{
  "schema_version": 2,
  "snapshot_completed": "2026-09-27T02:35:56Z",
  "security_state_as_of": "2026-09-30T00:00:00Z",
  "provenance": {
    "counts": {
      "audit_snapshot_records": 24497,
      "revision_bound_skill_records": 4823,
      "distinct_exported_package_hashes": 4790,
      "study_catalog_records": 4472,
      "study_catalog_distinct_package_hashes": 4449,
      "public_index_entries": 213461,
      "prepared_tier_rows": 129657,
      "earlier_index_entries": 212766,
      "study_excluded_production_cache": [
        "ndpvt-web/latex-document-skill/latex-document"
      ]
    },
    "snapshot_completed": "2026-09-27T02:35:56Z",
    "snapshot_sha256": "d2f1474c453a2638e548e78f157bfac8d00204e0b9c8096f77a784513a4ae7d0",
    "scanners": {
      "Cisco skill-scanner": {
        "records": 4823,
        "versions": {
          "cisco-skill-scanner/2.1.0": 4823
        },
        "first_date": "2026-09-27T00:31:15Z",
        "last_date": "2026-09-27T02:35:51Z",
        "statuses": {
          "pass": 4545,
          "fail": 136,
          "warn": 135,
          "error": 7
        }
      },
      "Edge static checks": {
        "records": 4823,
        "versions": {
          "edge-static/1.0.1": 4823
        },
        "first_date": "2026-09-27T02:05:15Z",
        "last_date": "2026-09-27T02:14:55Z",
        "statuses": {
          "pass": 4644,
          "warn": 101,
          "fail": 78
        }
      },
      "Semgrep Edge rules": {
        "records": 4823,
        "versions": {
          "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1": 4823
        },
        "first_date": "2026-09-27T02:15:13Z",
        "last_date": "2026-09-27T02:27:06Z",
        "statuses": {
          "pass": 4680,
          "warn": 143
        }
      },
      "Snyk": {
        "records": 19916,
        "versions": {
          "unavailable": 19916
        },
        "first_date": "2026-02-13T07:35:30.984725+00:00",
        "last_date": "2026-09-24T23:59:46.651846+00:00",
        "statuses": {
          "warn": 4771,
          "pass": 14674,
          "fail": 471
        }
      },
      "Socket": {
        "records": 19906,
        "versions": {
          "unavailable": 19906
        },
        "first_date": "2026-02-12T10:56:55.374Z",
        "last_date": "2026-09-25T00:00:18.532Z",
        "statuses": {
          "pass": 17859,
          "warn": 1973,
          "fail": 74
        }
      }
    }
  },
  "selection": "100 distinct verified frozen-catalog package hashes with revision-bound Edge scans, ordered by prepared-tier installs, then five mirror-only records by the same ordering; not representative of the whole catalog.",
  "fields": {
    "id": "publisher/repository/skill identity",
    "revision": "Git commit or null",
    "package_hash": "SHA-256 manifest hash or null",
    "security_state": "Snapshot decision defined in security-states.json; not a live load guarantee",
    "scans": "Edge-run provider, version, scan date, scope, status, normalized finding rule/severity/file/line and limitations; absolute scanner-host paths are reduced to a basename with path_redacted=true"
  },
  "missingness": {
    "revision": 5,
    "purpose": 6,
    "prerequisites": 105,
    "install_instructions": 105
  },
  "rights": "Edge-produced scanner metadata for this staged sample. Upstream skill text, descriptions and mirrored provider records are excluded from the download. Third-party source licences and trademarks remain with their owners.",
  "records": [
    {
      "id": "heygen-com/hyperframes/general-video",
      "source": "https://github.com/heygen-com/hyperframes",
      "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
      "package_hash": "sha256:b0a9d2612944b96c4a6a5f6e19ac84aa4291cffc818c2db1ad9521fcc7c8ef6a",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:b0a9d2612944b96c4a6a5f6e19ac84aa4291cffc818c2db1ad9521fcc7c8ef6a",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:00:03Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:b0a9d2612944b96c4a6a5f6e19ac84aa4291cffc818c2db1ad9521fcc7c8ef6a",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:27:06Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:b0a9d2612944b96c4a6a5f6e19ac84aa4291cffc818c2db1ad9521fcc7c8ef6a",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "genmedia-labs/skills/seedance-2-5-image-to-video",
      "source": "https://github.com/genmedia-labs/skills",
      "revision": "c163a9fd3ab3c36193f634445592586df5b64f1e",
      "package_hash": "sha256:5f9868a112e20ebc2fe030422109a339a8c0a4fd48d3ffc064bd998af9785ec0",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:5f9868a112e20ebc2fe030422109a339a8c0a4fd48d3ffc064bd998af9785ec0",
          "revision": "c163a9fd3ab3c36193f634445592586df5b64f1e",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:57:30Z",
          "status": "warn",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:5f9868a112e20ebc2fe030422109a339a8c0a4fd48d3ffc064bd998af9785ec0",
          "revision": "c163a9fd3ab3c36193f634445592586df5b64f1e",
          "raw_count": 1,
          "findings": [
            {
              "severity": "medium",
              "rule": "YARA_prompt_injection_generic",
              "file": "SKILL.md",
              "line": 159
            }
          ],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:15Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:5f9868a112e20ebc2fe030422109a339a8c0a4fd48d3ffc064bd998af9785ec0",
          "revision": "c163a9fd3ab3c36193f634445592586df5b64f1e",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "obra/superpowers/using-superpowers",
      "source": "https://github.com/obra/superpowers",
      "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
      "package_hash": "sha256:c1243c5f8fb9b3ce259fb210a622a0b4b2339d6fc314b2cf48628f2771d29062",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:c1243c5f8fb9b3ce259fb210a622a0b4b2339d6fc314b2cf48628f2771d29062",
          "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:02:40Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:c1243c5f8fb9b3ce259fb210a622a0b4b2339d6fc314b2cf48628f2771d29062",
          "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:24Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:c1243c5f8fb9b3ce259fb210a622a0b4b2339d6fc314b2cf48628f2771d29062",
          "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "heygen-com/hyperframes/hyperframes-studio",
      "source": "https://github.com/heygen-com/hyperframes",
      "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
      "package_hash": "sha256:eb2a228d4cc17cb29abac460274e08716b5c2e0b162770851767ddbb665ec0f9",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:eb2a228d4cc17cb29abac460274e08716b5c2e0b162770851767ddbb665ec0f9",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:eb2a228d4cc17cb29abac460274e08716b5c2e0b162770851767ddbb665ec0f9",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:eb2a228d4cc17cb29abac460274e08716b5c2e0b162770851767ddbb665ec0f9",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/react:components",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:23f73b12b272a02295889efc9178f473d92802d7c1825059856a63923669a82d",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:23f73b12b272a02295889efc9178f473d92802d7c1825059856a63923669a82d",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:23f73b12b272a02295889efc9178f473d92802d7c1825059856a63923669a82d",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 4,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:23f73b12b272a02295889efc9178f473d92802d7c1825059856a63923669a82d",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "addyosmani/agent-skills/idea-refine",
      "source": "https://github.com/addyosmani/agent-skills",
      "revision": "2686b620fc1fed2e8f60c704839c766b8594c6b6",
      "package_hash": "sha256:02caf5111fae7ce1104d9c7fe68e79e6877167c36d65cec881e4091b676ffa55",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:02caf5111fae7ce1104d9c7fe68e79e6877167c36d65cec881e4091b676ffa55",
          "revision": "2686b620fc1fed2e8f60c704839c766b8594c6b6",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:55:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:02caf5111fae7ce1104d9c7fe68e79e6877167c36d65cec881e4091b676ffa55",
          "revision": "2686b620fc1fed2e8f60c704839c766b8594c6b6",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:08Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:02caf5111fae7ce1104d9c7fe68e79e6877167c36d65cec881e4091b676ffa55",
          "revision": "2686b620fc1fed2e8f60c704839c766b8594c6b6",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "nextlevelbuilder/ui-ux-pro-max-skill/ckm:design-system",
      "source": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill",
      "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
      "package_hash": "sha256:a81a72ad2af947453b56a61d33150697d6fb1b982832e529701f54101f39a953",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:a81a72ad2af947453b56a61d33150697d6fb1b982832e529701f54101f39a953",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 3,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:a81a72ad2af947453b56a61d33150697d6fb1b982832e529701f54101f39a953",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 4,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:a81a72ad2af947453b56a61d33150697d6fb1b982832e529701f54101f39a953",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "nextlevelbuilder/ui-ux-pro-max-skill/ckm:ui-styling",
      "source": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill",
      "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
      "package_hash": "sha256:7febbb68be77d7708e8bb57f106fe9631d994c64829e1da9d8fed7da8ea1ba12",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7febbb68be77d7708e8bb57f106fe9631d994c64829e1da9d8fed7da8ea1ba12",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 3,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7febbb68be77d7708e8bb57f106fe9631d994c64829e1da9d8fed7da8ea1ba12",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 9,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7febbb68be77d7708e8bb57f106fe9631d994c64829e1da9d8fed7da8ea1ba12",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "nextlevelbuilder/ui-ux-pro-max-skill/ckm:banner-design",
      "source": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill",
      "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
