{"data":{"skill":{"slug":"sickn33-os-scripting","name":"os-scripting","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/os-scripting","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"a513a98e-51ec-49b8-a429-7d096d9487a6","skill_id":"f729874e-70cf-4514-a87c-d8279edc04fb","version":6,"content_hash":"v3:81e05e636292629114b76cbb3922fbe57672fc02:2a881e652285c30129fa72319a7289ce21dcf7ec708de237ca66f0f5fe48fc7a:febcba5c670241d3bb93868ffd8ac9a47441a972260505c8737f4941fc0bf6a9:736b696c6c732f7369636b6e33332f6f732d736372697074696e67:1ba071b39cb83b1dc658de17ab4981d7","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 88 static findings are false positives caused by Markdown formatting or transparent operating system administration examples. No prompt injection, hidden execution, credential access, data exfiltration, or malicious persistence intent was found.","remediation":[{"issue":"Privileged and state-changing examples lack explicit confirmation boundaries.","severity":"medium","suggestion":"Require user approval before sudo, crontab edits, service restarts, or writes outside the workspace. Include validation and rollback steps."},{"issue":"Root-wide disk searches can be expensive and reveal sensitive path names.","severity":"low","suggestion":"Scope searches to approved directories, set resource limits, and avoid displaying inaccessible or sensitive paths."},{"issue":"Network examples use ambiguous placeholders with unencrypted HTTP.","severity":"low","suggestion":"Use reserved example domains, prefer HTTPS, and require the user to confirm each destination before testing."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":31,"line_start":31},{"file":"SKILL.md","line_end":32,"line_start":32},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":64,"line_start":43},{"file":"SKILL.md","line_end":67,"line_start":64},{"file":"SKILL.md","line_end":69,"line_start":67},{"file":"SKILL.md","line_end":74,"line_start":69},{"file":"SKILL.md","line_end":75,"line_start":74},{"file":"SKILL.md","line_end":76,"line_start":75},{"file":"SKILL.md","line_end":86,"line_start":76},{"file":"SKILL.md","line_end":99,"line_start":86},{"file":"SKILL.md","line_end":102,"line_start":99},{"file":"SKILL.md","line_end":104,"line_start":102},{"file":"SKILL.md","line_end":109,"line_start":104},{"file":"SKILL.md","line_end":110,"line_start":109},{"file":"SKILL.md","line_end":111,"line_start":110},{"file":"SKILL.md","line_end":121,"line_start":111},{"file":"SKILL.md","line_end":139,"line_start":121},{"file":"SKILL.md","line_end":142,"line_start":139},{"file":"SKILL.md","line_end":144,"line_start":142},{"file":"SKILL.md","line_end":149,"line_start":144},{"file":"SKILL.md","line_end":150,"line_start":149},{"file":"SKILL.md","line_end":151,"line_start":150},{"file":"SKILL.md","line_end":161,"line_start":151},{"file":"SKILL.md","line_end":228,"line_start":161},{"file":"SKILL.md","line_end":231,"line_start":228},{"file":"SKILL.md","line_end":233,"line_start":231},{"file":"SKILL.md","line_end":235,"line_start":233},{"file":"SKILL.md","line_end":237,"line_start":235},{"file":"SKILL.md","line_end":242,"line_start":237},{"file":"SKILL.md","line_end":243,"line_start":242},{"file":"SKILL.md","line_end":253,"line_start":243},{"file":"SKILL.md","line_end":271,"line_start":253},{"file":"SKILL.md","line_end":274,"line_start":271},{"file":"SKILL.md","line_end":276,"line_start":274},{"file":"SKILL.md","line_end":281,"line_start":276},{"file":"SKILL.md","line_end":282,"line_start":281},{"file":"SKILL.md","line_end":283,"line_start":282},{"file":"SKILL.md","line_end":294,"line_start":283},{"file":"SKILL.md","line_end":316,"line_start":294},{"file":"SKILL.md","line_end":319,"line_start":316},{"file":"SKILL.md","line_end":321,"line_start":319},{"file":"SKILL.md","line_end":323,"line_start":321},{"file":"SKILL.md","line_end":325,"line_start":323},{"file":"SKILL.md","line_end":330,"line_start":325},{"file":"SKILL.md","line_end":331,"line_start":330},{"file":"SKILL.md","line_end":332,"line_start":331},{"file":"SKILL.md","line_end":342,"line_start":332},{"file":"SKILL.md","line_end":354,"line_start":342},{"file":"SKILL.md","line_end":357,"line_start":354}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":303,"line_start":303},{"file":"SKILL.md","line_end":403,"line_start":403}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":388,"line_start":388},{"file":"SKILL.md","line_end":394,"line_start":394},{"file":"SKILL.md","line_end":395,"line_start":395}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":434,"audit_model":"codex","audited_at":"2026-08-04T16:56:32.309+00:00","created_at":"2026-08-05T01:54:45.462426+00:00","static_findings":[{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bash-linux` - Linux bash patterns","category":"external_commands","line_end":31,"severity":"medium","line_start":31},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bash-pro` - Professional bash scripting","category":"external_commands","line_end":32,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bash-defensive-patterns` - Defensive scripting","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":64,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":67,"severity":"medium","line_start":64},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":69,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":74,"severity":"medium","line_start":69},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bash-defensive-patterns` - Defensive