{"data":{"skill":{"slug":"softaworks-naming-analyzer","name":"naming-analyzer","icon":"📦","repo":"https://github.com/softaworks/agent-toolkit/tree/main/skills/naming-analyzer/","status":"approved","author":"softaworks","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"7a79043a-937f-479d-97d7-5a1149fd8da0","skill_id":"f1736289-8e2e-4a86-b9e6-48b7dd2c2cb7","version":3,"content_hash":"v2:f93e9bb0daca99badb6a7e574b97737155d57cb3:aeae42fffe310e57ab0781c3ad2c058c0dda1144b57a873b6411c9c6a8cf9440:096a8a276431aad11d6e9c247adae0a2dfca061a5cf4f4367663d67a2c2644ec:5b8980e8b8940febb784d53ce775e725","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Reviewed all 82 static findings against SKILL.md and README.md. The reported command execution, environment access, sensitive file access, and reconnaissance signals are false positives caused by Markdown examples and inline code. No prompt injection, data exfiltration intent, or malicious behavior was found in the reviewed files.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":45,"line_start":45},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":47,"line_start":47},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":52,"line_start":52},{"file":"SKILL.md","line_end":53,"line_start":53},{"file":"SKILL.md","line_end":54,"line_start":54},{"file":"SKILL.md","line_end":55,"line_start":55},{"file":"SKILL.md","line_end":56,"line_start":56},{"file":"SKILL.md","line_end":59,"line_start":59},{"file":"SKILL.md","line_end":60,"line_start":60},{"file":"SKILL.md","line_end":61,"line_start":61},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":65,"line_start":65},{"file":"SKILL.md","line_end":66,"line_start":66},{"file":"SKILL.md","line_end":67,"line_start":67},{"file":"SKILL.md","line_end":82,"line_start":72},{"file":"SKILL.md","line_end":85,"line_start":82},{"file":"SKILL.md","line_end":101,"line_start":85},{"file":"SKILL.md","line_end":104,"line_start":101},{"file":"SKILL.md","line_end":116,"line_start":104},{"file":"SKILL.md","line_end":119,"line_start":116},{"file":"SKILL.md","line_end":130,"line_start":119},{"file":"SKILL.md","line_end":133,"line_start":130},{"file":"SKILL.md","line_end":144,"line_start":133},{"file":"SKILL.md","line_end":148,"line_start":144},{"file":"SKILL.md","line_end":154,"line_start":148},{"file":"SKILL.md","line_end":158,"line_start":154},{"file":"SKILL.md","line_end":173,"line_start":158},{"file":"SKILL.md","line_end":176,"line_start":173},{"file":"SKILL.md","line_end":180,"line_start":176},{"file":"SKILL.md","line_end":183,"line_start":180},{"file":"SKILL.md","line_end":191,"line_start":183},{"file":"SKILL.md","line_end":194,"line_start":191},{"file":"SKILL.md","line_end":198,"line_start":194},{"file":"SKILL.md","line_end":201,"line_start":198},{"file":"SKILL.md","line_end":205,"line_start":201},{"file":"SKILL.md","line_end":208,"line_start":205},{"file":"SKILL.md","line_end":212,"line_start":208},{"file":"SKILL.md","line_end":215,"line_start":212},{"file":"SKILL.md","line_end":223,"line_start":215},{"file":"SKILL.md","line_end":226,"line_start":223},{"file":"SKILL.md","line_end":226,"line_start":226},{"file":"SKILL.md","line_end":233,"line_start":230},{"file":"SKILL.md","line_end":242,"line_start":233},{"file":"SKILL.md","line_end":242,"line_start":242},{"file":"SKILL.md","line_end":244,"line_start":244},{"file":"SKILL.md","line_end":245,"line_start":245},{"file":"SKILL.md","line_end":246,"line_start":246},{"file":"SKILL.md","line_end":247,"line_start":247},{"file":"SKILL.md","line_end":259,"line_start":259},{"file":"SKILL.md","line_end":260,"line_start":260},{"file":"SKILL.md","line_end":261,"line_start":261},{"file":"SKILL.md","line_end":264,"line_start":264},{"file":"SKILL.md","line_end":265,"line_start":265},{"file":"SKILL.md","line_end":266,"line_start":266},{"file":"SKILL.md","line_end":267,"line_start":267},{"file":"SKILL.md","line_end":270,"line_start":270},{"file":"SKILL.md","line_end":271,"line_start":271},{"file":"SKILL.md","line_end":272,"line_start":272},{"file":"SKILL.md","line_end":279,"line_start":279},{"file":"SKILL.md","line_end":280,"line_start":280},{"file":"SKILL.md","line_end":283,"line_start":283},{"file":"SKILL.md","line_end":284,"line_start":284},{"file":"SKILL.md","line_end":287,"line_start":287},{"file":"SKILL.md","line_end":288,"line_start":288},{"file":"SKILL.md","line_end":291,"line_start":291},{"file":"SKILL.md","line_end":292,"line_start":292},{"file":"SKILL.md","line_end":295,"line_start":295},{"file":"SKILL.md","line_end":296,"line_start":296},{"file":"SKILL.md","line_end":332,"line_start":328},{"file":"SKILL.md","line_end":342,"line_start":332},{"file":"SKILL.md","line_end":347,"line_start":342},{"file":"SKILL.md","line_end":347,"line_start":347},{"file":"SKILL.md","line_end":348,"line_start":348}]},{"factor":"env_access","evidence":[{"file":"SKILL.md","line_end":115,"line_start":115},{"file":"SKILL.md","line_end":115,"line_start":115}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":573,"audit_model":"codex","audited_at":"2026-07-07T05:22:44.936+00:00","created_at":"2026-07-07T06:24:36.230167+00:00","static_findings":[{"id":"blocker:README.md:186:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"- **Use vague names** - avoid `data`, `info`, `temp`, `x`, `result`","category":"blocker","line_end":186,"severity":"low","line_start":186},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Variables/functions: `camelCase`","category":"external_commands","line_end":45,"severity":"medium","line_start":45},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Classes/interfaces: `PascalCase`","category":"external_commands","line_end":46,"severity":"medium","line_start":46},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Constants: `UPPER_SNAKE_CASE`","category":"external_commands","line_end":47,"severity":"medium","line_start":47},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Private fields: `_prefixUnderscore` or `#privateField`","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Boolean: `is`, `has`, `can`, `should` prefixes","category":"external_commands","line_end":49,"severity":"medium","line_start":49},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Variables/functions: `snake_case`","category":"external_commands","line_end":52,"severity":"medium","line_start":52},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Classes: `PascalCase`","category":"external_commands","line_end":53,"severity":"medium","line_start":53},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Constants: `UPPER_SNAKE_CASE`","category":"external_commands","line_end":54,"severity":"medium","line_start":54},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Private: `_prefix_underscore`","category":"external_commands","line_end":55,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Boolean: `is_`, `has_`, `can_` prefixes","category":"external_commands","line_end":56,"severity":"medium","line_start":56},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Variables/methods: `camelCase`","category":"external_commands","line_end":59,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Classes/interfaces: `PascalCase`","category":"external_commands","line_end":60,"severity":"medium","line_start":60},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Constants: `UPPER_SNAKE_CASE`","category":"external_commands","line_end":61,"severity":"medium","line_start":61},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Packages: `lowercase`","category":"external_commands","line_end":62,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Exported: `PascalCase`","category":"external_commands","line_end":65,"severity":"medium","line_start":65},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Unexported: `camelCase`","category":"external_commands","line_end":66,"severity":"medium","line_start":66},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Acronyms: All caps (`HTTPServer`, not `HttpServer`)","category":"external_commands","line_end":67,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":82,"severity":"medium","line_start":72},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":85,"severity":"medium","line_start":82},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":101,"severity":"medium","line_start":85},{"id":"external_commands:SKILL.md:101:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":104,"severity":"medium","line_start":101},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":116,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":119,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":130,"severity":"medium","line_start":119},{"id":"external_commands:SKILL.md:130:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":133,"severity":"medium","line_start":130},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":144,"severity":"medium","line_start":133},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":148,"severity":"medium","line_start":144},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":154,"severity":"medium","line_start":148},{"id":"external_commands:SKILL.md:154:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":158,"severity":"medium","line_start":154},{"id":"external_commands:SKILL.md:158:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":173,"severity":"medium","line_start":158},{"id":"external_commands:SKILL.md:173:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `getUser(id)`","category":"external_commands","line_end":176,"severity":"medium","line_start":173},{"id":"external_commands:SKILL.md:176:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `fetchAndUpdateUserLogin(id)`","category":"external_commands","line_end":180,"severity":"medium","line_start":176},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `validate(x)`","category":"external_commands","line_end":183,"severity":"medium","line_start":180},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `validateEmail(emailAddress)`","category":"external_commands","line_end":191,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `const d = new Date()`","category":"external_commands","line_end":194,"severity":"medium","line_start":191},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `const currentDate = new Date()`","category":"external_commands","line_end":198,"severity":"medium","line_start":194},{"id":"external_commands:SKILL.md:198:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `function proc(data) {}`","category":"external_commands","line_end":201,"severity":"medium","line_start":198},{"id":"external_commands:SKILL.md:201:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `function processApiResponse(data) {}`","category":"external_commands","line_end":205,"severity":"medium","line_start":201},{"id":"external_commands:SKILL.md:205:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `user.active`","category":"external_commands","line_end":208,"severity":"medium","line_start":205},{"id":"external_commands:SKILL.md:208:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `user.isActive`","category":"external_commands","line_end":212,"severity":"medium","line_start":208},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `const MAX = 100`","category":"external_commands","line_end":215,"severity":"medium","line_start":212},{"id":"external_commands:SKILL.md:215:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `const MAX_RETRY_ATTEMPTS = 100`","category":"external_commands","line_end":223,"severity":"medium","line_start":215},{"id":"external_commands:SKILL.md:223:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `const API_url = '...'`","category":"external_commands","line_end":226,"severity":"medium","line_start":223},{"id":"external_commands:SKILL.md:226:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `const API_URL = '...'` or `const apiUrl = '...'