f2a2ff:736b696c6c732f7368756268616d7361626f6f2f6d656574696e672d6e6f746573:fc159cff61af113982985b725db18340","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"The two static findings are false positives caused by markdown formatting and ordinary meeting note guidance. I found no prompt injection, malicious intent, data exfiltration, or unsafe command behavior in SKILL.md.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":65,"line_start":28}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":78,"audit_model":"codex","audited_at":"2026-07-07T02:52:58.229+00:00","created_at":"2026-07-15T09:07:20.815434+00:00","static_findings":[{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":65,"severity":"medium","line_start":28},{"id":"blocker:SKILL.md:73:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- **Concise**: Focus on outcomes, not process","category":"blocker","line_end":75,"severity":"low","line_start":73}],"finding_verdicts":[{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","reason":"Line 28 starts a fenced markdown template, not shell or Ruby backtick execution. The block only shows the desired meeting note structure and contains no executable command.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:73:network-reconnaissance","reason":"Line 73 says to focus on outcomes, not process, as a note-taking style rule. It contains no network scanning, reconnaissance instructions, or external access behavior.","verdict":"false_positive","confidence":0.94}],"semantic_findings":[],"subject_marketplace_commit_sha":"412e23e39ccd9729546286287b96bb41707397cf","subject_content_hash":"3132217ddf2e86cf585c78f18c22582b4559647bb4785ef525df745f91e69976","subject_tree_hash":"b1ded531c3a7e418d26eea2e184d8f646884caad6bcccba91a275bc278f2a2ff","subject_plugin_path":"skills/shubhamsaboo/meeting-notes","audit_payload_hash":"fc159cff61af113982985b725db18340","confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":"412e23e39ccd9729546286287b96bb41707397cf","contentHash":"3132217ddf2e86cf585c78f18c22582b4559647bb4785ef525df745f91e69976","treeHash":"b1ded531c3a7e418d26eea2e184d8f646884caad6bcccba91a275bc278f2a2ff","pluginPath":"skills/shubhamsaboo/meeting-notes","auditPayloadHash":"fc159cff61af113982985b725db18340"},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":true}}