2 lines
348 KiB
JSON
2 lines
348 KiB
JSON
{"provenancePolicy":"canonical-upstream-or-content-addressed-AAS-import-history","reviewPolicy":"catalog-wide-public-selection-and-digest-bound-content-audit","reviewedAt":"2026-07-17","rubricVersion":"1.0.0","schemaVersion":1,"scope":{"benchmarkIndependent":true,"catalogSkillCount":1965,"reviewedSkillCount":121},"skills":{"accessibility-compliance-accessibility-audit":{"capabilities":["accessibility-audit","accessible-component-guidance","assistive-technology-evidence","keyboard-and-screen-reader-validation","regression-evidence","remediation-priorities","wcag-audit","wcag-regression"],"capabilityEvidence":[],"content":{"digest":"sha256-f0c76db2ccf2f2a0acca2f3384177eadbba83a499589d0b347914819210bd77a","path":"skills/accessibility-compliance-accessibility-audit/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/accessibility-compliance-accessibility-audit/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/accessibility-compliance-accessibility-audit/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/accessibility-compliance-accessibility-audit/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-f0c76db2ccf2f2a0acca2f3384177eadbba83a499589d0b347914819210bd77a","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/accessibility-compliance-accessibility-audit/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/accessibility-compliance-accessibility-audit/SKILL.md: No shell commands, network/credential operations, destructive actions, or automatic writes are present; it is audit/remediation guidance.","sha256-f0c76db2ccf2f2a0acca2f3384177eadbba83a499589d0b347914819210bd77a"],"status":"known","value":"safe"},"setup":{"evidence":["skills/accessibility-compliance-accessibility-audit/SKILL.md: Guidance/audit procedure only; no activation prerequisite or install step is declared."],"status":"known","value":"none"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"id/name","term":"accessibility","weight":8},{"field":"tags/triggers","term":"wcag","weight":4},{"field":"tags/triggers","term":"assistive technology","weight":4}],"rank":1,"score":16}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"accesslint-audit":{"capabilities":["accessibility-audit","keyboard-and-screen-reader-validation","regression-evidence","remediation-priorities","wcag-audit"],"capabilityEvidence":[],"content":{"digest":"sha256-bb18c5156d751db190d2ded56c4f172619fdd5dfc4651609f69379bc380bb5e6","path":"skills/accesslint-audit/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/accesslint-audit/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/accesslint-audit/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/accesslint-audit/SKILL.md: source frontmatter is a canonical URL","sha256-bb18c5156d751db190d2ded56c4f172619fdd5dfc4651609f69379bc380bb5e6"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/AccessLint/skills"}},"risk":{"evidence":["skills/accesslint-audit/SKILL.md: Live browser/CDP or browser-MCP execution plus an optional fix mode that edits project files; exact tool trust and execution boundary are not evidenced.","sha256-bb18c5156d751db190d2ded56c4f172619fdd5dfc4651609f69379bc380bb5e6"],"status":"unknown","value":null},"setup":{"evidence":["skills/accesslint-audit/SKILL.md: Live flow says audit_live connects to or auto-launches Chrome with no user setup; HTML fallback is also described (lines 27-31)."],"status":"known","value":"automatic"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"tags/triggers","term":"accessibility","weight":4},{"field":"tags/triggers","term":"wcag","weight":4}],"rank":4,"score":8},"browserE2E":{"matches":[{"field":"description","term":"browser","weight":3}],"rank":35,"score":3}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"accesslint-diff":{"capabilities":["regression-evidence","wcag-regression"],"capabilityEvidence":[],"content":{"digest":"sha256-604484bc175703c21e5f870ac08aaba0d50e06e9faea6168beb3a519393f361d","path":"skills/accesslint-diff/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/accesslint-diff/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/accesslint-diff/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":["skills/accesslint-diff/SKILL.md: source frontmatter is a canonical URL","sha256-604484bc175703c21e5f870ac08aaba0d50e06e9faea6168beb3a519393f361d"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/AccessLint/skills"}},"risk":{"evidence":["skills/accesslint-diff/SKILL.md: Runs unpinned @latest packages and mutates git state with stash/switch/pop while driving a browser (lines 21-50); safe classification requires stronger package and rollback evidence.","sha256-604484bc175703c21e5f870ac08aaba0d50e06e9faea6168beb3a519393f361d"],"status":"unknown","value":null},"setup":{"evidence":["skills/accesslint-diff/SKILL.md: Use flow invokes npx -y @accesslint packages and automatic Chrome ensure; a git working tree is a task precondition, not a package activation step (lines 21-48)."],"status":"known","value":"automatic"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"tags/triggers","term":"accessibility","weight":4}],"rank":8,"score":4}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"accesslint-scan":{"capabilities":["accessibility-audit","remediation-priorities","wcag-audit"],"capabilityEvidence":[],"content":{"digest":"sha256-ed6f7bce4d22cb250d0d4f62f00d54676799ed3f3b5bdeb1f1ef4c63589e6649","path":"skills/accesslint-scan/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/accesslint-scan/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/accesslint-scan/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":["skills/accesslint-scan/SKILL.md: source frontmatter is a canonical URL","sha256-ed6f7bce4d22cb250d0d4f62f00d54676799ed3f3b5bdeb1f1ef4c63589e6649"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/AccessLint/skills"}},"risk":{"evidence":["skills/accesslint-scan/SKILL.md: Runs unpinned @latest packages and a browser against a supplied URL (lines 17-18,36); package/network trust is not independently evidenced.","sha256-ed6f7bce4d22cb250d0d4f62f00d54676799ed3f3b5bdeb1f1ef4c63589e6649"],"status":"unknown","value":null},"setup":{"evidence":["skills/accesslint-scan/SKILL.md: Use flow invokes npx -y @accesslint/chrome and @accesslint/cli, so package acquisition/browser ensure is automatic at execution (lines 16-18)."],"status":"known","value":"automatic"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"tags/triggers","term":"accessibility","weight":4},{"field":"tags/triggers","term":"wcag","weight":4}],"rank":5,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"advanced-evaluation":{"capabilities":["agent-evaluation-design","failure-metrics"],"capabilityEvidence":[{"lineEnd":11,"lineStart":11,"path":"skills/advanced-evaluation/SKILL.md","supports":["agent-evaluation-design"]},{"lineEnd":58,"lineStart":58,"path":"skills/advanced-evaluation/SKILL.md","supports":["failure-metrics"]}],"content":{"digest":"sha256-9874b2f2eb671e4aecba72117c1e3f724ef5145e583c14f1d2c0933774c8d096","path":"skills/advanced-evaluation/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"7b600b6bd99d190cc9ca039ab5b1772863a6bafb98cb3ba2a0a1aa1874e8f8fb","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":443,"lineStart":443,"path":"skills/advanced-evaluation/SKILL.md"}],"treeSha256":"7b600b6bd99d190cc9ca039ab5b1772863a6bafb98cb3ba2a0a1aa1874e8f8fb","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","path":"skills/advanced-evaluation/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","contentDigest":"sha256-9874b2f2eb671e4aecba72117c1e3f724ef5145e583c14f1d2c0933774c8d096","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/advanced-evaluation/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":1,"destructiveOrMutating":0,"network":4},"filesReviewed":1,"treeSha256":"7b600b6bd99d190cc9ca039ab5b1772863a6bafb98cb3ba2a0a1aa1874e8f8fb","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"7b600b6bd99d190cc9ca039ab5b1772863a6bafb98cb3ba2a0a1aa1874e8f8fb","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":80,"lexicalScore":14,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"evaluation"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"agent-evaluation":{"capabilities":["agent-evaluation-design","failure-metrics","regression-suite","reproducible-cases"],"capabilityEvidence":[{"lineEnd":18,"lineStart":18,"path":"skills/agent-evaluation/SKILL.md","supports":["agent-evaluation-design"]},{"lineEnd":20,"lineStart":20,"path":"skills/agent-evaluation/SKILL.md","supports":["failure-metrics"]},{"lineEnd":21,"lineStart":21,"path":"skills/agent-evaluation/SKILL.md","supports":["regression-suite"]},{"lineEnd":88,"lineStart":88,"path":"skills/agent-evaluation/SKILL.md","supports":["reproducible-cases"]}],"content":{"digest":"sha256-c7a2bca261edc021d0d3a264b3ab1cba7b567f9084f6ddea5af448077afc3843","path":"skills/agent-evaluation/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"16bc5acc9fc874a517db0ba810d890bffe3b1953c4038f5f8dae150311b6b64e","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No resolvable required inter-AAS skill ID found; declared required references are absent from the catalog.","lexicalMatchesReviewedAsNonInterAAS":[{"lineEnd":27,"lineStart":27,"path":"skills/agent-evaluation/SKILL.md"}],"relatedOrRecommendedMatches":[{"lineEnd":26,"lineStart":26,"path":"skills/agent-evaluation/SKILL.md"},{"lineEnd":1121,"lineStart":1121,"path":"skills/agent-evaluation/SKILL.md"},{"lineEnd":1123,"lineStart":1123,"path":"skills/agent-evaluation/SKILL.md"}],"treeSha256":"16bc5acc9fc874a517db0ba810d890bffe3b1953c4038f5f8dae150311b6b64e","type":"full-content-audit"}],"status":"unknown","value":null},"provenance":{"evidence":[{"lineEnd":7,"lineStart":7,"path":"skills/agent-evaluation/SKILL.md","type":"line"},{"lineEnd":475,"lineStart":475,"path":"README.