`","category":"external_commands","line_end":226,"severity":"medium","line_start":226},{"id":"external_commands:SKILL.md:230:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Current**: `function strToNum(s) {}`","category":"external_commands","line_end":233,"severity":"medium","line_start":230},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Suggestion**: `function stringToNumber(value) {}`","category":"external_commands","line_end":242,"severity":"medium","line_start":233},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Issue**: Mixed use of `is`, `has`, `can` vs no prefix","category":"external_commands","line_end":242,"severity":"medium","line_start":242},{"id":"external_commands:SKILL.md:244:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Use `is` for state: `isActive`, `isVisible`","category":"external_commands","line_end":244,"severity":"medium","line_start":244},{"id":"external_commands:SKILL.md:245:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Use `has` for possession: `hasPermission`, `hasError`","category":"external_commands","line_end":245,"severity":"medium","line_start":245},{"id":"external_commands:SKILL.md:246:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Use `can` for ability: `canEdit`, `canDelete`","category":"external_commands","line_end":246,"severity":"medium","line_start":246},{"id":"external_commands:SKILL.md:247:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Use `should` for decisions: `shouldRender`, `shouldValidate`","category":"external_commands","line_end":247,"severity":"medium","line_start":247},{"id":"external_commands:SKILL.md:259:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `getUser` → `fetchAndUpdateUserLogin` (src/services/UserService.js:45)","category":"external_commands","line_end":259,"severity":"medium","line_start":259},{"id":"external_commands:SKILL.md:260:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. `validate` → `validateEmail` (src/utils/helpers.js:23)","category":"external_commands","line_end":260,"severity":"medium","line_start":260},{"id":"external_commands:SKILL.md:261:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. `process` → `processPaymentTransaction` (src/payment/processor.js:67)","category":"external_commands","line_end":261,"severity":"medium","line_start":261},{"id":"external_commands:SKILL.md:264:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `d` → `currentDate` (7 locations)","category":"external_commands","line_end":264,"severity":"medium","line_start":264},{"id":"external_commands:SKILL.md:265:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. `temp` → `previousValue` (4 locations)","category":"external_commands","line_end":265,"severity":"medium","line_start":265},{"id":"external_commands:SKILL.md:266:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. `data` → `apiResponse` or more specific (12 locations)","category":"external_commands","line_end":266,"severity":"medium","line_start":266},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. `arr` → `items`, `values`, or more specific (8 locations)","category":"external_commands","line_end":267,"severity":"medium","line_start":267},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `active` → `isActive` (12 locations)","category":"external_commands","line_end":270,"severity":"medium","line_start":270},{"id":"external_commands:SKILL.md:271:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. `error` → `hasError` (6 locations)","category":"external_commands","line_end":271,"severity":"medium","line_start":271},{"id":"external_commands:SKILL.md:272:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. `API_url` → `API_URL` (3 locations)","category":"external_commands","line_end":272,"severity":"medium","line_start":272},{"id":"external_commands:SKILL.md:279:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Verbs: `get`, `set`, `create`, `update`, `delete`, `fetch`, `calculate`, `validate`","category":"external_commands","line_end":279,"severity":"medium","line_start":279},{"id":"external_commands:SKILL.md:280:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Clear action: `sendEmail()`, `parseJSON()`, `formatCurrency()`","category":"external_commands","line_end":280,"severity":"medium","line_start":280},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Nouns: `UserService`, `PaymentProcessor`, `EmailValidator`","category":"external_commands","line_end":283,"severity":"medium","line_start":283},{"id":"external_commands:SKILL.md:284:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Avoid generic: Don't use `Manager`, `Helper`, `Utility` unless necessary","category":"external_commands","line_end":284,"severity":"medium","line_start":284},{"id":"external_commands:SKILL.md:287:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Nouns or noun phrases: `user`, `emailAddress`, `totalAmount`","category":"external_commands","line_end":287,"severity":"medium","line_start":287},{"id":"external_commands:SKILL.md:288:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Descriptive: `userList` not `list`, `activeUsers` not `users2`","category":"external_commands","line_end":288,"severity":"medium","line_start":288},{"id":"external_commands:SKILL.md:291:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- All caps with underscores: `MAX_RETRY_ATTEMPTS`, `DEFAULT_TIMEOUT`","category":"external_commands","line_end":291,"severity":"medium","line_start":291},{"id":"external_commands:SKILL.md:292:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Include units: `CACHE_DURATION_MS`, `MAX_FILE_SIZE_MB`","category":"external_commands","line_end":292,"severity":"medium","line_start":292},{"id":"external_commands:SKILL.md:295:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Question form: `isValid`, `hasPermission`, `canEdit`","category":"external_commands","line_end":295,"severity":"medium","line_start":295},{"id":"external_commands:SKILL.md:296:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Affirmative: `isEnabled` not `isDisabled` (prefer