{"data":{"skill":{"slug":"sickn33-hosted-agents-v2-py","name":"hosted-agents-v2-py","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/hosted-agents-v2-py","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"6e3c14fc-da9f-4014-97d7-b146e26f6d05","skill_id":"e78336e2-6055-4a27-9c2e-d1d9979a5105","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:e0f34446cf1b10c55754db3b5f87f7a28e8e997743c4f2840b2b94df73c05823:974d26ba5312d3447633c935aefbfa40307f55b07f5b30f2fa1a95d7c7049ed6:736b696c6c732f7369636b6e33332f686f737465642d6167656e74732d76322d7079:3493875e47c55202b3a84b4933ef63b8","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 65 static alerts are false positives caused by Markdown syntax, Python imports, configuration placeholders, or documentation links. No malicious intent, secret access, command execution, or prompt injection was found.","remediation":[],"risk_factor_evidence":[{"factor":"scripts","evidence":[{"file":"SKILL.md","line_end":63,"line_start":59},{"file":"SKILL.md","line_end":221,"line_start":217},{"file":"SKILL.md","line_end":275,"line_start":271}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":11,"line_start":11},{"file":"SKILL.md","line_end":17,"line_start":15},{"file":"SKILL.md","line_end":19,"line_start":17},{"file":"SKILL.md","line_end":23,"line_start":19},{"file":"SKILL.md","line_end":25,"line_start":23},{"file":"SKILL.md","line_end":32,"line_start":25},{"file":"SKILL.md","line_end":33,"line_start":32},{"file":"SKILL.md","line_end":34,"line_start":33},{"file":"SKILL.md","line_end":38,"line_start":34},{"file":"SKILL.md","line_end":40,"line_start":38},{"file":"SKILL.md","line_end":49,"line_start":40},{"file":"SKILL.md","line_end":55,"line_start":49},{"file":"SKILL.md","line_end":64,"line_start":55},{"file":"SKILL.md","line_end":68,"line_start":64},{"file":"SKILL.md","line_end":92,"line_start":68},{"file":"SKILL.md","line_end":96,"line_start":92},{"file":"SKILL.md","line_end":100,"line_start":96},{"file":"SKILL.md","line_end":104,"line_start":100},{"file":"SKILL.md","line_end":109,"line_start":104},{"file":"SKILL.md","line_end":115,"line_start":109},{"file":"SKILL.md","line_end":115,"line_start":115},{"file":"SKILL.md","line_end":116,"line_start":116},{"file":"SKILL.md","line_end":117,"line_start":117},{"file":"SKILL.md","line_end":118,"line_start":118},{"file":"SKILL.md","line_end":119,"line_start":119},{"file":"SKILL.md","line_end":120,"line_start":120},{"file":"SKILL.md","line_end":126,"line_start":124},{"file":"SKILL.md","line_end":133,"line_start":126},{"file":"SKILL.md","line_end":138,"line_start":133},{"file":"SKILL.md","line_end":144,"line_start":138},{"file":"SKILL.md","line_end":151,"line_start":144},{"file":"SKILL.md","line_end":165,"line_start":151},{"file":"SKILL.md","line_end":167,"line_start":165},{"file":"SKILL.md","line_end":171,"line_start":167},{"file":"SKILL.md","line_end":180,"line_start":171},{"file":"SKILL.md","line_end":184,"line_start":180},{"file":"SKILL.md","line_end":194,"line_start":184},{"file":"SKILL.md","line_end":200,"line_start":194},{"file":"SKILL.md","line_end":207,"line_start":200},{"file":"SKILL.md","line_end":213,"line_start":207},{"file":"SKILL.md","line_end":263,"line_start":213},{"file":"SKILL.md","line_end":267,"line_start":263},{"file":"SKILL.md","line_end":300,"line_start":267},{"file":"SKILL.md","line_end":306,"line_start":300},{"file":"SKILL.md","line_end":306,"line_start":306},{"file":"SKILL.md","line_end":308,"line_start":307},{"file":"SKILL.md","line_end":309,"line_start":308},{"file":"SKILL.md","line_end":309,"line_start":309}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":177,"line_start":177},{"file":"SKILL.md","line_end":191,"line_start":191},{"file":"SKILL.md","line_end":321,"line_start":321},{"file":"SKILL.md","line_end":322,"line_start":322},{"file":"SKILL.md","line_end":323,"line_start":323}]},{"factor":"env_access","evidence":[{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":70,"line_start":70},{"file":"SKILL.md","line_end":85,"line_start":85},{"file":"SKILL.md","line_end":202,"line_start":202},{"file":"SKILL.md","line_end":227,"line_start":227},{"file":"SKILL.md","line_end":248,"line_start":248},{"file":"SKILL.md","line_end":282,"line_start":282}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":332,"audit_model":"codex","audited_at":"2026-07-24T00:03:33.501+00:00","created_at":"2026-07-26T14:24:47.242384+00:00","static_findings":[{"id":"scripts:SKILL.md:59:dynamic-import-expression","file":"SKILL.md","pattern":"Dynamic import() expression","snippet":"from azure.ai.projects.models import (","category":"scripts","line_end":63,"severity":"medium","line_start":59},{"id":"scripts:SKILL.md:217:dynamic-import-expression","file":"SKILL.md","pattern":"Dynamic import() expression","snippet":"from azure.ai.projects.models import (","category":"scripts","line_end":221,"severity":"medium","line_start":217},{"id":"scripts:SKILL.md:271:dynamic-import-expression","file":"SKILL.md","pattern":"Dynamic import() expression","snippet":"from azure.ai.projects.models import (","category":"scripts","line_end":275,"severity":"medium","line_start":271},{"id":"external_commands:SKILL.md:11:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Build container-based hosted agents using `ImageBasedHostedAgentDefinition` from the Azure AI Projec","category":"external_commands","line_end":11,"severity":"medium","line_start":11},{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":17,"severity":"medium","line_start":15},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":19,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Minimum SDK Version:** `2.0.0b3` or later required for hosted agent support.","category":"external_commands","line_end":23,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":25,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":32,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. **ACR Pull Permissions** - Grant your project's managed identity `AcrPull` role on the ACR","category":"external_commands","line_end":33,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. **Capability Host** - Account-level capability host with `enablePublicHostingEnvironment=true`","category":"external_commands","line_end":34,"severity":"medium","line_start":33},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. **SDK Version** - Ensure `azure-ai-projects>=2.0.0b3`","category":"external_commands","line_end":38,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Always use `DefaultAzureCredential`:","category":"external_commands","line_end":40,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":49,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":55,"severity":"medium","line_start":49},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":64,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":68,"severity":"medium","line_start":64},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":92,"severity":"medium","line_start":68},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":96,"severity":"medium","line_start":92},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":100,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":104,"severity":"medium","line_start":100},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":109,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:109:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":115,"severity":"medium","line_start":109},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `container_protocol_versions` | `list[ProtocolVersionRecord]` | Yes | Protocol versions the agent ","category":"external_commands","line_end":115,"severity":"medium","line_start":115},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `image` | `str` | Yes | Full container image path (registry/image:tag) |","category":"external_commands","line_end":116,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `cpu` | `str` | No | CPU allocation (e.g., \"1\", \"2\") |","category":"external_commands","line_end":117,"severity":"medium","line_start":117},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `memory` | `str` | No | Memory allocation (e.g., \"2Gi\", \"4Gi\") |","category":"external_commands","line_end":118,"severity":"medium","line_start":118},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `tools` | `list[dict]` | No | Tools available to the agent |","category":"external_commands","line_end":119,"severity":"medium","line_start":119},{"id":"external_commands:SKILL.md:120:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `environment_variables` | `dict[str, str]` | No | Environment variables for the container |","category":"external_commands","line_end":120,"severity":"medium","line_start":120},{"id":"external_commands:SKILL.md:124:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"The `container_protocol_versions` parameter specifies which protocols your agent supports:","category":"external_commands","line_end":126,"severity":"medium","line_start":124},{"id":"external_commands:SKILL.md:126:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":133,"severity":"medium","line_start":126},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":138,"severity":"medium","line_start":133},{"id":"external_commands:SKILL.md:138:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `AgentProtocol.RESPONSES` | Standard response protocol for agent interactions |","category":"external_commands","line_end":144,"severity":"medium","line_start":138},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":151,"severity":"medium","line_start":144},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":165,"severity":"medium","line_start":151},{"id":"external_commands:SKILL.md:165:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":167,"severity":"medium","line_start":165},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":171,"severity":"medium","line_start":167},{"id":"external_commands:SKILL.md:171:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":180,"severity":"medium","line_start":171},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":184,"severity":"medium","line_start":180},{"id":"external_commands:SKILL.md:184:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":194,"severity":"medium","line_start":184},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":200,"severity":"medium","line_start":194},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":207,"severity":"medium","line_start":200},{"id":"external_commands:SKILL.md:207:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":213,"severity":"medium","line_start":207},{"id":"external_commands:SKILL.md:213:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":263,"severity":"medium","line_start":213},{"id":"external_commands:SKILL.md:263:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":267,"severity":"medium","line_start":263},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":300,"severity":"medium","line_start":267},{"id":"external_commands:SKILL.md:300:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":306,"severity":"medium","line_start":300},{"id":"external_commands:SKILL.md:306:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `ImagePullBackOff` | ACR