{"data":{"skill":{"slug":"xiaomengbi520-pptx-prep","name":"pptx-prep","icon":"📦","repo":"https://github.com/xiaomengbi520/pptx-prep/tree/main/","status":"approved","author":"xiaomengbi520","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"247aa6ed-be83-49e9-81be-ab21af6a11d5","skill_id":"c8569678-a46a-4439-8d95-a903f71e7ae1","version":4,"content_hash":"v2:64ca8af0f54a325752f08bd54e52151061ea659a:89533b7f9e6601066e19e4b37109717e5c0a10a958c762c112dbbc300c5c0568:7581d14baded5ca5402f8c30da7f5a3279ef5125456baa23c58c496a5cfe3b68:907f4e659297a18900ccbd2e37624301","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"The static findings are false positives from documentation URLs, install instructions, Markdown backticks, validator error text, and multilingual Markdown entropy. I found no evidence of prompt injection, credential access, hidden data collection, command execution, or malicious obfuscation in the reviewed files.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"manifest.schema.json","line_end":2,"line_start":2},{"file":"manifest.schema.json","line_end":3,"line_start":3},{"file":"README_CN.md","line_end":46,"line_start":46},{"file":"README.md","line_end":47,"line_start":47}]},{"factor":"filesystem","evidence":[{"file":"README_CN.md","line_end":47,"line_start":47},{"file":"README_CN.md","line_end":47,"line_start":47},{"file":"README.md","line_end":48,"line_start":48},{"file":"README.md","line_end":48,"line_start":48},{"file":"validate.py","line_end":5,"line_start":5}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":35,"line_start":28},{"file":"SKILL.md","line_end":51,"line_start":35},{"file":"SKILL.md","line_end":60,"line_start":51},{"file":"SKILL.md","line_end":91,"line_start":60},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":108,"line_start":103},{"file":"SKILL.md","line_end":111,"line_start":108},{"file":"SKILL.md","line_end":137,"line_start":111},{"file":"SKILL.md","line_end":174,"line_start":137},{"file":"SKILL.md","line_end":174,"line_start":174},{"file":"SKILL.md","line_end":175,"line_start":175},{"file":"SKILL.md","line_end":180,"line_start":176},{"file":"SKILL.md","line_end":181,"line_start":180},{"file":"SKILL.md","line_end":183,"line_start":181},{"file":"SKILL.md","line_end":189,"line_start":183},{"file":"SKILL.md","line_end":191,"line_start":189},{"file":"SKILL.md","line_end":214,"line_start":191},{"file":"SKILL.md","line_end":220,"line_start":214},{"file":"SKILL.md","line_end":237,"line_start":220},{"file":"SKILL.md","line_end":242,"line_start":237},{"file":"SKILL.md","line_end":243,"line_start":242},{"file":"SKILL.md","line_end":244,"line_start":243},{"file":"SKILL.md","line_end":248,"line_start":244}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":15,"total_lines":1783,"audit_model":"codex","audited_at":"2026-07-08T12:30:53.258+00:00","created_at":"2026-07-08T14:54:23.843831+00:00","static_findings":[{"id":"network:manifest.schema.json:2:hardcoded-url","file":"manifest.schema.json","pattern":"Hardcoded URL","snippet":"\"$schema\": \"https://json-schema.org/draft/2020-12/schema\",","category":"network","line_end":2,"severity":"low","line_start":2},{"id":"network:manifest.schema.json:3:hardcoded-url","file":"manifest.schema.json","pattern":"Hardcoded URL","snippet":"\"$id\": \"https://github.com/pptx-prep/manifest.schema.json\",","category":"network","line_end":3,"severity":"low","line_start":3},{"id":"network:README_CN.md:46:hardcoded-url","file":"README_CN.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/xiaomengbi520/pptx-prep.git","category":"network","line_end":46,"severity":"low","line_start":46},{"id":"filesystem:README_CN.md:47:hidden-file-in-home-directory","file":"README_CN.md","pattern":"Hidden file in home directory","snippet":"cp -r pptx-prep ~/.claude/skills/pptx-prep","category":"filesystem","line_end":47,"severity":"high","line_start":47},{"id":"filesystem:README_CN.md:47:hidden-file-access","file":"README_CN.md","pattern":"Hidden file access","snippet":"cp -r pptx-prep ~/.claude/skills/pptx-prep","category":"filesystem","line_end":47,"severity":"medium","line_start":47},{"id":"network:README.md:47:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/xiaomengbi520/pptx-prep.git","category":"network","line_end":47,"severity":"low","line_start":47},{"id":"filesystem:README.md:48:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"cp -r pptx-prep ~/.claude/skills/pptx-prep","category":"filesystem","line_end":48,"severity":"high","line_start":48},{"id":"filesystem:README.md:48:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"cp -r pptx-prep ~/.claude/skills/pptx-prep","category":"filesystem","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":35,"severity":"medium","line_start":28},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":51,"severity":"medium","line_start":35},{"id":"external_commands:SKILL.md:51:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":60,"severity":"medium","line_start":51},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":91,"severity":"medium","line_start":60},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| 🤖 待核实 | AI 能起草但准确性重要(如公司介绍、市场分析) | `source: ai` `confidence: needs-review` |","category":"external_commands","line_end":91,"severity":"medium","line_start":91},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| ✅ 可生成 | 通用知识,无需个性化(如 HTTP 原理、通用流程) | `source: ai` `confidence: verified` |","category":"external_commands","line_end":92,"severity":"medium","line_start":92},{"id":"external_commands:SKILL.md:103:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> \"我在项目目录下创建了 `materials/` 文件夹。请将文件放入其中:","category":"external_commands","line_end":108,"severity":"medium","line_start":103},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"用户放入文件后告知你,你扫描 `materials/` 目录,**自动匹配**文件到对应槽位:","category":"external_commands","line_end":111,"severity":"medium","line_start":108},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- manifest 中的 `description` 字段","category":"external_commands","line_end":137,"severity":"medium","line_start":111},{"id":"external_commands:SKILL.md:137:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"若用户选择 A 或 B,记录为 `fill_mode`。若选 C,等新照片后重新检查。","category":"external_commands","line_end":174,"severity":"medium","line_start":137},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **A → prep 立即搜索。** 使用可用工具搜索真实图片,下载到 `materials/`,展示结果让用户确认。确认后 manifest 中改为 `status: ready` + `sou","category":"external_commands","line_end":174,"severity":"medium","line_start":174},{"id":"external_commands:SKILL.md:175:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **B → prep 立即生成。** 使用图像生成工具创建插画风格图片,下载到 `materials/`,展示结果让用户确认。确认后 manifest 中改为 `status: ready` + ","category":"external_commands","line_end":175,"severity":"medium","line_start":175},{"id":"external_commands:SKILL.md:176:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- C → `status: placeholder`","category":"external_commands","line_end":180,"severity":"medium","line_start":176},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 搜索/生成必须在 Phase 9 内完成,不能标记 `ai-fill` 然后留给下游","category":"external_commands","line_end":181,"severity":"medium","line_start":180},{"id":"external_commands:SKILL.md:181:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 结果下载到 `materials/` 目录","category":"external_commands","line_end":183,"severity":"medium","line_start":181},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 移交 pptx 前,manifest 中不应存在任何 `ai-fill` 状态的项。","category":"external_commands","line_end":189,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:189:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"在项目目录写入 `manifest.yml`。结构:","category":"external_commands","line_end":191,"severity":"medium","line_start":189},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```yaml","category":"external_commands","line_end":214,"severity":"medium","line_start":191},{"id":"external_commands:SKILL.md:214:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":220,"severity":"medium","line_start":214},{"id":"external_commands:SKILL.md:220:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":237,"severity":"medium","line_start":220},{"id":"external_commands:SKILL.md:237:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":242,"severity":"medium","line_start":237},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- manifest 中不应有 `status: ai-fill` 的项(已在 Phase 9 处理完毕)","category":"external_commands","line_end":243,"severity":"medium","line_start":242},{"id":"external_commands:SKILL.md:243:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- manifest 中不应有 `status: missing` 的项(已全部收集或标记 placeholder)","category":"external_commands","line_end":244,"severity":"medium","line_start":243},{"id":"external_commands:SKILL.md:244:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 所有用户提供的文件已放入 `materials/` 目录","category":"external_commands","line_end":248,"severity":"medium","line_start":244},{"id":"filesystem:validate.py:5:hidden-file-access","file":"validate.py","pattern":"Hidden file access","snippet":"Supports both YAML (.yml/.yaml) and JSON (.json) files.","category":"filesystem","line_end":5,"severity":"medium","line_start":5},{"id":"blocker:validate.py:60:system-reconnaissance","file":"validate.py","pattern":"System reconnaissance","snippet":"print(f\"Error: Invalid JSON: {e}\")","category":"blocker","line_end":60,"severity":"low","line_start":60},{"id":"blocker:validate.py:292:system-reconnaissance","file":"validate.py","pattern":"System