{"data":{"skill":{"slug":"zhanlincui-obsidian-markdown","name":"obsidian-markdown","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/obsidian-markdown","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"6feb39bf-3e6a-4b44-acb1-7bbc7e045444","skill_id":"b25e77cf-c997-4533-8ca7-a25c7d8d140c","version":1,"content_hash":"70b4b943208ee5a9417b93dfcb64946c","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"All static security findings are false positives. The skill is a documentation/reference guide for Obsidian Markdown syntax. The 'external_commands' alerts are markdown backtick syntax being misidentified as shell commands. The 'network' findings are legitimate documentation URLs (commonmark.org, help.obsidian.md) used as references. The 'weak_crypto' and 'system_reconnaissance' alerts are YAML frontmatter and Obsidian block IDs being misinterpreted.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":29,"line_start":22},{"file":"SKILL.md","line_end":33,"line_start":29},{"file":"SKILL.md","line_end":40,"line_start":33},{"file":"SKILL.md","line_end":46,"line_start":40},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":47,"line_start":46},{"file":"SKILL.md","line_end":47,"line_start":47},{"file":"SKILL.md","line_end":47,"line_start":47},{"file":"SKILL.md","line_end":48,"line_start":47},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":50,"line_start":49},{"file":"SKILL.md","line_end":50,"line_start":50},{"file":"SKILL.md","line_end":51,"line_start":50},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":56,"line_start":51},{"file":"SKILL.md","line_end":60,"line_start":56},{"file":"SKILL.md","line_end":62,"line_start":60},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":68,"line_start":62},{"file":"SKILL.md","line_end":72,"line_start":68},{"file":"SKILL.md","line_end":76,"line_start":72},{"file":"SKILL.md","line_end":81,"line_start":76},{"file":"SKILL.md","line_end":85,"line_start":81},{"file":"SKILL.md","line_end":88,"line_start":85},{"file":"SKILL.md","line_end":90,"line_start":88},{"file":"SKILL.md","line_end":91,"line_start":90},{"file":"SKILL.md","line_end":93,"line_start":91},{"file":"SKILL.md","line_end":96,"line_start":93},{"file":"SKILL.md","line_end":101,"line_start":96},{"file":"SKILL.md","line_end":105,"line_start":101},{"file":"SKILL.md","line_end":108,"line_start":105},{"file":"SKILL.md","line_end":112,"line_start":108},{"file":"SKILL.md","line_end":117,"line_start":112},{"file":"SKILL.md","line_end":119,"line_start":117},{"file":"SKILL.md","line_end":125,"line_start":119},{"file":"SKILL.md","line_end":129,"line_start":125},{"file":"SKILL.md","line_end":133,"line_start":129},{"file":"SKILL.md","line_end":137,"line_start":133},{"file":"SKILL.md","line_end":141,"line_start":137},{"file":"SKILL.md","line_end":144,"line_start":141},{"file":"SKILL.md","line_end":148,"line_start":144},{"file":"SKILL.md","line_end":151,"line_start":148},{"file":"SKILL.md","line_end":155,"line_start":151},{"file":"SKILL.md","line_end":159,"line_start":155},{"file":"SKILL.md","line_end":163,"line_start":159},{"file":"SKILL.md","line_end":165,"line_start":163},{"file":"SKILL.md","line_end":168,"line_start":165},{"file":"SKILL.md","line_end":174,"line_start":168},{"file":"SKILL.md","line_end":178,"line_start":174},{"file":"SKILL.md","line_end":179,"line_start":178},{"file":"SKILL.md","line_end":181,"line_start":179},{"file":"SKILL.md","line_end":182,"line_start":181},{"file":"SKILL.md","line_end":188,"line_start":182},{"file":"SKILL.md","line_end":196,"line_start":188},{"file":"SKILL.md","line_end":200,"line_start":196},{"file":"SKILL.md","line_end":206,"line_start":200},{"file":"SKILL.md","line_end":210,"line_start":206},{"file":"SKILL.md","line_end":214,"line_start":210},{"file":"SKILL.md","line_end":220,"line_start":214},{"file":"SKILL.md","line_end":221,"line_start":220},{"file":"SKILL.md","line_end":221,"line_start":221},{"file":"SKILL.md","line_end":221,"line_start":221},{"file":"SKILL.md","line_end":222,"line_start":221},{"file":"SKILL.md","line_end":223,"line_start":222},{"file":"SKILL.md","line_end":224,"line_start":223},{"file