{"data":{"skill":{"slug":"wshobson-service-mesh-observability","name":"service-mesh-observability","icon":"📦","repo":"https://github.com/wshobson/agents/tree/main/plugins/cloud-infrastructure/skills/service-mesh-observability","status":"approved","author":"wshobson","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"4a25be52-2303-4af8-98d2-24f3932daac2","skill_id":"7b356fd4-c24c-4175-ab52-2a99a346ade8","version":3,"content_hash":"b1d48f371db380f4b71dd3c3e2023b7f","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Pure documentation skill containing YAML templates, PromQL queries, and CLI examples for service mesh observability. All static findings are false positives: the scanner misinterpreted PromQL metric names (containing 'md5', 'sha' substrings) as weak crypto, flagged documentation links as network IOCs, and misidentified YAML field names as path traversal. The content is static documentation that matches its stated purpose exactly.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":259,"line_start":259},{"file":"SKILL.md","line_end":261,"line_start":261},{"file":"SKILL.md","line_end":263,"line_start":263},{"file":"SKILL.md","line_end":380,"line_start":380},{"file":"SKILL.md","line_end":381,"line_start":381},{"file":"SKILL.md","line_end":382,"line_start":382},{"file":"SKILL.md","line_end":383,"line_start":383},{"file":"SKILL.md","line_end":280,"line_start":280},{"file":"SKILL.md","line_end":282,"line_start":282},{"file":"SKILL.md","line_end":284,"line_start":284},{"file":"SKILL.md","line_end":296,"line_start":296}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":34,"line_start":23},{"file":"SKILL.md","line_end":49,"line_start":34},{"file":"SKILL.md","line_end":85,"line_start":49},{"file":"SKILL.md","line_end":89,"line_start":85},{"file":"SKILL.md","line_end":109,"line_start":89},{"file":"SKILL.md","line_end":113,"line_start":109},{"file":"SKILL.md","line_end":156,"line_start":113},{"file":"SKILL.md","line_end":160,"line_start":156},{"file":"SKILL.md","line_end":179,"line_start":160},{"file":"SKILL.md","line_end":183,"line_start":179},{"file":"SKILL.md","line_end":240,"line_start":183},{"file":"SKILL.md","line_end":244,"line_start":240},{"file":"SKILL.md","line_end":264,"line_start":244},{"file":"SKILL.md","line_end":268,"line_start":264},{"file":"SKILL.md","line_end":320,"line_start":268},{"file":"SKILL.md","line_end":324,"line_start":320},{"file":"SKILL.md","line_end":361,"line_start":324}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":203,"line_start":203}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":579,"audit_model":"claude","audited_at":"2026-01-17T10:08:41.63+00:00","created_at":"2026-01-20T01:07:12.329062+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}