{"data":{"skill":{"slug":"sickn33-email-sequence","name":"email-sequence","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/email-sequence","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"2394ca7e-c2ee-4755-9dec-72f7104e18d0","skill_id":"7641c0f3-b9aa-4f1a-ad7a-8e7468262266","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:db16dbde4f8c0ce35a822af22baa6009a1a6d93cf19444a642a7548b1c4e492f:1e9e43cf7e920ccbf18e0a48470c33a1e990c54a9b47c4114b31815b35cde49c:736b696c6c732f7369636b6e33332f656d61696c2d73657175656e6365:85fd7f44e5b3cb703c4cc16a5ea191ad","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 13 static findings are false positives. The command findings are Markdown fences, while the reconnaissance findings are ordinary email marketing prose with no executable or probing behavior.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":893,"line_start":886},{"file":"SKILL.md","line_end":896,"line_start":893},{"file":"SKILL.md","line_end":904,"line_start":896}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":937,"audit_model":"codex","audited_at":"2026-07-23T23:19:19.142+00:00","created_at":"2026-07-26T11:21:21.965447+00:00","static_findings":[{"id":"external_commands:SKILL.md:886:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":893,"severity":"medium","line_start":886},{"id":"external_commands:SKILL.md:893:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":896,"severity":"medium","line_start":893},{"id":"external_commands:SKILL.md:896:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":904,"severity":"medium","line_start":896},{"id":"blocker:SKILL.md:84:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- B2B: Avoid weekends","category":"blocker","line_end":84,"severity":"low","line_start":84},{"id":"blocker:SKILL.md:297:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**Trigger**: User converts to paid","category":"blocker","line_end":298,"severity":"low","line_start":297},{"id":"blocker:SKILL.md:303:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Email 3: Pro tips for paid features (day 5)","category":"blocker","line_end":303,"severity":"low","line_start":303},{"id":"blocker:SKILL.md:348:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"#### Upgrade to Paid","category":"blocker","line_end":349,"severity":"low","line_start":348},{"id":"blocker:SKILL.md:350:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**Goal**: Convert free to paid","category":"blocker","line_end":351,"severity":"low","line_start":350},{"id":"blocker:SKILL.md:751:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Upgrade to paid sequence","category":"blocker","line_end":751,"severity":"low","line_start":751},{"id":"blocker:SKILL.md:847:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Trial vs. paid","category":"blocker","line_end":848,"severity":"low","line_start":847},{"id":"blocker:SKILL.md:48:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- Lead with usefulness","category":"blocker","line_end":49,"severity":"low","line_start":48},{"id":"blocker:SKILL.md:122:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- Enable small success","category":"blocker","line_end":123,"severity":"low","line_start":122},{"id":"blocker:SKILL.md:477:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- Remind them of their success","category":"blocker","line_end":478,"severity":"low","line_start":477}],"finding_verdicts":[{"id":"external_commands:SKILL.md:886:ruby-shell-backtick-execution","reason":"Lines 886-893 contain a fenced plain-text sequence template. The backticks delimit Markdown and do not execute a Ruby or shell command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:893:ruby-shell-backtick-execution","reason":"Lines 893-896 only close one Markdown fence and open another around an email format example. No command or interpreter invocation is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:896:ruby-shell-backtick-execution","reason":"Lines 896-904 are a fenced output template containing email fields and placeholders. The fence is documentation syntax, not executable backtick substitution.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:84:system-reconnaissance","reason":"Line 84 advises B2B marketers to avoid weekend sends. It does not inspect a system or collect host information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:297:system-reconnaissance","reason":"Lines 297-298 define an email trigger and retention goal after a user becomes a paying customer. This is lifecycle marketing logic, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:303:system-reconnaissance","reason":"Line 303 schedules an email about paid product features. It contains no host discovery, system query, or executable instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:348:system-reconnaissance","reason":"Lines 348-349 are a heading and marketing trigger for an upgrade campaign. They do not request or expose system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:350:system-reconnaissance","reason":"Lines 350-351 state the conversion goal and expected email count. This is campaign planning without system inspection behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:751:system-reconnaissance","reason":"Line 751 is an audit checklist item for an upgrade email sequence. It neither discovers system details nor directs a tool to run.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:847:system-reconnaissance","reason":"Lines 847-848 list customer lifecycle segments such as trial, paid, new, and long-term. These are marketing audiences, not system targets.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:48:network-reconnaissance","reason":"Lines 48-49 advise leading emails with useful content to build trust. No network address, scan, request, or discovery action appears.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:122:network-reconnaissance","reason":"Lines 122-123 describe helping recipients achieve a small success. This is copy strategy and contains no network reconnaissance behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:477:network-reconnaissance","reason":"Lines 477-478 recommend reminding customers of prior success and explaining a referral offer. They do not probe or enumerate any network.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"db16dbde4f8c0ce35a822af22baa6009a1a6d93cf19444a642a7548b1c4e492f","subject_tree_hash":"1e9e43cf7e920ccbf18e0a48470c33a1e990c54a9b47c4114b31815b35cde49c","subject_plugin_path":"skills/sickn33/email-sequence","audit_payload_hash":"85fd7f44e5b3cb703c4cc16a5ea191ad","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"db16dbde4f8c0ce35a822af22baa6009a1a6d93cf19444a642a7548b1c4e492f","treeHash":"1e9e43cf7e920ccbf18e0a48470c33a1e990c54a9b47c4114b31815b35cde49c","pluginPath":"skills/sickn33/email-sequence","auditPayloadHash":"85fd7f44e5b3cb703c4cc16a5ea191ad"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-email-sequence/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}