      "package_hash": "sha256:b9893e29ace5f6d8f3fbb4b61ab258f09569b6bc17aa11c4f08afbbf5d0813bd",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:b9893e29ace5f6d8f3fbb4b61ab258f09569b6bc17aa11c4f08afbbf5d0813bd",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:b9893e29ace5f6d8f3fbb4b61ab258f09569b6bc17aa11c4f08afbbf5d0813bd",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:b9893e29ace5f6d8f3fbb4b61ab258f09569b6bc17aa11c4f08afbbf5d0813bd",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "nextlevelbuilder/ui-ux-pro-max-skill/ckm:brand",
      "source": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill",
      "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
      "package_hash": "sha256:7c1efc0406f45e3de375e2da30f7f2966f5391d3d66c699e81475c585181912e",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7c1efc0406f45e3de375e2da30f7f2966f5391d3d66c699e81475c585181912e",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 3,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7c1efc0406f45e3de375e2da30f7f2966f5391d3d66c699e81475c585181912e",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 10,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7c1efc0406f45e3de375e2da30f7f2966f5391d3d66c699e81475c585181912e",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "nextlevelbuilder/ui-ux-pro-max-skill/ckm:slides",
      "source": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill",
      "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
      "package_hash": "sha256:b0a26b8d1fbbd3695ef505edb5b90143efed8c34261fc9f3e74f77437cca7478",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:b0a26b8d1fbbd3695ef505edb5b90143efed8c34261fc9f3e74f77437cca7478",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:b0a26b8d1fbbd3695ef505edb5b90143efed8c34261fc9f3e74f77437cca7478",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:b0a26b8d1fbbd3695ef505edb5b90143efed8c34261fc9f3e74f77437cca7478",
          "revision": "823b0a14d3539b5d78c0efb614426a4fab5983ec",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "firecrawl/firecrawl-workflows/firecrawl-competitive-intel",
      "source": "https://github.com/firecrawl/firecrawl-workflows",
      "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
      "package_hash": "sha256:f1d990c5e6b30162a9efa1df6df5a3f0d55d8ca969126ffa785ea88668e5da96",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:55Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:f1d990c5e6b30162a9efa1df6df5a3f0d55d8ca969126ffa785ea88668e5da96",
          "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:03:38Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:f1d990c5e6b30162a9efa1df6df5a3f0d55d8ca969126ffa785ea88668e5da96",
          "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:f1d990c5e6b30162a9efa1df6df5a3f0d55d8ca969126ffa785ea88668e5da96",
          "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "firecrawl/firecrawl-workflows/firecrawl-knowledge-ingest",
      "source": "https://github.com/firecrawl/firecrawl-workflows",
      "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
      "package_hash": "sha256:9bc787a8f92f03dc6e82aa2d82188f87862eb5dd7b55dda6d5a6858382f2df35",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:9bc787a8f92f03dc6e82aa2d82188f87862eb5dd7b55dda6d5a6858382f2df35",
          "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:9bc787a8f92f03dc6e82aa2d82188f87862eb5dd7b55dda6d5a6858382f2df35",
          "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:27:06Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:9bc787a8f92f03dc6e82aa2d82188f87862eb5dd7b55dda6d5a6858382f2df35",
          "revision": "94cc91229d6cedc0613f140d3d013b150bc8e1b0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "addyosmani/web-quality-skills/web-quality-audit",
      "source": "https://github.com/addyosmani/web-quality-skills",
      "revision": "afa8da942115f2961fdbfa80807ea0b232ff6c00",
      "package_hash": "sha256:41b362a7227adcadbc2f1865e9d488044354e6257254419eecfecfa56cd4ebfc",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:41b362a7227adcadbc2f1865e9d488044354e6257254419eecfecfa56cd4ebfc",
          "revision": "afa8da942115f2961fdbfa80807ea0b232ff6c00",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:56:52Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:41b362a7227adcadbc2f1865e9d488044354e6257254419eecfecfa56cd4ebfc",
          "revision": "afa8da942115f2961fdbfa80807ea0b232ff6c00",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:41b362a7227adcadbc2f1865e9d488044354e6257254419eecfecfa56cd4ebfc",
          "revision": "afa8da942115f2961fdbfa80807ea0b232ff6c00",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "mattpocock/skills/pr",
      "source": "https://github.com/mattpocock/skills",
      "revision": "c55ee46073ed923f86ce59a5eb3b6d895095d1b7",
      "package_hash": "sha256:efea5544ec92767b3ec961cfb69e1052da4f7395e4c8e158645718bc1eccf57a",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:efea5544ec92767b3ec961cfb69e1052da4f7395e4c8e158645718bc1eccf57a",
          "revision": "c55ee46073ed923f86ce59a5eb3b6d895095d1b7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:efea5544ec92767b3ec961cfb69e1052da4f7395e4c8e158645718bc1eccf57a",
          "revision": "c55ee46073ed923f86ce59a5eb3b6d895095d1b7",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:efea5544ec92767b3ec961cfb69e1052da4f7395e4c8e158645718bc1eccf57a",
          "revision": "c55ee46073ed923f86ce59a5eb3b6d895095d1b7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "stablyai/orca/orca-linear",
      "source": "https://github.com/stablyai/orca",
      "revision": "ee6281ff797f9845a6588bd85938638850fb1cb3",
      "package_hash": "sha256:9b6e8fbc8d5aca91fb1e2fc7d7eedb6075ea1adc1871714deda77f3049a31e8a",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:9b6e8fbc8d5aca91fb1e2fc7d7eedb6075ea1adc1871714deda77f3049a31e8a",
          "revision": "ee6281ff797f9845a6588bd85938638850fb1cb3",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:27Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:9b6e8fbc8d5aca91fb1e2fc7d7eedb6075ea1adc1871714deda77f3049a31e8a",
          "revision": "ee6281ff797f9845a6588bd85938638850fb1cb3",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:21Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:9b6e8fbc8d5aca91fb1e2fc7d7eedb6075ea1adc1871714deda77f3049a31e8a",
          "revision": "ee6281ff797f9845a6588bd85938638850fb1cb3",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "github/awesome-copilot/web-design-reviewer",
      "source": "https://github.com/github/awesome-copilot",
      "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
      "package_hash": "sha256:5d4c03cafd96aa8b5107d229cba8d3acd4b764ce3a5d85a7de61ce8013c08c93",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:5d4c03cafd96aa8b5107d229cba8d3acd4b764ce3a5d85a7de61ce8013c08c93",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:57:22Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:5d4c03cafd96aa8b5107d229cba8d3acd4b764ce3a5d85a7de61ce8013c08c93",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:15Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:5d4c03cafd96aa8b5107d229cba8d3acd4b764ce3a5d85a7de61ce8013c08c93",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "rohitg00/agentmemory/recall",
      "source": "https://github.com/rohitg00/agentmemory",
      "revision": "bcf4f0d00d1c71e9221287a4778e4122ce2d7574",
      "package_hash": "sha256:82c7a47d368f24d102c8adf5fc8ef8f79cbf19541cb0b117012ab42a263b89af",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:82c7a47d368f24d102c8adf5fc8ef8f79cbf19541cb0b117012ab42a263b89af",
          "revision": "bcf4f0d00d1c71e9221287a4778e4122ce2d7574",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:55Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:82c7a47d368f24d102c8adf5fc8ef8f79cbf19541cb0b117012ab42a263b89af",
          "revision": "bcf4f0d00d1c71e9221287a4778e4122ce2d7574",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:82c7a47d368f24d102c8adf5fc8ef8f79cbf19541cb0b117012ab42a263b89af",
          "revision": "bcf4f0d00d1c71e9221287a4778e4122ce2d7574",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "shopify/shopify-ai-toolkit/shopify-onboarding-dev",
      "source": "https://github.com/shopify/shopify-ai-toolkit",
      "revision": "3e8a074fba02d9b95086ad505f8cbe0020ffeb9a",
      "package_hash": "sha256:c8ff8fba67e3ca58cd1e78fdc3c73c91fb35857cf814ef830b6c49231526c776",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:c8ff8fba67e3ca58cd1e78fdc3c73c91fb35857cf814ef830b6c49231526c776",
          "revision": "3e8a074fba02d9b95086ad505f8cbe0020ffeb9a",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:04:45Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:c8ff8fba67e3ca58cd1e78fdc3c73c91fb35857cf814ef830b6c49231526c776",
          "revision": "3e8a074fba02d9b95086ad505f8cbe0020ffeb9a",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:c8ff8fba67e3ca58cd1e78fdc3c73c91fb35857cf814ef830b6c49231526c776",
          "revision": "3e8a074fba02d9b95086ad505f8cbe0020ffeb9a",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/stitch::generate-design",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:546c63486ff79622dba3583ffff4dceae80b51f8ece8a61a3cc4578733807277",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:546c63486ff79622dba3583ffff4dceae80b51f8ece8a61a3cc4578733807277",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:546c63486ff79622dba3583ffff4dceae80b51f8ece8a61a3cc4578733807277",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:546c63486ff79622dba3583ffff4dceae80b51f8ece8a61a3cc4578733807277",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/stitch::extract-design-md",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:bd8c401c5510b271b3c0957d34d74e6ea4019714e91aa6c4b3f541d25cbe5aaf",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:bd8c401c5510b271b3c0957d34d74e6ea4019714e91aa6c4b3f541d25cbe5aaf",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:bd8c401c5510b271b3c0957d34d74e6ea4019714e91aa6c4b3f541d25cbe5aaf",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:bd8c401c5510b271b3c0957d34d74e6ea4019714e91aa6c4b3f541d25cbe5aaf",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "github/awesome-copilot/gen-specs-as-issues",
      "source": "https://github.com/github/awesome-copilot",
      "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
