{"data":{"skill":{"slug":"sickn33-mobile-developer","name":"mobile-developer","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/mobile-developer","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"f2673d9c-6b6a-4056-b16a-115ed4679455","skill_id":"8aad8c08-2494-4e3f-89f3-eea6bf6a2c2b","version":5,"content_hash":"v3:81e05e636292629114b76cbb3922fbe57672fc02:99b015328ab94f446c6928c4101d540867722f4ee223003668b32a81014039ec:98f4b423671f44499f87e63b5b3796587917a98c5f65186ca0018aa2cb33f82d:736b696c6c732f7369636b6e33332f6d6f62696c652d646576656c6f706572:79814a38f9073987d069777d35e47e0c","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All four static findings are false positives caused by Markdown formatting or ordinary mobile-development terminology. No command execution, reconnaissance behavior, prompt injection, or malicious intent is present.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":24,"line_start":24}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":209,"audit_model":"codex","audited_at":"2026-08-04T14:38:52.237+00:00","created_at":"2026-08-05T01:15:58.433039+00:00","static_findings":[{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If detailed examples are required, open `resources/implementation-playbook.md`.","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"blocker:SKILL.md:29:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Expert mobile developer specializing in React Native, Flutter, and native iOS/Android development. M","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"blocker:SKILL.md:177:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Android Jetpack libraries and Kotlin evolution","category":"blocker","line_end":177,"severity":"low","line_start":177},{"id":"blocker:SKILL.md:68:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- Camera, sensors, and hardware API access","category":"blocker","line_end":69,"severity":"low","line_start":68}],"finding_verdicts":[{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"Line 24 uses Markdown backticks to format a documentation path. It does not contain Ruby syntax, a shell command, or an execution instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:29:system-reconnaissance","reason":"Line 29 is a prose description of expertise in iOS and Android development. It contains no instruction or mechanism for system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:177:system-reconnaissance","reason":"Line 177 lists Android Jetpack and Kotlin as knowledge areas. It does not inspect a device, host, operating system, or local environment.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:68:network-reconnaissance","reason":"Lines 68-69 describe mobile hardware APIs and background lifecycle work. They contain no network discovery, scanning, probing, or external request instructions.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"81e05e636292629114b76cbb3922fbe57672fc02","subject_content_hash":"99b015328ab94f446c6928c4101d540867722f4ee223003668b32a81014039ec","subject_tree_hash":"98f4b423671f44499f87e63b5b3796587917a98c5f65186ca0018aa2cb33f82d","subject_plugin_path":"skills/sickn33/mobile-developer","audit_payload_hash":"79814a38f9073987d069777d35e47e0c","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"81e05e636292629114b76cbb3922fbe57672fc02","contentHash":"99b015328ab94f446c6928c4101d540867722f4ee223003668b32a81014039ec","treeHash":"98f4b423671f44499f87e63b5b3796587917a98c5f65186ca0018aa2cb33f82d","pluginPath":"skills/sickn33/mobile-developer","auditPayloadHash":"79814a38f9073987d069777d35e47e0c"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-mobile-developer/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}