{"data":{"skill":{"slug":"wshobson-dependency-upgrade","name":"dependency-upgrade","icon":"📦","repo":"https://github.com/wshobson/agents/tree/main/plugins/framework-migration/skills/dependency-upgrade","status":"approved","author":"wshobson","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"14c13746-afdb-4223-9a4f-69180e087441","skill_id":"ad6f11dd-58e7-4cda-b36c-3fad5b8745fd","version":5,"content_hash":"178b521f72cc8fc3288d07f0556e1756","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"This skill provides documentation and guidance for dependency management workflows. All static findings are false positives: the external commands are example bash/npm commands in documentation, filesystem operations are example migration scripts, and weak crypto detections are from the word 'MD5' in version strings. The skill contains no executable code and poses no security risk.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Documentation Contains Command Examples","locations":[{"file":"SKILL.md","line_end":376,"line_start":22}],"description":"The SKILL.md file contains numerous example bash commands for dependency management (npm, yarn, git). These are educational examples showing proper dependency upgrade workflows, not executable code. Users must manually execute these commands in their own environments."}],"dangerous_patterns":[],"files_scanned":2,"total_lines":1190,"audit_model":"claude","audited_at":"2026-01-21T19:15:53.493+00:00","created_at":"2026-01-21T22:38:09.540763+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"low","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}