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/vibeforge1111/vibeship-spawner-skills","kind":"repository-mapping-from-declared-pack-origin"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":0,"destructiveOrMutating":3,"network":0},"filesReviewed":1,"treeSha256":"16bc5acc9fc874a517db0ba810d890bffe3b1953c4038f5f8dae150311b6b64e","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"lineEnd":27,"lineStart":27,"path":"skills/agent-evaluation/SKILL.md","type":"line"}],"status":"unknown","value":null}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":8,"lexicalScore":33,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"agent"},{"fields":["category","description"],"term":"agents"},{"fields":["id","name","tags"],"term":"evaluation"},{"fields":["description"],"term":"benchmark"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"agent-memory-systems":{"capabilities":["context-budget","context-retrieval","memory-boundaries","stale-memory-controls"],"capabilityEvidence":[{"lineEnd":153,"lineStart":153,"path":"skills/agent-memory-systems/SKILL.md","supports":["context-retrieval"]},{"lineEnd":302,"lineStart":302,"path":"skills/agent-memory-systems/SKILL.md","supports":["context-budget"]},{"lineEnd":475,"lineStart":475,"path":"skills/agent-memory-systems/SKILL.md","supports":["stale-memory-controls"]},{"lineEnd":5,"lineStart":5,"path":"skills/agent-memory-systems/SKILL.md","supports":["memory-boundaries"]}],"content":{"digest":"sha256-2003324855b6937675d21ad41925d38538d3a1076b8f734149b5d27ecb2152c9","path":"skills/agent-memory-systems/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"d6146928fa9aaf9e20e8909901350181ce82c50236a118512abae85f18f998a6","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":1067,"lineStart":1067,"path":"skills/agent-memory-systems/SKILL.md"},{"lineEnd":1069,"lineStart":1069,"path":"skills/agent-memory-systems/SKILL.md"}],"treeSha256":"d6146928fa9aaf9e20e8909901350181ce82c50236a118512abae85f18f998a6","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":8,"lineStart":8,"path":"skills/agent-memory-systems/SKILL.md","type":"line"},{"lineEnd":475,"lineStart":475,"path":"README.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/vibeforge1111/vibeship-spawner-skills","kind":"repository-mapping-from-declared-pack-origin"}},"risk":{"evidence":[{"lineEnd":470,"lineStart":470,"path":"skills/agent-memory-systems/SKILL.md","type":"line"},{"categories":{"commandExecution":0,"credentials":13,"destructiveOrMutating":6,"network":1},"filesReviewed":1,"treeSha256":"d6146928fa9aaf9e20e8909901350181ce82c50236a118512abae85f18f998a6","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"d6146928fa9aaf9e20e8909901350181ce82c50236a118512abae85f18f998a6","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":11,"lexicalScore":32,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"agent"},{"fields":["description"],"term":"agents"},{"fields":["id","name","tags","category","description"],"term":"memory"},{"fields":["description"],"term":"context"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"agent-orchestration-multi-agent-optimize":{"capabilities":["context-budget","failure-metrics","regression-suite","tool-orchestration"],"capabilityEvidence":[{"lineEnd":109,"lineStart":109,"path":"skills/agent-orchestration-multi-agent-optimize/SKILL.md","supports":["context-budget"]},{"lineEnd":15,"lineStart":15,"path":"skills/agent-orchestration-multi-agent-optimize/SKILL.md","supports":["tool-orchestration"]},{"lineEnd":26,"lineStart":26,"path":"skills/agent-orchestration-multi-agent-optimize/SKILL.md","supports":["failure-metrics"]},{"lineEnd":33,"lineStart":33,"path":"skills/agent-orchestration-multi-agent-optimize/SKILL.md","supports":["regression-suite"]}],"content":{"digest":"sha256-848a24a5949f23abe0fb80659bfbf9b5c84f238805cd638c0136fb8c54ed5049","path":"skills/agent-orchestration-multi-agent-optimize/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"6097f5e85dc87f32b296a5722b6e0d0ae9b4e5631df71a5c3f66bb7394285d3b","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"6097f5e85dc87f32b296a5722b6e0d0ae9b4e5631df71a5c3f66bb7394285d3b","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/agent-orchestration-multi-agent-optimize/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-848a24a5949f23abe0fb80659bfbf9b5c84f238805cd638c0136fb8c54ed5049","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/agent-orchestration-multi-agent-optimize/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":2,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"6097f5e85dc87f32b296a5722b6e0d0ae9b4e5631df71a5c3f66bb7394285d3b","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"6097f5e85dc87f32b296a5722b6e0d0ae9b4e5631df71a5c3f66bb7394285d3b","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":6,"lexicalScore":36,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"agent"},{"fields":["id","name","description"],"term":"orchestration"},{"fields":["id","name","description"],"term":"multi-agent"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"agent-tool-builder":{"capabilities":["failure-handling","mcp-tool-contract","schema-validation","tool-orchestration"],"capabilityEvidence":[{"lineEnd":18,"lineStart":18,"path":"skills/agent-tool-builder/SKILL.md","supports":["schema-validation"]},{"lineEnd":39,"lineStart":39,"path":"skills/agent-tool-builder/SKILL.md","supports":["mcp-tool-contract"]},{"lineEnd":6,"lineStart":6,"path":"skills/agent-tool-builder/SKILL.md","supports":["failure-handling","tool-orchestration"]}],"content":{"digest":"sha256-d32f031ee373cb91618e2cb489e486258b1efa098621f403771b42013f733b03","path":"skills/agent-tool-builder/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"b31ee9914466c62c5c4f0682971d18d2475e49bf745639fd0c476d87e7cebac2","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":693,"lineStart":693,"path":"skills/agent-tool-builder/SKILL.md"},{"lineEnd":695,"lineStart":695,"path":"skills/agent-tool-builder/SKILL.md"}],"treeSha256":"b31ee9914466c62c5c4f0682971d18d2475e49bf745639fd0c476d87e7cebac2","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":8,"lineStart":8,"path":"skills/agent-tool-builder/SKILL.md","type":"line"},{"lineEnd":475,"lineStart":475,"path":"README.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/vibeforge1111/vibeship-spawner-skills","kind":"repository-mapping-from-declared-pack-origin"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":2,"destructiveOrMutating":1,"network":1},"filesReviewed":1,"treeSha256":"b31ee9914466c62c5c4f0682971d18d2475e49bf745639fd0c476d87e7cebac2","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"b31ee9914466c62c5c4f0682971d18d2475e49bf745639fd0c476d87e7cebac2","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":33,"lexicalScore":26,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"agent"},{"fields":["description"],"term":"agents"},{"fields":["id","name","description"],"term":"tool"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"agentic-actions-auditor":{"capabilities":["agent-threat-review","auditable-operations","tool-permission-boundaries"],"capabilityEvidence":[{"lineEnd":22,"lineStart":22,"path":"skills/agentic-actions-auditor/SKILL.md","supports":["agent-threat-review","auditable-operations"]},{"lineEnd":25,"lineStart":25,"path":"skills/agentic-actions-auditor/SKILL.md","supports":["tool-permission-boundaries"]}],"content":{"digest":"sha256-5c20a6b301fd88b98b4c68918bd9726878ffbf3cf9b3f91be52b0f60a1851c26","path":"skills/agentic-actions-auditor/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"2c76dabaecb9ae5595d5ac2925694a5000e11b7b1b70497c9e05b9db6f35ce75","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"2c76dabaecb9ae5595d5ac2925694a5000e11b7b1b70497c9e05b9db6f35ce75","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","path":"skills/agentic-actions-auditor/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","contentDigest":"sha256-5c20a6b301fd88b98b4c68918bd9726878ffbf3cf9b3f91be52b0f60a1851c26","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/agentic-actions-auditor/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":112,"lineStart":112,"path":"skills/agentic-actions-auditor/SKILL.md","type":"line"},{"lineEnd":81,"lineStart":81,"path":"skills/agentic-actions-auditor/SKILL.md","type":"line"},{"categories":{"commandExecution":8,"credentials":9,"destructiveOrMutating":0,"network":9},"filesReviewed":1,"treeSha256":"2c76dabaecb9ae5595d5ac2925694a5000e11b7b1b70497c9e05b9db6f35ce75","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"lineEnd":100,"lineStart":100,"path":"skills/agentic-actions-auditor/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":24,"lexicalScore":28,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"agent"},{"fields":["description"],"term":"agents"},{"fields":["id","name","tags"],"term":"agentic"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"ai-agents-architect":{"capabilities":["agent-boundaries","agent-evaluation-design","context-retrieval","delegation-policy","failure-handling","memory-boundaries","tool-orchestration"],"capabilityEvidence":[{"lineEnd":107,"lineStart":107,"path":"skills/ai-agents-architect/SKILL.md","supports":["delegation-policy"]},{"lineEnd":120,"lineStart":120,"path":"skills/ai-agents-architect/SKILL.md","supports":["failure-handling"]},{"lineEnd":19,"lineStart":19,"path":"skills/ai-agents-architect/SKILL.md","supports":["agent-boundaries"]},{"lineEnd":29,"lineStart":29,"path":"skills/ai-agents-architect/SKILL.md","supports":["agent-evaluation-design"]},{"lineEnd":4,"lineStart":4,"path":"skills/ai-agents-architect/SKILL.md","supports":["memory-boundaries"]},{"lineEnd":44,"lineStart":44,"path":"skills/ai-agents-architect/SKILL.md","supports":["tool-orchestration"]},{"lineEnd":99,"lineStart":99,"path":"skills/ai-agents-architect/SKILL.md","supports":["context-retrieval"]}],"content":{"digest":"sha256-bbe6a0a8e93c0723760140a69d0fdf426d1fe84834d47e20e372711e7b6628f1","path":"skills/ai-agents-architect/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"c85f62e2e4d1a13786bc95c705514d7b56aab6c0379a1821bcaec7e0071cec40","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[{"lineEnd":52,"lineStart":52,"path":"skills/ai-agents-architect/SKILL.md"}],"relatedOrRecommendedMatches":[{"lineEnd":319,"lineStart":319,"path":"skills/ai-agents-architect/SKILL.md"},{"lineEnd":321,"lineStart":321,"path":"skills/ai-agents-architect/SKILL.md"}],"treeSha256":"c85f62e2e4d1a13786bc95c705514d7b56aab6c0379a1821bcaec7e0071cec40","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":6,"lineStart":6,"path":"skills/ai-agents-architect/SKILL.md","type":"line"},{"lineEnd":475,"lineStart":475,"path":"README.