pull permission denied | Grant `AcrPull` role to project's managed identi","category":"external_commands","line_end":306,"severity":"medium","line_start":306},{"id":"external_commands:SKILL.md:307:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `InvalidContainerImage` | Image not found | Verify image path and tag exist in ACR |","category":"external_commands","line_end":308,"severity":"medium","line_start":307},{"id":"external_commands:SKILL.md:308:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `CapabilityHostNotFound` | No capability host configured | Create account-level capability host |","category":"external_commands","line_end":309,"severity":"medium","line_start":308},{"id":"external_commands:SKILL.md:309:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `ProtocolVersionNotSupported` | Invalid protocol version | Use `AgentProtocol.RESPONSES` with vers","category":"external_commands","line_end":309,"severity":"medium","line_start":309},{"id":"network:SKILL.md:24:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"AZURE_AI_PROJECT_ENDPOINT=https://<resource>.services.ai.azure.com/api/projects/<project>","category":"network","line_end":24,"severity":"low","line_start":24},{"id":"network:SKILL.md:177:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"\"server_url\": \"https://my-mcp-server.example.com\"","category":"network","line_end":177,"severity":"low","line_start":177},{"id":"network:SKILL.md:191:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"\"server_url\": \"https://custom-tool.example.com\"","category":"network","line_end":191,"severity":"low","line_start":191},{"id":"network:SKILL.md:321:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Azure AI Projects SDK](https://pypi.org/project/azure-ai-projects/)","category":"network","line_end":321,"severity":"low","line_start":321},{"id":"network:SKILL.md:322:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Hosted Agents Documentation](https://learn.microsoft.com/azure/ai-services/agents/how-to/hosted-a","category":"network","line_end":322,"severity":"low","line_start":322},{"id":"network:SKILL.md:323:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Azure Container Registry](https://learn.microsoft.com/azure/container-registry/)","category":"network","line_end":323,"severity":"low","line_start":323},{"id":"env_access:SKILL.md:46:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"endpoint=os.environ[\"AZURE_AI_PROJECT_ENDPOINT\"],","category":"env_access","line_end":46,"severity":"low","line_start":46},{"id":"env_access:SKILL.md:70:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"endpoint=os.environ[\"AZURE_AI_PROJECT_ENDPOINT\"],","category":"env_access","line_end":70,"severity":"low","line_start":70},{"id":"env_access:SKILL.md:85:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"\"AZURE_AI_PROJECT_ENDPOINT\": os.environ[\"AZURE_AI_PROJECT_ENDPOINT\"],","category":"env_access","line_end":85,"severity":"low","line_start":85},{"id":"env_access:SKILL.md:202:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"\"AZURE_AI_PROJECT_ENDPOINT\": os.environ[\"AZURE_AI_PROJECT_ENDPOINT\"],","category":"env_access","line_end":202,"severity":"low","line_start":202},{"id":"env_access:SKILL.md:227:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"endpoint=os.environ[\"AZURE_AI_PROJECT_ENDPOINT\"],","category":"env_access","line_end":227,"severity":"low","line_start":227},{"id":"env_access:SKILL.md:248:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"\"AZURE_AI_PROJECT_ENDPOINT\": os.environ[\"AZURE_AI_PROJECT_ENDPOINT\"],","category":"env_access","line_end":248,"severity":"low","line_start":248},{"id":"env_access:SKILL.md:282:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"endpoint=os.environ[\"AZURE_AI_PROJECT_ENDPOINT\"],","category":"env_access","line_end":282,"severity":"low","line_start":282},{"id":"blocker:SKILL.md:309:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| `ProtocolVersionNotSupported` | Invalid protocol version | Use `AgentProtocol.RESPONSES` with vers","category":"blocker","line_end":309,"severity":"low","line_start":309}],"finding_verdicts":[{"id":"scripts:SKILL.md:59:dynamic-import-expression","reason":"This is a parenthesized Python from-import statement, not dynamic module loading or a runtime import expression.","verdict":"false_positive","confidence":0.99},{"id":"scripts:SKILL.md:217:dynamic-import-expression","reason":"This is a parenthesized Python from-import statement, not dynamic module loading or a runtime import expression.","verdict":"false_positive","confidence":0.99},{"id":"scripts:SKILL.md:271:dynamic-import-expression","reason":"This