{"data":{"skill":{"slug":"zhanlincui-doc-coauthoring","name":"doc-coauthoring","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/doc-coauthoring","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"7bb40152-5cec-4e2b-a6f9-86790eb9e5e0","skill_id":"88607a17-b1e4-42f7-8066-6a00f91e62be","version":1,"content_hash":"1ca3db9df3cc27a5e0e0dde873994995","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All 18 static findings are false positives. The skill is a documentation co-authoring workflow that guides users through structured document creation. Tool references like `create_file` and `str_replace` were misidentified as external shell commands. Documentation type keywords (spec, proposal, decision) were incorrectly flagged as cryptographic algorithms. The single network reference to claude.ai is legitimate for reader testing. No actual security risks identified.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":376,"audit_model":"claude","audited_at":"2026-02-24T09:39:45.793+00:00","created_at":"2026-02-24T15:48:58.530583+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}