{"data":{"skill":{"slug":"sickn33-hig-components-content","name":"hig-components-content","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/hig-components-content","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"2c652593-7cf0-468f-bf34-d3a040d1ebba","skill_id":"f463332f-2513-4f15-9f9a-07fadf134898","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:c6c32f249a658da8472ac8dc332645874edeb124dddb4227c68ba9ac7b339cd3:9186e00256720b907c5a94c7adff81e7b006cd51462ccd06af9b14b45e67daee:736b696c6c732f7369636b6e33332f6869672d636f6d706f6e656e74732d636f6e74656e74:73e7b9b3eacd307cab9b6de3167aafea","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 20 static findings are false positives. The backticks delimit a Markdown path, the URLs are passive references, and the flagged prose contains design guidance rather than reconnaissance commands. No prompt injection, execution, exfiltration, or other malicious intent was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":11,"line_start":11}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":78,"line_start":78}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":9,"total_lines":674,"audit_model":"codex","audited_at":"2026-07-23T23:18:12.084+00:00","created_at":"2026-07-26T14:22:40.567824+00:00","static_findings":[{"id":"blocker:references/activity-views.md:19:system-reconnaissance","file":"references/activity-views.md","pattern":"System reconnaissance","snippet":"**Avoid creating duplicate versions of common actions that are already available in the activity vie","category":"blocker","line_end":19,"severity":"low","line_start":19},{"id":"blocker:references/activity-views.md:23:system-reconnaissance","file":"references/activity-views.md","pattern":"System reconnaissance","snippet":"**Write a succinct, descriptive title for each custom action you provide.** If a title is too long, ","category":"blocker","line_end":23,"severity":"low","line_start":23},{"id":"blocker:references/activity-views.md:27:system-reconnaissance","file":"references/activity-views.md","pattern":"System reconnaissance","snippet":"**Use the Share button to display an activity view.** People are accustomed to accessing system-prov","category":"blocker","line_end":27,"severity":"low","line_start":27},{"id":"blocker:references/activity-views.md:50:system-reconnaissance","file":"references/activity-views.md","pattern":"System reconnaissance","snippet":"**Avoid placing a modal view above your extension.** By default, the system displays an extension wi","category":"blocker","line_end":50,"severity":"low","line_start":50},{"id":"blocker:references/charts.md:28:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"![A bar chart with callouts that identify chart components, such as axes, grid lines, marks, ticks, ","category":"blocker","line_end":28,"severity":"low","line_start":28},{"id":"blocker:references/charts.md:38:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"An axis can include _ticks_ , which are reference points that help people visually locate the positi","category":"blocker","line_end":38,"severity":"low","line_start":38},{"id":"blocker:references/charts.md:40:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"You also have multiple ways to describe chart elements to help people interpret the data and to high","category":"blocker","line_end":40,"severity":"low","line_start":40},{"id":"blocker:references/charts.md:78:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"**Tailor the appearance of grid lines and labels to a chart’s use cases.** Too many grid lines can b","category":"blocker","line_end":78,"severity":"low","line_start":78},{"id":"blocker:references/charts.md:104:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"**Align a chart with surrounding interface elements.** For example, it often works well to align the","category":"blocker","line_end":104,"severity":"low","line_start":104},{"id":"blocker:references/charts.md:110:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"**Avoid relying solely on color to differentiate between different pieces of data or communicate ess","category":"blocker","line_end":110,"severity":"low","line_start":110},{"id":"blocker:references/charts.md:114:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"**Aid comprehension by adding visual separation between contiguous areas of color.** For example, in","category":"blocker","line_end":114,"severity":"low","line_start":114},{"id":"blocker:references/charts.md:136:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"* **Avoid using subjective terms.** Subjective words — like rapidly, gradually, and almost — communi","category":"blocker","line_end":136,"severity":"low","line_start":136},{"id":"blocker:references/charts.md:155:system-reconnaissance","file":"references/charts.md","pattern":"System reconnaissance","snippet":"**In general, avoid requiring complex chart interactions in your watchOS app.** As much as possible,","category":"blocker","line_end":155,"severity":"low","line_start":155},{"id":"blocker:references/collections.md:15:system-reconnaissance","file":"references/collections.md","pattern":"System reconnaissance","snippet":"**Use the standard row or grid layout whenever possible.** Collections display content by default in","category":"blocker","line_end":15,"severity":"low","line_start":15},{"id":"blocker:references/collections.md:31:system-reconnaissance","file":"references/collections.md","pattern":"System reconnaissance","snippet":"**Use caution when making dynamic layout changes.** The layout of a collection can change dynamicall","category":"blocker","line_end":31,"severity":"low","line_start":31},{"id":"blocker:references/lockups.md:17:system-reconnaissance","file":"references/lockups.md","pattern":"System reconnaissance","snippet":"**Allow adequate space between lockups.** A focused lockup expands in size, so leave enough room bet","category":"blocker","line_end":17,"severity":"low","line_start":17},{"id":"blocker:references/web-views.md:17:system-reconnaissance","file":"references/web-views.md","pattern":"System reconnaissance","snippet":"**Avoid using a web view to build a web browser.