`, changing `key` remounts the boundary and refetches.","category":"external_commands","line_end":265,"severity":"medium","line_start":265},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```jsx","category":"external_commands","line_end":274,"severity":"medium","line_start":270},{"id":"external_commands:SKILL.md:274:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":277,"severity":"medium","line_start":274},{"id":"external_commands:SKILL.md:277:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```jsx","category":"external_commands","line_end":281,"severity":"medium","line_start":277},{"id":"external_commands:SKILL.md:281:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":289,"severity":"medium","line_start":281},{"id":"external_commands:SKILL.md:289:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Every VT matching the trigger fires simultaneously in a single `document.startViewTransition`. VTs i","category":"external_commands","line_end":291,"severity":"medium","line_start":289},{"id":"external_commands:SKILL.md:291:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"### Use `default=\"none\"` Deliberately","category":"external_commands","line_end":293,"severity":"medium","line_start":291},{"id":"external_commands:SKILL.md:293:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Without it, every VT fires the browser cross-fade on **every** transition — Suspense resolves, `useD","category":"external_commands","line_end":293,"severity":"medium","line_start":293},{"id":"external_commands:SKILL.md:295:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"But it also turns off `update` (layout/reflow morphs) and `share` (a named pair with no explicit `sh","category":"external_commands","line_end":295,"severity":"medium","line_start":295},{"id":"external_commands:SKILL.md:302:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"They coexist because they fire at different moments. `default=\"none\"` on both prevents cross-interfe","category":"external_commands","line_end":302,"severity":"medium","line_start":302},{"id":"external_commands:SKILL.md:312:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"For Next.js integration (`transitionTypes` on `next/link` and `useRouter`, App Router patterns, Serv","category":"external_commands","line_end":312,"severity":"medium","line_start":312},{"id":"blocker:SKILL.md:232:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Trigger inside `startTransition`. Avoid wrapper ``s between list and VT.","category":"blocker","line_end":232,"severity":"low","line_start":232},{"id":"blocker:SKILL.md:261:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"","category":"blocker","line_end":261,"severity":"low","line_start":261}],"finding_verdicts":[{"id":"external_commands:AGENTS.md:246:ruby-shell-backtick-execution","reason":"The backticks construct an internal item URL in a JSX Link. JavaScript template interpolation does not execute shell commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:247:ruby-shell-backtick-execution","reason":"The template literal creates an item-image transition name in JSX. It is a string value, not Ruby or shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:471:ruby-shell-backtick-execution","reason":"The photo template literal identifies the source image transition. It does not invoke a command interpreter.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:476:ruby-shell-backtick-execution","reason":"The photo template literal supplies the destination transition name. It is ordinary JavaScript string construction.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:540:ruby-shell-backtick-execution","reason":"The item template literal names a shared React transition. No shell execution occurs in this rendering example.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:560:ruby-shell-backtick-execution","reason":"The expanded item identifier is interpolated into a transition name. This produces a JavaScript string rather than a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:574:ruby-shell-backtick-execution","reason":"The template literal gives each rendered item a transition name. The surrounding code only manages UI state and rendering.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:1255:ruby-shell-backtick-execution","reason":"The template literal builds a relative sort query for router.replace. The example uses a fixed newest value and executes no shell command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:1343:ruby-shell-backtick-execution","reason":"The Link interpolates a product identifier into an internal route. Backticks are JavaScript template syntax, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:1344:ruby-shell-backtick-execution","reason":"The product template literal names the list image transition. It is not passed to any command execution API.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:AGENTS.md:1351:ruby-shell-backtick-execution","reason":"The matching product template literal names the detail image transition. The example renders an image, not a shell command.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:AGENTS.md:483:path-traversal-sequence","reason":"The parent-directory sequence belongs to a relative Markdown link to SKILL.md. It neither accesses arbitrary paths nor crosses a security boundary.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:AGENTS.md:1174:path-traversal-sequence","reason":"The relative SKILL.md link references shared-element documentation. No filesystem operation consumes an attacker-controlled path.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:536:keylogger-keywords","reason":"Keystrokes describe ordinary search filtering and unwanted crossfades. The example updates local input state without recording or transmitting keyboard activity.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:233:system-reconnaissance","reason":"The passage explains React transition triggers and DOM wrapper placement. It contains no host discovery or system inspection.