{"data":{"skill":{"slug":"sickn33-blockchain-developer","name":"blockchain-developer","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/blockchain-developer","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"c16fdaf8-ba6c-4961-923b-e525d71f0c30","skill_id":"f155f35a-20bd-490a-800a-ee9d4db004a5","version":5,"content_hash":"v3:5a26d1d61d694db29af9b138c661c1981076d9df:071eefc65ea49624bb32da341a30edb58cb1cb5a2661ef44de86415ebeb76188:7ebf02dfad5ca65b40a92c53f31c54e8662ce4f302d171d112c0d6771a5e994e:736b696c6c732f7369636b6e33332f626c6f636b636861696e2d646576656c6f706572:c5de67b37d9cbe2520afabf661ccefbe","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives caused by Markdown formatting or descriptive security guidance. No executable commands, secret collection, reconnaissance behavior, prompt injection, or malicious intent were found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":24,"line_start":24}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":212,"audit_model":"codex","audited_at":"2026-08-14T10:35:13.358+00:00","created_at":"2026-08-15T04:57:18.069643+00:00","static_findings":[{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If detailed examples are required, open `resources/implementation-playbook.md`.","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"sensitive:SKILL.md:151:crypto-seed-private-key-mention","file":"SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- Private key management and hardware wallet integration","category":"sensitive","line_end":151,"severity":"high","line_start":151},{"id":"blocker:SKILL.md:160:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Prioritizes security and formal verification over rapid deployment","category":"blocker","line_end":160,"severity":"low","line_start":160}],"finding_verdicts":[{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The backticks delimit a Markdown file path in an instruction to open documentation. They do not invoke a shell or execute Ruby code.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:SKILL.md:151:crypto-seed-private-key-mention","reason":"The line lists private key management and hardware wallet integration as security capabilities. It neither requests nor exposes private keys or seed phrases.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:160:system-reconnaissance","reason":"The line states a preference for security and formal verification. It contains no host discovery, environment inspection, or reconnaissance instruction.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"5a26d1d61d694db29af9b138c661c1981076d9df","subject_content_hash":"071eefc65ea49624bb32da341a30edb58cb1cb5a2661ef44de86415ebeb76188","subject_tree_hash":"7ebf02dfad5ca65b40a92c53f31c54e8662ce4f302d171d112c0d6771a5e994e","subject_plugin_path":"skills/sickn33/blockchain-developer","audit_payload_hash":"c5de67b37d9cbe2520afabf661ccefbe","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"5a26d1d61d694db29af9b138c661c1981076d9df","contentHash":"071eefc65ea49624bb32da341a30edb58cb1cb5a2661ef44de86415ebeb76188","treeHash":"7ebf02dfad5ca65b40a92c53f31c54e8662ce4f302d171d112c0d6771a5e994e","pluginPath":"skills/sickn33/blockchain-developer","auditPayloadHash":"c5de67b37d9cbe2520afabf661ccefbe"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-blockchain-developer/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}