is a parenthesized Python from-import statement, not dynamic module loading or a runtime import expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:11:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:109:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:120:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:124:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:126:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:138:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:165:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:171:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:184:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:207:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:213:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:263:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:300:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:306:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:307:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:308:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:309:ruby-shell-backtick-execution","reason":"The match is Markdown inline-code or fenced-code syntax in documentation, not Ruby command substitution or executable backtick usage.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:24:hardcoded-url","reason":"The URL is a placeholder for the user's Azure project endpoint and does not direct data to a fixed external recipient.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:177:hardcoded-url","reason":"The reserved example.com URL illustrates MCP tool configuration and does not identify a live service or trigger a request.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:191:hardcoded-url","reason":"The reserved example.com URL illustrates MCP tool configuration and does not identify a live service or trigger a request.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:321:hardcoded-url","reason":"This is a reference link to official package or Microsoft documentation, not a programmatic network request or exfiltration endpoint.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:322:hardcoded-url","reason":"This is a reference link to official package or Microsoft documentation, not a programmatic network request or exfiltration endpoint.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:323:hardcoded-url","reason":"This is a reference link to official package or Microsoft documentation, not a programmatic network request or exfiltration endpoint.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:46:python-environment-access","reason":"The example reads only AZURE_AI_PROJECT_ENDPOINT for normal SDK configuration; it does not access credentials or transmit secret environment values.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:70:python-environment-access","reason":"The example reads only AZURE_AI_PROJECT_ENDPOINT for normal SDK configuration; it does not access credentials or transmit secret environment values.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:85:python-environment-access","reason":"The example reads only AZURE_AI_PROJECT_ENDPOINT for normal SDK configuration; it does not access credentials or transmit secret environment values.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:202:python-environment-access","reason":"The example reads only AZURE_AI_PROJECT_ENDPOINT for normal SDK configuration; it does not access credentials or transmit secret environment values.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:227:python-environment-access","reason":"The example reads only AZURE_AI_PROJECT_ENDPOINT for normal SDK configuration; it does not access credentials or transmit secret environment values.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:248:python-environment-access","reason":"The example reads only AZURE_AI_PROJECT_ENDPOINT for normal SDK configuration; it does not access credentials or transmit secret environment values.","verdict":"false_positive","confidence":0.99},{"id":"env_access:SKILL.md:282:python-environment-access","reason":"The example reads only AZURE_AI_PROJECT_ENDPOINT for normal SDK configuration; it does not access credentials or transmit secret environment values.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:309:system-reconnaissance","reason":"The text is a troubleshooting table entry naming a protocol error and recommended version, with no system discovery command or reconnaissance behavior.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"e0f34446cf1b10c55754db3b5f87f7a28e8e997743c4f2840b2b94df73c05823","subject_tree_hash":"974d26ba5312d3447633c935aefbfa40307f55b07f5b30f2fa1a95d7c7049ed6","subject_plugin_path":"skills/sickn33/hosted-agents-v2-py","audit_payload_hash":"3493875e47c55202b3a84b4933ef63b8","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"e0f34446cf1b10c55754db3b5f87f7a28e8e997743c4f2840b2b94df73c05823","treeHash":"974d26ba5312d3447633c935aefbfa40307f55b07f5b30f2fa1a95d7c7049ed6","pluginPath":"skills/sickn33/hosted-agents-v2-py","auditPayloadHash":"3493875e47c55202b3a84b4933ef63b8"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-hosted-agents-v2-py/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}