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/vibeforge1111/vibeship-spawner-skills","kind":"repository-mapping-from-declared-pack-origin"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":2,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"c85f62e2e4d1a13786bc95c705514d7b56aab6c0379a1821bcaec7e0071cec40","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"c85f62e2e4d1a13786bc95c705514d7b56aab6c0379a1821bcaec7e0071cec40","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":7,"lexicalScore":36,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"agent"},{"fields":["id","name","tags","category","description"],"term":"agents"},{"fields":["description"],"term":"tool"},{"fields":["description"],"term":"orchestration"},{"fields":["description"],"term":"memory"},{"fields":["description"],"term":"multi-agent"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"api-and-interface-design":{"capabilities":["idempotent-retries","stable-api-contract","versioning-policy"],"capabilityEvidence":[{"lineEnd":17,"lineStart":17,"path":"skills/api-and-interface-design/SKILL.md","supports":["stable-api-contract"]},{"lineEnd":37,"lineStart":37,"path":"skills/api-and-interface-design/SKILL.md","supports":["versioning-policy"]},{"lineEnd":63,"lineStart":63,"path":"skills/api-and-interface-design/SKILL.md","supports":["idempotent-retries"]}],"content":{"digest":"sha256-e8f5bbbfb32c50e61499eda125c6af8ad38e084cf6b47adebd0a0a263e924ab1","path":"skills/api-and-interface-design/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":["skills/api-and-interface-design/SKILL.md:5-6"],"status":"known","value":{"repo":"addyosmani/agent-skills","url":"https://github.com/addyosmani/agent-skills/tree/main/skills/api-and-interface-design"}},"risk":{"evidence":["Design-only guidance and inert API examples; skills/api-and-interface-design/SKILL.md:306-307 requires verification and approval before destructive or costly changes."],"status":"known","value":"safe"},"setup":{"evidence":["Full-content audit found no host tool, MCP, credential, network, or installation prerequisite."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["api","contract"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"api-design-principles":{"capabilities":["stable-api-contract","versioning-policy"],"capabilityEvidence":[{"lineEnd":18,"lineStart":18,"path":"skills/api-design-principles/SKILL.md","supports":["stable-api-contract"]},{"lineEnd":33,"lineStart":33,"path":"skills/api-design-principles/SKILL.md","supports":["versioning-policy"]}],"content":{"digest":"sha256-9e3a261c94e6b67e386a0c58532a4aedd924683bb8d6bde6bf90c5337a91195d","path":"skills/api-design-principles/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive six-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive six-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/api-design-principles/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-9e3a261c94e6b67e386a0c58532a4aedd924683bb8d6bde6bf90c5337a91195d","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/api-design-principles/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Templates use placeholder data and define endpoints but contain no live command, credential, network, or deployment execution path."],"status":"known","value":"safe"},"setup":{"evidence":["All six files are guidance, templates, and examples; no host activation prerequisite is declared."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["api","rest","graphql"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"api-documenter":{"capabilities":["machine-readable-documentation","openapi-definition","versioning-policy"],"capabilityEvidence":[{"lineEnd":38,"lineStart":38,"path":"skills/api-documenter/SKILL.md","supports":["machine-readable-documentation","openapi-definition"]},{"lineEnd":44,"lineStart":44,"path":"skills/api-documenter/SKILL.md","supports":["versioning-policy"]}],"content":{"digest":"sha256-6c08bd68f45cf03280b2a34f6d3bd94e92dba06c0ff4eb6b7b61a4813e0358b9","path":"skills/api-documenter/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/api-documenter/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-6c08bd68f45cf03280b2a34f6d3bd94e92dba06c0ff4eb6b7b61a4813e0358b9","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/api-documenter/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The skill produces documentation plans and artifacts; curl, auth, and deployment appear only as documentation subjects, not live execution instructions."],"status":"known","value":"safe"},"setup":{"evidence":["Documentation authoring is usable without a configured service; named platforms are capability examples, not prerequisites."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["api","documentation","openapi"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"api-integration":{"capabilities":["async-boundary-design","failure-compensation","idempotent-retries"],"capabilityEvidence":[{"lineEnd":101,"lineStart":101,"path":"skills/api-integration/SKILL.md","supports":["async-boundary-design","failure-compensation"]},{"lineEnd":73,"lineStart":73,"path":"skills/api-integration/SKILL.md","supports":["idempotent-retries"]}],"content":{"digest":"sha256-f4db04ba0fe50c69cd1cadf101a4eb24adfd9023b57536dc11fcc77f7cbe28e5","path":"skills/api-integration/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["skills/api-integration/SKILL.md:153-164 asks the user first and then invokes the skill if installed; no matching catalog ID exists."],"status":"known","value":[]},"provenance":{"evidence":["skills/api-integration/SKILL.md:5-6"],"status":"known","value":{"repo":"LambdaTest/agent-skills","url":"https://github.com/LambdaTest/agent-skills/tree/main/api-skill/api-integration-helper"}},"risk":{"evidence":["Examples are inert design snippets; the follow-up requires user choice and lines 171-175 require verification and approval for destructive/costly actions."],"status":"known","value":"safe"},"setup":{"evidence":["Core output is an integration design; external APIs are examples, not activation prerequisites."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["api","event-driven","webhook","saga"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"api-patterns":{"capabilities":["machine-readable-documentation","versioning-policy"],"capabilityEvidence":[{"lineEnd":29,"lineStart":29,"path":"skills/api-patterns/SKILL.md","supports":["versioning-policy"]},{"lineEnd":32,"lineStart":32,"path":"skills/api-patterns/SKILL.md","supports":["machine-readable-documentation"]}],"content":{"digest":"sha256-405871d481ec172092ecc473a4b0f2799e532a97fc003aa7a6b3bd090fe27342","path":"skills/api-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive twelve-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["skills/api-patterns/SKILL.md:37-43 lists Related Skills only; recursive audit found no required inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","path":"skills/api-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","contentDigest":"sha256-405871d481ec172092ecc473a4b0f2799e532a97fc003aa7a6b3bd090fe27342","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/api-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Content is decision guidance plus a local static validator; no network, credential use, destructive command, or deployment action is prescribed."],"status":"known","value":"safe"},"setup":{"evidence":["The bundled validator is local and optional; no external service, credential, or installation prerequisite is declared."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["api","rest","graphql","versioning"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"api-security-best-practices":{"capabilities":["authentication-baseline","authorization-policy","secure-api-boundary","token-validation"],"capabilityEvidence":[{"lineEnd":181,"lineStart":181,"path":"skills/api-security-best-practices/SKILL.md","supports":["token-validation"]},{"lineEnd":31,"lineStart":31,"path":"skills/api-security-best-practices/SKILL.md","supports":["authentication-baseline"]},{"lineEnd":33,"lineStart":33,"path":"skills/api-security-best-practices/SKILL.md","supports":["authorization-policy"]},{"lineEnd":43,"lineStart":43,"path":"skills/api-security-best-practices/SKILL.md","supports":["secure-api-boundary"]}],"content":{"digest":"sha256-86ce97e83b08f1bd598c0f20f3efb99ddde94fb69d502ffdefcfc01b4f2c02aa","path":"skills/api-security-best-practices/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"ebdc51708c3aebc85c55d5fc058948085c931777","path":"skills/api-security-best-practices/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"ebdc51708c3aebc85c55d5fc058948085c931777","contentDigest":"sha256-86ce97e83b08f1bd598c0f20f3efb99ddde94fb69d502ffdefcfc01b4f2c02aa","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/api-security-best-practices/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Examples use environment-backed placeholder secrets, avoid logging tokens, and contain no command that connects to or mutates a live service."],"status":"known","value":"safe"},"setup":{"evidence":["Framework packages and environment variables occur in generated examples, not as Codex/Claude activation prerequisites."