      "package_hash": "sha256:829aefc328a070d2a9d56f65c28e0d9a71b710c608d462c4503dd3ea3ef80292",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:829aefc328a070d2a9d56f65c28e0d9a71b710c608d462c4503dd3ea3ef80292",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:55Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:829aefc328a070d2a9d56f65c28e0d9a71b710c608d462c4503dd3ea3ef80292",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:829aefc328a070d2a9d56f65c28e0d9a71b710c608d462c4503dd3ea3ef80292",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "github/awesome-copilot/swift-mcp-server-generator",
      "source": "https://github.com/github/awesome-copilot",
      "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
      "package_hash": "sha256:6d818ed6fb62f8b02bdba128701730744f6c8c5a5bb96de6283777a052e55e23",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:6d818ed6fb62f8b02bdba128701730744f6c8c5a5bb96de6283777a052e55e23",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:57:36Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:6d818ed6fb62f8b02bdba128701730744f6c8c5a5bb96de6283777a052e55e23",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:17Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:6d818ed6fb62f8b02bdba128701730744f6c8c5a5bb96de6283777a052e55e23",
          "revision": "6c4d33b9cfca967a28bb2962ef4d55e4a384c88c",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/stitch::manage-design-system",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:7395afd4b03787af0207b21396ab3b9c49f7e81eaf7c5dc2abbdea13e7782840",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7395afd4b03787af0207b21396ab3b9c49f7e81eaf7c5dc2abbdea13e7782840",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7395afd4b03787af0207b21396ab3b9c49f7e81eaf7c5dc2abbdea13e7782840",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7395afd4b03787af0207b21396ab3b9c49f7e81eaf7c5dc2abbdea13e7782840",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/stitch::code-to-design",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:5bd40ea5b669ae435b0339c910989e7302dbd17a2af66fbed4a31d5983f2ae98",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:5bd40ea5b669ae435b0339c910989e7302dbd17a2af66fbed4a31d5983f2ae98",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:5bd40ea5b669ae435b0339c910989e7302dbd17a2af66fbed4a31d5983f2ae98",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:5bd40ea5b669ae435b0339c910989e7302dbd17a2af66fbed4a31d5983f2ae98",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "earthtojake/text-to-cad/sendcutsend",
      "source": "https://github.com/earthtojake/text-to-cad",
      "revision": "4eaf7459a95c0547b089ab53aa579c7597fab1d5",
      "package_hash": "sha256:9b77610cb9cbc2a2483a33c229157f5184568db90b2b214ee0d8206f76f4281a",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:9b77610cb9cbc2a2483a33c229157f5184568db90b2b214ee0d8206f76f4281a",
          "revision": "4eaf7459a95c0547b089ab53aa579c7597fab1d5",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:27Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:9b77610cb9cbc2a2483a33c229157f5184568db90b2b214ee0d8206f76f4281a",
          "revision": "4eaf7459a95c0547b089ab53aa579c7597fab1d5",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:21Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:9b77610cb9cbc2a2483a33c229157f5184568db90b2b214ee0d8206f76f4281a",
          "revision": "4eaf7459a95c0547b089ab53aa579c7597fab1d5",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/stitch::extract-static-html",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:665f0aec1c6bafb47a712ff9bef6ec5c6e3d54a2edb5b1c7b83f32f3f5a1b4e2",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:665f0aec1c6bafb47a712ff9bef6ec5c6e3d54a2edb5b1c7b83f32f3f5a1b4e2",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:665f0aec1c6bafb47a712ff9bef6ec5c6e3d54a2edb5b1c7b83f32f3f5a1b4e2",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 14,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:665f0aec1c6bafb47a712ff9bef6ec5c6e3d54a2edb5b1c7b83f32f3f5a1b4e2",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/stitch::upload-to-stitch",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:3138c8e8e47f7863ced7b656c799707a2f64ce55fda07d4fc124820917a551a6",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:3138c8e8e47f7863ced7b656c799707a2f64ce55fda07d4fc124820917a551a6",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:3138c8e8e47f7863ced7b656c799707a2f64ce55fda07d4fc124820917a551a6",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 5,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:3138c8e8e47f7863ced7b656c799707a2f64ce55fda07d4fc124820917a551a6",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "okx/agent-skills/okx-cex-skill-mp",
      "source": "https://github.com/okx/agent-skills",
      "revision": "9c180cc1e9911a1ca44c0df5cc7509dba5bb7697",
      "package_hash": "sha256:f8d5e0ce95966cd253f3a737f0cd41c42e2058ea4dfd2213e91e691fbd5d27ae",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:55Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:f8d5e0ce95966cd253f3a737f0cd41c42e2058ea4dfd2213e91e691fbd5d27ae",
          "revision": "9c180cc1e9911a1ca44c0df5cc7509dba5bb7697",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:04:21Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:f8d5e0ce95966cd253f3a737f0cd41c42e2058ea4dfd2213e91e691fbd5d27ae",
          "revision": "9c180cc1e9911a1ca44c0df5cc7509dba5bb7697",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:f8d5e0ce95966cd253f3a737f0cd41c42e2058ea4dfd2213e91e691fbd5d27ae",
          "revision": "9c180cc1e9911a1ca44c0df5cc7509dba5bb7697",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "crewaiinc/skills/design-task",
      "source": "https://github.com/crewaiinc/skills",
      "revision": "a8d7ea68c2c50da49df8d7f18e407bec3931f884",
      "package_hash": "sha256:cf166455cfa7d5b23cdcd0f916df1e89b7585baad6941721566a1ad873f19ef9",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:cf166455cfa7d5b23cdcd0f916df1e89b7585baad6941721566a1ad873f19ef9",
          "revision": "a8d7ea68c2c50da49df8d7f18e407bec3931f884",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:01:24Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:cf166455cfa7d5b23cdcd0f916df1e89b7585baad6941721566a1ad873f19ef9",
          "revision": "a8d7ea68c2c50da49df8d7f18e407bec3931f884",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:cf166455cfa7d5b23cdcd0f916df1e89b7585baad6941721566a1ad873f19ef9",
          "revision": "a8d7ea68c2c50da49df8d7f18e407bec3931f884",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google-labs-code/stitch-skills/stitch::react-native",
      "source": "https://github.com/google-labs-code/stitch-skills",
      "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
      "package_hash": "sha256:27c9fa2bf116d46a424c83ff70adefe439a8663c9a10bb2e106fc1c0375fcd6e",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:27c9fa2bf116d46a424c83ff70adefe439a8663c9a10bb2e106fc1c0375fcd6e",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:27c9fa2bf116d46a424c83ff70adefe439a8663c9a10bb2e106fc1c0375fcd6e",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 4,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:27c9fa2bf116d46a424c83ff70adefe439a8663c9a10bb2e106fc1c0375fcd6e",
          "revision": "0337446dadde6f8c94210444e2aa9d546126480f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "calm-north/seojuice-skills/brief",
      "source": "https://github.com/calm-north/seojuice-skills",
      "revision": "c1f633bea512365ba04477076369e418ecc82ffd",
      "package_hash": "sha256:e01029f1a645570440427887abca7cbdb095b3730becc249329e0f7b0dfd4ae1",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:e01029f1a645570440427887abca7cbdb095b3730becc249329e0f7b0dfd4ae1",
          "revision": "c1f633bea512365ba04477076369e418ecc82ffd",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:04:43Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:e01029f1a645570440427887abca7cbdb095b3730becc249329e0f7b0dfd4ae1",
          "revision": "c1f633bea512365ba04477076369e418ecc82ffd",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:27Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:e01029f1a645570440427887abca7cbdb095b3730becc249329e0f7b0dfd4ae1",
          "revision": "c1f633bea512365ba04477076369e418ecc82ffd",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "lijigang/ljg-skills/ljg-rank",
      "source": "https://github.com/lijigang/ljg-skills",
      "revision": "fdea0bea5133246de418d19015f65eeb18699623",
      "package_hash": "sha256:59b14fe987fda2cdb6d0678c470613c8c40ebb1575a83ec34ae600c4809477ae",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:59b14fe987fda2cdb6d0678c470613c8c40ebb1575a83ec34ae600c4809477ae",
          "revision": "fdea0bea5133246de418d19015f65eeb18699623",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:57:27Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:59b14fe987fda2cdb6d0678c470613c8c40ebb1575a83ec34ae600c4809477ae",
          "revision": "fdea0bea5133246de418d19015f65eeb18699623",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:15Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:59b14fe987fda2cdb6d0678c470613c8c40ebb1575a83ec34ae600c4809477ae",
          "revision": "fdea0bea5133246de418d19015f65eeb18699623",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "forcedotcom/sf-skills/platform-apex-test-run",
      "source": "https://github.com/forcedotcom/sf-skills",
      "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
      "package_hash": "sha256:7efcd24f2b08287f111eec2c2bd26a1222b28e45ee9671db93b2ac4b53ff6067",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7efcd24f2b08287f111eec2c2bd26a1222b28e45ee9671db93b2ac4b53ff6067",
          "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:54Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7efcd24f2b08287f111eec2c2bd26a1222b28e45ee9671db93b2ac4b53ff6067",
          "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:17Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7efcd24f2b08287f111eec2c2bd26a1222b28e45ee9671db93b2ac4b53ff6067",
          "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "wondelai/skills/clean-architecture",
      "source": "https://github.com/wondelai/skills",
      "revision": "c172996495bed0fcd26896a9416b2093fd7073f0",
