{"data":{"skill":{"slug":"vercel-labs-next-upgrade","name":"next-upgrade","icon":"📦","repo":"https://github.com/vercel-labs/next-skills/tree/main/skills/next-upgrade/","status":"approved","author":"vercel-labs","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"dd6425e8-ac75-4a97-ad98-0d46ac357237","skill_id":"c12bc3ce-8b41-4d3f-bcd2-630c2bf3a8dd","version":1,"content_hash":"ea273114e5eb7bdc0ab105e9ec02e144","risk_level":"medium","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":26,"line_start":24},{"file":"SKILL.md","line_end":28,"line_start":26},{"file":"SKILL.md","line_end":29,"line_start":28},{"file":"SKILL.md","line_end":30,"line_start":29},{"file":"SKILL.md","line_end":33,"line_start":30},{"file":"SKILL.md","line_end":35,"line_start":33},{"file":"SKILL.md","line_end":39,"line_start":35},{"file":"SKILL.md","line_end":43,"line_start":39},{"file":"SKILL.md","line_end":45,"line_start":43},{"file":"SKILL.md","line_end":48,"line_start":45},{"file":"SKILL.md","line_end":49,"line_start":48}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":19,"line_start":19}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":26,"line_start":24},{"file":"SKILL.md","line_end":28,"line_start":26},{"file":"SKILL.md","line_end":29,"line_start":28},{"file":"SKILL.md","line_end":30,"line_start":29},{"file":"SKILL.md","line_end":33,"line_start":30},{"file":"SKILL.md","line_end":35,"line_start":33},{"file":"SKILL.md","line_end":39,"line_start":35},{"file":"SKILL.md","line_end":43,"line_start":39},{"file":"SKILL.md","line_end":45,"line_start":43},{"file":"SKILL.md","line_end":48,"line_start":45},{"file":"SKILL.md","line_end":49,"line_start":48}],"description":"Ruby/shell backtick execution detected in code"},{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":19,"line_start":19}],"description":"Hardcoded URL detected in code"},{"title":"Weak cryptographic algorithm","locations":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":9,"line_start":9},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":23,"line_start":23}],"description":"Weak cryptographic algorithm detected in code"}],"files_scanned":1,"total_lines":50,"audit_model":"claude","audited_at":"2026-02-03T09:09:03.66+00:00","created_at":"2026-02-03T10:08:03.948879+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}