{"data":{"skill":{"slug":"softaworks-openapi-to-typescript","name":"openapi-to-typescript","icon":"📦","repo":"https://github.com/softaworks/agent-toolkit/tree/main/skills/openapi-to-typescript/","status":"approved","author":"softaworks","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"2863678d-29b6-4db6-8576-8c8f0fe235d5","skill_id":"193bbc6a-cf5d-4052-af07-5b951ce5d25c","version":5,"content_hash":"v3:f93e9bb0daca99badb6a7e574b97737155d57cb3:a27383fcaea896bed2f1c017158055b7ef8a8e5f81797c61947eea770c622a39:03c5cbcda337de3caf614bb739c7941593452bf2f637c03eb08f489eb92fa654:736b696c6c732f736f667461776f726b732f6f70656e6170692d746f2d74797065736372697074:fa9c6dea99843dafdb46709595d4d236","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 58 static findings were adjudicated as false positives. The external command alerts came from Markdown backticks, inline identifiers, JSON examples, and TypeScript examples rather than executable shell or Ruby code. The system reconnaissance alerts matched type-checking examples and OpenAPI validation text, and no prompt-injection or exfiltration intent was found.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":38,"line_start":34},{"file":"SKILL.md","line_end":48,"line_start":38},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":50,"line_start":50},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":52,"line_start":52},{"file":"SKILL.md","line_end":58,"line_start":58},{"file":"SKILL.md","line_end":59,"line_start":59},{"file":"SKILL.md","line_end":60,"line_start":60},{"file":"SKILL.md","line_end":61,"line_start":61},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":73,"line_start":67},{"file":"SKILL.md","line_end":76,"line_start":73},{"file":"SKILL.md","line_end":79,"line_start":76},{"file":"SKILL.md","line_end":82,"line_start":79},{"file":"SKILL.md","line_end":85,"line_start":82},{"file":"SKILL.md","line_end":88,"line_start":85},{"file":"SKILL.md","line_end":91,"line_start":88},{"file":"SKILL.md","line_end":94,"line_start":91},{"file":"SKILL.md","line_end":99,"line_start":94},{"file":"SKILL.md","line_end":105,"line_start":99},{"file":"SKILL.md","line_end":112,"line_start":105},{"file":"SKILL.md","line_end":116,"line_start":112},{"file":"SKILL.md","line_end":118,"line_start":116},{"file":"SKILL.md","line_end":132,"line_start":118},{"file":"SKILL.md","line_end":135,"line_start":132},{"file":"SKILL.md","line_end":135,"line_start":135},{"file":"SKILL.md","line_end":136,"line_start":136},{"file":"SKILL.md","line_end":142,"line_start":140},{"file":"SKILL.md","line_end":160,"line_start":142},{"file":"SKILL.md","line_end":163,"line_start":160},{"file":"SKILL.md","line_end":164,"line_start":163},{"file":"SKILL.md","line_end":170,"line_start":164},{"file":"SKILL.md","line_end":183,"line_start":170},{"file":"SKILL.md","line_end":186,"line_start":183},{"file":"SKILL.md","line_end":187,"line_start":186},{"file":"SKILL.md","line_end":188,"line_start":187},{"file":"SKILL.md","line_end":189,"line_start":188},{"file":"SKILL.md","line_end":190,"line_start":189},{"file":"SKILL.md","line_end":194,"line_start":190},{"file":"SKILL.md","line_end":211,"line_start":194},{"file":"SKILL.md","line_end":215,"line_start":211},{"file":"SKILL.md","line_end":216,"line_start":215},{"file":"SKILL.md","line_end":219,"line_start":216},{"file":"SKILL.md","line_end":223,"line_start":219},{"file":"SKILL.md","line_end":228,"line_start":223},{"file":"SKILL.md","line_end":261,"line_start":228},{"file":"SKILL.md","line_end":264,"line_start":261},{"file":"SKILL.md","line_end":335,"line_start":264},{"file":"SKILL.md","line_end":343,"line_start":335}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":645,"audit_model":"codex","audited_at":"2026-07-07T05:25:52.52+00:00","created_at":"2026-07-16T03:04:04.563528+00:00","static_findings":[{"id":"blocker:README.md:217:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"typeof (value as any).id === 'string' &&","category":"blocker","line_end":217,"severity":"low","line_start":217},{"id":"blocker:README.md:292:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"- Invalid OpenAPI version","category":"blocker","line_end":292,"severity":"low","line_start":292},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Extract schemas from `components/schemas`","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. Extract endpoints from `paths` (request/response types)","category":"external_commands","line_end":25,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"6. Ask where to save (default: `types/api.ts` in current directory)","category":"external_commands","line_end":27,"severity":"medium","line_start":27},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":38,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":48,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `string`    | `string`     |","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `number`    | `number`     |","category":"external_commands","line_end":49,"severity":"medium","line_start":49},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `integer`   | `number`     |","category":"external_commands","line_end":50,"severity":"medium","line_start":50},{"id":"external_commands:SKILL.md:51:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `boolean`   | `boolean`    |","category":"external_commands","line_end":51,"severity":"medium","line_start":51},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `null`      | `null`       |","category":"external_commands","line_end":52,"severity":"medium","line_start":52},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `uuid`        | `string` (comment UUID) |","category":"external_commands","line_end":58,"severity":"medium","line_start":58},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `date`        | `string` (comment date) |","category":"external_commands","line_end":59,"severity":"medium","line_start":59},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `date-time`   | `string` (comment ISO)  |","category":"external_commands","line_end":60,"severity":"medium","line_start":60},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `email`       | `string` (comment email)|","category":"external_commands","line_end":61,"severity":"medium","line_start":61},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `uri`         | `string` (comment URI)  |","category":"external_commands","line_end":62,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":73,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":76,"severity":"medium","line_start":73},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":79,"severity":"medium","line_start":76},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":82,"severity":"medium","line_start":79},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":85,"severity":"medium","line_start":82},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":88,"severity":"medium","line_start":85},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":91,"severity":"medium","line_start":88},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":94,"severity":"medium","line_start":91},{"id":"external_commands:SKILL.md:94:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":99,"severity":"medium","line_start":94},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":105,"severity":"medium","line_start":99},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":112,"severity":"medium","line_start":105},{"id":"external_commands:SKILL.md:112:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":116,"severity":"medium","line_start":112},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For each schema in `components/schemas`:","category":"external_commands","line_end":118,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":132,"severity":"medium","line_start":118},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":135,"severity":"medium","line_start":132},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Fields in `required[]` have no `?`","category":"external_commands","line_end":135,"severity":"medium","line_start":135},{"id":"external_commands:SKILL.md:136:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Fields outside `required[]` have `?`","category":"external_commands","line_end":136,"severity":"medium","line_start":136},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For each endpoint in `paths`:","category":"external_commands","line_end":142,"severity":"medium","line_start":140},{"id":"external_commands:SKILL.md:142:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":160,"severity":"medium","line_start":142},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":163,"severity":"medium","line_start":160},{"id":"external_commands:SKILL.md:163:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `{Method}{Path}Request` for params/body","category":"external_commands","line_end":164,"severity":"medium","line_start":163},{"id":"external_commands:SKILL.md:164:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `{Method}{Path}Response` for response","category":"external_commands","line_end":170,"severity":"medium","line_start":164},{"id":"external_commands:SKILL.md:170:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":183,"severity":"medium","line_start":170},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":186,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:186:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Check `typeof value === 'object' && value !== null`","category":"external_commands","line_end":187,"severity":"medium","line_start":186},{"id":"external_commands:SKILL.md:187:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- For each required field: check `'field' in value`","category":"external_commands","line_end":188,"severity":"medium","line_start":187},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- For primitive fields: check `typeof`","category":"external_commands","line_end":189,"severity":"medium","line_start":188},{"id":"external_commands:SKILL.md:189:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- For arrays: check `Array.isArray()`","category":"external_commands","line_end":190,"severity":"medium","line_start":189},{"id":"external_commands:SKILL.md:190:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- For enums: check `.includes()`","category":"external_commands","line_end":194,"severity":"medium","line_start":190},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":211,"severity":"medium","line_start":194},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":215,"severity":"medium","line_start":211},{"id":"external_commands:SKILL.md:215:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"When encountering `{\"$ref\": \"#/components/schemas/Product\"}`:","category":"external_commands","line_end":216,"severity":"medium","line_start":215},{"id":"external_commands:SKILL.md:216:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Extract the schema name (`Product`)","category":"external_commands","line_end":219,"severity":"medium","line_start":216},{"id":"external_commands:SKILL.md:219:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":223,"severity":"medium","line_start":219},{"id":"external_commands:SKILL.md:223:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":228,"severity":"medium","line_start":223},{"id":"external_commands:SKILL.md:228:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```json","category":"external_commands","line_end":261,"severity":"medium","line_start":228},{"id":"external_commands:SKILL.md:261:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":264,"severity":"medium","line_start":261},{"id":"external_commands:SKILL.md:264:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```typescript","category":"external_commands","line_end":335,"severity":"medium","line_start":264},{"id":"external_commands:SKILL.md:335:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":343,"severity":"medium","line_start":335},{"id":"blocker:SKILL.md:176:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"typeof (value as any).id === 'string' &&","category":"blocker","line_end":176,"severity":"low","line_start":176},{"id":"blocker:SKILL.md:307:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"typeof (value as any).id === 'string' &&","category":"blocker","line_end":307,"severity":"low","line_start":307}],"finding_verdicts":[{"id":"blocker:README.md:217:system-reconnaissance","reason":"This line is inside a TypeScript type guard example that checks a field type. It performs no host or system reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:README.md:292:system-reconnaissance","reason":"This is documentation about validating the OpenAPI document version. It does not query host details or perform system reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:51:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:73:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:94:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:112:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:136:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:142:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:163:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:164:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:170:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:186:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:187:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:189:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:190:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:215:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:216:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code for OpenAPI or TypeScript identifiers. It contains no executable shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:219:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:223:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:228:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:261:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:264:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:335:ruby-shell-backtick-execution","reason":"The flagged text is a Markdown code fence around JSON or TypeScript examples. It is documentation, not Ruby or shell backtick execution.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:176:system-reconnaissance","reason":"This line is inside a TypeScript type guard example that checks a field type. It performs no host or system reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:SKILL.md:307:system-reconnaissance","reason":"This line is inside a TypeScript type guard example that checks a field type. It performs no host or system reconnaissance.","verdict":"false_positive","confidence":0.97}],"semantic_findings":[],"subject_marketplace_commit_sha":"f93e9bb0daca99badb6a7e574b97737155d57cb3","subject_content_hash":"a27383fcaea896bed2f1c017158055b7ef8a8e5f81797c61947eea770c622a39","subject_tree_hash":"03c5cbcda337de3caf614bb739c7941593452bf2f637c03eb08f489eb92fa654","subject_plugin_path":"skills/softaworks/openapi-to-typescript","audit_payload_hash":"fa9c6dea99843dafdb46709595d4d236","confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":"f93e9bb0daca99badb6a7e574b97737155d57cb3","contentHash":"a27383fcaea896bed2f1c017158055b7ef8a8e5f81797c61947eea770c622a39","treeHash":"03c5cbcda337de3caf614bb739c7941593452bf2f637c03eb08f489eb92fa654","pluginPath":"skills/softaworks/openapi-to-typescript","auditPayloadHash":"fa9c6dea99843dafdb46709595d4d236"},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":true}}