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:262:system-reconnaissance","reason":"ResultsGrid is a rendered React component in an animation example. It performs no system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:470:system-reconnaissance","reason":"The comment labels the source list or grid view for a shared image. It does not instruct system discovery.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:510:system-reconnaissance","reason":"Searchable Grid is a section heading for deferred UI filtering. There is no host enumeration behavior.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:528:system-reconnaissance","reason":"ItemGrid receives item data and a deferred search value for rendering. The snippet does not inspect the operating system.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:548:system-reconnaissance","reason":"The prose introduces a grid-to-detail UI animation. It contains no reconnaissance instruction.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:562:system-reconnaissance","reason":"Array.find selects the expanded item from application data. It does not search host files or enumerate system resources.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:572:system-reconnaissance","reason":"The div uses CSS grid utility classes to arrange cards. This is layout markup, not system discovery.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:690:system-reconnaissance","reason":"Invisible filler slots stabilize list height and prevent layout movement. The passage does not collect system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:1089:system-reconnaissance","reason":"The passage describes a backdrop-filter rendering workaround. Hiding an old animation snapshot is unrelated to host reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:1117:system-reconnaissance","reason":"The text explains how a tab indicator moves between positions. It contains no system information gathering.","verdict":"false_positive","confidence":0.99},{"id":"blocker:AGENTS.md:1331:system-reconnaissance","reason":"PhotoGrid renders photo data inside an entering transition. No host inspection or enumeration is present.","verdict":"false_positive","confidence":0.99},{"id":"network:metadata.json:7:hardcoded-url","reason":"The URL references the official React ViewTransition documentation. The metadata contains no request code or data transmission.","verdict":"false_positive","confidence":0.99},{"id":"network:metadata.json:8:hardcoded-url","reason":"The URL references the official React addTransitionType documentation. It is a citation, not an exfiltration endpoint.","verdict":"false_positive","confidence":0.99},{"id":"network:metadata.json:9:hardcoded-url","reason":"The URL points to official Next.js configuration documentation. Its presence in a references array does not transmit application data.","verdict":"false_positive","confidence":0.99},{"id":"network:metadata.json:10:hardcoded-url","reason":"The GitHub URL cites the Next.js App Router playground example. No code sends secrets or other data to it.","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:35:hardcoded-url","reason":"The URL identifies the upstream repository in a documented, user-initiated skill installation command. No hidden transfer, credential disclosure, or automatic execution is instructed.","verdict":"false_positive","confidence":0.97},{"id":"blocker:references/css-recipes.md:257:system-reconnaissance","reason":"The text recommends hiding an old snapshot to prevent backdrop-filter flashes. It describes browser rendering, not reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/css-recipes.md:285:system-reconnaissance","reason":"The passage explains a sliding tab indicator and snapshot animation settings. It does not inspect host resources.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/implementation.md:139:ruby-shell-backtick-execution","reason":"The photo template literal creates the source transition name in JSX. It is not shell or Ruby code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/implementation.md:144:ruby-shell-backtick-execution","reason":"The matching photo template literal identifies the target transition. It produces a string without invoking a command interpreter.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/implementation.md:151:path-traversal-sequence","reason":"The parent-directory sequence links to SKILL.md within the documentation package. There is no untrusted path input or unauthorized filesystem access.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/implementation.md:138:system-reconnaissance","reason":"The source-view comment labels a list or grid image example. It is not a system enumeration instruction.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/nextjs.md:108:ruby-shell-backtick-execution","reason":"router.replace receives a relative sort query built with JavaScript interpolation. The example passes a fixed sort value and invokes no shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/nextjs.md:196:ruby-shell-backtick-execution","reason":"The template literal builds a product Link destination. This is internal route construction, not command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/nextjs.md:197:ruby-shell-backtick-execution","reason":"The product template literal names the list-side image transition. No shell execution API consumes this string.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/nextjs.md:204:ruby-shell-backtick-execution","reason":"The product template literal names the corresponding detail image transition. It is ordinary JSX string interpolation.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:references/nextjs.md:27:path-traversal-sequence","reason":"The relative SKILL.md reference links to another packaged documentation section. No runtime file access or path traversal exploit is present.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/nextjs.md:184:system-reconnaissance","reason":"PhotoGrid is displayed inside a transition as loaded page content. It does not gather system information.