{"data":{"skill":{"slug":"tdw8147-crypto-unknown-delivery-reconciliation","name":"unknown-delivery-reconciliation","icon":"📦","repo":"https://github.com/tdw8147-crypto/skill-delivery-kit/tree/30eb4e17579f14a1ee3b7c7511ef744fbccdf9a9/unknown-delivery-reconciliation","status":"approved","author":"tdw8147-crypto","authorVersion":null,"skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"d15b39a4-e3fc-47cc-b2a5-a0297968bffc","skill_id":"93ceea1a-a3e9-488d-a33c-562e10c4d383","version":1,"content_hash":"v3:ed1772c6059847312cb8ef5d65867d5bb3b602c3:a3e76616153045b1577587a7393277a8b42e4dee675616a5aa082af4cfe852e4:d7ba479ae4f01721b14c0c9c4d62e511dc45f082e33b57b0f4f0fe3736f839ca:736b696c6c732f746477383134372d63727970746f2f756e6b6e6f776e2d64656c69766572792d7265636f6e63696c696174696f6e:b48fe69c272d3c23409a7c6aa8db7677","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 31 static findings are false positives involving documentation links, installation directories, Markdown formatting, example timestamps, or Chinese text. The workflow prohibits duplicate sends and limits follow-up checks. No evidence found of malicious execution, credential access, exfiltration, or audit-directed prompt injection in the reviewed files.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"README.md","line_end":25,"line_start":25},{"file":"README.md","line_end":36,"line_start":36},{"file":"README.md","line_end":37,"line_start":37},{"file":"README.md","line_end":36,"line_start":36},{"file":"README.md","line_end":37,"line_start":37}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":12,"line_start":12},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":63,"line_start":63},{"file":"SKILL.md","line_end":64,"line_start":64},{"file":"SKILL.md","line_end":65,"line_start":65},{"file":"SKILL.md","line_end":66,"line_start":66},{"file":"SKILL.md","line_end":67,"line_start":67},{"file":"SKILL.md","line_end":96,"line_start":79},{"file":"SKILL.md","line_end":98,"line_start":96},{"file":"SKILL.md","line_end":104,"line_start":98},{"file":"SKILL.md","line_end":104,"line_start":104},{"file":"SKILL.md","line_end":106,"line_start":105},{"file":"SKILL.md","line_end":106,"line_start":106},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":116,"line_start":115},{"file":"SKILL.md","line_end":116,"line_start":116},{"file":"SKILL.md","line_end":123,"line_start":123},{"file":"SKILL.md","line_end":133,"line_start":124},{"file":"SKILL.md","line_end":133,"line_start":133},{"file":"SKILL.md","line_end":135,"line_start":135}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":4,"total_lines":406,"audit_model":"codex","audited_at":"2026-11-10T10:47:54.941+00:00","created_at":"2026-11-10T17:40:23.079353+00:00","static_findings":[{"id":"filesystem:README.md:25:path-traversal-sequence","file":"README.md","pattern":"Path traversal sequence","snippet":"First-delivery all-criteria pass rate, without → with the skill: **GPT 15.4% → 33.3%; DeepSeek 92.3%","category":"filesystem","line_end":25,"severity":"high","line_start":25},{"id":"filesystem:README.md:36:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"- **Claude Code:** Put `unknown-delivery-reconciliation/SKILL.md` under `~/.claude/skills/`.","category":"filesystem","line_end":36,"severity":"high","line_start":36},{"id":"filesystem:README.md:37:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"- **Codex:** Put `unknown-delivery-reconciliation/SKILL.md` under `~/.agents/skills/`.","category":"filesystem","line_end":37,"severity":"high","line_start":37},{"id":"filesystem:README.md:36:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"- **Claude Code:** Put `unknown-delivery-reconciliation/SKILL.md` under `~/.claude/skills/`.","category":"filesystem","line_end":36,"severity":"medium","line_start":36},{"id":"filesystem:README.md:37:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"- **Codex:** Put `unknown-delivery-reconciliation/SKILL.md` under `~/.agents/skills/`.","category":"filesystem","line_end":37,"severity":"medium","line_start":37},{"id":"blocker:README.md:21:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"Both avoid a duplicate send. The second sets a hard cap, says exactly what to match, and defines whe","category":"blocker","line_end":21,"severity":"low","line_start":21},{"id":"blocker:README.md:29:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"- “It timed out after submit. Did it go through?”","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"external_commands:SKILL.md:12:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- The outbound service says `sent`, but acceptance requires `delivered`.","category":"external_commands","line_end":12,"severity":"medium","line_start":12},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Mark absent fields `not provided`.","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `accepted`: the channel took custody, if that is its stated meaning.","category":"external_commands","line_end":62,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `sent`: the channel dispatched it, if defined that way.","category":"external_commands","line_end":63,"severity":"medium","line_start":63},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `delivered`: the destination received it as the channel defines receipt.","category":"external_commands","line_end":64,"severity":"medium","line_start":64},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `read`: the channel specifically reports read; do not infer from delivery.","category":"external_commands","line_end":65,"severity":"medium","line_start":65},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `definitely not sent`: authoritative evidence establishes no send for the original request; weak n","category":"external_commands","line_end":66,"severity":"medium","line_start":66},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `outcome unknown`: identity, status, or a material conflict remains unresolved.","category":"external_commands","line_end":67,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":96,"severity":"medium","line_start":79},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":98,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"If a field is unavailable, write `not provided` and deliver the rest.","category":"external_commands","line_end":104,"severity":"medium","line_start":98},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Input.