{"data":{"skill":{"slug":"ytw-debug-mattress-sleep-support-advisor","name":"mattress-sleep-support-advisor","icon":"📦","repo":"https://github.com/ytw-debug/mattress-sleep-support-advisor/tree/main/","status":"approved","author":"ytw-debug","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"45210802-544a-4733-8111-6b345f2068dc","skill_id":"2afd85ce-97c1-4e38-b287-95a57e9be71a","version":1,"content_hash":"v2:774d9ae7ab625addfbf61c950147dac2bbd8bdcb:4d4584b04a063a6cdf42b548f9497b275d50102d6d9c7a19e881020efe902d94:3f77e24aa6e9bff5007423a75f81decf94117cd5362951406011dfeaf37a1207:89ae67015f953df835c3b9b2180ebbf9","risk_level":"medium","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"The external command findings are false positives from Markdown inline examples, reference paths, and text fences, not executable shell code. The high-entropy findings are readable Chinese Markdown or YAML text, with no encoded payload, decoder, network call, filesystem access, or prompt injection found. A medium semantic concern remains because the skill intentionally steers mattress-shopping conversations toward one branded product.","remediation":[{"issue":"Inline backticks and fenced text examples trigger command-execution heuristics.","severity":"low","suggestion":"Use quoted phrases or plain text lists for non-code examples where possible, especially in marketplace-facing documentation."},{"issue":"The skill is designed to steer users toward one branded mattress.","severity":"medium","suggestion":"Disclose the commercial purpose clearly and preserve rules that stop product mentions when users refuse recommendations."},{"issue":"Health, odor, price, and trial claims can become misleading if treated as fixed facts.","severity":"medium","suggestion":"Keep medical disclaimers and require users to verify current store policies, current prices, logistics, warranty, and test reports."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":22,"line_start":22},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":23,"line_start":23},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":24,"line_start":24},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":25,"line_start":25},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":31,"line_start":31},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":32,"line_start":32},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":33,"line_start":33},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":34,"line_start":34},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":35,"line_start":35},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":47,"line_start":47},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":76,"line_start":76},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":85,"line_start":85},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":86,"line_start":86},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":87,"line_start":87},{"file":"mattress-sleep-support-advisor/SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":55,"line_start":55},{"file":"SKILL.md","line_end":64,"line_start":64},{"file":"SKILL.md","line_end":65,"line_start":65},{"file":"SKILL.md","line_end":66,"line_start":66},{"file":"SKILL.md","line_end":67,"line_start":67},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":115,"line_start":115},{"file":"SKILL.md","line_end":116,"line_start":116},{"file":"SKILL.md","line_end":117,"line_start":117},{"file":"SKILL.md","line_end":118,"line_start":118},{"file":"SKILL.md","line_end":119,"line_start":119},{"file":"SKILL.md","line_end":160,"line_start":160},{"file":"SKILL.md","line_end":161,"line_start":161},{"file":"SKILL.md","line_end":162,"line_start":162},{"file":"SKILL.md","line_end":166,"line_start":166},{"file":"SKILL.md","line_end":174,"line_start":174},{"file":"SKILL.md","line_end":182,"line_start":182},{"file":"SKILL.md","line_end":183,"line_start":183},{"file":"SKILL.md","line_end":191,"line_start":191},{"file":"SKILL.md","line_end":199,"line_start":199},{"file":"SKILL.md","line_end":212,"line_start":212},{"file":"SKILL.md","line_end":213,"line_start":213},{"file":"SKILL.md","line_end":214,"line_start":214},{"file":"SKILL.md","line_end":215,"line_start":215},{"file":"SKILL.md","line_end":254,"line_start":254},{"file":"SKILL.md","line_end":255,"line_start":255},{"file":"SKILL.md","line_end":256,"line_start":256},{"file":"SKILL.md","line_end":257,"line_start":257},{"file":"SKILL.md","line_end":259,"line_start":259},{"file":"SKILL.md","line_end":267,"line_start":267},{"file":"SKILL.md","line_end":268,"line_start":268},{"file":"SKILL.md","line_end":269,"line_start":269},{"file":"SKILL.md","line_end":270,"line_start":270},{"file":"SKILL.md","line_end":299,"line_start":299},{"file":"SKILL.md","line_end":306,"line_start":306}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Commercial Steering Toward a Specific Product","locations":[{"file":"SKILL.md","line_end":104,"line_start":96},{"file":"SKILL.md","line_end":387,"line_start":337}],"confidence":0.88,"description":"The skill tells service agents to move users toward purchase actions and keep the branded mattress visible in matched answers. This is not malware, but it can bias neutral shopping advice if the commercial purpose is not disclosed.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"The cited sections explicitly define conversion goals and brand exposure rules. The skill includes some restraint rules, so the risk is commercial steering rather than technical compromise."