{"data":{"skill":{"slug":"zhanlincui-frontend-design","name":"frontend-design","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/frontend-design","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"61656c91-0575-499e-8f34-878b8538440f","skill_id":"16540055-07f3-4bd4-8f10-7ec494b13176","version":4,"content_hash":"v2:64ca8af0f54a325752f08bd54e52151061ea659a:6cc26ebc78673680cb3960e10192dcbd7c4dff74e7da9a13f1c343e2cc86121b:e9fcdc92a38c745dbf354f9ebb23e6b331ec73f96ff9c297677368c8ddc4d5d7:322bb843d83d8ecf8fff7bc24bb10ce8","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives from design guidance language in SKILL.md. No prompt injection, data exfiltration, command execution, or harmful intent was found in the reviewed file.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":43,"audit_model":"codex","audited_at":"2026-07-08T13:03:32.149+00:00","created_at":"2026-07-08T14:54:47.055731+00:00","static_findings":[{"id":"blocker:SKILL.md:7:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"This skill guides creation of distinctive, production-grade frontend interfaces that avoid generic \"","category":"blocker","line_end":7,"severity":"low","line_start":7},{"id":"blocker:SKILL.md:30:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Typography**: Choose fonts that are beautiful, unique, and interesting. Avoid generic fonts like","category":"blocker","line_end":30,"severity":"low","line_start":30},{"id":"blocker:SKILL.md:34:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Backgrounds & Visual Details**: Create atmosphere and depth rather than defaulting to solid colo","category":"blocker","line_end":34,"severity":"low","line_start":34}],"finding_verdicts":[{"id":"blocker:SKILL.md:7:system-reconnaissance","reason":"Line 7 describes visual design goals and working frontend implementation. It does not request host inspection, system discovery, credential access, or reconnaissance.","verdict":"false_positive","confidence":0.97},{"id":"blocker:SKILL.md:30:system-reconnaissance","reason":"Line 30 gives typography advice for frontend aesthetics. It contains no instruction to inspect local systems, enumerate resources, or collect environment data.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:34:system-reconnaissance","reason":"Line 34 recommends visual background effects and textures. This is design guidance, not system reconnaissance or operational security activity.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}