** Upload `u-82` to `review-east`, submitted at 10:14 UTC with hash `9cf`, timed out.","category":"external_commands","line_end":104,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"At 10:16 the original status panel reported `delivered` for that target and hash.","category":"external_commands","line_end":106,"severity":"medium","line_start":105},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"At 10:17 a different request to `review-west` reported `sent`. The user requires delivery, not readi","category":"external_commands","line_end":106,"severity":"medium","line_start":106},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> Original: `u-82` | `review-east` | 10:14 UTC | hash `9cf`.","category":"external_commands","line_end":114,"severity":"medium","line_start":114},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> Last relevant observation: 10:16 UTC in original status panel; `delivered` means destination recei","category":"external_commands","line_end":116,"severity":"medium","line_start":115},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> The 10:17 `sent` row targets `review-west` and does not supersede the matching receipt.","category":"external_commands","line_end":116,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:123:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Input.** Request `p-31` to `proof-queue` at 16:03 UTC used `proof.pdf` with hash `0b4`.","category":"external_commands","line_end":123,"severity":"medium","line_start":123},{"id":"external_commands:SKILL.md:124:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"The local client timed out; its counter remained zero. A dashboard search by filename finds a sent r","category":"external_commands","line_end":133,"severity":"medium","line_start":124},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> Original: `p-31` | `proof-queue` | 16:03 UTC | hash `0b4`.","category":"external_commands","line_end":133,"severity":"medium","line_start":133},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> Dashboard `sent` row refers to hash `21a`, not the submitted bytes. No matched receipt definition ","category":"external_commands","line_end":135,"severity":"medium","line_start":135},{"id":"blocker:SKILL.md:104:at-command-scheduling","file":"SKILL.md","pattern":"at command scheduling","snippet":"**Input.** Upload `u-82` to `review-east`, submitted at 10:14 UTC with hash `9cf`, timed out.","category":"blocker","line_end":104,"severity":"medium","line_start":104},{"id":"blocker:SKILL.md:123:at-command-scheduling","file":"SKILL.md","pattern":"at command scheduling","snippet":"**Input.** Request `p-31` to `proof-queue` at 16:03 UTC used `proof.pdf` with hash `0b4`.","category":"blocker","line_end":123,"severity":"medium","line_start":123},{"id":"obfuscation:SKILL.zh.md:1:heuristic-high-file-entropy-7-49-bits-possible-b","file":"SKILL.zh.md","pattern":"[HEURISTIC] High file entropy (7.49 bits) - possible binary/encrypted content","snippet":"File: SKILL.zh.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"filesystem:README.md:25:path-traversal-sequence","reason":"The parent-directory sequence appears only in a relative Markdown evidence link. It performs no filesystem operation and accepts no untrusted path input.","verdict":"false_positive","confidence":1},{"id":"filesystem:README.md:36:hidden-file-in-home-directory","reason":"The path names a user-level skill installation directory in manual setup instructions. It does not request secret files or execute an installation command.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:37:hidden-file-in-home-directory","reason":"The path is a destination for manually installing the skill document. There is no instruction to read credentials or modify unrelated hidden files.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:36:hidden-file-access","reason":"The hidden directory is mentioned solely as a manual installation destination. No file-reading behavior or sensitive-data collection is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:37:hidden-file-access","reason":"The documentation identifies where the user can place the skill document. It contains no command or instruction to inspect private configuration.","verdict":"false_positive","confidence":0.99},{"id":"blocker:README.md:21:system-reconnaissance","reason":"The sentence compares bounded reconciliation guidance with an open-ended response. It requests no host discovery, environment inspection, or system command.","verdict":"false_positive","confidence":1},{"id":"blocker:README.md:29:system-reconnaissance","reason":"This line is an example user question about a submission timeout. It does not invoke uptime or gather system information.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:12:ruby-shell-backtick-execution","reason":"Backticks format the status labels sent and delivered as inline Markdown. They are not executable shell or Ruby expressions.