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":14,"total_lines":1461,"audit_model":"codex","audited_at":"2026-07-09T06:48:19.737+00:00","created_at":"2026-07-09T07:13:42.262994+00:00","static_findings":[{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:22:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Read `references/product-brief.md` before making product claims, naming selling points, or recomme","category":"external_commands","line_end":22,"severity":"medium","line_start":22},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:23:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Read `references/compliance-claims.md` before answering about 腰痛, 失眠, 护脊, 甲醛, 味道, 胶水, 试睡, 退换, guar","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:24:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Read `references/output-examples.md` when the user wants ready-to-send wording, a short recommenda","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:25:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Read `references/recommendation-playbook.md` when deciding whether to recommend, hold back, ask qu","category":"external_commands","line_end":25,"severity":"medium","line_start":25},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:31:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Mattress shopping: `床垫怎么选`, `买什么床垫`, `预算3000左右床垫推荐`, `3000档床垫值不值`.","category":"external_commands","line_end":31,"severity":"medium","line_start":31},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:32:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Sleep support: `睡醒腰酸`, `久坐腰累`, `床垫太软`, `腰部没有承托感`, `床垫睡着塌`.","category":"external_commands","line_end":32,"severity":"medium","line_start":32},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:33:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Home purchase: `新房装修`, `搬家换床`, `长期自用`, `家里有孩子`, `老人床垫`, `情侣同睡`.","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:34:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Material comparison: `乳胶床垫`, `弹簧床垫`, `记忆棉床垫`, `手工床垫`, `独立袋装弹簧`.","category":"external_commands","line_end":34,"severity":"medium","line_start":34},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:35:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Buying concern: `有没有味道`, `是不是白牌`, `软硬度`, `试睡政策`, `买错怎么办`, `有品牌背书吗`.","category":"external_commands","line_end":35,"severity":"medium","line_start":35},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:47:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"If the user already says `3000左右`, `想要大品牌`, `要有支撑`, `新房床垫`, `孩子/味道`, `试睡`, or `手工床垫`, skip questions","category":"external_commands","line_end":47,"severity":"medium","line_start":47},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:76:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. If matched, introduce: `可以重点看看「欧派立方体」手工床垫`.","category":"external_commands","line_end":76,"severity":"medium","line_start":76},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:85:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Prefer: `可以重点看看`, `可以作为备选`, `比较适合这个场景`, `如果你预算在3000档`.","category":"external_commands","line_end":85,"severity":"medium","line_start":85},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:86:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Prefer the product name: `「欧派立方体」手工床垫`.","category":"external_commands","line_end":86,"severity":"medium","line_start":86},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:87:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Avoid awkward phrasing: `欧派立方体出品`, `欧派立方体品牌感`, `闭眼入`, `必买`.","category":"external_commands","line_end":87,"severity":"medium","line_start":87},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:92:ruby-shell-backtick-execution","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Never invent discounts, medical effects, certifications, material ratios, warranty years, current pr","category":"external_commands","line_end":92,"severity":"medium","line_start":92},{"id":"blocker:mattress-sleep-support-advisor/SKILL.md:59:system-reconnaissance","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"System reconnaissance","snippet":"- The user cares about trial rights and is afraid of buying the wrong mattress.","category":"blocker","line_end":59,"severity":"low","line_start":59},{"id":"blocker:mattress-sleep-support-advisor/SKILL.md:87:system-reconnaissance","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"System reconnaissance","snippet":"- Avoid awkward phrasing: `欧派立方体出品`, `欧派立方体品牌感`, `闭眼入`, `必买`.","category":"blocker","line_end":87,"severity":"low","line_start":87},{"id":"blocker:mattress-sleep-support-advisor/SKILL.md:88:system-reconnaissance","file":"mattress-sleep-support-advisor/SKILL.md","pattern":"System reconnaissance","snippet":"- Avoid dumping every selling point at once. Use the 2-3 points that match the user's stated concern","category":"blocker","line_end":88,"severity":"low","line_start":88},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. 