reconnaissance","snippet":"errors.append(f\"{prefix}: invalid type '{mat.get('type')}'. Must be one of: {VALID_TYPES}\")","category":"blocker","line_end":292,"severity":"low","line_start":292},{"id":"blocker:validate.py:295:system-reconnaissance","file":"validate.py","pattern":"System reconnaissance","snippet":"errors.append(f\"{prefix}: invalid status '{mat.get('status')}'. Must be one of: {VALID_STATUSES}\")","category":"blocker","line_end":295,"severity":"low","line_start":295},{"id":"blocker:validate.py:298:system-reconnaissance","file":"validate.py","pattern":"System reconnaissance","snippet":"errors.append(f\"{prefix}: invalid source '{mat.get('source')}'. Must be one of: {VALID_SOURCES}\")","category":"blocker","line_end":298,"severity":"low","line_start":298},{"id":"blocker:validate.py:301:system-reconnaissance","file":"validate.py","pattern":"System reconnaissance","snippet":"errors.append(f\"{prefix}: invalid confidence '{mat.get('confidence')}'. Must be one of: {VALID_CONFI","category":"blocker","line_end":301,"severity":"low","line_start":301},{"id":"blocker:validate.py:326:system-reconnaissance","file":"validate.py","pattern":"System reconnaissance","snippet":"errors.append(f\"{prefix}: invalid format '{fmt}'. Must be one of: {VALID_FORMATS}\")","category":"blocker","line_end":326,"severity":"low","line_start":326},{"id":"blocker:validate.py:335:system-reconnaissance","file":"validate.py","pattern":"System reconnaissance","snippet":"errors.append(f\"{prefix}.warnings[{j}]: invalid warning type '{w.get('type')}'.\")","category":"blocker","line_end":335,"severity":"low","line_start":335},{"id":"obfuscation:README_CN.md:1:heuristic-high-file-entropy-6-46-bits-possible-b","file":"README_CN.md","pattern":"[HEURISTIC] High file entropy (6.46 bits) - possible binary/encrypted content","snippet":"File: README_CN.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-40-bits-possible-b","file":"README.md","pattern":"[HEURISTIC] High file entropy (6.40 bits) - possible binary/encrypted content","snippet":"File: README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:83:heuristic-very-high-entropy-string-5-64-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.64 bits) - likely encoded/encrypted payload","snippet":"⚠ 超过一半的材料缺失——AI 将被迫编造大量内容。建议先提供核心材料再继续，否则生成结果可能充满占位符。是否仍然继续？","category":"obfuscation","line_end":83,"severity":"high","line_start":83},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-90-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (6.90 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"network:manifest.schema.json:2:hardcoded-url","reason":"The URL is JSON Schema metadata, not runtime network access. The schema file contains no code that fetches the URL.","verdict":"false_positive","confidence":0.98},{"id":"network:manifest.schema.json:3:hardcoded-url","reason":"The URL is JSON Schema metadata, not runtime network access. The schema file contains no code that fetches the URL.","verdict":"false_positive","confidence":0.98},{"id":"network:README_CN.md:46:hardcoded-url","reason":"This is a user-facing git clone install command for the public repository. It is not hidden network behavior or data exfiltration.","verdict":"false_positive","confidence":0.95},{"id":"filesystem:README_CN.md:47:hidden-file-in-home-directory","reason":"This copies the skill into the standard Claude skills directory as an explicit install step. It does not read hidden files or access secrets.","verdict":"false_positive","confidence":0.92},{"id":"filesystem:README_CN.md:47:hidden-file-access","reason":"This copies the skill into the standard Claude skills directory as an explicit install step. It does not read hidden files or access secrets.","verdict":"false_positive","confidence":0.92},{"id":"network:README.md:47:hardcoded-url","reason":"This is a user-facing git clone install command for the public repository. It is not hidden network behavior or data exfiltration.","verdict":"false_positive","confidence":0.95},{"id":"filesystem:README.md:48:hidden-file-in-home-directory","reason":"This copies the skill into the standard Claude skills directory as an explicit install step. It does not read hidden files or access secrets.","verdict":"false_positive","confidence":0.92},{"id":"filesystem:README.md:48:hidden-file-access","reason":"This copies the skill into the standard Claude skills directory as an explicit install step. It does not read hidden files or access secrets.","verdict":"false_positive","confidence":0.92},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:51:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:103:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:137:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown formatting around manifest values or paths. The prose describes optional user-selected tool use, not shell backtick execution.