{"data":{"skill":{"slug":"sickn33-employment-contract-templates","name":"employment-contract-templates","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/employment-contract-templates","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"c3c649a3-f18d-4a35-969c-7f9e93bd27a3","skill_id":"7590a29b-6eed-40e0-a55e-adacb0ffde57","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:092f884d90fb9c91fc44637b2853eb79a39af9a2b8fa2c66afb25458bbcb302e:d6170b1ef42c26e02e72ccd911f8164c28dcf629d940b697226c5fdc6567b235:736b696c6c732f7369636b6e33332f656d706c6f796d656e742d636f6e74726163742d74656d706c61746573:96b754b52b876ee83d365853dd060061","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All ten static findings are false positives. Eight reconnaissance matches are ordinary employment-template prose, while two command matches are Markdown file references without executable commands. No prompt injection, exfiltration intent, or other semantic security issue was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":34,"line_start":34},{"file":"SKILL.md","line_end":42,"line_start":42}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":542,"audit_model":"codex","audited_at":"2026-07-23T23:28:12.151+00:00","created_at":"2026-07-26T11:21:49.110774+00:00","static_findings":[{"id":"blocker:resources/implementation-playbook.md:62:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"**Base Salary:** $[AMOUNT] per [year/hour], paid [bi-weekly/semi-monthly/monthly]","category":"blocker","line_end":62,"severity":"low","line_start":62},{"id":"blocker:resources/implementation-playbook.md:73:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"- [X] days paid time off per year","category":"blocker","line_end":73,"severity":"low","line_start":73},{"id":"blocker:resources/implementation-playbook.md:74:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"- [X] paid holidays","category":"blocker","line_end":74,"severity":"low","line_start":74},{"id":"blocker:resources/implementation-playbook.md:260:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"- All compensation earned through termination date shall be paid","category":"blocker","line_end":261,"severity":"low","line_start":260},{"id":"blocker:resources/implementation-playbook.md:375:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"### Paid Time Off (PTO)","category":"blocker","line_end":375,"severity":"low","line_start":375},{"id":"blocker:resources/implementation-playbook.md:399:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"The following paid holidays are observed:","category":"blocker","line_end":399,"severity":"low","line_start":399},{"id":"blocker:resources/implementation-playbook.md:417:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"- Avoid conflicts of interest","category":"blocker","line_end":417,"severity":"low","line_start":417},{"id":"blocker:resources/implementation-playbook.md:478:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"- **Be clear and specific** - Avoid ambiguity","category":"blocker","line_end":478,"severity":"low","line_start":478},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If detailed templates are required, open `resources/implementation-playbook.md`.","category":"external_commands","line_end":34,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `resources/implementation-playbook.md` for detailed templates and checklists.","category":"external_commands","line_end":42,"severity":"medium","line_start":42}],"finding_verdicts":[{"id":"blocker:resources/implementation-playbook.md:62:system-reconnaissance","reason":"The line is a salary placeholder inside a fenced offer-letter template, with no instruction to inspect a system.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:73:system-reconnaissance","reason":"The line is a paid-time-off placeholder in an employment benefits list, not a reconnaissance command or request.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:74:system-reconnaissance","reason":"The line specifies a paid-holiday placeholder in a document template and has no system access behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:260:system-reconnaissance","reason":"The line describes final compensation in a termination clause and does not request system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:375:system-reconnaissance","reason":"The matched text is only a Paid Time Off section heading in an employee handbook template.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:399:system-reconnaissance","reason":"The line introduces a list of workplace holidays and contains no reconnaissance instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:417:system-reconnaissance","reason":"The phrase is a standard employee code-of-conduct expectation, unrelated to system discovery.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:478:system-reconnaissance","reason":"The line is general drafting advice to avoid ambiguity and does not direct any system inspection.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"Backticks format a local Markdown path, and the instruction only asks the agent to open that static resource.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"Backticks format a resource path in a documentation list; there is no Ruby expression, shell command, or execution request.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"092f884d90fb9c91fc44637b2853eb79a39af9a2b8fa2c66afb25458bbcb302e","subject_tree_hash":"d6170b1ef42c26e02e72ccd911f8164c28dcf629d940b697226c5fdc6567b235","subject_plugin_path":"skills/sickn33/employment-contract-templates","audit_payload_hash":"96b754b52b876ee83d365853dd060061","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"092f884d90fb9c91fc44637b2853eb79a39af9a2b8fa2c66afb25458bbcb302e","treeHash":"d6170b1ef42c26e02e72ccd911f8164c28dcf629d940b697226c5fdc6567b235","pluginPath":"skills/sickn33/employment-contract-templates","auditPayloadHash":"96b754b52b876ee83d365853dd060061"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-employment-contract-templates/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}