{"data":{"skill":{"slug":"sickn33-microservices-patterns","name":"microservices-patterns","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/microservices-patterns","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"21029501-227a-497a-b967-a73c25fa029b","skill_id":"d61f4098-5094-4f48-9375-cf928ffa8715","version":5,"content_hash":"v3:81e05e636292629114b76cbb3922fbe57672fc02:b3f49ab405777254ba7c7d9dd95544deb8d77a5416202e92a5588ae97a096133:25afdc17781d7050c49526455d1e3b0e8b12857aaaf75a98ccf1194c78a4eed4:736b696c6c732f7369636b6e33332f6d6963726f73657276696365732d7061747465726e73:fccc951928633d5eb41384870013b670","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 11 static alerts are false positives. Network alerts identify illustrative internal service examples, while other alerts arise from business identifiers and Markdown formatting.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"resources/implementation-playbook.md","line_end":194,"line_start":194},{"file":"resources/implementation-playbook.md","line_end":183,"line_start":183},{"file":"resources/implementation-playbook.md","line_end":186,"line_start":186},{"file":"resources/implementation-playbook.md","line_end":187,"line_start":187},{"file":"resources/implementation-playbook.md","line_end":188,"line_start":188},{"file":"resources/implementation-playbook.md","line_end":275,"line_start":275}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":38,"line_start":38}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":652,"audit_model":"codex","audited_at":"2026-08-04T14:07:29.305+00:00","created_at":"2026-08-05T01:14:26.022296+00:00","static_findings":[{"id":"network:resources/implementation-playbook.md:194:http-client-library","file":"resources/implementation-playbook.md","pattern":"HTTP client library","snippet":"response = await self.http_client.request(","category":"network","line_end":194,"severity":"low","line_start":194},{"id":"network:resources/implementation-playbook.md:183:python-http-libraries","file":"resources/implementation-playbook.md","pattern":"Python HTTP libraries","snippet":"\"\"\"Central entry point for all client requests.\"\"\"","category":"network","line_end":183,"severity":"low","line_start":183},{"id":"network:resources/implementation-playbook.md:186:hardcoded-url","file":"resources/implementation-playbook.md","pattern":"Hardcoded URL","snippet":"self.order_service_url = \"http://order-service:8000\"","category":"network","line_end":186,"severity":"low","line_start":186},{"id":"network:resources/implementation-playbook.md:187:hardcoded-url","file":"resources/implementation-playbook.md","pattern":"Hardcoded URL","snippet":"self.payment_service_url = \"http://payment-service:8001\"","category":"network","line_end":187,"severity":"low","line_start":187},{"id":"network:resources/implementation-playbook.md:188:hardcoded-url","file":"resources/implementation-playbook.md","pattern":"Hardcoded URL","snippet":"self.inventory_service_url = \"http://inventory-service:8002\"","category":"network","line_end":188,"severity":"low","line_start":188},{"id":"network:resources/implementation-playbook.md:275:hardcoded-url","file":"resources/implementation-playbook.md","pattern":"Hardcoded URL","snippet":"payment_client = ServiceClient(\"http://payment-service:8001\")","category":"network","line_end":275,"severity":"low","line_start":275},{"id":"blocker:resources/implementation-playbook.md:133:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"customer=payment_request.customer_id","category":"blocker","line_end":134,"severity":"low","line_start":133},{"id":"blocker:resources/implementation-playbook.md:140:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"transaction_id=result.transaction_id","category":"blocker","line_end":141,"severity":"low","line_start":140},{"id":"blocker:resources/implementation-playbook.md:166:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"reservation_id=reservation.id","category":"blocker","line_end":167,"severity":"low","line_start":166},{"id":"blocker:resources/implementation-playbook.md:357:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"order_id = event_data[\"data\"][\"order_id\"]","category":"blocker","line_end":357,"severity":"low","line_start":357},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `resources/implementation-playbook.md` for detailed patterns and examples.","category":"external_commands","line_end":38,"severity":"medium","line_start":38}],"finding_verdicts":[{"id":"network:resources/implementation-playbook.md:194:http-client-library","reason":"This request is part of an illustrative API gateway example calling its configured order service. It does not contact an external destination or transmit secrets.","verdict":"false_positive","confidence":0.98},{"id":"network:resources/implementation-playbook.md:183:python-http-libraries","reason":"The flagged text is a class docstring describing an API gateway. It neither imports a library nor performs a network request.","verdict":"false_positive","confidence":1},{"id":"network:resources/implementation-playbook.md:186:hardcoded-url","reason":"The URL is an illustrative internal hostname for an order service in a documentation sample. It is not an external collection or exfiltration endpoint.","verdict":"false_positive","confidence":0.98},{"id":"network:resources/implementation-playbook.md:187:hardcoded-url","reason":"The URL is an illustrative internal hostname for a payment service in a documentation sample. No unauthorized network behavior is present.","verdict":"false_positive","confidence":0.98},{"id":"network:resources/implementation-playbook.md:188:hardcoded-url","reason":"The URL is an illustrative internal hostname for an inventory service in a documentation sample. It does not target an external system.","verdict":"false_positive","confidence":0.98},{"id":"network:resources/implementation-playbook.md:275:hardcoded-url","reason":"This internal payment service URL demonstrates client construction in a microservices example. It does not initiate execution or conceal a remote destination.","verdict":"false_positive","confidence":0.98},{"id":"blocker:resources/implementation-playbook.md:133:system-reconnaissance","reason":"The text maps a customer identifier into a payment request. It does not inspect the host, network, user, or runtime environment.","verdict":"false_positive","confidence":1},{"id":"blocker:resources/implementation-playbook.md:140:system-reconnaissance","reason":"The text copies a payment transaction identifier into an event. This is ordinary business data handling, not system reconnaissance.","verdict":"false_positive","confidence":1},{"id":"blocker:resources/implementation-playbook.md:166:system-reconnaissance","reason":"The text includes a reservation identifier in a domain event. It does not collect system or environment information.","verdict":"false_positive","confidence":1},{"id":"blocker:resources/implementation-playbook.md:357:system-reconnaissance","reason":"The text reads an order identifier from documented event data. It does not enumerate or probe any system resources.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"Backticks format a relative resource path in Markdown. They are not shell syntax in this context and cannot execute a command.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"81e05e636292629114b76cbb3922fbe57672fc02","subject_content_hash":"b3f49ab405777254ba7c7d9dd95544deb8d77a5416202e92a5588ae97a096133","subject_tree_hash":"25afdc17781d7050c49526455d1e3b0e8b12857aaaf75a98ccf1194c78a4eed4","subject_plugin_path":"skills/sickn33/microservices-patterns","audit_payload_hash":"fccc951928633d5eb41384870013b670","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"81e05e636292629114b76cbb3922fbe57672fc02","contentHash":"b3f49ab405777254ba7c7d9dd95544deb8d77a5416202e92a5588ae97a096133","treeHash":"25afdc17781d7050c49526455d1e3b0e8b12857aaaf75a98ccf1194c78a4eed4","pluginPath":"skills/sickn33/microservices-patterns","auditPayloadHash":"fccc951928633d5eb41384870013b670"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-microservices-patterns/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}