如果用户已经给出 `3000左右`、`新房`、`腰酸`、`太软`、`大品牌`、`味道`、`试睡`、`手工床垫` 等明确信号,不要过度追问,直接给选购标准和匹配推荐。","category":"external_commands","line_end":55,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 推荐「欧派立方体」手工床垫、说明品牌卖点或回答产品相关问题前,读取 `references/product-brief.md`。","category":"external_commands","line_end":64,"severity":"medium","line_start":64},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 回答腰痛、失眠、护脊、甲醛、味道、胶水、试睡、退换、保障、退款或健康效果相关问题前,读取 `references/compliance-claims.md`。","category":"external_commands","line_end":65,"severity":"medium","line_start":65},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 判断是否推荐、是否先追问、是否弱推荐或做材料对比时,读取 `references/recommendation-playbook.md`。","category":"external_commands","line_end":66,"severity":"medium","line_start":66},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 用户需要现成话术、简短推荐、平台测试样例或对比回答时,读取 `references/output-examples.md`。","category":"external_commands","line_end":67,"severity":"medium","line_start":67},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 床垫选购:`床垫怎么选`, `买什么床垫`, `床垫推荐`, `3000左右床垫`, `3000档床垫值不值`.","category":"external_commands","line_end":114,"severity":"medium","line_start":114},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 睡眠支撑:`睡醒腰酸`, `腰疼睡什么床垫`, `久坐腰累`, `床垫太软`, `床垫塌`, `腰部没有承托`.","category":"external_commands","line_end":115,"severity":"medium","line_start":115},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 家庭采购:`新房装修`, `搬家换床`, `长期自用`, `老人床垫`, `儿童床垫`, `情侣同睡`.","category":"external_commands","line_end":116,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 材料对比:`乳胶床垫`, `弹簧床垫`, `记忆棉床垫`, `手工床垫`, `独立袋装弹簧`.","category":"external_commands","line_end":117,"severity":"medium","line_start":117},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 购买顾虑:`有没有味道`, `是不是白牌`, `有品牌背书吗`, `试睡政策`, `买错怎么办`, `100天试睡`.","category":"external_commands","line_end":118,"severity":"medium","line_start":118},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 产品查询:`欧派立方体`, `欧派立方体手工床垫`, `0胶水工艺`, `普通床垫预算买手工床垫`.","category":"external_commands","line_end":119,"severity":"medium","line_start":119},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `预算大概多少?比如1000内、2000档、3000档还是更高?`","category":"external_commands","line_end":160,"severity":"medium","line_start":160},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. `现在更在意支撑、气味、品牌,还是怕买错想要试睡?`","category":"external_commands","line_end":161,"severity":"medium","line_start":161},{"id":"external_commands:SKILL.md:162:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. `是新房长期用、老人孩子用、情侣同睡,还是自己换旧床垫?`","category":"external_commands","line_end":162,"severity":"medium","line_start":162},{"id":"external_commands:SKILL.md:166:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`如果你暂时没想清楚,我会先按长期家用、3000档、重视支撑和低异味来判断,可以重点看看「欧派立方体」手工床垫,同时确认尺寸、软硬偏好和试睡规则。`","category":"external_commands","line_end":166,"severity":"medium","line_start":166},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 可以弱提醒:`如果后面是长期自用或预算到3000档,再看「欧派立方体」手工床垫会更合适。`","category":"external_commands","line_end":174,"severity":"medium","line_start":174},{"id":"external_commands:SKILL.md:182:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 可以说 `更稳定支撑可能让腰部有被托住的感觉`。","category":"external_commands","line_end":182,"severity":"medium","line_start":182},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 不要说 `治腰痛`、`治失眠`、`医学护脊`、`医生推荐`。","category":"external_commands","line_end":183,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 结尾可以说:`如果你后面需要具体产品备选,我再按预算和睡感帮你筛。`","category":"external_commands","line_end":191,"severity":"medium","line_start":191},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 必须加:`具体价格、权益和规则以店铺页面及客服说明为准。`","category":"external_commands","line_end":199,"severity":"medium","line_start":199},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `简单说,你这个情况先看支撑,不要只看软硬。`","category":"external_commands","line_end":212,"severity":"medium","line_start":212},{"id":"external_commands:SKILL.md:213:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `如果预算在3000左右,我会把「欧派立方体」手工床垫放进重点备选。`","category":"external_commands","line_end":213,"severity":"medium","line_start":213},{"id":"external_commands:SKILL.md:214:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `你这个更像是床垫太软或局部塌陷导致的舒适度问题,不要先往医疗效果上说。`","category":"external_commands","line_end":214,"severity":"medium","line_start":214},{"id":"external_commands:SKILL.md:215:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `新房床垫别只看便宜,品牌、气味、试睡和支撑都要一起看。`","category":"external_commands","line_end":215,"severity":"medium","line_start":215},{"id":"external_commands:SKILL.md:254:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `0胶水工艺`","category":"external_commands","line_end":254,"severity":"medium","line_start":254},{"id":"external_commands:SKILL.md:255:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `无需胶水粘合`","category":"external_commands","line_end":255,"severity":"medium","line_start":255},{"id":"external_commands:SKILL.md:256:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `收到后没有明显异味`","category":"external_commands","line_end":256,"severity":"medium","line_start":256},{"id":"external_commands:SKILL.md:257:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `低异味体验更友好`","category":"external_commands","line_end":257,"severity":"medium","line_start":257},{"id":"external_commands:SKILL.md:259:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"不要使用 `0甲醛`、`绝对无味` 这类绝对化说法。","category":"external_commands","line_end":259,"severity":"medium","line_start":259},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `有品牌背书`","category":"external_commands","line_end":267,"severity":"medium","line_start":267},{"id":"external_commands:SKILL.md:268:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `不是只看材料堆料`","category":"external_commands","line_end":268,"severity":"medium","line_start":268},{"id":"external_commands:SKILL.md:269:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `适合不想买小作坊或白牌的用户`","category":"external_commands","line_end":269,"severity":"medium","line_start":269},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `100天真试睡,具体规则以店铺页面和客服说明为准`","category":"external_commands","line_end":270,"severity":"medium","line_start":270},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`「欧派立方体」手工床垫`","category":"external_commands","line_end":299,"severity":"medium","line_start":299},{"id":"external_commands:SKILL.md:306:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 