scripting","category":"external_commands","line_end":75,"severity":"medium","line_start":74},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `shellcheck-configuration` - ShellCheck linting","category":"external_commands","line_end":76,"severity":"medium","line_start":75},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bats-testing-patterns` - Bats testing","category":"external_commands","line_end":86,"severity":"medium","line_start":76},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":99,"severity":"medium","line_start":86},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":102,"severity":"medium","line_start":99},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":104,"severity":"medium","line_start":102},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":109,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:109:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `systematic-debugging` - Systematic debugging","category":"external_commands","line_end":110,"severity":"medium","line_start":109},{"id":"external_commands:SKILL.md:110:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `debugger` - Debugging specialist","category":"external_commands","line_end":111,"severity":"medium","line_start":110},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `error-detective` - Error pattern detection","category":"external_commands","line_end":121,"severity":"medium","line_start":111},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":139,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:139:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":142,"severity":"medium","line_start":139},{"id":"external_commands:SKILL.md:142:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":144,"severity":"medium","line_start":142},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":149,"severity":"medium","line_start":144},{"id":"external_commands:SKILL.md:149:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bash-pro` - Professional scripting","category":"external_commands","line_end":150,"severity":"medium","line_start":149},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bash-defensive-patterns` - Defensive patterns","category":"external_commands","line_end":151,"severity":"medium","line_start":150},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `linux-shell-scripting` - Shell scripting","category":"external_commands","line_end":161,"severity":"medium","line_start":151},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":228,"severity":"medium","line_start":161},{"id":"external_commands:SKILL.md:228:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":231,"severity":"medium","line_start":228},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":233,"severity":"medium","line_start":231},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":235,"severity":"medium","line_start":233},{"id":"external_commands:SKILL.md:235:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":237,"severity":"medium","line_start":235},{"id":"external_commands:SKILL.md:237:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":242,"severity":"medium","line_start":237},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `bats-testing-patterns` - Bats testing framework","category":"external_commands","line_end":243,"severity":"medium","line_start":242},{"id":"external_commands:SKILL.md:243:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `test-automator` - Test automation","category":"external_commands","line_end":253,"severity":"medium","line_start":243},{"id":"external_commands:SKILL.md:253:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":271,"severity":"medium","line_start":253},{"id":"external_commands:SKILL.md:271:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":274,"severity":"medium","line_start":271},{"id":"external_commands:SKILL.md:274:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":276,"severity":"medium","line_start":274},{"id":"external_commands:SKILL.md:276:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":281,"severity":"medium","line_start":276},{"id":"external_commands:SKILL.md:281:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `devops-troubleshooter` - DevOps troubleshooting","category":"external_commands","line_end":282,"severity":"medium","line_start":281},{"id":"external_commands:SKILL.md:282:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `incident-responder` - Incident response","category":"external_commands","line_end":283,"severity":"medium","line_start":282},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `server-management` - Server management","category":"external_commands","line_end":294,"severity":"medium","line_start":283},{"id":"external_commands:SKILL.md:294:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":316,"severity":"medium","line_start":294},{"id":"external_commands:SKILL.md:316:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":319,"severity":"medium","line_start":316},{"id":"external_commands:SKILL.md:319:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":321,"severity":"medium","line_start":319},{"id":"external_commands:SKILL.md:321:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":323,"severity":"medium","line_start":321},{"id":"external_commands:SKILL.md:323:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":325,"severity":"medium","line_start":323},{"id":"external_commands:SKILL.md:325:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":330,"severity":"medium","line_start":325},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `workflow-automation` - Workflow