      "package_hash": "sha256:0a64c7c23cd1491bfc31472b8670746c5f3d5c7708a5ffaa6bc68dce5c769953",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:0a64c7c23cd1491bfc31472b8670746c5f3d5c7708a5ffaa6bc68dce5c769953",
          "revision": "c172996495bed0fcd26896a9416b2093fd7073f0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:55:52Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:0a64c7c23cd1491bfc31472b8670746c5f3d5c7708a5ffaa6bc68dce5c769953",
          "revision": "c172996495bed0fcd26896a9416b2093fd7073f0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:08Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:0a64c7c23cd1491bfc31472b8670746c5f3d5c7708a5ffaa6bc68dce5c769953",
          "revision": "c172996495bed0fcd26896a9416b2093fd7073f0",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "aws/agent-toolkit-for-aws/troubleshooting-application-failures",
      "source": "https://github.com/aws/agent-toolkit-for-aws",
      "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
      "package_hash": "sha256:f4bf3cbc556b49229e110da3c5f0eb2b1e31f41a9dccca9083d376d7cabcb176",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:55Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:f4bf3cbc556b49229e110da3c5f0eb2b1e31f41a9dccca9083d376d7cabcb176",
          "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:04:45Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:f4bf3cbc556b49229e110da3c5f0eb2b1e31f41a9dccca9083d376d7cabcb176",
          "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:f4bf3cbc556b49229e110da3c5f0eb2b1e31f41a9dccca9083d376d7cabcb176",
          "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "julianoczkowski/designer-skills/information-architecture",
      "source": "https://github.com/julianoczkowski/designer-skills",
      "revision": "c259656c76d9758d7ead46b0d2f125cbe84f8665",
      "package_hash": "sha256:9a88e16fc07adc1c4442be2d519596cacb91ce4489e8e59c684e32aa75a43a49",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:9a88e16fc07adc1c4442be2d519596cacb91ce4489e8e59c684e32aa75a43a49",
          "revision": "c259656c76d9758d7ead46b0d2f125cbe84f8665",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:27Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:9a88e16fc07adc1c4442be2d519596cacb91ce4489e8e59c684e32aa75a43a49",
          "revision": "c259656c76d9758d7ead46b0d2f125cbe84f8665",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:21Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:9a88e16fc07adc1c4442be2d519596cacb91ce4489e8e59c684e32aa75a43a49",
          "revision": "c259656c76d9758d7ead46b0d2f125cbe84f8665",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "aws/agent-toolkit-for-aws/setting-up-ec2-instance-profiles",
      "source": "https://github.com/aws/agent-toolkit-for-aws",
      "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
      "package_hash": "sha256:4d97e00f256ff2595dff900c8e8d5b77a6af028114fb238634c6d9b71b393746",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:4d97e00f256ff2595dff900c8e8d5b77a6af028114fb238634c6d9b71b393746",
          "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:56:59Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:4d97e00f256ff2595dff900c8e8d5b77a6af028114fb238634c6d9b71b393746",
          "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
          "raw_count": 3,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:4d97e00f256ff2595dff900c8e8d5b77a6af028114fb238634c6d9b71b393746",
          "revision": "dda61487cb4fa8b6dbc75ad4e27c2181adc9d058",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "apollographql/skills/apollo-client",
      "source": "https://github.com/apollographql/skills",
      "revision": "603f826dedf9169629b9ed144e6cd8aa0c2a09f6",
      "package_hash": "sha256:e56b7a2af9be8749fd721c1fd79b88df6346ee56b1a5f1d506a82ceb01807cb8",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:e56b7a2af9be8749fd721c1fd79b88df6346ee56b1a5f1d506a82ceb01807cb8",
          "revision": "603f826dedf9169629b9ed144e6cd8aa0c2a09f6",
          "raw_count": 3,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:02:33Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:e56b7a2af9be8749fd721c1fd79b88df6346ee56b1a5f1d506a82ceb01807cb8",
          "revision": "603f826dedf9169629b9ed144e6cd8aa0c2a09f6",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:27Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:e56b7a2af9be8749fd721c1fd79b88df6346ee56b1a5f1d506a82ceb01807cb8",
          "revision": "603f826dedf9169629b9ed144e6cd8aa0c2a09f6",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "anthropics/knowledge-work-plugins/source-management",
      "source": "https://github.com/anthropics/knowledge-work-plugins",
      "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
      "package_hash": "sha256:ab61377ffdc509010357c000bf4ba7d735eb3b00df2c10950909ac033648e271",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:ab61377ffdc509010357c000bf4ba7d735eb3b00df2c10950909ac033648e271",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:02:37Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:ab61377ffdc509010357c000bf4ba7d735eb3b00df2c10950909ac033648e271",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:27:06Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:ab61377ffdc509010357c000bf4ba7d735eb3b00df2c10950909ac033648e271",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "trailofbits/skills/address-sanitizer",
      "source": "https://github.com/trailofbits/skills",
      "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
      "package_hash": "sha256:ebde580d819484cdc7bb8ac1bc690b49e3837b33f493562df23f88ac6c9bc890",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:55Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:ebde580d819484cdc7bb8ac1bc690b49e3837b33f493562df23f88ac6c9bc890",
          "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:03:30Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:ebde580d819484cdc7bb8ac1bc690b49e3837b33f493562df23f88ac6c9bc890",
          "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:ebde580d819484cdc7bb8ac1bc690b49e3837b33f493562df23f88ac6c9bc890",
          "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "callstack/react-native-testing-library/react-native-testing",
      "source": "https://github.com/callstack/react-native-testing-library",
      "revision": "b87a246e6853b3a824d78e6fa0aba85ea872011a",
      "package_hash": "sha256:cbb80104890546b561cf6064b553d736b37f94856b44af50e456b95192e5e3d6",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:cbb80104890546b561cf6064b553d736b37f94856b44af50e456b95192e5e3d6",
          "revision": "b87a246e6853b3a824d78e6fa0aba85ea872011a",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:04:45Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:cbb80104890546b561cf6064b553d736b37f94856b44af50e456b95192e5e3d6",
          "revision": "b87a246e6853b3a824d78e6fa0aba85ea872011a",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:cbb80104890546b561cf6064b553d736b37f94856b44af50e456b95192e5e3d6",
          "revision": "b87a246e6853b3a824d78e6fa0aba85ea872011a",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "forcedotcom/sf-skills/commerce-b2b-open-code-components-integrate",
      "source": "https://github.com/forcedotcom/sf-skills",
      "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
      "package_hash": "sha256:8b95cad5f8bfc8bfb9d3b9c815e94da4ac87b5ddc8bf4af2513c3ff9811957fa",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:8b95cad5f8bfc8bfb9d3b9c815e94da4ac87b5ddc8bf4af2513c3ff9811957fa",
          "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:58:43Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:8b95cad5f8bfc8bfb9d3b9c815e94da4ac87b5ddc8bf4af2513c3ff9811957fa",
          "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:8b95cad5f8bfc8bfb9d3b9c815e94da4ac87b5ddc8bf4af2513c3ff9811957fa",
          "revision": "d4a9aa448c7b743c1f1da41f41aa9723a6621232",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "mongodb/agent-skills/mongodb-search-and-ai",
      "source": "https://github.com/mongodb/agent-skills",
      "revision": "d1d2d86754ff303ac441624b2ac8e0380465aa9b",
      "package_hash": "sha256:92b80a60ad9bf43481c77b3f5959d46aa009e682ccbf37653042dc51aa11061c",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:92b80a60ad9bf43481c77b3f5959d46aa009e682ccbf37653042dc51aa11061c",
          "revision": "d1d2d86754ff303ac441624b2ac8e0380465aa9b",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:03:27Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:92b80a60ad9bf43481c77b3f5959d46aa009e682ccbf37653042dc51aa11061c",
          "revision": "d1d2d86754ff303ac441624b2ac8e0380465aa9b",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:21Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:92b80a60ad9bf43481c77b3f5959d46aa009e682ccbf37653042dc51aa11061c",
          "revision": "d1d2d86754ff303ac441624b2ac8e0380465aa9b",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/aso-audit",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:4b45aa8d23609120ee895f5bfa64c564f6e9c35406cdeba2d47880f627646582",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:4b45aa8d23609120ee895f5bfa64c564f6e9c35406cdeba2d47880f627646582",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:4b45aa8d23609120ee895f5bfa64c564f6e9c35406cdeba2d47880f627646582",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:4b45aa8d23609120ee895f5bfa64c564f6e9c35406cdeba2d47880f627646582",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "claude-office-skills/skills/invoice-template",
      "source": "https://github.com/claude-office-skills/skills",
      "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
      "package_hash": "sha256:8c90ea3ba64e1517443b222dae4eec8eb5f4db98f84eb43c1f0bcaf4fcb1e772",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:8c90ea3ba64e1517443b222dae4eec8eb5f4db98f84eb43c1f0bcaf4fcb1e772",
          "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:58:43Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:8c90ea3ba64e1517443b222dae4eec8eb5f4db98f84eb43c1f0bcaf4fcb1e772",
          "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:8c90ea3ba64e1517443b222dae4eec8eb5f4db98f84eb43c1f0bcaf4fcb1e772",
          "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "claude-office-skills/skills/pdf-merge-&-split",
      "source": "https://github.com/claude-office-skills/skills",
