{"data":{"skill":{"slug":"sickn33-domain-driven-design","name":"domain-driven-design","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/domain-driven-design","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"1364ae31-72c7-4f55-a080-887cb6253e2a","skill_id":"cc9d04ff-399a-414b-ac9b-47d8de644ca1","version":5,"content_hash":"v3:f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526:e041ea437753339dd2f9170e8f11ca4c6168a3c5f2dc7fca17020f4470a0a6d0:3d6b3968a928333272ecb8a36efbb70822f2110560f89c31f54cc2e404f3bf09:736b696c6c732f7369636b6e33332f646f6d61696e2d64726976656e2d64657369676e:87c05566c3284602ffe4cb054dcb1a02","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All ten static findings are false positives caused by Markdown backticks around skill names, a local reference path, and a plain-text example. The reviewed files contain no executable commands or semantic security concerns.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":45,"line_start":45},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":47,"line_start":47},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":50,"line_start":50},{"file":"SKILL.md","line_end":52,"line_start":52},{"file":"SKILL.md","line_end":68,"line_start":65}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":100,"audit_model":"codex","audited_at":"2026-07-23T22:52:37.148+00:00","created_at":"2026-07-26T09:25:14.82825+00:00","static_findings":[{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Strategic model and boundaries: `@ddd-strategic-design`","category":"external_commands","line_end":43,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Cross-context integrations and translation: `@ddd-context-mapping`","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Tactical code modeling: `@ddd-tactical-patterns`","category":"external_commands","line_end":45,"severity":"medium","line_start":45},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Read/write separation: `@cqrs-implementation`","category":"external_commands","line_end":46,"severity":"medium","line_start":46},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Event history as source of truth: `@event-sourcing-architect` and `@event-store-design`","category":"external_commands","line_end":47,"severity":"medium","line_start":47},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Long-running workflows: `@saga-orchestration`","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Read models: `@projection-patterns`","category":"external_commands","line_end":49,"severity":"medium","line_start":49},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Decision log: `@architecture-decision-records`","category":"external_commands","line_end":50,"severity":"medium","line_start":50},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"If templates are needed, open `references/ddd-deliverables.md`.","category":"external_commands","line_end":52,"severity":"medium","line_start":52},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":68,"severity":"medium","line_start":65}],"finding_verdicts":[{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"Line 43 uses Markdown backticks to format the @ddd-strategic-design skill identifier. It does not invoke Ruby, a shell, or any executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"Line 44 uses Markdown backticks to format the @ddd-context-mapping skill identifier. No command syntax or execution instruction is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"Line 45 uses Markdown backticks to format the @ddd-tactical-patterns skill identifier. The text is a routing label, not executable code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"Line 46 uses Markdown backticks to format the @cqrs-implementation skill identifier. It contains no shell command or dynamic execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","reason":"Line 47 formats two skill identifiers with Markdown backticks. Neither identifier is a command, script, or executable expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"Line 48 uses Markdown backticks to format the @saga-orchestration skill identifier. The surrounding text only describes routing for workflow design.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","reason":"Line 49 uses Markdown backticks to format the @projection-patterns skill identifier. No external process or shell behavior is requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","reason":"Line 50 uses Markdown backticks to format the @architecture-decision-records skill identifier. This is documentation markup rather than command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","reason":"Line 52 formats a relative documentation path with Markdown backticks. Opening the bundled reference is not Ruby or shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","reason":"Lines 65 through 68 are a fenced plain-text usage example. The fence and example contain no executable command or shell substitution.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526","subject_content_hash":"e041ea437753339dd2f9170e8f11ca4c6168a3c5f2dc7fca17020f4470a0a6d0","subject_tree_hash":"3d6b3968a928333272ecb8a36efbb70822f2110560f89c31f54cc2e404f3bf09","subject_plugin_path":"skills/sickn33/domain-driven-design","audit_payload_hash":"87c05566c3284602ffe4cb054dcb1a02","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526","contentHash":"e041ea437753339dd2f9170e8f11ca4c6168a3c5f2dc7fca17020f4470a0a6d0","treeHash":"3d6b3968a928333272ecb8a36efbb70822f2110560f89c31f54cc2e404f3bf09","pluginPath":"skills/sickn33/domain-driven-design","auditPayloadHash":"87c05566c3284602ffe4cb054dcb1a02"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-domain-driven-design/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}