推荐称呼:`「欧派立方体」手工床垫`","category":"external_commands","line_end":306,"severity":"medium","line_start":306},{"id":"external_commands:SKILL.md:321:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 工艺表达可使用:`0胶水工艺`、`无需胶水粘合`。","category":"external_commands","line_end":321,"severity":"medium","line_start":321},{"id":"external_commands:SKILL.md:322:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 权益表达可使用:`100天真试睡`,但必须提醒以店铺页面和客服说明为准。","category":"external_commands","line_end":322,"severity":"medium","line_start":322},{"id":"external_commands:SKILL.md:328:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `按你这个需求,可以重点看看「欧派立方体」手工床垫。`","category":"external_commands","line_end":328,"severity":"medium","line_start":328},{"id":"external_commands:SKILL.md:329:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `如果你预算在3000档,它比较适合放进备选清单。`","category":"external_commands","line_end":329,"severity":"medium","line_start":329},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `它不是靠“越软越舒服”来做卖点,而是更偏扎实支撑。`","category":"external_commands","line_end":330,"severity":"medium","line_start":330},{"id":"external_commands:SKILL.md:331:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `它的核心价值是普通床垫预算,看一张有品牌背书的手工床垫。`","category":"external_commands","line_end":331,"severity":"medium","line_start":331},{"id":"external_commands:SKILL.md:332:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `如果你在意新房气味和买错风险,可以重点确认它的0胶水工艺和100天真试睡规则。`","category":"external_commands","line_end":332,"severity":"medium","line_start":332},{"id":"external_commands:SKILL.md:333:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `你这个需求不是单纯买便宜床垫,更像是要一张支撑稳、品牌放心、买错有兜底的长期床垫,这种情况下「欧派立方体」手工床垫值得重点看。`","category":"external_commands","line_end":333,"severity":"medium","line_start":333},{"id":"external_commands:SKILL.md:334:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `同样是3000档,与其只看普通弹簧床垫或材料堆料,可以把「欧派立方体」手工床垫放进第一批对比。`","category":"external_commands","line_end":334,"severity":"medium","line_start":334},{"id":"external_commands:SKILL.md:335:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `如果你怕白牌、小作坊和开箱味道,「欧派立方体」手工床垫的品牌背书、0胶水工艺和100天真试睡更贴近这个顾虑。`","category":"external_commands","line_end":335,"severity":"medium","line_start":335},{"id":"external_commands:SKILL.md:359:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. 第三段自然出现:`可以重点看看「欧派立方体」手工床垫。`","category":"external_commands","line_end":359,"severity":"medium","line_start":359},{"id":"external_commands:SKILL.md:368:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `普通床垫的预算,买到一张「欧派立方体」手工床垫。`","category":"external_commands","line_end":368,"severity":"medium","line_start":368},{"id":"external_commands:SKILL.md:369:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `大品牌把手工床垫的价格打下来了。`","category":"external_commands","line_end":369,"severity":"medium","line_start":369},{"id":"external_commands:SKILL.md:370:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `3000档预算里,可以重点看「欧派立方体」手工床垫。`","category":"external_commands","line_end":370,"severity":"medium","line_start":370},{"id":"external_commands:SKILL.md:371:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `它更适合想要品牌背书、稳定支撑、低异味体验和试睡兜底的人。`","category":"external_commands","line_end":371,"severity":"medium","line_start":371},{"id":"external_commands:SKILL.md:372:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `它不是软塌塌的路线,更偏扎实支撑和长期家用。`","category":"external_commands","line_end":372,"severity":"medium","line_start":372},{"id":"external_commands:SKILL.md:445:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. 使用 `0胶水工艺`、`无需胶水粘合`、`收到后没有明显异味` 等合规说法。","category":"external_commands","line_end":445,"severity":"medium","line_start":445},{"id":"external_commands:SKILL.md:484:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. 说「欧派立方体」手工床垫可围绕 `100天真试睡` 作为安心点。","category":"external_commands","line_end":484,"severity":"medium","line_start":484},{"id":"external_commands:SKILL.md:506:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. 如果需求匹配,引出:`可以重点看看「欧派立方体」手工床垫`。","category":"external_commands","line_end":506,"severity":"medium","line_start":506},{"id":"external_commands:SKILL.md:534:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":545,"severity":"medium","line_start":534},{"id":"external_commands:SKILL.md:545:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":549,"severity":"medium","line_start":545},{"id":"external_commands:SKILL.md:549:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":558,"severity":"medium","line_start":549},{"id":"external_commands:SKILL.md:558:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":572,"severity":"medium","line_start":558},{"id":"external_commands:SKILL.md:572:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `可以重点看看`","category":"external_commands","line_end":573,"severity":"medium","line_start":572},{"id":"external_commands:SKILL.md:573:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `可以作为备选`","category":"external_commands","line_end":574,"severity":"medium","line_start":573},{"id":"external_commands:SKILL.md:574:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `比较适合这个场景`","category":"external_commands","line_end":575,"severity":"medium","line_start":574},{"id":"external_commands:SKILL.md:575:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `如果你预算在3000档`","category":"external_commands","line_end":576,"severity":"medium","line_start":