{"data":{"skill":{"slug":"sickn33-flutter-expert","name":"flutter-expert","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/flutter-expert","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"f284382f-2f37-4ffd-ae3b-a1227abb6c59","skill_id":"6c83e86e-64a6-47ed-a2f5-8afd0c72787f","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:d71135dd2c7ca3b4cc2c3b8f9bd1909700aed1263f114f5399588fd9031831a2:7d0d2a01f04e6ccf0d9df8cd747a892cf2b5c98e9a8ca44ed0a79a2628743641:736b696c6c732f7369636b6e33332f666c75747465722d657870657274:39abfb2e45d641ff23d4ae53c5e98c93","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All five static alerts are false positives caused by Markdown formatting or ordinary Flutter guidance. The file contains no executable commands, system reconnaissance, network reconnaissance, prompt injection, or other malicious intent.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":24,"line_start":24}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":203,"audit_model":"codex","audited_at":"2026-07-23T22:22:18.422+00:00","created_at":"2026-07-26T12:22:27.421731+00:00","static_findings":[{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If detailed examples are required, open `resources/implementation-playbook.md`.","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"blocker:SKILL.md:61:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Custom state management solutions and hybrid approaches","category":"blocker","line_end":61,"severity":"low","line_start":61},{"id":"blocker:SKILL.md:75:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Android Integration**: Kotlin platform channels, Material Design 3, Play Store compliance","category":"blocker","line_end":75,"severity":"low","line_start":75},{"id":"blocker:SKILL.md:192:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- \"Integrate native iOS/Android features with platform channels\"","category":"blocker","line_end":192,"severity":"low","line_start":192},{"id":"blocker:SKILL.md:162:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- Considers accessibility throughout the development process","category":"blocker","line_end":163,"severity":"low","line_start":162}],"finding_verdicts":[{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"Line 24 uses Markdown backticks to format a relative resource path. It does not contain Ruby syntax, shell syntax, or an instruction to execute a command.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:61:system-reconnaissance","reason":"Line 61 describes custom and hybrid Flutter state management approaches. It does not inspect the host system or request system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:75:system-reconnaissance","reason":"Line 75 lists Android development topics such as Kotlin platform channels and Play Store compliance. It contains no system discovery instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:192:system-reconnaissance","reason":"Line 192 is an example request about integrating native mobile features through Flutter platform channels. It does not direct the agent to enumerate system data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:162:network-reconnaissance","reason":"Lines 162 through 163 discuss accessibility and code documentation. They contain no network scanning, endpoint discovery, or external request behavior.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"d71135dd2c7ca3b4cc2c3b8f9bd1909700aed1263f114f5399588fd9031831a2","subject_tree_hash":"7d0d2a01f04e6ccf0d9df8cd747a892cf2b5c98e9a8ca44ed0a79a2628743641","subject_plugin_path":"skills/sickn33/flutter-expert","audit_payload_hash":"39abfb2e45d641ff23d4ae53c5e98c93","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"d71135dd2c7ca3b4cc2c3b8f9bd1909700aed1263f114f5399588fd9031831a2","treeHash":"7d0d2a01f04e6ccf0d9df8cd747a892cf2b5c98e9a8ca44ed0a79a2628743641","pluginPath":"skills/sickn33/flutter-expert","auditPayloadHash":"39abfb2e45d641ff23d4ae53c5e98c93"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-flutter-expert/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}