      "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
      "package_hash": "sha256:575bbcaf7f9f6bd60e2216bbf550cde5aa98b3ea78f7e4a754819aa6345ae91c",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:575bbcaf7f9f6bd60e2216bbf550cde5aa98b3ea78f7e4a754819aa6345ae91c",
          "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:575bbcaf7f9f6bd60e2216bbf550cde5aa98b3ea78f7e4a754819aa6345ae91c",
          "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:575bbcaf7f9f6bd60e2216bbf550cde5aa98b3ea78f7e4a754819aa6345ae91c",
          "revision": "9c4c7d5cd2813a8936bf2c9fdb174ea883b85a11",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "unity-technologies/skills/build-live-game",
      "source": "https://github.com/unity-technologies/skills",
      "revision": "d255f21568f3591e13ddd0d4e6b4a55fb72bb2fc",
      "package_hash": "sha256:da86e53ffa6ffd7244d3cd06620b73e563282392143609abab48ebbe9f1e35c0",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:da86e53ffa6ffd7244d3cd06620b73e563282392143609abab48ebbe9f1e35c0",
          "revision": "d255f21568f3591e13ddd0d4e6b4a55fb72bb2fc",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:01:38Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:da86e53ffa6ffd7244d3cd06620b73e563282392143609abab48ebbe9f1e35c0",
          "revision": "d255f21568f3591e13ddd0d4e6b4a55fb72bb2fc",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:27Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:da86e53ffa6ffd7244d3cd06620b73e563282392143609abab48ebbe9f1e35c0",
          "revision": "d255f21568f3591e13ddd0d4e6b4a55fb72bb2fc",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "dontbesilent2025/dbskill/dbs-skill-maker",
      "source": "https://github.com/dontbesilent2025/dbskill",
      "revision": "3ec74054d7e049642a77ff86e0bdea8786c444dc",
      "package_hash": "sha256:9298f6a73cc851b24e4510d731a4b294d37fe3650904db913d05180c1f3c7791",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:9298f6a73cc851b24e4510d731a4b294d37fe3650904db913d05180c1f3c7791",
          "revision": "3ec74054d7e049642a77ff86e0bdea8786c444dc",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:04Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:9298f6a73cc851b24e4510d731a4b294d37fe3650904db913d05180c1f3c7791",
          "revision": "3ec74054d7e049642a77ff86e0bdea8786c444dc",
          "raw_count": 3,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:21Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:9298f6a73cc851b24e4510d731a4b294d37fe3650904db913d05180c1f3c7791",
          "revision": "3ec74054d7e049642a77ff86e0bdea8786c444dc",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "obra/superpowers/diagnosing-superpowers",
      "source": "https://github.com/obra/superpowers",
      "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
      "package_hash": "sha256:5d622624189c1e4176deac1d1cac0378c06642a3728b30843b951ab6621623f5",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:5d622624189c1e4176deac1d1cac0378c06642a3728b30843b951ab6621623f5",
          "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:5d622624189c1e4176deac1d1cac0378c06642a3728b30843b951ab6621623f5",
          "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:5d622624189c1e4176deac1d1cac0378c06642a3728b30843b951ab6621623f5",
          "revision": "8ca22dba9a94f28898bbce59f2537ff4d87c747d",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "temporalio/skill-temporal-developer/temporal-developer",
      "source": "https://github.com/temporalio/skill-temporal-developer",
      "revision": "3405710274f1d651cfc5022db2590fa7d6374b87",
      "package_hash": "sha256:bf8e397a8eb1b64e7dedc2b2de8cdbc17ad21bcf1aa3bb0e538d0c9867fe9603",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:bf8e397a8eb1b64e7dedc2b2de8cdbc17ad21bcf1aa3bb0e538d0c9867fe9603",
          "revision": "3405710274f1d651cfc5022db2590fa7d6374b87",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:02:40Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:bf8e397a8eb1b64e7dedc2b2de8cdbc17ad21bcf1aa3bb0e538d0c9867fe9603",
          "revision": "3405710274f1d651cfc5022db2590fa7d6374b87",
          "raw_count": 3,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:24Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:bf8e397a8eb1b64e7dedc2b2de8cdbc17ad21bcf1aa3bb0e538d0c9867fe9603",
          "revision": "3405710274f1d651cfc5022db2590fa7d6374b87",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "affaan-m/ecc/cpp-coding-standards",
      "source": "https://github.com/affaan-m/ecc",
      "revision": "e482e579415fde18357cafce70f177ae19fd7f03",
      "package_hash": "sha256:cc148deed78b59df046d68d2e4ab28340f15d3c66527bdaa0030884637bde188",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:cc148deed78b59df046d68d2e4ab28340f15d3c66527bdaa0030884637bde188",
          "revision": "e482e579415fde18357cafce70f177ae19fd7f03",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:34:41Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:cc148deed78b59df046d68d2e4ab28340f15d3c66527bdaa0030884637bde188",
          "revision": "e482e579415fde18357cafce70f177ae19fd7f03",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:cc148deed78b59df046d68d2e4ab28340f15d3c66527bdaa0030884637bde188",
          "revision": "e482e579415fde18357cafce70f177ae19fd7f03",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "microsoft/azure-skills/discover-azure-skills",
      "source": "https://github.com/microsoft/azure-skills",
      "revision": "117b038edfef5d7af09848b8ffcd355f28f19956",
      "package_hash": "sha256:7d679b777c1ba23747564cf36137af0073e6b837d3df5ed93f550b33d32cd0f9",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7d679b777c1ba23747564cf36137af0073e6b837d3df5ed93f550b33d32cd0f9",
          "revision": "117b038edfef5d7af09848b8ffcd355f28f19956",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7d679b777c1ba23747564cf36137af0073e6b837d3df5ed93f550b33d32cd0f9",
          "revision": "117b038edfef5d7af09848b8ffcd355f28f19956",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:18Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7d679b777c1ba23747564cf36137af0073e6b837d3df5ed93f550b33d32cd0f9",
          "revision": "117b038edfef5d7af09848b8ffcd355f28f19956",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "agricidaniel/claude-ads/ads-plan",
      "source": "https://github.com/agricidaniel/claude-ads",
      "revision": "ac21644933910419529bcf81efb95a9ca71edf81",
      "package_hash": "sha256:1dfaf7e1cb0a2c8b8bccd171bfba81803f0a56a262ed7290744f2b485508eca2",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:1dfaf7e1cb0a2c8b8bccd171bfba81803f0a56a262ed7290744f2b485508eca2",
          "revision": "ac21644933910419529bcf81efb95a9ca71edf81",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:55:50Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:1dfaf7e1cb0a2c8b8bccd171bfba81803f0a56a262ed7290744f2b485508eca2",
          "revision": "ac21644933910419529bcf81efb95a9ca71edf81",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:12Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:1dfaf7e1cb0a2c8b8bccd171bfba81803f0a56a262ed7290744f2b485508eca2",
          "revision": "ac21644933910419529bcf81efb95a9ca71edf81",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/keyword-research",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:e3936c11a362d3e877ed60057a2db5592d2a4326156ae3b488fffcb4040dcc8e",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:e3936c11a362d3e877ed60057a2db5592d2a4326156ae3b488fffcb4040dcc8e",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:e3936c11a362d3e877ed60057a2db5592d2a4326156ae3b488fffcb4040dcc8e",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:e3936c11a362d3e877ed60057a2db5592d2a4326156ae3b488fffcb4040dcc8e",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/monetization-strategy",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:10cc3d2e7ff1e605a44ee964fb1b84259bbd31abfba0f22f4ecdcc833eadc3be",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:10cc3d2e7ff1e605a44ee964fb1b84259bbd31abfba0f22f4ecdcc833eadc3be",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:10cc3d2e7ff1e605a44ee964fb1b84259bbd31abfba0f22f4ecdcc833eadc3be",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:10cc3d2e7ff1e605a44ee964fb1b84259bbd31abfba0f22f4ecdcc833eadc3be",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "google/skills/agent-platform-troubleshooting",
      "source": "https://github.com/google/skills",
      "revision": "f566651a2f60aecbc4654f8868fb239f85a783f6",
      "package_hash": "sha256:edc26fed066d3ff3f1100dfa5726fd281235536e7e65ac43103bb7f3636433f4",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:55Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:edc26fed066d3ff3f1100dfa5726fd281235536e7e65ac43103bb7f3636433f4",
          "revision": "f566651a2f60aecbc4654f8868fb239f85a783f6",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:03:30Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:edc26fed066d3ff3f1100dfa5726fd281235536e7e65ac43103bb7f3636433f4",
          "revision": "f566651a2f60aecbc4654f8868fb239f85a783f6",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:edc26fed066d3ff3f1100dfa5726fd281235536e7e65ac43103bb7f3636433f4",
          "revision": "f566651a2f60aecbc4654f8868fb239f85a783f6",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "trailofbits/skills/vector-forge",
      "source": "https://github.com/trailofbits/skills",
      "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
      "package_hash": "sha256:0c2e3a309a7c0d2d9710949c4dfee55129ef2b8f1e11173cb12516cca1f7be2d",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:0c2e3a309a7c0d2d9710949c4dfee55129ef2b8f1e11173cb12516cca1f7be2d",
          "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:55:52Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:0c2e3a309a7c0d2d9710949c4dfee55129ef2b8f1e11173cb12516cca1f7be2d",
          "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:08Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:0c2e3a309a7c0d2d9710949c4dfee55129ef2b8f1e11173cb12516cca1f7be2d",
