{"data":{"skill":{"slug":"sickn33-embedding-strategies","name":"embedding-strategies","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/embedding-strategies","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"f822723d-318d-4a45-8206-71d73d8819fc","skill_id":"1e9fedfb-e4d7-4a65-85da-242c95cc503b","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:b826a37c51d75e1f5f1cf3debf62ba0a5c14276182c83269826503311041957e:63ef207461a799c4b4f04b5b7f878e41b70655a66e08d835c7d5627849a23807:736b696c6c732f7369636b6e33332f656d62656464696e672d73747261746567696573:ae04343eeb3759d0d22d2b2b9987010b","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 17 static findings are false positives caused by Markdown formatting, documentation links, ordinary Python dictionary access, or prose. No prompt injection, malicious command execution, system reconnaissance, or semantic security issue was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":53,"line_start":49},{"file":"SKILL.md","line_end":59,"line_start":53},{"file":"SKILL.md","line_end":103,"line_start":59},{"file":"SKILL.md","line_end":107,"line_start":103},{"file":"SKILL.md","line_end":159,"line_start":107},{"file":"SKILL.md","line_end":163,"line_start":159},{"file":"SKILL.md","line_end":304,"line_start":163},{"file":"SKILL.md","line_end":308,"line_start":304},{"file":"SKILL.md","line_end":400,"line_start":308},{"file":"SKILL.md","line_end":404,"line_start":400},{"file":"SKILL.md","line_end":473,"line_start":404}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":492,"line_start":492},{"file":"SKILL.md","line_end":493,"line_start":493},{"file":"SKILL.md","line_end":494,"line_start":494}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":500,"audit_model":"codex","audited_at":"2026-07-23T23:24:36.258+00:00","created_at":"2026-07-26T11:21:40.081058+00:00","static_findings":[{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If detailed examples are required, open `resources/implementation-playbook.md`.","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":53,"severity":"medium","line_start":49},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":59,"severity":"medium","line_start":53},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":103,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:103:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":107,"severity":"medium","line_start":103},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":159,"severity":"medium","line_start":107},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":163,"severity":"medium","line_start":159},{"id":"external_commands:SKILL.md:163:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":304,"severity":"medium","line_start":163},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":308,"severity":"medium","line_start":304},{"id":"external_commands:SKILL.md:308:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":400,"severity":"medium","line_start":308},{"id":"external_commands:SKILL.md:400:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":404,"severity":"medium","line_start":400},{"id":"external_commands:SKILL.md:404:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":473,"severity":"medium","line_start":404},{"id":"network:SKILL.md:492:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [OpenAI Embeddings](https://platform.openai.com/docs/guides/embeddings)","category":"network","line_end":492,"severity":"low","line_start":492},{"id":"network:SKILL.md:493:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Sentence Transformers](https://www.sbert.net/)","category":"network","line_end":493,"severity":"low","line_start":493},{"id":"network:SKILL.md:494:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [MTEB Benchmark](https://huggingface.co/spaces/mteb/leaderboard)","category":"network","line_end":494,"severity":"low","line_start":494},{"id":"blocker:SKILL.md:344:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"doc_id = doc[id_field]","category":"blocker","line_end":344,"severity":"low","line_start":344},{"id":"blocker:SKILL.md:482:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Cache embeddings** - Avoid recomputing","category":"blocker","line_end":482,"severity":"low","line_start":482}],"finding_verdicts":[{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"The backticks format a relative documentation path in Markdown; they do not invoke Ruby, a shell, or any executable process.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","reason":"Line 49 is the opening Markdown fence for a plain-text embedding pipeline diagram, not shell backtick execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","reason":"Line 53 closes the Markdown fence around a plain-text diagram and has no executable semantics.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"Line 59 opens a fenced Python example; the backticks are Markdown syntax and do not execute a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:103:ruby-shell-backtick-execution","reason":"Line 103 closes a fenced Python example and is not a Ruby or shell execution construct.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","reason":"Line 107 opens a fenced Python example for local embeddings; no command is executed by the Markdown delimiter.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","reason":"Line 159 closes the local embedding Python example and contains only Markdown fence syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:163:ruby-shell-backtick-execution","reason":"Line 163 opens a fenced Python chunking example; it does not launch an external process.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","reason":"Line 304 closes the chunking example with a Markdown fence and performs no shell operation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:308:ruby-shell-backtick-execution","reason":"Line 308 opens a fenced Python pipeline example; the delimiter is documentation formatting only.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:400:ruby-shell-backtick-execution","reason":"Line 400 closes the domain embedding pipeline example and does not execute an external command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:404:ruby-shell-backtick-execution","reason":"Line 404 opens a fenced Python evaluation example; there is no Ruby or shell command invocation.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:492:hardcoded-url","reason":"The URL is a visible Markdown link to official OpenAI embedding documentation and does not initiate a network request.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:493:hardcoded-url","reason":"The URL is a visible reference to the Sentence Transformers project and is not used for automatic network access.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:494:hardcoded-url","reason":"The URL is a visible MTEB benchmark reference with no code that fetches it or transmits user data.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:344:system-reconnaissance","reason":"The statement reads a configured identifier field from an input document dictionary; it does not inspect the host system.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:482:system-reconnaissance","reason":"This is a prose recommendation to cache embeddings and contains no system discovery or reconnaissance behavior.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"b826a37c51d75e1f5f1cf3debf62ba0a5c14276182c83269826503311041957e","subject_tree_hash":"63ef207461a799c4b4f04b5b7f878e41b70655a66e08d835c7d5627849a23807","subject_plugin_path":"skills/sickn33/embedding-strategies","audit_payload_hash":"ae04343eeb3759d0d22d2b2b9987010b","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"b826a37c51d75e1f5f1cf3debf62ba0a5c14276182c83269826503311041957e","treeHash":"63ef207461a799c4b4f04b5b7f878e41b70655a66e08d835c7d5627849a23807","pluginPath":"skills/sickn33/embedding-strategies","auditPayloadHash":"ae04343eeb3759d0d22d2b2b9987010b"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-embedding-strategies/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}