{"data":{"skill":{"slug":"sickn33-inngest","name":"inngest","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/inngest","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"14262165-e1f3-4aeb-bb96-c4c1d4746d26","skill_id":"e20aff3b-b93e-457e-8e10-5824951705c3","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:af16eb196be7cb213ec048497842919705901b7318a771b8232d0afa54a2f91b:46ca0b3362615e042fc3a9e50e5f765554c987f0d7b918e8f70a81bae093dd8c:736b696c6c732f7369636b6e33332f696e6e67657374:9b9acdf61ac82b937ef519efbf8689c4","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 15 static findings are false positives caused by JavaScript interpolation, Markdown fences, framework names, and ordinary application data. No executable shell commands, reconnaissance behavior, prompt injection, or malicious intent were found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":293,"line_start":293},{"file":"SKILL.md","line_end":408,"line_start":403},{"file":"SKILL.md","line_end":416,"line_start":408},{"file":"SKILL.md","line_end":421,"line_start":416},{"file":"SKILL.md","line_end":429,"line_start":421},{"file":"SKILL.md","line_end":434,"line_start":429},{"file":"SKILL.md","line_end":442,"line_start":434},{"file":"SKILL.md","line_end":447,"line_start":442},{"file":"SKILL.md","line_end":455,"line_start":447},{"file":"SKILL.md","line_end":460,"line_start":455},{"file":"SKILL.md","line_end":464,"line_start":460},{"file":"SKILL.md","line_end":464,"line_start":464}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":480,"audit_model":"codex","audited_at":"2026-07-24T01:22:57.338+00:00","created_at":"2026-07-26T15:24:45.412479+00:00","static_findings":[{"id":"external_commands:SKILL.md:293:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"id: `${event.data.documentId}-${i}`,","category":"external_commands","line_end":293,"severity":"medium","line_start":293},{"id":"external_commands:SKILL.md:403:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":408,"severity":"medium","line_start":403},{"id":"external_commands:SKILL.md:408:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":416,"severity":"medium","line_start":408},{"id":"external_commands:SKILL.md:416:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":421,"severity":"medium","line_start":416},{"id":"external_commands:SKILL.md:421:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":429,"severity":"medium","line_start":421},{"id":"external_commands:SKILL.md:429:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":434,"severity":"medium","line_start":429},{"id":"external_commands:SKILL.md:434:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":442,"severity":"medium","line_start":434},{"id":"external_commands:SKILL.md:442:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":447,"severity":"medium","line_start":442},{"id":"external_commands:SKILL.md:447:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":455,"severity":"medium","line_start":447},{"id":"external_commands:SKILL.md:455:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":460,"severity":"medium","line_start":455},{"id":"external_commands:SKILL.md:460:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":464,"severity":"medium","line_start":460},{"id":"external_commands:SKILL.md:464:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Works well with: `nextjs-app-router`, `vercel-deployment`, `supabase-backend`, `email-systems`, `ai-","category":"external_commands","line_end":464,"severity":"medium","line_start":464},{"id":"blocker:SKILL.md:182:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"return { status: 'completed', chargeId: charge.id };","category":"blocker","line_end":182,"severity":"low","line_start":182},{"id":"blocker:SKILL.md:208:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"data: { userId: user.id },","category":"blocker","line_end":208,"severity":"low","line_start":208},{"id":"blocker:SKILL.md:54:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- express","category":"blocker","line_end":55,"severity":"low","line_start":54}],"finding_verdicts":[{"id":"external_commands:SKILL.md:293:ruby-shell-backtick-execution","reason":"Line 293 uses a JavaScript template literal to construct a vector identifier. It does not invoke a shell or execute a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:403:ruby-shell-backtick-execution","reason":"Lines 403 through 408 are a Markdown fence around a numbered workflow. The content contains no shell command or execution mechanism.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:408:ruby-shell-backtick-execution","reason":"Line 408 closes a Markdown workflow block, and the following text introduces another example. Backticks are document formatting, not Ruby execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:416:ruby-shell-backtick-execution","reason":"Lines 416 through 421 contain a fenced numbered workflow describing design steps. They do not contain executable commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:421:ruby-shell-backtick-execution","reason":"Line 421 closes a Markdown fence before the webhook example. No shell or subprocess operation is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:429:ruby-shell-backtick-execution","reason":"Lines 429 through 434 are a fenced, human-readable webhook workflow. The listed actions are guidance, not commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:434:ruby-shell-backtick-execution","reason":"Line 434 closes a Markdown fence before an email workflow section. It does not execute external code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:442:ruby-shell-backtick-execution","reason":"Lines 442 through 447 use a Markdown fence for an email workflow list. No command syntax or execution call appears.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:447:ruby-shell-backtick-execution","reason":"Line 447 closes a Markdown fence before the scheduled tasks section. It has no command execution semantics.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:455:ruby-shell-backtick-execution","reason":"Lines 455 through 460 are a fenced numbered workflow for scheduled tasks. The prose does not invoke a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:460:ruby-shell-backtick-execution","reason":"Line 460 is only a closing Markdown fence followed by a related skills heading. No external command exists.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:464:ruby-shell-backtick-execution","reason":"Line 464 uses inline Markdown backticks to format related skill names. It does not contain executable shell syntax.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:182:system-reconnaissance","reason":"Line 182 returns an order status and charge identifier from an example workflow. It performs no system discovery or reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:208:system-reconnaissance","reason":"Line 208 places a user identifier in an Inngest event payload. It does not inspect the host or collect system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:54:network-reconnaissance","reason":"Lines 54 and 55 list Express and Hono as supported frameworks. They contain no network scanning or reconnaissance instructions.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"af16eb196be7cb213ec048497842919705901b7318a771b8232d0afa54a2f91b","subject_tree_hash":"46ca0b3362615e042fc3a9e50e5f765554c987f0d7b918e8f70a81bae093dd8c","subject_plugin_path":"skills/sickn33/inngest","audit_payload_hash":"9b9acdf61ac82b937ef519efbf8689c4","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"af16eb196be7cb213ec048497842919705901b7318a771b8232d0afa54a2f91b","treeHash":"46ca0b3362615e042fc3a9e50e5f765554c987f0d7b918e8f70a81bae093dd8c","pluginPath":"skills/sickn33/inngest","auditPayloadHash":"9b9acdf61ac82b937ef519efbf8689c4"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-inngest/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}