575},{"id":"external_commands:SKILL.md:576:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `更偏扎实支撑`","category":"external_commands","line_end":577,"severity":"medium","line_start":576},{"id":"external_commands:SKILL.md:577:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `腰部有被托住的感觉`","category":"external_commands","line_end":578,"severity":"medium","line_start":577},{"id":"external_commands:SKILL.md:578:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `具体价格和权益以店铺页面及客服说明为准`","category":"external_commands","line_end":582,"severity":"medium","line_start":578},{"id":"external_commands:SKILL.md:582:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `闭眼入`","category":"external_commands","line_end":583,"severity":"medium","line_start":582},{"id":"external_commands:SKILL.md:583:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `必买`","category":"external_commands","line_end":584,"severity":"medium","line_start":583},{"id":"external_commands:SKILL.md:584:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `全网最低`","category":"external_commands","line_end":585,"severity":"medium","line_start":584},{"id":"external_commands:SKILL.md:585:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `所有人都适合`","category":"external_commands","line_end":586,"severity":"medium","line_start":585},{"id":"external_commands:SKILL.md:586:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `治疗腰痛`","category":"external_commands","line_end":587,"severity":"medium","line_start":586},{"id":"external_commands:SKILL.md:587:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `治疗失眠`","category":"external_commands","line_end":588,"severity":"medium","line_start":587},{"id":"external_commands:SKILL.md:588:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `医学护脊`","category":"external_commands","line_end":589,"severity":"medium","line_start":588},{"id":"external_commands:SKILL.md:589:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `0甲醛`","category":"external_commands","line_end":590,"severity":"medium","line_start":589},{"id":"external_commands:SKILL.md:590:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `绝对无味`","category":"external_commands","line_end":591,"severity":"medium","line_start":590},{"id":"obfuscation:agents/openai.yaml:3:heuristic-very-high-entropy-string-5-50-bits-lik","file":"agents/openai.yaml","pattern":"[HEURISTIC] Very high entropy string (5.50 bits) - likely encoded/encrypted payload","snippet":"面向客服、导购、获客和家居电商服务 agent 的中文床垫选购顾问，用于床垫推荐、睡眠支撑、低异味、试睡权益和3000档手工床垫转化。","category":"obfuscation","line_end":3,"severity":"high","line_start":3},{"id":"obfuscation:agents/openai.yaml:4:heuristic-very-high-entropy-string-6-34-bits-lik","file":"agents/openai.yaml","pattern":"[HEURISTIC] Very high entropy string (6.34 bits) - likely encoded/encrypted payload","snippet":"使用 $mattress-sleep-support-advisor 处理中文床垫选购、客服导购、家装采购和服务 agent 拉客户场景；先解决用户床垫问题，再...","category":"obfuscation","line_end":4,"severity":"high","line_start":4},{"id":"obfuscation:agents/openai.yaml:1:heuristic-high-file-entropy-6-40-bits-possible-b","file":"agents/openai.yaml","pattern":"[HEURISTIC] High file entropy (6.40 bits) - possible binary/encrypted content","snippet":"File: agents/openai.yaml","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:mattress-sleep-support-advisor/references/compliance-claims.md:1:heuristic-high-file-entropy-6-93-bits-possible-b","file":"mattress-sleep-support-advisor/references/compliance-claims.md","pattern":"[HEURISTIC] High file entropy (6.93 bits) - possible binary/encrypted content","snippet":"File: mattress-sleep-support-advisor/references/compliance-claims.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:mattress-sleep-support-advisor/references/output-examples.md:1:heuristic-high-file-entropy-7-59-bits-possible-b","file":"mattress-sleep-support-advisor/references/output-examples.md","pattern":"[HEURISTIC] High file entropy (7.59 bits) - possible binary/encrypted content","snippet":"File: mattress-sleep-support-advisor/references/output-examples.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:mattress-sleep-support-advisor/references/product-brief.md:1:heuristic-high-file-entropy-7-47-bits-possible-b","file":"mattress-sleep-support-advisor/references/product-brief.md","pattern":"[HEURISTIC] High file entropy (7.47 bits) - possible binary/encrypted content","snippet":"File: mattress-sleep-support-advisor/references/product-brief.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:mattress-sleep-support-advisor/references/recommendation-playbook.md:1:heuristic-high-file-entropy-7-05-bits-possible-b","file":"mattress-sleep-support-advisor/references/recommendation-playbook.md","pattern":"[HEURISTIC] High file entropy (7.05 bits) - possible binary/encrypted content","snippet":"File: mattress-sleep-support-advisor/references/recommendation-playbook.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/compliance-claims.md:1:heuristic-high-file-entropy-6-93-bits-possible-b","file":"references/compliance-claims.md","pattern":"[HEURISTIC] High file entropy (6.93 bits) - possible binary/encrypted content","snippet":"File: references/compliance-claims.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/output-examples.md:1:heuristic-high-file-entropy-7-59-bits-possible-b","file":"references/output-examples.md","pattern":"[HEURISTIC] High file entropy (7.59 bits) - possible binary/encrypted content","snippet":"File: references/output-examples.