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"Backticks mark the literal placeholder not provided in prose. No interpreter or command execution is involved.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The accepted label is inline Markdown in a status glossary. The line defines channel custody rather than running a command.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","reason":"The sent label is formatted as inline Markdown in explanatory text. No code executes and no external process is requested.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","reason":"The delivered label names a receipt level in a glossary. Its Markdown delimiters do not perform command substitution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","reason":"The read label identifies an explicit channel status. The sentence warns against inferring reading and contains no shell execution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","reason":"Backticks format the conclusion definitely not sent. The surrounding prose requires authoritative evidence and contains no executable expression.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The outcome unknown phrase is a Markdown-formatted conclusion label. It has no connection to a shell or Ruby interpreter.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","reason":"The matched range is a fenced Markdown output template with headings and placeholders. It contains no executable command or script.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"The match spans a closing Markdown fence and an inline placeholder. These delimiters format a report example and do not execute content.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","reason":"The range contains a missing-field instruction and the beginning of a worked example. Its backticks mark literal values, not executable expressions.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"Inline backticks identify an example upload ID, target, and content fingerprint. The line describes an existing timeout rather than executing an upload.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:105:ruby-shell-backtick-execution","reason":"The range describes two example status observations using inline Markdown labels. It contains no external command or interpreter call.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","reason":"Backticks distinguish an example target and sent status in prose. They are not shell substitutions or instructions to contact that target.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","reason":"This blockquote is an example reconciliation record with literal identity fields. Its Markdown backticks do not execute the request ID or fingerprint.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","reason":"The quoted example explains delivered and sent receipts for different targets. Formatting status labels does not invoke any shell command.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The line excludes an example receipt for another target. Backticks highlight data values, with no execution behavior.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:123:ruby-shell-backtick-execution","reason":"The example lists a request ID, queue, filename, and fingerprint as inline Markdown. It does not execute a command or open the named file.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:124:ruby-shell-backtick-execution","reason":"This range contains worked-example prose and quoted bad and good responses. Markdown-delimited hashes and identifiers are data, not executable shell expressions.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","reason":"The blockquote displays the original request identity in an example report. No execution primitive interprets its inline Markdown.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","reason":"The line explains why a different fingerprint cannot establish the original delivery. Backticks format status and identity values without executing them.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:104:at-command-scheduling","reason":"The phrase at 10:14 UTC specifies an example submission time. There is no scheduling command or delayed job.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:123:at-command-scheduling","reason":"The phrase at 16:03 UTC records a past submission in a worked example. It does not invoke the at scheduler.","verdict":"false_positive","confidence":1},{"id":"obfuscation:SKILL.zh.md:1:heuristic-high-file-entropy-7-49-bits-possible-b","reason":"The complete file is readable Chinese Markdown with the same workflow, examples, and checklist as the English version. No binary or encrypted payload is present.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"ed1772c6059847312cb8ef5d65867d5bb3b602c3","subject_content_hash":"a3e76616153045b1577587a7393277a8b42e4dee675616a5aa082af4cfe852e4","subject_tree_hash":"d7ba479ae4f01721b14c0c9c4d62e511dc45f082e33b57b0f4f0fe3736f839ca","subject_plugin_path":"skills/tdw8147-crypto/unknown-delivery-reconciliation","audit_payload_hash":"b48fe69c272d3c23409a7c6aa8db7677","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"ed1772c6059847312cb8ef5d65867d5bb3b602c3","contentHash":"a3e76616153045b1577587a7393277a8b42e4dee675616a5aa082af4cfe852e4","treeHash":"d7ba479ae4f01721b14c0c9c4d62e511dc45f082e33b57b0f4f0fe3736f839ca","pluginPath":"skills/tdw8147-crypto/unknown-delivery-reconciliation","auditPayloadHash":"b48fe69c272d3c23409a7c6aa8db7677"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/tdw8147-crypto-unknown-delivery-reconciliation/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}