":"SKILL.md","line_end":224,"line_start":224},{"file":"SKILL.md","line_end":224,"line_start":224},{"file":"SKILL.md","line_end":225,"line_start":224},{"file":"SKILL.md","line_end":225,"line_start":225},{"file":"SKILL.md","line_end":225,"line_start":225},{"file":"SKILL.md","line_end":226,"line_start":225},{"file":"SKILL.md","line_end":226,"line_start":226},{"file":"SKILL.md","line_end":226,"line_start":226},{"file":"SKILL.md","line_end":227,"line_start":226},{"file":"SKILL.md","line_end":227,"line_start":227},{"file":"SKILL.md","line_end":227,"line_start":227},{"file":"SKILL.md","line_end":228,"line_start":227},{"file":"SKILL.md","line_end":228,"line_start":228},{"file":"SKILL.md","line_end":228,"line_start":228},{"file":"SKILL.md","line_end":229,"line_start":228},{"file":"SKILL.md","line_end":229,"line_start":229},{"file":"SKILL.md","line_end":230,"line_start":229},{"file":"SKILL.md","line_end":231,"line_start":230},{"file":"SKILL.md","line_end":232,"line_start":231},{"file":"SKILL.md","line_end":232,"line_start":232},{"file":"SKILL.md","line_end":236,"line_start":232},{"file":"SKILL.md","line_end":241,"line_start":236},{"file":"SKILL.md","line_end":247,"line_start":241},{"file":"SKILL.md","line_end":256,"line_start":247},{"file":"SKILL.md","line_end":260,"line_start":256},{"file":"SKILL.md","line_end":269,"line_start":260},{"file":"SKILL.md","line_end":273,"line_start":269},{"file":"SKILL.md","line_end":279,"line_start":273},{"file":"SKILL.md","line_end":283,"line_start":279},{"file":"SKILL.md","line_end":290,"line_start":283},{"file":"SKILL.md","line_end":296,"line_start":290},{"file":"SKILL.md","line_end":297,"line_start":296},{"file":"SKILL.md","line_end":298,"line_start":297},{"file":"SKILL.md","line_end":298,"line_start":298},{"file":"SKILL.md","line_end":299,"line_start":298},{"file":"SKILL.md","line_end":303,"line_start":299},{"file":"SKILL.md","line_end":304,"line_start":303},{"file":"SKILL.md","line_end":306,"line_start":304},{"file":"SKILL.md","line_end":308,"line_start":306},{"file":"SKILL.md","line_end":313,"line_start":308},{"file":"SKILL.md","line_end":315,"line_start":313},{"file":"SKILL.md","line_end":319,"line_start":315},{"file":"SKILL.md","line_end":320,"line_start":319},{"file":"SKILL.md","line_end":326,"line_start":320},{"file":"SKILL.md","line_end":327,"line_start":326},{"file":"SKILL.md","line_end":329,"line_start":327},{"file":"SKILL.md","line_end":331,"line_start":329},{"file":"SKILL.md","line_end":332,"line_start":331},{"file":"SKILL.md","line_end":333,"line_start":332},{"file":"SKILL.md","line_end":337,"line_start":333},{"file":"SKILL.md","line_end":342,"line_start":337},{"file":"SKILL.md","line_end":346,"line_start":342},{"file":"SKILL.md","line_end":350,"line_start":346},{"file":"SKILL.md","line_end":355,"line_start":350},{"file":"SKILL.md","line_end":359,"line_start":355},{"file":"SKILL.md","line_end":365,"line_start":359},{"file":"SKILL.md","line_end":367,"line_start":365},{"file":"SKILL.md","line_end":371,"line_start":367},{"file":"SKILL.md","line_end":378,"line_start":371},{"file":"SKILL.md","line_end":382,"line_start":378},{"file":"SKILL.md","line_end":390,"line_start":382},{"file":"SKILL.md","line_end":394,"line_start":390},{"file":"SKILL.md","line_end":395,"line_start":394},{"file":"SKILL.md","line_end":402,"line_start":395},{"file":"SKILL.md","line_end":403,"line_start":402},{"file":"SKILL.md","line_end":407,"line_start":403},{"file":"SKILL.md","line_end":408,"line_start":407},{"file":"SKILL.md","line_end":412,"line_start":408},{"file":"SKILL.md","line_end":413,"line_start":412},{"file":"SKILL.md","line_end":417,"line_start":413},{"file":"SKILL.md","line_end":418,"line_start":417},{"file":"SKILL.md","line_end":424,"line_start":418},{"file":"SKILL.md","line_end":425,"line_start":424},{"file":"SKILL.md","line_end":429,"line_start":425},{"file":"SKILL.md","line_end":439,"line_start":429},{"file":"SKILL.md","line_end":443,"line_start":439},{"file":"SKILL.md","line_end":450,"line_start":443},{"file":"SKILL.md","line_end":454,"line_start":450},{"file":"SKILL.md","line_end":460,"line_start":454},{"file":"SKILL.md","line