automation","category":"external_commands","line_end":331,"severity":"medium","line_start":330},{"id":"external_commands:SKILL.md:331:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `cicd-automation-workflow-automate` - CI/CD automation","category":"external_commands","line_end":332,"severity":"medium","line_start":331},{"id":"external_commands:SKILL.md:332:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `linux-shell-scripting` - Shell scripting","category":"external_commands","line_end":342,"severity":"medium","line_start":332},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":354,"severity":"medium","line_start":342},{"id":"external_commands:SKILL.md:354:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":357,"severity":"medium","line_start":354},{"id":"external_commands:SKILL.md:357:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```ini","category":"external_commands","line_end":368,"severity":"medium","line_start":357},{"id":"external_commands:SKILL.md:368:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":371,"severity":"medium","line_start":368},{"id":"external_commands:SKILL.md:371:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":373,"severity":"medium","line_start":371},{"id":"external_commands:SKILL.md:373:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":378,"severity":"medium","line_start":373},{"id":"external_commands:SKILL.md:378:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":382,"severity":"medium","line_start":378},{"id":"external_commands:SKILL.md:382:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":385,"severity":"medium","line_start":382},{"id":"external_commands:SKILL.md:385:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":389,"severity":"medium","line_start":385},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":392,"severity":"medium","line_start":389},{"id":"external_commands:SKILL.md:392:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":396,"severity":"medium","line_start":392},{"id":"external_commands:SKILL.md:396:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":399,"severity":"medium","line_start":396},{"id":"external_commands:SKILL.md:399:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":404,"severity":"medium","line_start":399},{"id":"external_commands:SKILL.md:404:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":407,"severity":"medium","line_start":404},{"id":"external_commands:SKILL.md:407:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":411,"severity":"medium","line_start":407},{"id":"external_commands:SKILL.md:411:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":425,"severity":"medium","line_start":411},{"id":"external_commands:SKILL.md:425:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `development` - Software development","category":"external_commands","line_end":426,"severity":"medium","line_start":425},{"id":"external_commands:SKILL.md:426:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `cloud-devops` - Cloud and DevOps","category":"external_commands","line_end":427,"severity":"medium","line_start":426},{"id":"external_commands:SKILL.md:427:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `security-audit` - Security testing","category":"external_commands","line_end":428,"severity":"medium","line_start":427},{"id":"external_commands:SKILL.md:130:shell-command-substitution","file":"SKILL.md","pattern":"Shell command substitution","snippet":"echo \"[$(date '+%Y-%m-%d %H:%M:%S')] $*\" >> /var/log/script.log","category":"external_commands","line_end":130,"severity":"medium","line_start":130},{"id":"external_commands:SKILL.md:166:shell-command-substitution","file":"SKILL.md","pattern":"Shell command substitution","snippet":"readonly SCRIPT_NAME=$(basename \"$0\")","category":"external_commands","line_end":166,"severity":"medium","line_start":166},{"id":"external_commands:SKILL.md:167:shell-command-substitution","file":"SKILL.md","pattern":"Shell command substitution","snippet":"readonly SCRIPT_DIR=$(cd \"$(dirname \"$0\")\" && pwd)","category":"external_commands","line_end":167,"severity":"medium","line_start":167},{"id":"external_commands:SKILL.md:173:shell-command-substitution","file":"SKILL.md","pattern":"Shell command substitution","snippet":"echo \"[$(date '+%Y-%m-%d %H:%M:%S')] [$level] $*\" >&2","category":"external_commands","line_end":173,"severity":"medium","line_start":173},{"id":"external_commands:SKILL.md:121:template-literal-with-command-substitution","file":"SKILL.md","pattern":"Template literal with command substitution","snippet":"```bash","category":"external_commands","line_end":139,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:161:template-literal-with-command-substitution","file":"SKILL.md","pattern":"Template literal with command substitution","snippet":"```bash","category":"external_commands","line_end":228,"severity":"medium","line_start":161},{"id":"external_commands:SKILL.md:88:sudo-privilege-escalation","file":"SKILL.md","pattern":"sudo privilege escalation","snippet":"sudo apt install shellcheck  # Debian/Ubuntu","category":"external_commands","line_end":88,"severity":"high","line_start":88},{"id":"network:SKILL.md:303:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"curl -v http://host","category":"network","line_end":303,"severity":"low","line_start":303},{"id":"network:SKILL.md:403:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"curl -v http://target","category":"network","line_end":403,"severity":"low","line_start":403},{"id":"filesystem:SKILL.md:388:linux-proc-filesystem-access","file":"SKILL.md","pattern":"Linux /proc filesystem access","snippet":"cat /proc/meminfo","category":"filesystem","line_end":388,"severity":"high","line_start":388},{"id":"filesystem:SKILL.md:394:standard-device-file-access","file":"SKILL.md","pattern":"Standard device file access","snippet":"du -sh /* 2>/dev/null | sort -h","category":"filesystem","line_end":394,"severity":"low","line_start":394},{"id":"filesystem:SKILL.md:395:standard-device-file-access","file":"SKILL.md","pattern":"Standard device file access","snippet":"find / -type f -size +500M 2>/dev/null","category":"filesystem","line_end":395,"severity":"low","line_start":395},{"id":"blocker:SKILL.md:344:cron-job-modification","file":"SKILL.md","pattern":"Cron job modification","snippet":"crontab -e","category":"blocker","line_end":344,"severity":"high","line_start":344},{"id":"blocker:SKILL.md:45:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"uname -a","category":"blocker","line_end":45,"severity":"low","line_start":45},{"id":"blocker:SKILL.md:47:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"hostnamectl","category":"blocker","line_end":47,"severity":"low","line_start":47},{"id":"blocker:SKILL.md:61:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"netstat -tulpn","category":"blocker","line_end":61,"severity":"low","line_start":61},{"id":"blocker:SKILL.md:62:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"ss -tulpn","category":"blocker","line_end":62,"severity":"low","line_start":62},{"id":"blocker:SKILL.md:63:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"ip addr show","category":"blocker","line_end":63,"severity":"low","line_start":63},{"id":"blocker:SKILL.md:400:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"ip addr show","category":"blocker","line_end":400,"severity":"low","line_start":400},{"id":"blocker:SKILL.md:402:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"ss -tulpn","category":"blocker","line_end":402,"severity":"low","line_start":402},{"id":"obfuscation:multiple:1:heuristic-suspicious-combination-code-execution-","file":"multiple","pattern":"[HEURISTIC] SUSPICIOUS COMBINATION: Code execution + Persistence mechanism","snippet":"This combination is common in malware that maintains access","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"external_commands:SKILL.md:31:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:109:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:110:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:139:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:142:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:149:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:228:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:235:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:237:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:243:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:253:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:271:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:274:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:276:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:281:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:282:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:294:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:316:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:319:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:321:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:323:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:325:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:331:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:332:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:354:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:357:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:368:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:371:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:373:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:378:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:382:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:385:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:392:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:396:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:399:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:404:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:407:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:411:ruby-shell-backtick-execution","reason":"The matched backticks are Markdown code-fence delimiters around documentation. A delimiter cannot execute the enclosed commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:425:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:426:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:427:ruby-shell-backtick-execution","reason":"The backticks format a skill name as inline Markdown. They do not invoke Ruby or a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:130:shell-command-substitution","reason":"This documented Bash example substitutes the output of a fixed date command for a log timestamp. It does not construct a command from untrusted input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:166:shell-command-substitution","reason":"This documented Bash template uses basename on the quoted script path. The fixed command and quoted argument do not create command injection.