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["api","authentication","authorization","security"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"api-testing-observability-api-mock":{"capabilities":["api-contract-fixtures","boundary-mocking","deterministic-mocking"],"capabilityEvidence":[],"content":{"digest":"sha256-65f57d1dc925210f083cc78874d4c839da4c73b5e0474b45922d20d9463fa527","path":"skills/api-testing-observability-api-mock/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/api-testing-observability-api-mock/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/api-testing-observability-api-mock/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/api-testing-observability-api-mock/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-65f57d1dc925210f083cc78874d4c839da4c73b5e0474b45922d20d9463fa527","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/api-testing-observability-api-mock/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/api-testing-observability-api-mock/SKILL.md: Creates mock-service designs only; explicitly rejects production systems and real secrets/customer data (lines 22,28-29).","sha256-65f57d1dc925210f083cc78874d4c839da4c73b5e0474b45922d20d9463fa527"],"status":"known","value":"safe"},"setup":{"evidence":["skills/api-testing-observability-api-mock/SKILL.md: Behavioral design guidance; no install or host activation prerequisite is declared."],"status":"known","value":"none"}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"integrationContract":{"matches":[{"field":"id/name","term":"mock api","weight":8},{"field":"description","term":"api mock","weight":3}],"rank":1,"score":11},"unitComponent":{"matches":[{"field":"tags/triggers","term":"mocking","weight":4}],"rank":10,"score":4}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"application-performance-performance-optimization":{"capabilities":["frontend-bottleneck-analysis","load-scenario-design","repeatable-performance-budget","repeatable-performance-run","result-review"],"capabilityEvidence":[],"content":{"digest":"sha256-818397af06a075800029ea1b10efa9a8bfc62fb9983539818dacc5212282817c","path":"skills/application-performance-performance-optimization/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/application-performance-performance-optimization/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/application-performance-performance-optimization/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/application-performance-performance-optimization/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-818397af06a075800029ea1b10efa9a8bfc62fb9983539818dacc5212282817c","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/application-performance-performance-optimization/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/application-performance-performance-optimization/SKILL.md: Delegates to named subagents and external APM/load-test tools; may exercise real systems, and only textual approval safeguards are present.","sha256-818397af06a075800029ea1b10efa9a8bfc62fb9983539818dacc5212282817c"],"status":"unknown","value":null},"setup":{"evidence":["skills/application-performance-performance-optimization/SKILL.md: The workflow assumes named subagent types plus optional Datadog/New Relic/Prometheus/Grafana/k6/Gatling, but does not define a single activation contract (lines 42-143)."],"status":"unknown","value":null}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"description","term":"end-to-end","weight":3}],"rank":39,"score":3},"performance":{"matches":[{"field":"id/name","term":"performance","weight":8}],"rank":8,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"auth-implementation-patterns":{"capabilities":["authentication-baseline","authentication-hardening","authorization-policy","credential-boundaries","rotation-guidance","secret-lifecycle","secure-api-boundary","secure-session-handling","token-validation"],"capabilityEvidence":[{"lineEnd":30,"lineStart":30,"path":"skills/auth-implementation-patterns/SKILL.md","supports":["authentication-baseline","token-validation"]},{"lineEnd":31,"lineStart":31,"path":"skills/auth-implementation-patterns/SKILL.md","supports":["authentication-hardening"]},{"lineEnd":31,"lineStart":31,"path":"skills/auth-implementation-patterns/SKILL.md","supports":["authorization-policy","secure-api-boundary"]},{"lineEnd":32,"lineStart":32,"path":"skills/auth-implementation-patterns/SKILL.md","supports":["credential-boundaries","rotation-guidance","secret-lifecycle"]}],"content":{"digest":"sha256-ac7abc9e3e8928323153ecc00619359cbdb56272831ed399c4b552b193132c96","path":"skills/auth-implementation-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive two-file audit found no explicit inter-AAS conflict.",{"filesReviewed":2,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"a13f93ef89436a092d5ce699e1a35e8b8ec6685edad8121da71f0f65f0c7d42b","type":"full-content-audit"},"skills/auth-implementation-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["Recursive two-file audit found no explicit inter-AAS dependency.",{"filesReviewed":2,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"a13f93ef89436a092d5ce699e1a35e8b8ec6685edad8121da71f0f65f0c7d42b","type":"full-content-audit"},"skills/auth-implementation-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/auth-implementation-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-ac7abc9e3e8928323153ecc00619359cbdb56272831ed399c4b552b193132c96","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/auth-implementation-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Guidance explicitly forbids logging secrets/tokens and does not contain live credential, network, or destructive execution instructions; SKILL.md:35-38.",{"lineEnd":376,"lineStart":376,"path":"skills/auth-implementation-patterns/resources/implementation-playbook.md","type":"line"},{"categories":{"commandExecution":0,"credentials":99,"destructiveOrMutating":8,"network":0},"filesReviewed":2,"treeSha256":"a13f93ef89436a092d5ce699e1a35e8b8ec6685edad8121da71f0f65f0c7d42b","type":"focused-static-scan"},"skills/auth-implementation-patterns/SKILL.md: Can change authentication, authorization, secret storage and token lifecycle; no executable implementation is pinned and no security validation evidence is present.","sha256-ac7abc9e3e8928323153ecc00619359cbdb56272831ed399c4b552b193132c96"],"status":"unknown","value":null},"setup":{"evidence":["Authentication technology selection is project context, not host activation setup.",{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"a13f93ef89436a092d5ce699e1a35e8b8ec6685edad8121da71f0f65f0c7d42b","type":"full-content-audit"},"skills/auth-implementation-patterns/SKILL.md: Architecture guidance only; identity-provider/library choices are task inputs and no host activation step is declared."],"status":"known","value":"none"}},"intents":["api-backend-delivery","security-review-hardening","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"},{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"},{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":76,"lexicalScore":5,"matchedTerms":[{"fields":["category"],"term":"security"},{"fields":["description"],"term":"secure"},{"fields":["description"],"term":"authentication"},{"fields":["description"],"term":"authorization"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"},{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"authData":{"matches":[{"field":"tags/triggers","term":"authentication","weight":4},{"field":"tags/triggers","term":"authorization","weight":4},{"field":"id/name","term":"auth","weight":8}],"rank":2,"score":16}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"},{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["authentication","authorization","oauth","jwt","rbac"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"autonomous-agent-patterns":{"capabilities":["agent-boundaries","failure-handling","schema-validation","tool-orchestration","tool-permission-boundaries"],"capabilityEvidence":[{"lineEnd":118,"lineStart":118,"path":"skills/autonomous-agent-patterns/SKILL.md","supports":["tool-orchestration"]},{"lineEnd":128,"lineStart":128,"path":"skills/autonomous-agent-patterns/SKILL.md","supports":["schema-validation"]},{"lineEnd":277,"lineStart":277,"path":"skills/autonomous-agent-patterns/SKILL.md","supports":["tool-permission-boundaries"]},{"lineEnd":329,"lineStart":329,"path":"skills/autonomous-agent-patterns/SKILL.md","supports":["failure-handling"]},{"lineEnd":47,"lineStart":47,"path":"skills/autonomous-agent-patterns/SKILL.md","supports":["agent-boundaries"]}],"content":{"digest":"sha256-d76a71ccb405521aef98ab6fa11e4deab401993651e67b0a97335da141da0ba5","path":"skills/autonomous-agent-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"12654c759ea7cf1bd7f53e204e7e8f6f58b208790a8f6fac2a9535caa964092a","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"12654c759ea7cf1bd7f53e204e7e8f6f58b208790a8f6fac2a9535caa964092a","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"f8eaf7bd504adf0012fd55c020a2cd9777213898","path":"skills/autonomous-agent-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"f8eaf7bd504adf0012fd55c020a2cd9777213898","contentDigest":"sha256-d76a71ccb405521aef98ab6fa11e4deab401993651e67b0a97335da141da0ba5","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/autonomous-agent-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":4,"credentials":0,"destructiveOrMutating":5,"network":7},"filesReviewed":1,"treeSha256":"12654c759ea7cf1bd7f53e204e7e8f6f58b208790a8f6fac2a9535caa964092a","type":"focused-static-scan"}],"status":"known","value":"critical"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"12654c759ea7cf1bd7f53e204e7e8f6f58b208790a8f6fac2a9535caa964092a","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":72,"lexicalScore":15,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"agent"},{"fields":["description"],"term":"agents"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"aws-iam-best-practices":{"capabilities":["cloud-permission-review"],"capabilityEvidence":[{"lineEnd":16,"lineStart":16,"path":"skills/security/aws-iam-best-practices/SKILL.md","supports":["cloud-permission-review"]}],"content":{"digest":"sha256-dd21f2fcfeaa0b28394807a04a79036004726ba2f79fc29fd9ba3d650120e9d8","path":"skills/security/aws-iam-best-practices/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"d28d980932c848fc46dfc887759fe5c5c03891bc3ac321b6595c14c99996d410","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"d28d980932c848fc46dfc887759fe5c5c03891bc3ac321b6595c14c99996d410","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"bbd6c51d0c7b7bf569d552c353ed2d9838a08b42","path":"skills/security/aws-iam-best-practices/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