{"data":{"skill":{"slug":"zhanlincui-using-git-worktrees","name":"using-git-worktrees","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/using-git-worktrees","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"54ad5552-23d4-4828-8f65-f92cee30945e","skill_id":"e162dd7f-02e0-42d4-8d7e-275c05b99196","version":1,"content_hash":"1ffa45072d9344b0f9f65a101954933e","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analyzer flagged 42 patterns but all are false positives. The skill is documentation-only (markdown file) containing bash command examples for teaching git worktrees. No executable code exists - all flagged patterns are code blocks in instructional content. External commands are git/bash examples, filesystem references are documentation paths, and crypto warnings are spurious.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":26,"line_start":22},{"file":"SKILL.md","line_end":28,"line_start":26},{"file":"SKILL.md","line_end":32,"line_start":28},{"file":"SKILL.md","line_end":34,"line_start":32},{"file":"SKILL.md","line_end":42,"line_start":34},{"file":"SKILL.md","line_end":49,"line_start":42},{"file":"SKILL.md","line_end":57,"line_start":49},{"file":"SKILL.md","line_end":60,"line_start":57},{"file":"SKILL.md","line_end":79,"line_start":60},{"file":"SKILL.md","line_end":81,"line_start":79},{"file":"SKILL.md","line_end":85,"line_start":81},{"file":"SKILL.md","line_end":99,"line_start":85},{"file":"SKILL.md","line_end":105,"line_start":99},{"file":"SKILL.md","line_end":118,"line_start":105},{"file":"SKILL.md","line_end":124,"line_start":118},{"file":"SKILL.md","line_end":130,"line_start":124},{"file":"SKILL.md","line_end":138,"line_start":130},{"file":"SKILL.md","line_end":142,"line_start":138},{"file":"SKILL.md","line_end":148,"line_start":142},{"file":"SKILL.md","line_end":149,"line_start":148},{"file":"SKILL.md","line_end":150,"line_start":149},{"file":"SKILL.md","line_end":161,"line_start":150},{"file":"SKILL.md","line_end":180,"line_start":161},{"file":"SKILL.md","line_end":192,"line_start":180},{"file":"SKILL.md","line_end":80,"line_start":80},{"file":"SKILL.md","line_end":81,"line_start":79}]},{"factor":"filesystem","evidence":[{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":71,"line_start":71},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":71,"line_start":71},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":189,"line_start":189},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":59,"line_start":59},{"file":"SKILL.md","line_end":59,"line_start":59}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":218,"audit_model":"claude","audited_at":"2026-02-24T09:26:46.206+00:00","created_at":"2026-02-24T15:49:03.055533+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}