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:167:shell-command-substitution","reason":"This documented Bash template derives a working directory with fixed commands and quoted path values. It does not execute user-supplied command text.","verdict":"false_positive","confidence":0.95},{"id":"external_commands:SKILL.md:173:shell-command-substitution","reason":"This documented Bash example substitutes the output of a fixed date command for a log timestamp. It does not construct a command from untrusted input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:121:template-literal-with-command-substitution","reason":"The match spans a fenced Bash example containing ordinary command substitution. It is not a JavaScript template literal or an executable skill payload.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:161:template-literal-with-command-substitution","reason":"The match spans a fenced Bash example containing ordinary command substitution. It is not a JavaScript template literal or an executable skill payload.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:88:sudo-privilege-escalation","reason":"The command is a visible Debian or Ubuntu package-install example for ShellCheck. It neither bypasses authorization nor runs automatically.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:303:hardcoded-url","reason":"The URL uses the placeholder host name shown in a network troubleshooting example. It does not identify an external service or transmit data.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:403:hardcoded-url","reason":"The URL uses the placeholder host name shown in a network troubleshooting example. It does not identify an external service or transmit data.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:SKILL.md:388:linux-proc-filesystem-access","reason":"The example reads the standard read-only /proc/meminfo diagnostics file. It does not access process secrets or modify kernel state.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:SKILL.md:394:standard-device-file-access","reason":"The command only redirects diagnostic errors to /dev/null during a documented disk scan. It does not read from or write to a sensitive device.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:SKILL.md:395:standard-device-file-access","reason":"The command only redirects diagnostic errors to /dev/null during a documented disk scan. It does not read from or write to a sensitive device.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:344:cron-job-modification","reason":"This is a transparent crontab editing example within the requested automation workflow. No concealed payload, unauthorized persistence, or automatic execution is present.","verdict":"false_positive","confidence":0.92},{"id":"blocker:SKILL.md:45:system-reconnaissance","reason":"The command collects basic operating system identity for environment assessment. This is expected diagnostic behavior and is not paired with collection or exfiltration.","verdict":"false_positive","confidence":0.97},{"id":"blocker:SKILL.md:47:system-reconnaissance","reason":"The command collects basic operating system identity for environment assessment. This is expected diagnostic behavior and is not paired with collection or exfiltration.","verdict":"false_positive","confidence":0.97},{"id":"blocker:SKILL.md:61:network-reconnaissance","reason":"The command displays local interfaces or listening sockets during troubleshooting. It does not scan remote hosts, evade controls, or send results elsewhere.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:62:network-reconnaissance","reason":"The command displays local interfaces or listening sockets during troubleshooting. It does not scan remote hosts, evade controls, or send results elsewhere.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:63:network-reconnaissance","reason":"The command displays local interfaces or listening sockets during troubleshooting. It does not scan remote hosts, evade controls, or send results elsewhere.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:400:network-reconnaissance","reason":"The command displays local interfaces or listening sockets during troubleshooting. It does not scan remote hosts, evade controls, or send results elsewhere.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:402:network-reconnaissance","reason":"The command displays local interfaces or listening sockets during troubleshooting. It does not scan remote hosts, evade controls, or send results elsewhere.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:multiple:1:heuristic-suspicious-combination-code-execution-","reason":"The combination comes from separate, transparent shell and cron documentation sections. The skill contains no executable payload, hidden persistence, or malicious maintenance mechanism.","verdict":"false_positive","confidence":0.96}],"semantic_findings":[],"subject_marketplace_commit_sha":"81e05e636292629114b76cbb3922fbe57672fc02","subject_content_hash":"2a881e652285c30129fa72319a7289ce21dcf7ec708de237ca66f0f5fe48fc7a","subject_tree_hash":"febcba5c670241d3bb93868ffd8ac9a47441a972260505c8737f4941fc0bf6a9","subject_plugin_path":"skills/sickn33/os-scripting","audit_payload_hash":"1ba071b39cb83b1dc658de17ab4981d7","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"81e05e636292629114b76cbb3922fbe57672fc02","contentHash":"2a881e652285c30129fa72319a7289ce21dcf7ec708de237ca66f0f5fe48fc7a","treeHash":"febcba5c670241d3bb93868ffd8ac9a47441a972260505c8737f4941fc0bf6a9","pluginPath":"skills/sickn33/os-scripting","auditPayloadHash":"1ba071b39cb83b1dc658de17ab4981d7"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-os-scripting/audits/6/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}