{"data":{"skill":{"slug":"zhanlincui-obsidian-bases","name":"obsidian-bases","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/obsidian-bases","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"707e19d6-3c74-4ba1-9549-7b0166cc4eaf","skill_id":"79a8e583-2040-435e-80ba-942d6bd0e2d3","version":2,"content_hash":"5791cb5bd26b1bff80d3b4d3ee69c96b","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis reported command execution, network, filesystem, sensitive key, weak crypto, and heuristic risks. Manual review found these are Markdown examples, inline code, Obsidian formula references, and official documentation links, with no executable script, prompt injection, credential handling, or data exfiltration evidence.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Dismissed Static Command Execution Findings","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":8,"line_start":8},{"file":"SKILL.md","line_end":62,"line_start":20},{"file":"SKILL.md","line_end":191,"line_start":177}],"confidence":0.98,"description":"The Ruby backtick findings are false positives caused by Markdown inline code, YAML fences, and Obsidian formula examples. The file is documentation and contains no runnable shell, Ruby, or script file.","confidence_reasoning":"The flagged text is inside Markdown prose, tables, or fenced YAML examples. No executable code path or shell invocation exists in the reviewed skill file."},{"title":"Dismissed Static Network Findings","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":618,"line_start":615}],"confidence":0.96,"description":"The hardcoded URLs are reference links to Obsidian help pages. The skill does not fetch these URLs or send data to any network endpoint.","confidence_reasoning":"The URLs appear only in a References section. There is no network API call or instruction to transmit vault content."},{"title":"Dismissed Filesystem, Credential, And Crypto Findings","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":135,"line_start":121},{"file":"SKILL.md","line_end":307,"line_start":303},{"file":"SKILL.md","line_end":530,"line_start":530}],"confidence":0.95,"description":"The scanner matched Obsidian file metadata, a date regex, object helper names, and table text. These are documentation entries, not filesystem access, certificate handling, or cryptographic operations.","confidence_reasoning":"The reviewed lines define Obsidian property names and formula helpers. No certificate files, private keys, hash functions, or direct filesystem reads are present."}],"dangerous_patterns":[],"files_scanned":1,"total_lines":619,"audit_model":"codex","audited_at":"2026-07-01T02:53:05.09+00:00","created_at":"2026-07-01T04:01:05.332574+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":3,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}