{"data":{"skill":{"slug":"sickn33-form-cro","name":"form-cro","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/form-cro","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"ae82d6b8-5a19-443e-a89e-9ad9b07f4822","skill_id":"65ca6931-1458-4ae8-816b-9757341b4e8c","version":6,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:fca15bc73d63197f6f275d4ff85e03b3ad94697d34678e3e2c6c1030ab57fb96:a04cf2f4c965660a7b0cf458816dd69669ad2710f31341e8df49d349a2e89bf5:736b696c6c732f7369636b6e33332f666f726d2d63726f:fded18821ca14cfddaedb8a92cb3ceee","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All four static findings are false positives from ordinary form usability guidance. The skill contains no executable code, system reconnaissance, keylogging instructions, prompt injection, or data exfiltration intent. No semantic security findings were identified.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":449,"audit_model":"codex","audited_at":"2026-07-23T22:24:49.914+00:00","created_at":"2026-07-26T12:22:36.051031+00:00","static_findings":[{"id":"blocker:SKILL.md:293:keylogger-keywords","file":"SKILL.md","pattern":"Keylogger keywords","snippet":"* After field interaction, not keystroke","category":"blocker","line_end":293,"severity":"critical","line_start":293},{"id":"blocker:SKILL.md:261:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"* Avoid label-as-placeholder anti-pattern","category":"blocker","line_end":261,"severity":"low","line_start":261},{"id":"blocker:SKILL.md:305:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Bad: “Invalid input”","category":"blocker","line_end":305,"severity":"low","line_start":305},{"id":"blocker:SKILL.md:306:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Good: “Please enter a valid email ([name@company.com](mailto:name@company.com))”","category":"blocker","line_end":306,"severity":"low","line_start":306}],"finding_verdicts":[{"id":"blocker:SKILL.md:293:keylogger-keywords","reason":"The word \"keystroke\" appears only in advice to trigger inline validation after field interaction instead of every keystroke. The document does not instruct recording or transmitting keyboard input.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:261:system-reconnaissance","reason":"The phrase describes the UX anti-pattern of using placeholders as labels. It contains no system enumeration, host discovery, or command execution instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:305:system-reconnaissance","reason":"This line is a negative example of an unhelpful form validation message. It does not request or perform system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:306:system-reconnaissance","reason":"This line gives user-facing email validation copy and an example address. It does not inspect hosts, accounts, networks, or system configuration.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"fca15bc73d63197f6f275d4ff85e03b3ad94697d34678e3e2c6c1030ab57fb96","subject_tree_hash":"a04cf2f4c965660a7b0cf458816dd69669ad2710f31341e8df49d349a2e89bf5","subject_plugin_path":"skills/sickn33/form-cro","audit_payload_hash":"fded18821ca14cfddaedb8a92cb3ceee","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"fca15bc73d63197f6f275d4ff85e03b3ad94697d34678e3e2c6c1030ab57fb96","treeHash":"a04cf2f4c965660a7b0cf458816dd69669ad2710f31341e8df49d349a2e89bf5","pluginPath":"skills/sickn33/form-cro","auditPayloadHash":"fded18821ca14cfddaedb8a92cb3ceee"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-form-cro/audits/6/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}