          "revision": "0cc1c73a5e96749ab32d7ea5e14892fafa6972ae",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/competitor-analysis",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:2901c6580443efe6cf69076c907cb8cac948813be3936c20abc64d628629c580",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:2901c6580443efe6cf69076c907cb8cac948813be3936c20abc64d628629c580",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:2901c6580443efe6cf69076c907cb8cac948813be3936c20abc64d628629c580",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:2901c6580443efe6cf69076c907cb8cac948813be3936c20abc64d628629c580",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/metadata-optimization",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:e6d821a159a554cc39c3e745588a14af19427f47d9b349cb652c07aed7b8b245",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:e6d821a159a554cc39c3e745588a14af19427f47d9b349cb652c07aed7b8b245",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:e6d821a159a554cc39c3e745588a14af19427f47d9b349cb652c07aed7b8b245",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:e6d821a159a554cc39c3e745588a14af19427f47d9b349cb652c07aed7b8b245",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "neondatabase/agent-skills/neon-auth",
      "source": "https://github.com/neondatabase/agent-skills",
      "revision": "80164a28443aca7c82ac1a70aed836950d6c29ea",
      "package_hash": "sha256:1de47c528641b6af70c651d2ad9ab6bdc9f76410467524a1aee9da568ad52611",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:1de47c528641b6af70c651d2ad9ab6bdc9f76410467524a1aee9da568ad52611",
          "revision": "80164a28443aca7c82ac1a70aed836950d6c29ea",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:1de47c528641b6af70c651d2ad9ab6bdc9f76410467524a1aee9da568ad52611",
          "revision": "80164a28443aca7c82ac1a70aed836950d6c29ea",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:1de47c528641b6af70c651d2ad9ab6bdc9f76410467524a1aee9da568ad52611",
          "revision": "80164a28443aca7c82ac1a70aed836950d6c29ea",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "travisjneuman/.claude/document-skills",
      "source": "https://github.com/travisjneuman/.claude",
      "revision": "050878886e3924e11a7d5d0a7df709c3512b7e17",
      "package_hash": "sha256:25ae32f40bd26f04c743d89cee84ce4b62e1005fe1e3f50b0217761844cc46ce",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:25ae32f40bd26f04c743d89cee84ce4b62e1005fe1e3f50b0217761844cc46ce",
          "revision": "050878886e3924e11a7d5d0a7df709c3512b7e17",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:25ae32f40bd26f04c743d89cee84ce4b62e1005fe1e3f50b0217761844cc46ce",
          "revision": "050878886e3924e11a7d5d0a7df709c3512b7e17",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:25ae32f40bd26f04c743d89cee84ce4b62e1005fe1e3f50b0217761844cc46ce",
          "revision": "050878886e3924e11a7d5d0a7df709c3512b7e17",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "alwaysmeticulous/skills/meticulous-fix",
      "source": "https://github.com/alwaysmeticulous/skills",
      "revision": "3c7162bffa55c3dc8f8894b15458324e89770e70",
      "package_hash": "sha256:326d7af79499ce009ce273f4832fce2577c986cc092d0eb9750c0028b589dfec",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:326d7af79499ce009ce273f4832fce2577c986cc092d0eb9750c0028b589dfec",
          "revision": "3c7162bffa55c3dc8f8894b15458324e89770e70",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:56:34Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:326d7af79499ce009ce273f4832fce2577c986cc092d0eb9750c0028b589dfec",
          "revision": "3c7162bffa55c3dc8f8894b15458324e89770e70",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:19Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:326d7af79499ce009ce273f4832fce2577c986cc092d0eb9750c0028b589dfec",
          "revision": "3c7162bffa55c3dc8f8894b15458324e89770e70",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/screenshot-optimization",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:2df10696a98faffd192a3da5901832e9e543285b27675445095d173612aba38e",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:2df10696a98faffd192a3da5901832e9e543285b27675445095d173612aba38e",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:2df10696a98faffd192a3da5901832e9e543285b27675445095d173612aba38e",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:2df10696a98faffd192a3da5901832e9e543285b27675445095d173612aba38e",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "okou-ai/okou-skills/hackernews",
      "source": "https://github.com/okou-ai/okou-skills",
      "revision": "5a106f6cb004fc9383db19ee5fd925fe0ae14d37",
      "package_hash": "sha256:7348b5627a2cbc09aa4414c0442e56d380ef2a58bbc8f08947f4acb9f5adf3eb",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7348b5627a2cbc09aa4414c0442e56d380ef2a58bbc8f08947f4acb9f5adf3eb",
          "revision": "5a106f6cb004fc9383db19ee5fd925fe0ae14d37",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7348b5627a2cbc09aa4414c0442e56d380ef2a58bbc8f08947f4acb9f5adf3eb",
          "revision": "5a106f6cb004fc9383db19ee5fd925fe0ae14d37",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7348b5627a2cbc09aa4414c0442e56d380ef2a58bbc8f08947f4acb9f5adf3eb",
          "revision": "5a106f6cb004fc9383db19ee5fd925fe0ae14d37",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "tradermonty/claude-trading-skills/market-environment-analysis",
      "source": "https://github.com/tradermonty/claude-trading-skills",
      "revision": "40ae281e05e34812020232852305b3b2ba57f2b2",
      "package_hash": "sha256:7117bfcbfa5ad7e647e39b096bb869680ae8f33e3e4502e487630a19a6f72432",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7117bfcbfa5ad7e647e39b096bb869680ae8f33e3e4502e487630a19a6f72432",
          "revision": "40ae281e05e34812020232852305b3b2ba57f2b2",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:58:04Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7117bfcbfa5ad7e647e39b096bb869680ae8f33e3e4502e487630a19a6f72432",
          "revision": "40ae281e05e34812020232852305b3b2ba57f2b2",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:17Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7117bfcbfa5ad7e647e39b096bb869680ae8f33e3e4502e487630a19a6f72432",
          "revision": "40ae281e05e34812020232852305b3b2ba57f2b2",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "anthropics/knowledge-work-plugins/daily-briefing",
      "source": "https://github.com/anthropics/knowledge-work-plugins",
      "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
      "package_hash": "sha256:9212eb7042992322466e7b69fc480ed14e655a42316854f1b7d906b258d9a395",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:9212eb7042992322466e7b69fc480ed14e655a42316854f1b7d906b258d9a395",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:59:04Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:9212eb7042992322466e7b69fc480ed14e655a42316854f1b7d906b258d9a395",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:21Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:9212eb7042992322466e7b69fc480ed14e655a42316854f1b7d906b258d9a395",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/app-analytics",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:4e00eefa69ff419a169a8d4082e74875213a32db04f37d83e87d27ff24eed965",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:4e00eefa69ff419a169a8d4082e74875213a32db04f37d83e87d27ff24eed965",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:4e00eefa69ff419a169a8d4082e74875213a32db04f37d83e87d27ff24eed965",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:4e00eefa69ff419a169a8d4082e74875213a32db04f37d83e87d27ff24eed965",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/app-launch",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:bdb9662bb694cad87bab75e7fa514175cf8d09bb877f1e8551fbcc5707913680",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:bdb9662bb694cad87bab75e7fa514175cf8d09bb877f1e8551fbcc5707913680",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:bdb9662bb694cad87bab75e7fa514175cf8d09bb877f1e8551fbcc5707913680",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:bdb9662bb694cad87bab75e7fa514175cf8d09bb877f1e8551fbcc5707913680",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/app-marketing-context",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:133128f81982cbcd875c33ac0e4b11a35c99f0cf505b8ff5ecfc90256d9b3196",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:133128f81982cbcd875c33ac0e4b11a35c99f0cf505b8ff5ecfc90256d9b3196",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:133128f81982cbcd875c33ac0e4b11a35c99f0cf505b8ff5ecfc90256d9b3196",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:133128f81982cbcd875c33ac0e4b11a35c99f0cf505b8ff5ecfc90256d9b3196",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/app-store-featured",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:3158c80eaf1e3491f38ac13ced5ddb4ff44d57f1b44e2f36c22224878ef33fee",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:3158c80eaf1e3491f38ac13ced5ddb4ff44d57f1b44e2f36c22224878ef33fee",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:3158c80eaf1e3491f38ac13ced5ddb4ff44d57f1b44e2f36c22224878ef33fee",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:3158c80eaf1e3491f38ac13ced5ddb4ff44d57f1b44e2f36c22224878ef33fee",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/localization",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:7d0ead486b2b0a220cbe026de60176770d78ec4ed0b6a547c1637de9b885eebb",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7d0ead486b2b0a220cbe026de60176770d78ec4ed0b6a547c1637de9b885eebb",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7d0ead486b2b0a220cbe026de60176770d78ec4ed0b6a547c1637de9b885eebb",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7d0ead486b2b0a220cbe026de60176770d78ec4ed0b6a547c1637de9b885eebb",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/retention-optimization",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:a0482c4b5bbbc828679c5e4f692a2d12c2f835dc40c22d841b4fa110b016c690",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:a0482c4b5bbbc828679c5e4f692a2d12c2f835dc40c22d841b4fa110b016c690",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:a0482c4b5bbbc828679c5e4f692a2d12c2f835dc40c22d841b4fa110b016c690",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:a0482c4b5bbbc828679c5e4f692a2d12c2f835dc40c22d841b4fa110b016c690",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/ab-test-store-listing",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:940813d079a2ea6ee8cfbd6791e87bdb5dcbb09d7d1c867018f94d7627fc2151",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:940813d079a2ea6ee8cfbd6791e87bdb5dcbb09d7d1c867018f94d7627fc2151",