"bbd6c51d0c7b7bf569d552c353ed2d9838a08b42","contentDigest":"sha256-dd21f2fcfeaa0b28394807a04a79036004726ba2f79fc29fd9ba3d650120e9d8","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/security/aws-iam-best-practices/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":124,"lineStart":124,"path":"skills/security/aws-iam-best-practices/SKILL.md","type":"line"},{"categories":{"commandExecution":24,"credentials":3,"destructiveOrMutating":5,"network":27},"filesReviewed":1,"treeSha256":"d28d980932c848fc46dfc887759fe5c5c03891bc3ac321b6595c14c99996d410","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":91,"lineStart":91,"path":"skills/security/aws-iam-best-practices/SKILL.md","type":"line"},{"lineEnd":124,"lineStart":124,"path":"skills/security/aws-iam-best-practices/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":38,"lexicalScore":16,"matchedTerms":[{"fields":["id","tags","category"],"term":"security"},{"fields":["description"],"term":"hardening"},{"fields":["tags","description"],"term":"least-privilege"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"aws-secrets-rotation":{"capabilities":["credential-boundaries","rotation-guidance","secret-lifecycle"],"capabilityEvidence":[{"lineEnd":13,"lineStart":13,"path":"skills/security/aws-secrets-rotation/SKILL.md","supports":["rotation-guidance","secret-lifecycle"]},{"lineEnd":18,"lineStart":18,"path":"skills/security/aws-secrets-rotation/SKILL.md","supports":["credential-boundaries"]}],"content":{"digest":"sha256-ae982dffeca42be25ebd451d5aa5c79c24ad0a53d46ca0335d9c1c4737857f48","path":"skills/security/aws-secrets-rotation/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"beb0527ce7ab8796dcaf428b148aed9712b698c2cb7943e69591105ad037bafd","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"beb0527ce7ab8796dcaf428b148aed9712b698c2cb7943e69591105ad037bafd","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"bbd6c51d0c7b7bf569d552c353ed2d9838a08b42","path":"skills/security/aws-secrets-rotation/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"bbd6c51d0c7b7bf569d552c353ed2d9838a08b42","contentDigest":"sha256-ae982dffeca42be25ebd451d5aa5c79c24ad0a53d46ca0335d9c1c4737857f48","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/security/aws-secrets-rotation/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":223,"lineStart":223,"path":"skills/security/aws-secrets-rotation/SKILL.md","type":"line"},{"categories":{"commandExecution":21,"credentials":114,"destructiveOrMutating":15,"network":29},"filesReviewed":1,"treeSha256":"beb0527ce7ab8796dcaf428b148aed9712b698c2cb7943e69591105ad037bafd","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":38,"lineStart":38,"path":"skills/security/aws-secrets-rotation/SKILL.md","type":"line"},{"lineEnd":91,"lineStart":91,"path":"skills/security/aws-secrets-rotation/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":2,"lexicalScore":40,"matchedTerms":[{"fields":["id","tags","category"],"term":"security"},{"fields":["id","name","tags","description"],"term":"secret"},{"fields":["tags","description"],"term":"credential"},{"fields":["id","name","description"],"term":"rotation"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"aws-security-audit":{"capabilities":["cloud-permission-review"],"capabilityEvidence":[{"lineEnd":21,"lineStart":21,"path":"skills/security/aws-security-audit/SKILL.md","supports":["cloud-permission-review"]}],"content":{"digest":"sha256-f26a9648c27a2c796983e716ec4b7d78c1ac6584190cbf451b8e614a06cb606d","path":"skills/security/aws-security-audit/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"59b1a0cda6a1b5c71608a283eacd6a960798ea00138ce34dd7d4d70bda2c9e2b","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"59b1a0cda6a1b5c71608a283eacd6a960798ea00138ce34dd7d4d70bda2c9e2b","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"bbd6c51d0c7b7bf569d552c353ed2d9838a08b42","path":"skills/security/aws-security-audit/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"bbd6c51d0c7b7bf569d552c353ed2d9838a08b42","contentDigest":"sha256-f26a9648c27a2c796983e716ec4b7d78c1ac6584190cbf451b8e614a06cb606d","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/security/aws-security-audit/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":54,"lineStart":54,"path":"skills/security/aws-security-audit/SKILL.md","type":"line"},{"categories":{"commandExecution":43,"credentials":2,"destructiveOrMutating":0,"network":43},"filesReviewed":1,"treeSha256":"59b1a0cda6a1b5c71608a283eacd6a960798ea00138ce34dd7d4d70bda2c9e2b","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"lineEnd":54,"lineStart":54,"path":"skills/security/aws-security-audit/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":39,"lexicalScore":16,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"security"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"awt-e2e-testing":{"capabilities":["critical-browser-journeys","failure-diagnostics"],"capabilityEvidence":[],"content":{"digest":"sha256-67dfb03f10f10c2797f03218bc93d17a36b7783ef7f7b174fd3b4655fcb46d5f","path":"skills/awt-e2e-testing/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/awt-e2e-testing/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/awt-e2e-testing/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/awt-e2e-testing/SKILL.md: source frontmatter is a canonical URL","sha256-67dfb03f10f10c2797f03218bc93d17a36b7783ef7f7b174fd3b4655fcb46d5f"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/ksgisang/awt-skill"}},"risk":{"evidence":["skills/awt-e2e-testing/SKILL.md: Requires external global skill install and browser/OCR toolchain; repository/runtime behavior was not independently audited.","sha256-67dfb03f10f10c2797f03218bc93d17a36b7783ef7f7b174fd3b4655fcb46d5f"],"status":"unknown","value":null},"setup":{"evidence":["skills/awt-e2e-testing/SKILL.md: Explicit global install command: npx skills add ksgisang/awt-skill --skill awt -g (line 10)."],"status":"known","value":"manual"}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"id/name","term":"e2e","weight":8},{"field":"description","term":"playwright","weight":3}],"rank":7,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"ci-cd-and-automation":{"capabilities":["deployment-gates","pipeline-design","progressive-delivery","safe-automation"],"capabilityEvidence":[{"lineEnd":144,"lineStart":144,"path":"skills/ci-cd-and-automation/SKILL.md","supports":["safe-automation"]},{"lineEnd":17,"lineStart":17,"path":"skills/ci-cd-and-automation/SKILL.md","supports":["deployment-gates","pipeline-design"]},{"lineEnd":223,"lineStart":223,"path":"skills/ci-cd-and-automation/SKILL.md","supports":["progressive-delivery"]}],"content":{"digest":"sha256-4a35748482494580c2f6891d9d6ee2865766c4d5663efa336e6a4495386746cb","path":"skills/ci-cd-and-automation/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":["skills/ci-cd-and-automation/SKILL.md:5-6"],"status":"known","value":{"repo":"addyosmani/agent-skills","url":"https://github.com/addyosmani/agent-skills/tree/main/skills/ci-cd-and-automation"}},"risk":{"evidence":["Workflows install dependencies, run migrations, push changes, deploy with credentials, and roll back production; SKILL.md:88-163, 185-214, and 254-275."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:74-163 defines GitHub Actions and secrets; lines 214 and 275 use a Vercel token for deploy/rollback."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","tags"],"matchedTerms":["ci-cd","pipeline","quality-gate"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"container-security-hardening":{"capabilities":["container-build","container-hardening","deployment-policy","orchestrated-deployment","runtime-hardening","safe-automation","workload-isolation"],"capabilityEvidence":[{"lineEnd":28,"lineStart":28,"path":"skills/container-security-hardening/SKILL.md","supports":["workload-isolation"]},{"lineEnd":4,"lineStart":4,"path":"skills/container-security-hardening/SKILL.md","supports":["container-build","runtime-hardening"]},{"lineEnd":4,"lineStart":4,"path":"skills/container-security-hardening/SKILL.md","supports":["container-hardening","deployment-policy"]},{"lineEnd":69,"lineStart":69,"path":"skills/container-security-hardening/SKILL.md","supports":["orchestrated-deployment","safe-automation"]}],"content":{"digest":"sha256-5255249ea9e7ace3457de3857e7c7cf7bec968051595b36ceea0ea02444feccb","path":"skills/container-security-hardening/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive four-file audit found no explicit inter-AAS conflict.",{"filesReviewed":4,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"e09a601e2926091909c0b6beb9f7a92b2915d1e318cc020b85ba942ee223371d","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":["docker-expert and other entries under Related Skills at lines 987+ are advisory; no required dependency is declared.",{"filesReviewed":4,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":33,"lineStart":33,"path":"skills/container-security-hardening/SKILL.md"},{"lineEnd":34,"lineStart":34,"path":"skills/container-security-hardening/SKILL.md"},{"lineEnd":35,"lineStart":35,"path":"skills/container-security-hardening/SKILL.md"},{"lineEnd":36,"lineStart":36,"path":"skills/container-security-hardening/SKILL.md"},{"lineEnd":987,"lineStart":987,"path":"skills/container-security-hardening/SKILL.md"}],"treeSha256":"e09a601e2926091909c0b6beb9f7a92b2915d1e318cc020b85ba942ee223371d","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"8faa4bc5ef9381022543b6eca16c37056e07906f","path":"skills/container-security-hardening/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"8faa4bc5ef9381022543b6eca16c37056e07906f","contentDigest":"sha256-5255249ea9e7ace3457de3857e7c7cf7bec968051595b36ceea0ea02444feccb","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/container-security-hardening/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The skill builds/runs/scans images and applies runtime/Kubernetes security controls; references/seccomp-profile-template.json also carries docker run commands, including an unconfined audit