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/patterns.md:35:ruby-shell-backtick-execution","reason":"The item template literal creates a shared transition identifier. It has no shell execution semantics.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/patterns.md:55:ruby-shell-backtick-execution","reason":"The expanded item ID is interpolated into a ViewTransition name. This is string construction for UI rendering.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:references/patterns.md:69:ruby-shell-backtick-execution","reason":"The template literal names each item transition in the grid. No command interpreter or external process is invoked.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/patterns.md:31:keylogger-keywords","reason":"The keystroke reference explains repeated search-filter animations. Input is stored as local React state, with no keyboard logging or exfiltration.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/patterns.md:5:system-reconnaissance","reason":"Searchable Grid names a UI filtering pattern. The section does not describe host discovery.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/patterns.md:23:system-reconnaissance","reason":"ItemGrid receives item data and deferred search text. This component invocation does not inspect system resources.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/patterns.md:43:system-reconnaissance","reason":"The prose introduces a card expand-and-collapse animation. It contains no reconnaissance operation.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/patterns.md:57:system-reconnaissance","reason":"Array.find selects an application item by its ID. It neither enumerates the host nor reads filesystem data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/patterns.md:67:system-reconnaissance","reason":"The div applies CSS grid layout classes. It contains no system discovery functionality.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/patterns.md:185:system-reconnaissance","reason":"Fixed slot counts and invisible fillers keep a UI grid from changing height. They do not inspect the environment.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:3:ruby-shell-backtick-execution","reason":"The description uses Markdown backticks around React APIs. These are documentation formatting, not executable shell substitutions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:12:ruby-shell-backtick-execution","reason":"The introduction formats browser and React API names as inline code. No command execution is requested.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:16:ruby-shell-backtick-execution","reason":"ViewTransition is enclosed in Markdown inline-code delimiters within design guidance. The backticks are not shell syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"The table formats the name prop as inline code. This documents a shared-element property without executing commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The key prop is formatted as Markdown inline code in a pattern table. It is not command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"The table uses inline-code formatting for enter and exit props. No shell interpreter is involved.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"Backticks delimit navigation type names in a documentation table. These labels select animations rather than execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","reason":"The table formats a React component and its default prop as inline code. There is no external command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","reason":"Inline-code delimiters identify enter and exit props for Suspense reveals. They are documentation syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","reason":"The table formats default=\"none\" to describe disabling background animations. Backticks do not invoke a shell here.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"The paragraph formats package names and an npm ls react diagnostic as inline code. These describe compatibility checks, not dangerous command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"The compatibility paragraph uses backticks around package and API names. They are Markdown formatting, not executable substitutions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","reason":"The browser support note formats startViewTransition as inline code. It does not execute a shell command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:59:ruby-shell-backtick-execution","reason":"The heading formats ViewTransition as a component name. Its backticks are Markdown delimiters.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","reason":"The backticks open a JSX documentation fence containing a React import and component. They do not start shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The backticks close the JSX documentation fence. The following prose explains React-managed transition naming, not command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","reason":"Inline code identifies CSS and browser transition APIs. The paragraph explains React behavior without invoking shell commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","reason":"The trigger table formats the ViewTransition component name as inline code. It describes entering UI content.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:76:ruby-shell-backtick-execution","reason":"The backticks format ViewTransition in an exit-trigger definition. They have no shell execution semantics.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The update-trigger description uses Markdown inline code for a React component. No process invocation is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:78:ruby-shell-backtick-execution","reason":"The share-trigger definition formats the name prop. It documents pairing React boundaries rather than executing commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","reason":"Backticks format React state and transition API names. The sentence explains animation activation requirements.