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:940813d079a2ea6ee8cfbd6791e87bdb5dcbb09d7d1c867018f94d7627fc2151",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:940813d079a2ea6ee8cfbd6791e87bdb5dcbb09d7d1c867018f94d7627fc2151",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/review-management",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:7790c214dcc2f58e25d2286ef09311d5cbc0877055204ecec62fedcd342c6fef",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:7790c214dcc2f58e25d2286ef09311d5cbc0877055204ecec62fedcd342c6fef",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:7790c214dcc2f58e25d2286ef09311d5cbc0877055204ecec62fedcd342c6fef",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:7790c214dcc2f58e25d2286ef09311d5cbc0877055204ecec62fedcd342c6fef",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/ua-campaign",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:a07ffbdd67ee45c7bbadd373b89ce6c2b8d8a48eec88be6aa4a4f5ce14b6bbff",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:a07ffbdd67ee45c7bbadd373b89ce6c2b8d8a48eec88be6aa4a4f5ce14b6bbff",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:a07ffbdd67ee45c7bbadd373b89ce6c2b8d8a48eec88be6aa4a4f5ce14b6bbff",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:a07ffbdd67ee45c7bbadd373b89ce6c2b8d8a48eec88be6aa4a4f5ce14b6bbff",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/market-movers",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:5f5767961209536a7b5b05b746134f69d40ea87e421d5faa4b2d45a20b422b3b",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:5f5767961209536a7b5b05b746134f69d40ea87e421d5faa4b2d45a20b422b3b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:5f5767961209536a7b5b05b746134f69d40ea87e421d5faa4b2d45a20b422b3b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:5f5767961209536a7b5b05b746134f69d40ea87e421d5faa4b2d45a20b422b3b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/market-pulse",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:4278017d015b924e7a88b29f4b71269fe0338dc3d8d06ffd735eacd2458d230b",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:4278017d015b924e7a88b29f4b71269fe0338dc3d8d06ffd735eacd2458d230b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:4278017d015b924e7a88b29f4b71269fe0338dc3d8d06ffd735eacd2458d230b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:4278017d015b924e7a88b29f4b71269fe0338dc3d8d06ffd735eacd2458d230b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "anthropics/knowledge-work-plugins/meeting-briefing",
      "source": "https://github.com/anthropics/knowledge-work-plugins",
      "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
      "package_hash": "sha256:759fcdd2de0110200f87d5657c168d612a8cef0f68d192298c8734cda6ebdf17",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:759fcdd2de0110200f87d5657c168d612a8cef0f68d192298c8734cda6ebdf17",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:58:04Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:759fcdd2de0110200f87d5657c168d612a8cef0f68d192298c8734cda6ebdf17",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:17Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:759fcdd2de0110200f87d5657c168d612a8cef0f68d192298c8734cda6ebdf17",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "dpearson2699/swift-ios-skills/financekit",
      "source": "https://github.com/dpearson2699/swift-ios-skills",
      "revision": "8d90fd121a263355a4fb44fd082af1416a5c1c2a",
      "package_hash": "sha256:192729172bf57ba1d3921ef3b2d4d4eb5efc0ccd47a6ca9f56b7d38eebc53196",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:192729172bf57ba1d3921ef3b2d4d4eb5efc0ccd47a6ca9f56b7d38eebc53196",
          "revision": "8d90fd121a263355a4fb44fd082af1416a5c1c2a",
          "raw_count": 2,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:55:42Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:192729172bf57ba1d3921ef3b2d4d4eb5efc0ccd47a6ca9f56b7d38eebc53196",
          "revision": "8d90fd121a263355a4fb44fd082af1416a5c1c2a",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:08Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:192729172bf57ba1d3921ef3b2d4d4eb5efc0ccd47a6ca9f56b7d38eebc53196",
          "revision": "8d90fd121a263355a4fb44fd082af1416a5c1c2a",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "anthropics/knowledge-work-plugins/kb-article",
      "source": "https://github.com/anthropics/knowledge-work-plugins",
      "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
      "package_hash": "sha256:3e2bb3229194037253cc65fe92d90061bda08ea6947aba716885ba8950ba2e06",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:3e2bb3229194037253cc65fe92d90061bda08ea6947aba716885ba8950ba2e06",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:56:52Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:3e2bb3229194037253cc65fe92d90061bda08ea6947aba716885ba8950ba2e06",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:3e2bb3229194037253cc65fe92d90061bda08ea6947aba716885ba8950ba2e06",
          "revision": "da38ec1ee89d41e5380e652a97382695003396e7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "brianlovin/agent-config/skill-creator",
      "source": "https://github.com/brianlovin/agent-config",
      "revision": "1a9819ebf3fee811150fc76cbe177ea4e5f747ff",
      "package_hash": "sha256:5f8ab34561d989b99e15531e93714bcee8d21b996bc080d0c19c88d8c2bea217",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:5f8ab34561d989b99e15531e93714bcee8d21b996bc080d0c19c88d8c2bea217",
          "revision": "1a9819ebf3fee811150fc76cbe177ea4e5f747ff",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:57:30Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:5f8ab34561d989b99e15531e93714bcee8d21b996bc080d0c19c88d8c2bea217",
          "revision": "1a9819ebf3fee811150fc76cbe177ea4e5f747ff",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:15Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:5f8ab34561d989b99e15531e93714bcee8d21b996bc080d0c19c88d8c2bea217",
          "revision": "1a9819ebf3fee811150fc76cbe177ea4e5f747ff",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "browserbase/skills/search",
      "source": "https://github.com/browserbase/skills",
      "revision": "6811ca31163332d9d60309cff48e77f09de37a17",
      "package_hash": "sha256:da725a76171ffd00bbde42816ec9efaa2117f9ca9c34aba45fa1c10544dff37f",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:da725a76171ffd00bbde42816ec9efaa2117f9ca9c34aba45fa1c10544dff37f",
          "revision": "6811ca31163332d9d60309cff48e77f09de37a17",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:01:38Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:da725a76171ffd00bbde42816ec9efaa2117f9ca9c34aba45fa1c10544dff37f",
          "revision": "6811ca31163332d9d60309cff48e77f09de37a17",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:27Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:da725a76171ffd00bbde42816ec9efaa2117f9ca9c34aba45fa1c10544dff37f",
          "revision": "6811ca31163332d9d60309cff48e77f09de37a17",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/apple-search-ads",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:020b42c66199a39bb4e4f17aacb8515b9dca87a33d069ff3c8f603e765d4d657",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:020b42c66199a39bb4e4f17aacb8515b9dca87a33d069ff3c8f603e765d4d657",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:31:15Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:020b42c66199a39bb4e4f17aacb8515b9dca87a33d069ff3c8f603e765d4d657",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:15:13Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:020b42c66199a39bb4e4f17aacb8515b9dca87a33d069ff3c8f603e765d4d657",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "himself65/finance-skills/yc-reader",
      "source": "https://github.com/himself65/finance-skills",
      "revision": "7fe91853b536304b13bce210ecf8b685cf77ec48",
      "package_hash": "sha256:1059cba768d172d01cae046c1463e76a6fc421ab86ce2674f521212780aeff68",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:1059cba768d172d01cae046c1463e76a6fc421ab86ce2674f521212780aeff68",
          "revision": "7fe91853b536304b13bce210ecf8b685cf77ec48",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:55:29Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:1059cba768d172d01cae046c1463e76a6fc421ab86ce2674f521212780aeff68",
          "revision": "7fe91853b536304b13bce210ecf8b685cf77ec48",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:08Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:1059cba768d172d01cae046c1463e76a6fc421ab86ce2674f521212780aeff68",
          "revision": "7fe91853b536304b13bce210ecf8b685cf77ec48",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "dotnet/skills/directory-build-organization",
      "source": "https://github.com/dotnet/skills",
      "revision": "a55fbf42c36a37b94ec07291bd79cb6b6bf3a04d",
      "package_hash": "sha256:2b9ad83b242deb7c1dfdebe4c181da104fa3623195fb5d0228775fd8a277df4e",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:2b9ad83b242deb7c1dfdebe4c181da104fa3623195fb5d0228775fd8a277df4e",
          "revision": "a55fbf42c36a37b94ec07291bd79cb6b6bf3a04d",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:56:08Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:2b9ad83b242deb7c1dfdebe4c181da104fa3623195fb5d0228775fd8a277df4e",
          "revision": "a55fbf42c36a37b94ec07291bd79cb6b6bf3a04d",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:12Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:2b9ad83b242deb7c1dfdebe4c181da104fa3623195fb5d0228775fd8a277df4e",
          "revision": "a55fbf42c36a37b94ec07291bd79cb6b6bf3a04d",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "netlify/context-and-tools/netlify-image-cdn",
      "source": "https://github.com/netlify/context-and-tools",
      "revision": "0830047fec55c33ea3f360b528c2039b9d96d97f",
      "package_hash": "sha256:3a88e7e4be4423d8d12a6521c1a83cc1ce610c74c5a6a9b002c874f4f597cb21",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:3a88e7e4be4423d8d12a6521c1a83cc1ce610c74c5a6a9b002c874f4f597cb21",
          "revision": "0830047fec55c33ea3f360b528c2039b9d96d97f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:33:53Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:3a88e7e4be4423d8d12a6521c1a83cc1ce610c74c5a6a9b002c874f4f597cb21",
          "revision": "0830047fec55c33ea3f360b528c2039b9d96d97f",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:19Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:3a88e7e4be4423d8d12a6521c1a83cc1ce610c74c5a6a9b002c874f4f597cb21",