mode.",{"lineEnd":308,"lineStart":308,"path":"skills/container-security-hardening/SKILL.md","type":"line"},{"categories":{"commandExecution":76,"credentials":60,"destructiveOrMutating":12,"network":30},"filesReviewed":4,"treeSha256":"e09a601e2926091909c0b6beb9f7a92b2915d1e318cc020b85ba942ee223371d","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":["SKILL.md:69-76 defines build, scan, runtime, and Kubernetes stages; full content includes docker/trivy/kubectl execution examples.",{"lineEnd":301,"lineStart":301,"path":"skills/container-security-hardening/SKILL.md","type":"line"},{"lineEnd":213,"lineStart":213,"path":"skills/container-security-hardening/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["deployment-devops","security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"},{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":1,"lexicalScore":48,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"security"},{"fields":["description"],"term":"secure"},{"fields":["id","name","tags","description"],"term":"hardening"},{"fields":["id","name","tags","description"],"term":"container"},{"fields":["description"],"term":"kubernetes"},{"fields":["description"],"term":"sbom"},{"fields":["description"],"term":"cve"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"},{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["container","runtime","kubernetes"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"context-window-management":{"capabilities":["context-budget","context-retrieval"],"capabilityEvidence":[{"lineEnd":190,"lineStart":190,"path":"skills/context-window-management/SKILL.md","supports":["context-budget"]},{"lineEnd":85,"lineStart":85,"path":"skills/context-window-management/SKILL.md","supports":["context-retrieval"]}],"content":{"digest":"sha256-1a78ee3085a4cb8efd9c0dad31cc853979a1b74de5a81bdbcb5d8121f933e35f","path":"skills/context-window-management/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"f3333e5b7ab859cfa9b418ee74ae17ffaab2316691c265e29a20d45dba47b4af","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":26,"lineStart":26,"path":"skills/context-window-management/SKILL.md"},{"lineEnd":300,"lineStart":300,"path":"skills/context-window-management/SKILL.md"},{"lineEnd":302,"lineStart":302,"path":"skills/context-window-management/SKILL.md"}],"treeSha256":"f3333e5b7ab859cfa9b418ee74ae17ffaab2316691c265e29a20d45dba47b4af","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":6,"lineStart":6,"path":"skills/context-window-management/SKILL.md","type":"line"},{"lineEnd":475,"lineStart":475,"path":"README.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/vibeforge1111/vibeship-spawner-skills","kind":"repository-mapping-from-declared-pack-origin"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":12,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"f3333e5b7ab859cfa9b418ee74ae17ffaab2316691c265e29a20d45dba47b4af","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"f3333e5b7ab859cfa9b418ee74ae17ffaab2316691c265e29a20d45dba47b4af","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":83,"lexicalScore":14,"matchedTerms":[{"fields":["category"],"term":"memory"},{"fields":["id","name","description"],"term":"context"},{"fields":["description"],"term":"routing"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"cypress-skill":{"capabilities":["boundary-mocking","component-test-patterns","critical-browser-journeys","cross-browser-execution","deterministic-test-isolation"],"capabilityEvidence":[],"content":{"digest":"sha256-0468d0c9d8f5663aa41cb0fb654039aac8d6cb8581ed9b47086717bbe7e86464","path":"skills/cypress-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/cypress-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/cypress-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/cypress-skill/SKILL.md: source frontmatter is a canonical URL","sha256-0468d0c9d8f5663aa41cb0fb654039aac8d6cb8581ed9b47086717bbe7e86464"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/LambdaTest/agent-skills/tree/main/cypress-skill"}},"risk":{"evidence":["skills/cypress-skill/SKILL.md: Runs Cypress and optional LambdaTest/TestMu cloud paths with login/test credential flows; dependency/network/credential behavior is not independently attested.","sha256-0468d0c9d8f5663aa41cb0fb654039aac8d6cb8581ed9b47086717bbe7e86464"],"status":"unknown","value":null},"setup":{"evidence":["skills/cypress-skill/SKILL.md: The skill uses npx cypress and optional LambdaTest/TestMu cloud, but does not state whether Cypress/plugin installation is automatic or pre-provisioned (lines 26-30, 173-195)."],"status":"unknown","value":null}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"tags/triggers","term":"e2e","weight":4},{"field":"id/name","term":"cypress","weight":8}],"rank":5,"score":12},"unitComponent":{"matches":[{"field":"tags/triggers","term":"component test","weight":4}],"rank":11,"score":4}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"database-design":{"capabilities":["data-model-design","query-discipline"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/database-design/SKILL.md","supports":["data-model-design","query-discipline"]}],"content":{"digest":"sha256-ad1918b9daa821388c6b9838bd739126f52cc9236ac7a7a1b14bcab055d38160","path":"skills/database-design/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive eight-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive eight-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","path":"skills/database-design/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","contentDigest":"sha256-ad1918b9daa821388c6b9838bd739126f52cc9236ac7a7a1b14bcab055d38160","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/database-design/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["DDL appears as design examples and migration sequencing guidance, with no command or connection path that executes against a database."],"status":"known","value":"safe"},"setup":{"evidence":["Eight-file content is decision guidance and schema examples; no live database prerequisite is declared for use."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["database","schema","query"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"database-migration":{"capabilities":["migration-safety","reversible-migrations"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/database-migration/SKILL.md","supports":["migration-safety","reversible-migrations"]},{"lineEnd":434,"lineStart":434,"path":"skills/database-migration/SKILL.md","supports":["reversible-migrations"]}],"content":{"digest":"sha256-9a81bd5ff60b4e7a92c9a10f5997019af6d2aa8181c173b003e4b77f718a8198","path":"skills/database-migration/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/database-migration/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-9a81bd5ff60b4e7a92c9a10f5997019af6d2aa8181c173b003e4b77f718a8198","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/database-migration/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["SKILL.md:59-64, 101-119, and 323-331 include apply, rollback, drop-table, and DROP TABLE execution paths against databases."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:63-64, 105-106, and 118-119 prescribe Sequelize, TypeORM, and Prisma commands."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["database","schema","migration"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"database-migrations-sql-migrations":{"capabilities":["migration-safety","reversible-migrations"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/database-migrations-sql-migrations/SKILL.md","supports":["migration-safety","reversible-migrations"]}],"content":{"digest":"sha256-f8658625b0fc4287e2f5e873448a1ac5ade2e2df8fa3837b90184c9c91e8d042","path":"skills/database-migrations-sql-migrations/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive two-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive two-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/database-migrations-sql-migrations/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-f8658625b0fc4287e2f5e873448a1ac5ade2e2df8fa3837b90184c9c91e8d042","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/database-migrations-sql-migrations/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The playbook executes DROP COLUMN/TABLE/INDEX, arbitrary migration statements, and schema-migration DELETE operations; lines 59, 208, 311-354, and 452-478."],"status":"known","value":"critical"},"setup":{"evidence":["resources/implementation-playbook.md:339-354 executes psql migrations and rollback SQL."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["database","sql","migration"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"delegating-to-agents":{"capabilities":["agent-boundaries","auditable-operations","delegation-policy","tool-permission-boundaries"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/delegating-to-agents/SKILL.md","supports":["agent-boundaries","delegation-policy"]},{"lineEnd":3,"lineStart":3,"path":"skills/delegating-to-agents/SKILL.md","supports":["auditable-operations"]},{"lineEnd":64,"lineStart":64,"path":"skills/delegating-to-agents/SKILL.md","supports":["tool-permission-boundaries"]}],"content":{"digest":"sha256-dd23c465c91c35fe1185c1bd9cecfc4846c7fcfe522b082bb6b9503643df3fac","path":"skills/delegating-to-agents/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"85a3834c700f0af6fef74c651c8476c2a872b6eb4cea5440a018958c82d96054","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"85a3834c700f0af6fef74c651c8476c2a872b6eb4cea5440a018958c82d96054","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":7,"lineStart":7,"path":"skills/delegating-to-agents/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/davidondrej/skills","kind":"canonical-repository"}},"risk":{"evidence":[{"lineEnd":45,"lineStart":45,"path":"skills/delegating-to-agents/SKILL.md","type":"line"},{"categories":{"commandExecution":0,"credentials":1,"destructiveOrMutating":0,"network":1},"filesReviewed":1,"treeSha256":"85a3834c700f0af6fef74c651c8476c2a872b6eb4cea5440a018958c82d96054","type":"focused-static-scan"}],"status":"known","value":"critical"},"setup":{"evidence":[{"lineEnd":27,"lineStart":27,"path":"skills/delegating