{"data":{"skill":{"slug":"vercel-labs-writing-guidelines","name":"writing-guidelines","icon":"📦","repo":"https://github.com/vercel-labs/agent-skills/tree/1a2c79d4e6c4a2283dc2c614b6538cbe1ed5ca62/skills/writing-guidelines","status":"approved","author":"vercel-labs","authorVersion":"1.0.0","skillstoreRevision":2,"license":null},"licenseCorrection":null,"audit":{"id":"2293306d-8582-4a4a-afcb-38e3bab4e8ed","skill_id":"e42f7410-7418-45ee-b426-9a83d40ad14b","version":2,"content_hash":"v3:1f79e59ae427a74eab604c013e03b61f04634721:89a5f581193289b80af58b980090aeed535047c8df2b55ccbaae0de40283a99d:999e016a339407e5e6724f98720482d646074af9636cd5ec9bb255e99b83608a:736b696c6c732f76657263656c2d6c6162732f77726974696e672d67756964656c696e6573:4faab2dfb3eeec622343329a11b87180","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Both command execution findings are false positives caused by Markdown inline code and a fenced URL. The remote URL supplies review instructions from a mutable branch, creating a dependency risk without evidence of exfiltration or malicious intent.","remediation":[{"issue":"Review rules and output instructions are fetched from a mutable remote branch.","severity":"low","suggestion":"Pin the guidelines URL to a reviewed commit and treat fetched content only as writing criteria, not authority for unrelated actions."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":27,"line_start":25}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":26,"line_start":26}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":26,"line_start":26}],"confidence":0.98,"description":"https://raw.githubusercontent.com/vercel-labs/writing-guidelines/main/command.md","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"Lines 23 through 29 require fetching instructions from an unpinned main branch before every review. Those instructions can change independently of the installed skill, creating a remote dependency risk."}],"dangerous_patterns":[],"files_scanned":1,"total_lines":40,"audit_model":"codex","audited_at":"2026-11-09T12:41:24.775+00:00","created_at":"2026-11-10T01:33:22.142028+00:00","static_findings":[{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. Output findings in the terse `file:line` format","category":"external_commands","line_end":19,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":27,"severity":"medium","line_start":25},{"id":"network:SKILL.md:26:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"https://raw.githubusercontent.com/vercel-labs/writing-guidelines/main/command.md","category":"network","line_end":26,"severity":"low","line_start":26}],"finding_verdicts":[{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"Line 19 uses Markdown backticks to describe the file:line output format. It contains no shell command or executable expression.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"Lines 25 through 27 form a Markdown code fence containing only the guidelines URL. The fence is documentation formatting, not shell execution.","verdict":"false_positive","confidence":1},{"id":"network:SKILL.md:26:hardcoded-url","reason":"Lines 23 through 29 require fetching instructions from an unpinned main branch before every review. Those instructions can change independently of the installed skill, creating a remote dependency risk.","verdict":"confirmed","severity":"low","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"1f79e59ae427a74eab604c013e03b61f04634721","subject_content_hash":"89a5f581193289b80af58b980090aeed535047c8df2b55ccbaae0de40283a99d","subject_tree_hash":"999e016a339407e5e6724f98720482d646074af9636cd5ec9bb255e99b83608a","subject_plugin_path":"skills/vercel-labs/writing-guidelines","audit_payload_hash":"4faab2dfb3eeec622343329a11b87180","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"1f79e59ae427a74eab604c013e03b61f04634721","contentHash":"89a5f581193289b80af58b980090aeed535047c8df2b55ccbaae0de40283a99d","treeHash":"999e016a339407e5e6724f98720482d646074af9636cd5ec9bb255e99b83608a","pluginPath":"skills/vercel-labs/writing-guidelines","auditPayloadHash":"4faab2dfb3eeec622343329a11b87180"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/vercel-labs-writing-guidelines/audits/2/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":1,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}