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","reason":"The text formats ViewTransition while explaining DOM placement. It contains no command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","reason":"The backticks open a JSX fence showing working and broken component placement. They are documentation delimiters.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","reason":"The backticks close a JSX placement example. The following prop documentation is not executable shell code.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","reason":"The line formats supported prop values and a type-map shape as inline code. These describe animation configuration.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","reason":"The JSX fence contains a ViewTransition configuration example. Its backticks are not shell substitutions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:110:ruby-shell-backtick-execution","reason":"The closing Markdown fence precedes an explanation of disabled triggers. It does not execute the fenced example.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:112:ruby-shell-backtick-execution","reason":"Inline backticks format default and none in a prop explanation. No shell command is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The line formats a CSS old-snapshot pseudo-element. Markdown delimiters are mistaken for command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The line formats the incoming-snapshot CSS pseudo-element. It does not invoke an interpreter.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","reason":"The CSS group pseudo-element appears as inline documentation. Its backticks do not execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"The image-pair pseudo-element is formatted as inline code in a CSS reference list. No process execution exists.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","reason":"The paragraph formats addTransitionType as a React API name. It explains animation tagging rather than shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:129:ruby-shell-backtick-execution","reason":"The JSX fence shows React transition types and internal navigation. The fence itself does not execute a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","reason":"The closing code fence separates a React example from prop documentation. It is Markdown structure, not command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:137:ruby-shell-backtick-execution","reason":"The sentence formats enter, exit, and share prop names. It provides configuration guidance without executing commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:139:ruby-shell-backtick-execution","reason":"The JSX fence documents type-keyed transition props. It contains UI configuration rather than shell or Ruby execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","reason":"The backticks close a type-map JSX example. The following text discusses asymmetric animations, not commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","reason":"Backticks format enter and exit props in explanatory prose. They are not executable substitutions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:152:ruby-shell-backtick-execution","reason":"The JSX fence shows enter and exit animation class maps. It is a documentation example with no shell invocation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:158:ruby-shell-backtick-execution","reason":"The closing Markdown fence precedes a TypeScript prop note. No command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","reason":"The TypeScript note formats a type name and its required default key. These backticks are documentation syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:164:ruby-shell-backtick-execution","reason":"The JSX fence contains a reusable React transition wrapper. It does not invoke external commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:176:ruby-shell-backtick-execution","reason":"The backticks close a reusable component example. The following heading documents router history behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:178:ruby-shell-backtick-execution","reason":"The heading formats router.back() as inline code. This is a browser navigation API, not a shell command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","reason":"Inline code formats routing APIs and animation defaults. The prose explains transition types during browser history navigation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","reason":"The name prop is formatted as inline code in shared-element guidance. No command interpreter is involved.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:196:ruby-shell-backtick-execution","reason":"The JSX fence illustrates matching transition names around images. It documents React rendering rather than shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:205:ruby-shell-backtick-execution","reason":"The backticks close the shared-image JSX example. The adjacent naming guidance is ordinary documentation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:207:ruby-shell-backtick-execution","reason":"Inline code illustrates unique transition names and React props. The photo identifier is a naming example, not a shell expression.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:208:ruby-shell-backtick-execution","reason":"Backticks format share, enter, and exit props in precedence guidance. There is no external execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:209:ruby-shell-backtick-execution","reason":"The paragraph formats React props and navigation APIs while explaining disabled morphs. These are inline documentation references.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:218:ruby-shell-backtick-execution","reason":"The JSX fence shows conditional panel rendering with transition props. No shell command executes.