{"data":{"skill":{"slug":"supercent-io-git-submodule","name":"git-submodule","icon":"📦","repo":"https://github.com/supercent-io/skills-template/tree/main/.agent-skills/git-submodule/","status":"approved","author":"supercent-io","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"c79a332e-bdf9-489c-aa1a-34c211ffc8f7","skill_id":"263a70b2-2fcf-4829-80a1-229bc268da41","version":1,"content_hash":"ead597fcd68607153772524e11a866fc","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"This is a documentation skill containing Git submodule commands and examples. Static analysis flagged bash commands in markdown code blocks and Git URLs as security concerns, but these are all false positives. The skill contains no executable code, only documentation explaining Git submodule operations. All 82 detected patterns were evaluated: external_commands are markdown code fences, network patterns are example URLs in documentation, and filesystem patterns are standard shell navigation commands. No malicious intent or actual security risks found.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":464,"audit_model":"claude","audited_at":"2026-03-20T08:20:45.691+00:00","created_at":"2026-03-20T10:46:02.922315+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}