{"data":{"skill":{"slug":"zhanlincui-systematic-debugging","name":"systematic-debugging","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/systematic-debugging","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"afa3311c-c57b-4d4c-84a2-b6ca242bec3f","skill_id":"6ca150a5-42e7-48e3-804c-acca4d07749d","version":1,"content_hash":"c9a57256dd560e400fb20b37935cd914","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analyzer flagged 126 patterns but 125 are false positives from markdown documentation (backticks are code formatting, not shell execution). One legitimate shell script (find-polluter.sh) uses npm test for test debugging - acceptable for a debugging skill. No cryptographic code exists despite scanner claims. Skill teaches debugging methodology safely.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"find-polluter.sh","line_end":42,"line_start":42}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Shell Script for Test Debugging","locations":[{"file":"find-polluter.sh","line_end":42,"line_start":42}],"confidence":0.95,"description":"find-polluter.sh executes npm test commands to identify which test creates unwanted files or state. This is legitimate test infrastructure for a debugging skill.","confidence_reasoning":"Script purpose is clearly documented for test pollution debugging - npm test is standard development workflow, not malicious."}],"dangerous_patterns":[],"files_scanned":11,"total_lines":1262,"audit_model":"claude","audited_at":"2026-02-24T09:44:29.62+00:00","created_at":"2026-02-24T15:49:02.785018+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":1,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}