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:222:ruby-shell-backtick-execution","reason":"The backticks close an enter-and-exit example and separate the next section. They are Markdown delimiters.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:226:ruby-shell-backtick-execution","reason":"The JSX fence documents keyed list-item transitions. It is not a shell or Ruby program.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:230:ruby-shell-backtick-execution","reason":"The closing code fence precedes React transition placement advice. No interpreter is invoked.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:232:ruby-shell-backtick-execution","reason":"The sentence formats startTransition and div as inline code. It explains UI boundary placement, not command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:236:ruby-shell-backtick-execution","reason":"Inline backticks identify ViewTransition in layout-displacement guidance. The passage contains no shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:240:ruby-shell-backtick-execution","reason":"The paragraph formats ViewTransition while explaining nested list and shared-element boundaries. These are documentation references.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","reason":"The JSX fence shows nested list and shared-image boundaries. Markdown backticks do not execute the example.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:245:ruby-shell-backtick-execution","reason":"The template literal constructs an internal item Link URL. JavaScript interpolation is not shell command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:246:ruby-shell-backtick-execution","reason":"The template literal constructs a shared image transition name. It is a string prop in JSX, not executable shell content.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:253:ruby-shell-backtick-execution","reason":"The backticks close the nested-boundary JSX example. The following explanation discusses animation responsibilities.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:257:ruby-shell-backtick-execution","reason":"The heading formats key as a React identity prop. It does not refer to shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:259:ruby-shell-backtick-execution","reason":"The JSX fence shows a keyed results boundary. It documents React component identity rather than command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:263:ruby-shell-backtick-execution","reason":"The closing Markdown fence precedes a Suspense remount warning. It does not execute a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:265:ruby-shell-backtick-execution","reason":"Inline code formats Suspense and key in a refetch warning. There is no shell invocation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","reason":"The JSX fence demonstrates a Suspense crossfade. Its backticks are documentation syntax.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:274:ruby-shell-backtick-execution","reason":"The backticks close the simple crossfade example. The following label introduces another UI animation example.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:277:ruby-shell-backtick-execution","reason":"The JSX fence shows separate fallback and content transitions. No external command or interpreter is used.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:281:ruby-shell-backtick-execution","reason":"The closing fence ends a directional Suspense example. It is Markdown structure, not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:289:ruby-shell-backtick-execution","reason":"Inline backticks identify the browser startViewTransition API. The paragraph explains batching of UI animations.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:291:ruby-shell-backtick-execution","reason":"The heading formats default=\"none\" as an animation configuration prop. It does not execute commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:293:ruby-shell-backtick-execution","reason":"The paragraph formats deferred-value APIs and default props. It discusses preventing unwanted crossfades, not external execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:295:ruby-shell-backtick-execution","reason":"The backticks format update and share configuration terms. The text explains layout animation behavior without executing commands.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:302:ruby-shell-backtick-execution","reason":"Inline code formats the default prop while explaining independent animation timing. No shell execution is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:312:ruby-shell-backtick-execution","reason":"Backticks format Next.js navigation props and APIs in a reference link description. They are documentation delimiters.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:232:system-reconnaissance","reason":"The passage explains React startTransition and DOM wrapper placement. It performs no system information gathering.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:261:system-reconnaissance","reason":"ResultsGrid is a React component rendered inside an animation boundary. It is not a system reconnaissance operation.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"1f79e59ae427a74eab604c013e03b61f04634721","subject_content_hash":"693acbddd1d2dcf774286867efbc9a5c09dce2da6f21f8e12618187a92f2106a","subject_tree_hash":"52fa569082d0e0e74c3d8fa4f2f362f009d426c8f425635a5675acef470a4e24","subject_plugin_path":"skills/vercel-labs/vercel-react-view-transitions","audit_payload_hash":"0f258fbd8ea0dfe1e985966f6019bbfa","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"1f79e59ae427a74eab604c013e03b61f04634721","contentHash":"693acbddd1d2dcf774286867efbc9a5c09dce2da6f21f8e12618187a92f2106a","treeHash":"52fa569082d0e0e74c3d8fa4f2f362f009d426c8f425635a5675acef470a4e24","pluginPath":"skills/vercel-labs/vercel-react-view-transitions","auditPayloadHash":"0f258fbd8ea0dfe1e985966f6019bbfa"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/vercel-labs-vercel-react-view-transitions/audits/7/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}