-to-agents/SKILL.md","type":"line"},{"lineEnd":45,"lineStart":45,"path":"skills/delegating-to-agents/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":3,"lexicalScore":39,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"agent"},{"fields":["id","name","tags","description"],"term":"agents"},{"fields":["tags","category"],"term":"orchestration"},{"fields":["tags"],"term":"delegation"},{"fields":["description"],"term":"context"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"dependency-management-deps-audit":{"capabilities":["advisory-triage","dependency-risk-review","upgrade-prioritization"],"capabilityEvidence":[{"lineEnd":34,"lineStart":34,"path":"skills/dependency-management-deps-audit/SKILL.md","supports":["dependency-risk-review"]},{"lineEnd":35,"lineStart":35,"path":"skills/dependency-management-deps-audit/SKILL.md","supports":["advisory-triage"]},{"lineEnd":37,"lineStart":37,"path":"skills/dependency-management-deps-audit/SKILL.md","supports":["upgrade-prioritization"]}],"content":{"digest":"sha256-cf186c03c95cc163d6791d52f1305e20e08ff56ff09048e64a027b3b1e64d5b1","path":"skills/dependency-management-deps-audit/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":2,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[{"lineEnd":313,"lineStart":313,"path":"skills/dependency-management-deps-audit/resources/implementation-playbook.md"},{"lineEnd":362,"lineStart":362,"path":"skills/dependency-management-deps-audit/resources/implementation-playbook.md"}],"treeSha256":"ef831d0a3cdd86a1a1ca3eb6abe394a03a66571f79f3068ad0265d779f683e25","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":2,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"ef831d0a3cdd86a1a1ca3eb6abe394a03a66571f79f3068ad0265d779f683e25","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/dependency-management-deps-audit/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-cf186c03c95cc163d6791d52f1305e20e08ff56ff09048e64a027b3b1e64d5b1","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/dependency-management-deps-audit/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":184,"lineStart":184,"path":"skills/dependency-management-deps-audit/resources/implementation-playbook.md","type":"line"},{"categories":{"commandExecution":4,"credentials":0,"destructiveOrMutating":1,"network":9},"filesReviewed":2,"treeSha256":"ef831d0a3cdd86a1a1ca3eb6abe394a03a66571f79f3068ad0265d779f683e25","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":728,"lineStart":728,"path":"skills/dependency-management-deps-audit/resources/implementation-playbook.md","type":"line"},{"lineEnd":184,"lineStart":184,"path":"skills/dependency-management-deps-audit/resources/implementation-playbook.md","type":"line"}],"status":"known","value":"manual"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":12,"lexicalScore":18,"matchedTerms":[{"fields":["category","description"],"term":"security"},{"fields":["id","name","tags","description"],"term":"dependency"},{"fields":["description"],"term":"supply-chain"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"deployment-pipeline-design":{"capabilities":["deployment-gates","health-checks","pipeline-design","post-release-verification","progressive-delivery"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/deployment-pipeline-design/SKILL.md","supports":["deployment-gates","pipeline-design"]},{"lineEnd":35,"lineStart":35,"path":"skills/deployment-pipeline-design/SKILL.md","supports":["progressive-delivery"]},{"lineEnd":351,"lineStart":351,"path":"skills/deployment-pipeline-design/SKILL.md","supports":["post-release-verification"]},{"lineEnd":56,"lineStart":56,"path":"skills/deployment-pipeline-design/SKILL.md","supports":["health-checks"]}],"content":{"digest":"sha256-186729ad20953894a21cc253ac3934d90f74bbbd6ab691831429af8f63882166","path":"skills/deployment-pipeline-design/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Related Skills at the end are advisory; full-content audit found no required inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/deployment-pipeline-design/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-186729ad20953894a21cc253ac3934d90f74bbbd6ab691831429af8f63882166","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/deployment-pipeline-design/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Direct docker push, kubectl apply/promote/undo, network curl, and secret-backed webhook paths appear at lines 229-357."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:145-154 and 229-278 build/push images, apply K8s resources, promote rollouts, call health endpoints, and post webhooks."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["deployment","pipeline","ci-cd"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"deployment-procedures":{"capabilities":["health-checks","post-release-verification","progressive-delivery","release-procedure","rollback-validation"],"capabilityEvidence":[{"lineEnd":116,"lineStart":116,"path":"skills/deployment-procedures/SKILL.md","supports":["post-release-verification"]},{"lineEnd":173,"lineStart":173,"path":"skills/deployment-procedures/SKILL.md","supports":["progressive-delivery"]},{"lineEnd":3,"lineStart":3,"path":"skills/deployment-procedures/SKILL.md","supports":["release-procedure","rollback-validation"]},{"lineEnd":98,"lineStart":98,"path":"skills/deployment-procedures/SKILL.md","supports":["health-checks"]}],"content":{"digest":"sha256-46b862fc9e5614002257c776c711412f7d5048d2adbfd703abe7a13aaed476db","path":"skills/deployment-procedures/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","path":"skills/deployment-procedures/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","contentDigest":"sha256-46b862fc9e5614002257c776c711412f7d5048d2adbfd703abe7a13aaed476db","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/deployment-procedures/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The workflow explicitly executes deploys and rollback through push, container, and kubectl paths; SKILL.md:51-55, 94-101, and 154-155."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:51-55 names push/CLI/Docker/kubectl execution paths; lines 94-101 direct deploy and rollback."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["deployment","rollback"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"distributed-tracing":{"capabilities":["distributed-tracing"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/distributed-tracing/SKILL.md","supports":["distributed-tracing"]}],"content":{"digest":"sha256-51595c2d16e4cff44dabfa33f65b935b695c499a188a1e6a540f82ea8d684bcf","path":"skills/distributed-tracing/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["SKILL.md:449 Related Skills are advisory; full-content audit found no required inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/distributed-tracing/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-51595c2d16e4cff44dabfa33f65b935b695c499a188a1e6a540f82ea8d684bcf","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/distributed-tracing/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["SKILL.md:64-68 performs network-backed kubectl create/apply operations against a cluster without an explicit approval gate."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:64-68 creates a namespace, fetches a remote manifest, and applies cluster resources."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["tracing","observability"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"docker-expert":{"capabilities":["container-build","environment-separation","health-checks","orchestrated-deployment","runtime-hardening"],"capabilityEvidence":[{"lineEnd":112,"lineStart":112,"path":"skills/docker-expert/SKILL.md","supports":["runtime-hardening"]},{"lineEnd":134,"lineStart":134,"path":"skills/docker-expert/SKILL.md","supports":["health-checks"]},{"lineEnd":136,"lineStart":136,"path":"skills/docker-expert/SKILL.md","supports":["environment-separation"]},{"lineEnd":3,"lineStart":3,"path":"skills/docker-expert/SKILL.md","supports":["container-build","orchestrated-deployment"]}],"content":{"digest":"sha256-cd2817407c2faebdd0a88196e5ddfabf53860649b71b3f7e0398196efaf86776","path":"skills/docker-expert/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","path":"skills/docker-expert/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","contentDigest":"sha256-cd2817407c2faebdd0a88196e5ddfabf53860649b71b3f7e0398196efaf86776","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/docker-expert/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Direct daemon mutations include build, run, exec, stop, buildx create, and registry push at lines 30-65 and 286-288."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:30-65 probes the daemon and builds/runs/stops containers; lines 286-288 push multi-arch images."