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:175:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown formatting around manifest values or paths. The prose describes optional user-selected tool use, not shell backtick execution.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:176:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:180:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown formatting around manifest values or paths. The prose describes optional user-selected tool use, not shell backtick execution.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:181:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown formatting around manifest values or paths. The prose describes optional user-selected tool use, not shell backtick execution.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:189:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:214:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:220:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:237:ruby-shell-backtick-execution","reason":"The flagged backticks are Markdown code fences for examples and output formats. They do not execute Ruby, shell commands, or user-controlled input.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:242:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:243:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:244:ruby-shell-backtick-execution","reason":"The flagged text uses Markdown inline code or prose labels for manifest fields. It is documentation text, not executable Ruby or shell code.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:validate.py:5:hidden-file-access","reason":"The line is a module docstring listing YAML file extensions. It does not open hidden home-directory files or access secrets.","verdict":"false_positive","confidence":0.98},{"id":"blocker:validate.py:60:system-reconnaissance","reason":"This line builds or prints manifest validation errors. It does not enumerate host details, probe the system, or perform reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:validate.py:292:system-reconnaissance","reason":"This line builds or prints manifest validation errors. It does not enumerate host details, probe the system, or perform reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:validate.py:295:system-reconnaissance","reason":"This line builds or prints manifest validation errors. It does not enumerate host details, probe the system, or perform reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:validate.py:298:system-reconnaissance","reason":"This line builds or prints manifest validation errors. It does not enumerate host details, probe the system, or perform reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:validate.py:301:system-reconnaissance","reason":"This line builds or prints manifest validation errors. It does not enumerate host details, probe the system, or perform reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:validate.py:326:system-reconnaissance","reason":"This line builds or prints manifest validation errors. It does not enumerate host details, probe the system, or perform reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:validate.py:335:system-reconnaissance","reason":"This line builds or prints manifest validation errors. It does not enumerate host details, probe the system, or perform reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:README_CN.md:1:heuristic-high-file-entropy-6-46-bits-possible-b","reason":"The file is readable Markdown with multilingual text, tables, badges, and emoji. The entropy signal is not evidence of encoded or encrypted content.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-40-bits-possible-b","reason":"The file is readable Markdown with multilingual text, tables, badges, and emoji. The entropy signal is not evidence of encoded or encrypted content.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:SKILL.md:83:heuristic-very-high-entropy-string-5-64-bits-lik","reason":"The flagged line is a Chinese warning message with emoji and punctuation. It is readable prose, not an encoded or encrypted payload.","verdict":"false_positive","confidence":0.95},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-90-bits-possible-b","reason":"The file is readable Markdown with multilingual text, tables, badges, and emoji. The entropy signal is not evidence of encoded or encrypted content.","verdict":"false_positive","confidence":0.93}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}