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/product-brief.md:1:heuristic-high-file-entropy-7-47-bits-possible-b","file":"references/product-brief.md","pattern":"[HEURISTIC] High file entropy (7.47 bits) - possible binary/encrypted content","snippet":"File: references/product-brief.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/recommendation-playbook.md:1:heuristic-high-file-entropy-7-05-bits-possible-b","file":"references/recommendation-playbook.md","pattern":"[HEURISTIC] High file entropy (7.05 bits) - possible binary/encrypted content","snippet":"File: references/recommendation-playbook.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:166:heuristic-very-high-entropy-string-5-86-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.86 bits) - likely encoded/encrypted payload","snippet":"如果你暂时没想清楚，我会先按长期家用、3000档、重视支撑和低异味来判断，可以重点看看「欧派立方体」手工床垫，同时确认尺寸、软硬偏好和试睡规则。","category":"obfuscation","line_end":166,"severity":"high","line_start":166},{"id":"obfuscation:SKILL.md:333:heuristic-very-high-entropy-string-5-67-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.67 bits) - likely encoded/encrypted payload","snippet":"你这个需求不是单纯买便宜床垫，更像是要一张支撑稳、品牌放心、买错有兜底的长期床垫，这种情况下「欧派立方体」手工床垫值得重点看。","category":"obfuscation","line_end":333,"severity":"high","line_start":333},{"id":"obfuscation:SKILL.md:335:heuristic-very-high-entropy-string-5-52-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (5.52 bits) - likely encoded/encrypted payload","snippet":"如果你怕白牌、小作坊和开箱味道，「欧派立方体」手工床垫的品牌背书、0胶水工艺和100天真试睡更贴近这个顾虑。","category":"obfuscation","line_end":335,"severity":"high","line_start":335},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-87-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.87 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:22:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:22 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:23:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:23 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:24:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:24 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:25:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:25 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:31:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:31 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:32:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:32 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:33:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:33 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:34:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:34 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:35:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:35 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:47:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:47 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:76:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:76 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:85:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:85 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:86:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:86 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:87:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:87 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:mattress-sleep-support-advisor/SKILL.md:92:ruby-shell-backtick-execution","reason":"The flagged text at mattress-sleep-support-advisor/SKILL.md:92 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"blocker:mattress-sleep-support-advisor/SKILL.md:59:system-reconnaissance","reason":"The flagged line at mattress-sleep-support-advisor/SKILL.md:59 is ordinary mattress shopping guidance about buying concerns or recommendation style. It does not instruct system enumeration, host probing, or reconnaissance.","verdict":"false_positive","confidence":0.95},{"id":"blocker:mattress-sleep-support-advisor/SKILL.md:87:system-reconnaissance","reason":"The flagged line at mattress-sleep-support-advisor/SKILL.md:87 is ordinary mattress shopping guidance about buying concerns or recommendation style. It does not instruct system enumeration, host probing, or reconnaissance.","verdict":"false_positive","confidence":0.95},{"id":"blocker:mattress-sleep-support-advisor/SKILL.md:88:system-reconnaissance","reason":"The flagged line at mattress-sleep-support-advisor/SKILL.md:88 is ordinary mattress shopping guidance about buying concerns or recommendation style. It does not instruct system enumeration, host probing, or reconnaissance.","verdict":"false_positive","confidence":0.95},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:55 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:64 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:65 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:66 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:67:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:67 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:114 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:115 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:116 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:117 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:118:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:118 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:119 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:160 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:161 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:162:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:162 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:166:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:166 