          "revision": "0830047fec55c33ea3f360b528c2039b9d96d97f",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "nexu-io/open-design/digits-fintech-swiss-template",
      "source": "https://github.com/nexu-io/open-design",
      "revision": "1b47e60bd46641469fcd8b69c496c4e3a548bc28",
      "package_hash": "sha256:cfe473a1d5b5781a6f54fdd65f5d1bc3706f6365de4966f898e2118c247ee9dc",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:cfe473a1d5b5781a6f54fdd65f5d1bc3706f6365de4966f898e2118c247ee9dc",
          "revision": "1b47e60bd46641469fcd8b69c496c4e3a548bc28",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T02:01:24Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:cfe473a1d5b5781a6f54fdd65f5d1bc3706f6365de4966f898e2118c247ee9dc",
          "revision": "1b47e60bd46641469fcd8b69c496c4e3a548bc28",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:30Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:cfe473a1d5b5781a6f54fdd65f5d1bc3706f6365de4966f898e2118c247ee9dc",
          "revision": "1b47e60bd46641469fcd8b69c496c4e3a548bc28",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/android-aso",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:f1eaf9938ee2304dbcc1134d0b0318ce05b37e85be7b342870aa936ebb326f31",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:f1eaf9938ee2304dbcc1134d0b0318ce05b37e85be7b342870aa936ebb326f31",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:f1eaf9938ee2304dbcc1134d0b0318ce05b37e85be7b342870aa936ebb326f31",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:f1eaf9938ee2304dbcc1134d0b0318ce05b37e85be7b342870aa936ebb326f31",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/app-icon-optimization",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:61be51cc7457bd8cfb795fc1e59ad8b9bd46817c9a43422ef2d6a3e090d4e7cc",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:61be51cc7457bd8cfb795fc1e59ad8b9bd46817c9a43422ef2d6a3e090d4e7cc",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:61be51cc7457bd8cfb795fc1e59ad8b9bd46817c9a43422ef2d6a3e090d4e7cc",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:61be51cc7457bd8cfb795fc1e59ad8b9bd46817c9a43422ef2d6a3e090d4e7cc",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "dynatrace/dynatrace-for-ai/dt-app-dashboards",
      "source": "https://github.com/dynatrace/dynatrace-for-ai",
      "revision": "47528b027529b9377ee0e8542a80279405510ad7",
      "package_hash": "sha256:02ea1c99e8a0c0f5365b5750dfdd516c0e1df496ecede76ae057be21eb7257e8",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:13:40Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:02ea1c99e8a0c0f5365b5750dfdd516c0e1df496ecede76ae057be21eb7257e8",
          "revision": "47528b027529b9377ee0e8542a80279405510ad7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:55:23Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:02ea1c99e8a0c0f5365b5750dfdd516c0e1df496ecede76ae057be21eb7257e8",
          "revision": "47528b027529b9377ee0e8542a80279405510ad7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:08Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:02ea1c99e8a0c0f5365b5750dfdd516c0e1df496ecede76ae057be21eb7257e8",
          "revision": "47528b027529b9377ee0e8542a80279405510ad7",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/onboarding-optimization",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:8cf366a04c60e05d6e9e1d01152b240bf9b2b3b10d074f38088d44f6625a145b",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:8cf366a04c60e05d6e9e1d01152b240bf9b2b3b10d074f38088d44f6625a145b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:8cf366a04c60e05d6e9e1d01152b240bf9b2b3b10d074f38088d44f6625a145b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:8cf366a04c60e05d6e9e1d01152b240bf9b2b3b10d074f38088d44f6625a145b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "cap-go/capgo-skills/capacitor-best-practices",
      "source": "https://github.com/cap-go/capgo-skills",
      "revision": "c0afb73c859a85c35c8d03d3dc9afdee5fe78d30",
      "package_hash": "sha256:6e53bad9edb836738876158fc5d674dfb0ef71455e471ebc7a6f09e7f3a6eb08",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:14:53Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:6e53bad9edb836738876158fc5d674dfb0ef71455e471ebc7a6f09e7f3a6eb08",
          "revision": "c0afb73c859a85c35c8d03d3dc9afdee5fe78d30",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T01:57:36Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:6e53bad9edb836738876158fc5d674dfb0ef71455e471ebc7a6f09e7f3a6eb08",
          "revision": "c0afb73c859a85c35c8d03d3dc9afdee5fe78d30",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:25:17Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:6e53bad9edb836738876158fc5d674dfb0ef71455e471ebc7a6f09e7f3a6eb08",
          "revision": "c0afb73c859a85c35c8d03d3dc9afdee5fe78d30",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/asc-metrics",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:706531a10cd48b1afb6e7d6718ddd68b08f16e5409c326a410144f69598b528f",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:706531a10cd48b1afb6e7d6718ddd68b08f16e5409c326a410144f69598b528f",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:706531a10cd48b1afb6e7d6718ddd68b08f16e5409c326a410144f69598b528f",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:706531a10cd48b1afb6e7d6718ddd68b08f16e5409c326a410144f69598b528f",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/competitor-tracking",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:cca28f79427e7d565bc210a2b84f0e01b417d6b9c069e0633c17efc7aeab01f8",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:cca28f79427e7d565bc210a2b84f0e01b417d6b9c069e0633c17efc7aeab01f8",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:cca28f79427e7d565bc210a2b84f0e01b417d6b9c069e0633c17efc7aeab01f8",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:cca28f79427e7d565bc210a2b84f0e01b417d6b9c069e0633c17efc7aeab01f8",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/crash-analytics",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:431471ef622b66415e5f2225583f7441c0494558fea75aee147956b796c2cafd",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:431471ef622b66415e5f2225583f7441c0494558fea75aee147956b796c2cafd",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:431471ef622b66415e5f2225583f7441c0494558fea75aee147956b796c2cafd",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:431471ef622b66415e5f2225583f7441c0494558fea75aee147956b796c2cafd",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/in-app-events",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:0dcf56e586e86684d184432e735c37e184601e07ddedf6fb9590efe9453eefcd",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:0dcf56e586e86684d184432e735c37e184601e07ddedf6fb9590efe9453eefcd",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:0dcf56e586e86684d184432e735c37e184601e07ddedf6fb9590efe9453eefcd",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:0dcf56e586e86684d184432e735c37e184601e07ddedf6fb9590efe9453eefcd",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/rating-prompt-strategy",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:ab43af8439e61bf208abd962fd86edccb2602a0a26dd262f551ae7add0262364",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:ab43af8439e61bf208abd962fd86edccb2602a0a26dd262f551ae7add0262364",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:ab43af8439e61bf208abd962fd86edccb2602a0a26dd262f551ae7add0262364",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:ab43af8439e61bf208abd962fd86edccb2602a0a26dd262f551ae7add0262364",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "appeeky/aso-skills/subscription-lifecycle",
      "source": "https://github.com/appeeky/aso-skills",
      "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
      "package_hash": "sha256:34667a39feea41469e33c196c57a8fe8db3a46f5f4f5a8734a2c92a50bbe6c1b",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:34667a39feea41469e33c196c57a8fe8db3a46f5f4f5a8734a2c92a50bbe6c1b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:34667a39feea41469e33c196c57a8fe8db3a46f5f4f5a8734a2c92a50bbe6c1b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:34667a39feea41469e33c196c57a8fe8db3a46f5f4f5a8734a2c92a50bbe6c1b",
          "revision": "4df730f456c21e42b9a2ea2be89fb32caf787728",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    },
    {
      "id": "heygen-com/hyperframes/canopy-part-title",
      "source": "https://github.com/heygen-com/hyperframes",
      "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
      "package_hash": "sha256:8310668e826ab72e2f671824885f0602cbe36ff12a533e92d85242977b8fa214",
      "security_state": "reviewed",
      "scans": [
        {
          "provider": "Edge static checks",
          "origin": "Edge-run",
          "scanner": "edge-static/1.0.1",
          "date": "2026-09-27T02:05:15Z",
          "status": "pass",
          "scope": "Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence.",
          "package_hash": "sha256:8310668e826ab72e2f671824885f0602cbe36ff12a533e92d85242977b8fa214",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Cisco skill-scanner",
          "origin": "Edge-run",
          "scanner": "cisco-skill-scanner/2.1.0",
          "date": "2026-09-27T00:32:39Z",
          "status": "pass",
          "scope": "Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis.",
          "package_hash": "sha256:8310668e826ab72e2f671824885f0602cbe36ff12a533e92d85242977b8fa214",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 1,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        },
        {
          "provider": "Semgrep Edge rules",
          "origin": "Edge-run",
          "scanner": "semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1",
          "date": "2026-09-27T02:16:36Z",
          "status": "pass",
          "scope": "Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded.",
          "package_hash": "sha256:8310668e826ab72e2f671824885f0602cbe36ff12a533e92d85242977b8fa214",
          "revision": "984ad28c7cbaae37db26e0c8eeea9b92e7b457ac",
          "raw_count": 0,
          "findings": [],
          "findings_available": true,
          "limits": "Static results do not establish runtime safety or usefulness. Edge calibration can exclude raw findings."
        }
      ]
    }
  ]
}