{"data":{"skill":{"slug":"wshobson-hybrid-search-implementation","name":"hybrid-search-implementation","icon":"📦","repo":"https://github.com/wshobson/agents/tree/main/plugins/llm-application-dev/skills/hybrid-search-implementation","status":"approved","author":"wshobson","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"e6366b64-dc20-4eaa-9ecd-5459158debaf","skill_id":"9540df4d-31b0-46f7-890a-754986faf64a","version":5,"content_hash":"082251b6fc13052b06d84ad3a92bdc4e","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All static findings are false positives. The skill contains documentation templates for hybrid search algorithms (RRF, linear fusion) with PostgreSQL, Elasticsearch, and custom RAG pipelines. Static scanner misidentified mathematical formulas as crypto operations, markdown code fences as command execution, and benign terminology as security risks. No malicious code or credential exfiltration present.","remediation":[],"risk_factor_evidence":[{"factor":"scripts","evidence":[{"file":"SKILL.md","line_end":110,"line_start":41}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":569,"line_start":1}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":1169,"audit_model":"claude","audited_at":"2026-01-21T19:22:39.13+00:00","created_at":"2026-01-21T22:38:10.500111+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}