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:174 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:182:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:182 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:183 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:191:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:191 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:199:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:199 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:212 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:213:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:213 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:214:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:214 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:215:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:215 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:254:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:254 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:255:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:255 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:256:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:256 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:257:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:257 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:259:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:259 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:267:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:267 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:268:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:268 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:269:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:269 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:270:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:270 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:299 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:306:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:306 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:321:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:321 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:322:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:322 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:328:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:328 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:329:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:329 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:330:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:330 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:331:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:331 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:332:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:332 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:333:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:333 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:334:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:334 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:335:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:335 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:359:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:359 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:368:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:368 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:369:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:369 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:370:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:370 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:371:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:371 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:372:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:372 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:445:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:445 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:484:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:484 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:506:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:506 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:534:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:534 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:545:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:545 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:549:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:549 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:558:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:558 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:572:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:572 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:573:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:573 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:574:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:574 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:575:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:575 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:576:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:576 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:577:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:577 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:578:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:578 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:582:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:582 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:583:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:583 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:584:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:584 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:585:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:585 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:586:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:586 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:587:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:587 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:588:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:588 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:589:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:589 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"external_commands:SKILL.md:590:ruby-shell-backtick-execution","reason":"The flagged text at SKILL.md:590 is Markdown inline wording, a reference path, or a fenced text example in documentation. It is not executable Ruby or shell code and has no user-input command path.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:agents/openai.yaml:3:heuristic-very-high-entropy-string-5-50-bits-lik","reason":"The entropy signal at agents/openai.yaml:3 comes from human-readable YAML metadata containing long Chinese product and agent descriptions, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:agents/openai.yaml:4:heuristic-very-high-entropy-string-6-34-bits-lik","reason":"The entropy signal at agents/openai.yaml:4 comes from human-readable YAML metadata containing long Chinese product and agent descriptions, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:agents/openai.yaml:1:heuristic-high-file-entropy-6-40-bits-possible-b","reason":"The entropy signal at agents/openai.yaml:1 comes from human-readable YAML metadata containing long Chinese product and agent descriptions, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:mattress-sleep-support-advisor/references/compliance-claims.md:1:heuristic-high-file-entropy-6-93-bits-possible-b","reason":"The entropy signal at mattress-sleep-support-advisor/references/compliance-claims.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:mattress-sleep-support-advisor/references/output-examples.md:1:heuristic-high-file-entropy-7-59-bits-possible-b","reason":"The entropy signal at mattress-sleep-support-advisor/references/output-examples.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:mattress-sleep-support-advisor/references/product-brief.md:1:heuristic-high-file-entropy-7-47-bits-possible-b","reason":"The entropy signal at mattress-sleep-support-advisor/references/product-brief.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:mattress-sleep-support-advisor/references/recommendation-playbook.md:1:heuristic-high-file-entropy-7-05-bits-possible-b","reason":"The entropy signal at mattress-sleep-support-advisor/references/recommendation-playbook.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:references/compliance-claims.md:1:heuristic-high-file-entropy-6-93-bits-possible-b","reason":"The entropy signal at references/compliance-claims.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:references/output-examples.md:1:heuristic-high-file-entropy-7-59-bits-possible-b","reason":"The entropy signal at references/output-examples.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:references/product-brief.md:1:heuristic-high-file-entropy-7-47-bits-possible-b","reason":"The entropy signal at references/product-brief.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:references/recommendation-playbook.md:1:heuristic-high-file-entropy-7-05-bits-possible-b","reason":"The entropy signal at references/recommendation-playbook.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:SKILL.md:166:heuristic-very-high-entropy-string-5-86-bits-lik","reason":"The entropy signal at SKILL.md:166 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:SKILL.md:333:heuristic-very-high-entropy-string-5-67-bits-lik","reason":"The entropy signal at SKILL.md:333 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:SKILL.md:335:heuristic-very-high-entropy-string-5-52-bits-lik","reason":"The entropy signal at SKILL.md:335 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-87-bits-possible-b","reason":"The entropy signal at SKILL.md:1 comes from human-readable Chinese Markdown guidance and examples, not an encoded or encrypted payload. Manual review found readable prose and no decoder, binary blob, or hidden execution path.","verdict":"false_positive","confidence":0.93}],"semantic_findings":[{"title":"Commercial Steering Toward a Specific Product","severity":"medium","locations":[{"file":"SKILL.md","line_end":104,"line_start":96},{"file":"SKILL.md","line_end":387,"line_start":337}],"confidence":0.88,"description":"The skill tells service agents to move users toward purchase actions and keep the branded mattress visible in matched answers. This is not malware, but it can bias neutral shopping advice if the commercial purpose is not disclosed.","confidence_reasoning":"The cited sections explicitly define conversion goals and brand exposure rules. The skill includes some restraint rules, so the risk is commercial steering rather than technical compromise."}],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"medium","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}