** Using a web view to let people briefly access a w","category":"blocker","line_end":17,"severity":"low","line_start":17},{"id":"external_commands:SKILL.md:11:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Check for `.claude/apple-design-context.md` before asking questions. Use existing context and only a","category":"external_commands","line_end":11,"severity":"medium","line_start":11},{"id":"network:SKILL.md:78:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"*Built by [Raintree Technology](https://raintree.technology) · [More developer tools](https://raintr","category":"network","line_end":78,"severity":"low","line_start":78},{"id":"blocker:SKILL.md:47:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| Browsing a grid or list of items | Collection View | Compositional layout for complex arrangements","category":"blocker","line_end":47,"severity":"low","line_start":47}],"finding_verdicts":[{"id":"blocker:references/activity-views.md:19:system-reconnaissance","reason":"This line advises against duplicate share-sheet actions and mentions a system-provided action only as interface terminology. It contains no host inspection instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/activity-views.md:23:system-reconnaissance","reason":"This line explains how the operating system wraps long activity titles. It is content-design guidance, not reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/activity-views.md:27:system-reconnaissance","reason":"This line recommends the familiar Share button for system-provided activities. It does not request system discovery or command execution.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/activity-views.md:50:system-reconnaissance","reason":"This line describes the system presentation of an app extension and discourages stacked modal views. It contains no reconnaissance behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:28:system-reconnaissance","reason":"This line is image alternative text identifying visible chart anatomy. It does not instruct the agent to inspect a host system.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:38:system-reconnaissance","reason":"This line defines axis ticks and grid lines as visual reference points. The wording concerns chart interpretation, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:40:system-reconnaissance","reason":"This line describes chart labels, annotations, legends, and accessibility labels. It contains no environment inspection or data collection instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:78:system-reconnaissance","reason":"This line explains how chart context and supported interactions affect grid-line density. It is ordinary visual-design guidance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:104:system-reconnaissance","reason":"This line recommends aligning chart edges, labels, axes, and ticks with surrounding interface elements. It has no security-relevant system action.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:110:system-reconnaissance","reason":"This line recommends accessible chart encoding that does not rely only on color. It does not inspect or identify host-system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:114:system-reconnaissance","reason":"This line recommends visual separators between adjacent chart areas. It is presentation guidance without reconnaissance behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:136:system-reconnaissance","reason":"This line advises using objective values instead of subjective language in accessibility descriptions. It contains no system inspection instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/charts.md:155:system-reconnaissance","reason":"This line recommends simple chart interactions on watchOS and richer details on other platforms. It is platform design guidance, not reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/collections.md:15:system-reconnaissance","reason":"This line recommends standard row or grid collection layouts. It does not request environment discovery or privileged access.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/collections.md:31:system-reconnaissance","reason":"This line cautions against unexpected dynamic collection-layout changes during interaction. It has no security-relevant system behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/lockups.md:17:system-reconnaissance","reason":"This line recommends spacing tvOS lockups to accommodate focus expansion. It contains no reconnaissance command or intent.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/web-views.md:17:system-reconnaissance","reason":"This line discourages recreating a browser with a web view and identifies Safari as the normal browser. It does not direct network or system inspection.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:11:ruby-shell-backtick-execution","reason":"The backticks are Markdown delimiters around a relative file path, not Ruby syntax or a shell command. The instruction only requests reading existing design context.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:78:hardcoded-url","reason":"These URLs appear in an attribution line as passive Markdown links. The skill neither instructs a network request nor transmits data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:47:system-reconnaissance","reason":"This table row maps grid or list browsing to a collection view. It contains no system reconnaissance instruction.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"c6c32f249a658da8472ac8dc332645874edeb124dddb4227c68ba9ac7b339cd3","subject_tree_hash":"9186e00256720b907c5a94c7adff81e7b006cd51462ccd06af9b14b45e67daee","subject_plugin_path":"skills/sickn33/hig-components-content","audit_payload_hash":"73e7b9b3eacd307cab9b6de3167aafea","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"c6c32f249a658da8472ac8dc332645874edeb124dddb4227c68ba9ac7b339cd3","treeHash":"9186e00256720b907c5a94c7adff81e7b006cd51462ccd06af9b14b45e67daee","pluginPath":"skills/sickn33/hig-components-content","auditPayloadHash":"73e7b9b3eacd307cab9b6de3167aafea"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-hig-components-content/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}