positive)","category":"external_commands","line_end":296,"severity":"medium","line_start":296},{"id":"external_commands:SKILL.md:328:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":332,"severity":"medium","line_start":328},{"id":"external_commands:SKILL.md:332:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":342,"severity":"medium","line_start":332},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":347,"severity":"medium","line_start":342},{"id":"external_commands:SKILL.md:347:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Context matters (loop counters can be `i`, `j`)","category":"external_commands","line_end":347,"severity":"medium","line_start":347},{"id":"external_commands:SKILL.md:348:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Well-known abbreviations are okay (`html`, `api`, `url`, `id`)","category":"external_commands","line_end":348,"severity":"medium","line_start":348},{"id":"env_access:SKILL.md:115:environment-variable-access-dot-notation","file":"SKILL.md","pattern":"Environment variable access (dot notation)","snippet":"const apiUrl = process.env.API_URL;","category":"env_access","line_end":115,"severity":"low","line_start":115},{"id":"env_access:SKILL.md:115:environment-variable-object","file":"SKILL.md","pattern":"Environment variable object","snippet":"const apiUrl = process.env.API_URL;","category":"env_access","line_end":115,"severity":"low","line_start":115},{"id":"sensitive:SKILL.md:115:environment-file-access","file":"SKILL.md","pattern":"Environment file access","snippet":"const apiUrl = process.env.API_URL;","category":"sensitive","line_end":115,"severity":"high","line_start":115},{"id":"blocker:SKILL.md:126:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"const isUserValid = checkUser();","category":"blocker","line_end":126,"severity":"low","line_start":126},{"id":"blocker:SKILL.md:284:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Avoid generic: Don't use `Manager`, `Helper`, `Utility` unless necessary","category":"blocker","line_end":284,"severity":"low","line_start":284}],"finding_verdicts":[{"id":"blocker:README.md:186:system-reconnaissance","reason":"The line is naming guidance in Markdown documentation, not system reconnaissance. It lists vague names to avoid and does not inspect the host or gather system data.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:101:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:130:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:154:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:158:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:173:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:176:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:198:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:201:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:205:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:208:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:215:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:223:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:226:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:230:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:233:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:244:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:245:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:246:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:247:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:259:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:260:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:261:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:264:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:265:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:266:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:271:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:272:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:279:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:280:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:284:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:287:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:288:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:291:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:292:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:295:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:296:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:328:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:332:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:347:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:348:ruby-shell-backtick-execution","reason":"The backticks are Markdown inline code or fenced example text in SKILL.md, not Ruby shell execution. There is no executable command path or user-controlled command construction.","verdict":"false_positive","confidence":0.97},{"id":"env_access:SKILL.md:115:environment-variable-access-dot-notation","reason":"The process.env reference is inside a JavaScript example about acceptable abbreviations. The skill contains no executable runtime code that reads or exfiltrates environment variables.","verdict":"false_positive","confidence":0.98},{"id":"env_access:SKILL.md:115:environment-variable-object","reason":"The process.env reference is inside a JavaScript example about acceptable abbreviations. The skill contains no executable runtime code that reads or exfiltrates environment variables.","verdict":"false_positive","confidence":0.98},{"id":"sensitive:SKILL.md:115:environment-file-access","reason":"The process.env reference is inside a JavaScript example about acceptable abbreviations. The skill contains no executable runtime code that reads or exfiltrates environment variables.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:126:system-reconnaissance","reason":"The line is naming guidance in Markdown documentation, not system reconnaissance. It lists vague names to avoid and does not inspect the host or gather system data.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:284:system-reconnaissance","reason":"The line is naming guidance in Markdown documentation, not system reconnaissance. It lists vague names to avoid and does not inspect the host or gather system data.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}