_end":466,"line_start":460},{"file":"SKILL.md","line_end":483,"line_start":466},{"file":"SKILL.md","line_end":489,"line_start":483},{"file":"SKILL.md","line_end":490,"line_start":489},{"file":"SKILL.md","line_end":491,"line_start":490},{"file":"SKILL.md","line_end":492,"line_start":491},{"file":"SKILL.md","line_end":493,"line_start":492},{"file":"SKILL.md","line_end":494,"line_start":493},{"file":"SKILL.md","line_end":495,"line_start":494},{"file":"SKILL.md","line_end":499,"line_start":495},{"file":"SKILL.md","line_end":500,"line_start":499},{"file":"SKILL.md","line_end":501,"line_start":500},{"file":"SKILL.md","line_end":505,"line_start":501},{"file":"SKILL.md","line_end":517,"line_start":505},{"file":"SKILL.md","line_end":522,"line_start":517},{"file":"SKILL.md","line_end":523,"line_start":522},{"file":"SKILL.md","line_end":524,"line_start":523},{"file":"SKILL.md","line_end":530,"line_start":524},{"file":"SKILL.md","line_end":541,"line_start":530},{"file":"SKILL.md","line_end":545,"line_start":541},{"file":"SKILL.md","line_end":579,"line_start":545},{"file":"SKILL.md","line_end":582,"line_start":579},{"file":"SKILL.md","line_end":586,"line_start":582},{"file":"SKILL.md","line_end":591,"line_start":586},{"file":"SKILL.md","line_end":610,"line_start":591}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":15,"line_start":15},{"file":"SKILL.md","line_end":115,"line_start":115},{"file":"SKILL.md","line_end":142,"line_start":142},{"file":"SKILL.md","line_end":143,"line_start":143},{"file":"SKILL.md","line_end":603,"line_start":603},{"file":"SKILL.md","line_end":614,"line_start":614},{"file":"SKILL.md","line_end":615,"line_start":615},{"file":"SKILL.md","line_end":616,"line_start":616},{"file":"SKILL.md","line_end":617,"line_start":617},{"file":"SKILL.md","line_end":618,"line_start":618},{"file":"SKILL.md","line_end":619,"line_start":619},{"file":"SKILL.md","line_end":620,"line_start":620}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[{"title":"False Positive: Markdown Backtick Syntax Flagged as Shell Commands","locations":[{"file":"SKILL.md","line_end":51,"line_start":22},{"file":"SKILL.md","line_end":62,"line_start":56},{"file":"SKILL.md","line_end":621,"line_start":68}],"confidence":0.95,"description":"Static analyzer incorrectly flags markdown code blocks (using backticks like `**bold**`, `[[wikilinks]]`, and code examples) as Ruby/shell backtick execution. These are standard markdown formatting syntax, not code execution.","confidence_reasoning":"This is a documentation skill containing markdown syntax examples. Backticks in markdown are for code formatting, not shell execution. No actual shell or Ruby code is executed."},{"title":"False Positive: Documentation URLs Flagged as Network Requests","locations":[{"file":"SKILL.md","line_end":15,"line_start":13},{"file":"SKILL.md","line_end":117,"line_start":115},{"file":"SKILL.md","line_end":620,"line_start":603}],"confidence":0.95,"description":"Static analyzer flags hardcoded URLs (commonmark.org, help.obsidian.md) as network security issues. These are legitimate documentation reference links used in a documentation skill.","confidence_reasoning":"URLs are static documentation references, not dynamic network requests. The skill does not make any outbound network calls - it only provides links to external documentation."},{"title":"False Positive: YAML Frontmatter and Block IDs Misidentified","locations":[{"file":"SKILL.md","line_end":4,"line_start":3},{"file":"SKILL.md","line_end":93,"line_start":92},{"file":"SKILL.md","line_end":232,"line_start":218}],"confidence":0.95,"description":"Static analyzer misinterprets YAML frontmatter (---) and Obsidian block IDs (^block-id) as 'weak crypto algorithms' and 'system reconnaissance'.","confidence_reasoning":"YAML frontmatter (---) is standard metadata syntax. Obsidian block IDs (^block-id) are for internal linking. Neither poses any security risk."}],"files_scanned":1,"total_lines":621,"audit_model":"claude","audited_at":"2026-02-24T09:34:44.565+00:00","created_at":"2026-02-24T15:49:01.566886+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}