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["docker","container","orchestration"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"e2e-testing":{"capabilities":["browser-critical-paths","critical-browser-journeys","cross-browser-execution","cross-browser-regression","deterministic-test-isolation","failure-diagnostics","maintainable-e2e-patterns"],"capabilityEvidence":[],"content":{"digest":"sha256-d98eb7c3459f8ce3e79282906dbb1982001b050aa19766e60428da045920fc99","path":"skills/e2e-testing/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/e2e-testing/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/e2e-testing/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","path":"skills/e2e-testing/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","contentDigest":"sha256-d98eb7c3459f8ce3e79282906dbb1982001b050aa19766e60428da045920fc99","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/e2e-testing/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/e2e-testing/SKILL.md: Composition invokes many skills to install browsers, write tests and CI files, and run automation; aggregate behavior is not closed or attested.","sha256-d98eb7c3459f8ce3e79282906dbb1982001b050aa19766e60428da045920fc99"],"status":"unknown","value":null},"setup":{"evidence":["skills/e2e-testing/SKILL.md: Composition bundle requires multiple other skills plus Playwright/browser/CI setup; it does not define a closed activation procedure (lines 24-150)."],"status":"unknown","value":null}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"tags/triggers","term":"browser","weight":4},{"field":"description","term":"end-to-end","weight":3},{"field":"id/name","term":"e2e","weight":8},{"field":"tags/triggers","term":"playwright","weight":4},{"field":"description","term":"cross-browser","weight":3}],"rank":1,"score":22}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"e2e-testing-patterns":{"capabilities":["browser-critical-paths","critical-browser-journeys","cross-browser-execution","deterministic-test-isolation","failure-diagnostics","maintainable-e2e-patterns","stable-locators"],"capabilityEvidence":[],"content":{"digest":"sha256-79bbbe1b2bfad92e76ca981c900a85675b43ca29d0c080b643ee9bc385baaeee","path":"skills/e2e-testing-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/e2e-testing-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/e2e-testing-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/e2e-testing-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-79bbbe1b2bfad92e76ca981c900a85675b43ca29d0c080b643ee9bc385baaeee","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/e2e-testing-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/e2e-testing-patterns/SKILL.md: Runner-independent test-design guidance; no command execution, credential handling, destructive operation, or automatic write is prescribed.","sha256-79bbbe1b2bfad92e76ca981c900a85675b43ca29d0c080b643ee9bc385baaeee"],"status":"known","value":"safe"},"setup":{"evidence":["skills/e2e-testing-patterns/SKILL.md: Runner-independent design guidance; no install or host activation prerequisite is declared."],"status":"known","value":"none"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"description","term":"end-to-end","weight":3},{"field":"id/name","term":"e2e","weight":8}],"rank":9,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"evaluation":{"capabilities":["agent-evaluation-design","failure-metrics","regression-suite","reproducible-cases"],"capabilityEvidence":[{"lineEnd":113,"lineStart":113,"path":"skills/evaluation/SKILL.md","supports":["reproducible-cases"]},{"lineEnd":124,"lineStart":124,"path":"skills/evaluation/SKILL.md","supports":["failure-metrics"]},{"lineEnd":16,"lineStart":16,"path":"skills/evaluation/SKILL.md","supports":["agent-evaluation-design"]},{"lineEnd":16,"lineStart":16,"path":"skills/evaluation/SKILL.md","supports":["regression-suite"]}],"content":{"digest":"sha256-9ef20a6b22940cda9e650cc2e31a83d474ab7933d4bc63892fdcff88a269b980","path":"skills/evaluation/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"1681cb42aad71492e3bb35e64bfffabbbbf6e7f9d953f86c422804298d28bf7c","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"1681cb42aad71492e3bb35e64bfffabbbbf6e7f9d953f86c422804298d28bf7c","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":5,"lineStart":5,"path":"skills/evaluation/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/evaluation","kind":"canonical-skill-url"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":4,"destructiveOrMutating":0,"network":1},"filesReviewed":1,"treeSha256":"1681cb42aad71492e3bb35e64bfffabbbbf6e7f9d953f86c422804298d28bf7c","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"1681cb42aad71492e3bb35e64bfffabbbbf6e7f9d953f86c422804298d28bf7c","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":63,"lexicalScore":16,"matchedTerms":[{"fields":["description"],"term":"agent"},{"fields":["id","name","tags","description"],"term":"evaluation"},{"fields":["description"],"term":"context"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"event-sourcing-architect":{"capabilities":["async-boundary-design","durable-event-processing","failure-compensation","idempotent-retries"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/event-sourcing-architect/SKILL.md","supports":["async-boundary-design","durable-event-processing","failure-compensation"]},{"lineEnd":60,"lineStart":60,"path":"skills/event-sourcing-architect/SKILL.md","supports":["idempotent-retries"]}],"content":{"digest":"sha256-3453481653a78b029855d67e4f5b16436f4bb75c4a1211c77660fa4c64bbf7f4","path":"skills/event-sourcing-architect/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/event-sourcing-architect/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-3453481653a78b029855d67e4f5b16436f4bb75c4a1211c77660fa4c64bbf7f4","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/event-sourcing-architect/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["No execution commands or credentials; SKILL.md:50-55 explicitly forbids mutating or deleting committed production events."],"status":"known","value":"safe"},"setup":{"evidence":["Architecture guidance has no host activation prerequisite."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["event","cqrs","saga"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"fixing-accessibility":{"capabilities":["accessible-component-guidance","keyboard-and-screen-reader-validation","remediation-priorities","wcag-audit"],"capabilityEvidence":[],"content":{"digest":"sha256-6d1661a0ccf9aa9d99538eae780c927c789496565ec4e7f5a3eec5ff394eafda","path":"skills/fixing-accessibility/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/fixing-accessibility/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/fixing-accessibility/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/fixing-accessibility/SKILL.md: source frontmatter is a canonical URL","sha256-6d1661a0ccf9aa9d99538eae780c927c789496565ec4e7f5a3eec5ff394eafda"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/ibelick/ui-skills/tree/main/skills/fixing-accessibility"}},"risk":{"evidence":["skills/fixing-accessibility/SKILL.md: Source-edit guidance is bounded to accessibility fixes; no commands, network calls, credential handling, or destructive workflow is prescribed.","sha256-6d1661a0ccf9aa9d99538eae780c927c789496565ec4e7f5a3eec5ff394eafda"],"status":"known","value":"safe"},"setup":{"evidence":["skills/fixing-accessibility/SKILL.md: Static source-guidance skill; no runtime tool or install prerequisite is declared, and runtime testing is explicitly out of scope (lines 23-24)."],"status":"known","value":"none"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"id/name","term":"accessibility","weight":8},{"field":"description","term":"wcag","weight":3},{"field":"tags/triggers","term":"keyboard","weight":4}],"rank":2,"score":15}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"frontend-api-integration-patterns":{"capabilities":["api-integration-boundary"],"capabilityEvidence":[],"content":{"digest":"sha256-db22a15dac87c32393738bf4d8e2f451f7a961ed77df4c755dd480536d31d24d","path":"skills/frontend-api-integration-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/frontend-api-integration-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/frontend-api-integration-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"22eba23ca79a8932ccedcc4ef4cc5ba732c2dd8e","path":"skills/frontend-api-integration-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"22eba23ca79a8932ccedcc4ef4cc5ba732c2dd8e","contentDigest":"sha256-db22a15dac87c32393738bf4d8e2f451f7a961ed77df4c755dd480536d31d24d","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/frontend-api-integration-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/frontend-api-integration-patterns/SKILL.md: Fetch/DELETE snippets are target-application templates, not instructions for the agent to call a real endpoint; no shell execution, credentials, or automatic writes are prescribed.","sha256-db22a15dac87c32393738bf4d8e2f451f7a961ed77df4c755dd480536d31d24d"],"status":"known","value":"safe"},"setup":{"evidence":["skills/frontend-api-integration-patterns/SKILL.md: Code-pattern guidance only; no host activation or external tool prerequisite is declared."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"id/name","term":"frontend","weight":8},{"field":"tags/triggers","term":"react","weight":4}],"rank":19,"score":12}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"frontend-architecture":{"capabilities":["feature-boundaries","maintainable-component-architecture","shared-ui-conventions"],"capabilityEvidence":[],"content":{"digest":"sha256-77d4b0f6e493a203567e612226efdcf3bbf7a3dbd6db5d2f69ad65f6d42fb6a5","path":"skills/frontend-architecture/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/frontend-architecture/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/frontend-architecture/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/frontend-architecture/SKILL.md: source frontmatter is a canonical URL","sha256-77d4b0f6e493a203567e612226efdcf3bbf7a3dbd6db5d2f69ad65f6d42fb6a5"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/stareezy-1/frontend-architecture-skill/tree/main/skills/frontend-architecture"}},"risk":{"evidence":["skills/frontend-architecture/SKILL.md: Project-structure guidance; the only npx command is a placeholder in the publishing appendix and cannot execute as written. No credential or destructive command is prescribed.","sha256-77d4b0f6e493a203567e612226efdcf3bbf7a3dbd6db5d2f69ad65f6d42fb6a5"],"status":"known","value":"safe"},"setup":{"evidence":["skills/frontend-architecture/SKILL.md: Architecture guidance usable directly by the host; the npx command is in a publishing/installing appendix, not a prerequisite for the already installed skill (lines 406-412)."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"id/name","term":"frontend","weight":8},{"field":"tags/triggers","term":"react","weight":4},{"field":"description","term":"component","weight":3},{"field":"description","term":"feature module","weight":3},{"field":"id/name","term":"architecture","weight":8}],"rank":1,"score":26}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"frontend-data-contracts":{"capabilities":["api-integration-boundary","typed-data-contracts"],"capabilityEvidence":[],"content":{"digest":"sha256-1777ffc06b558037ea548b9338efbdc10b36aa0aafd8d0725accf424b7791315","path":"skills/frontend-data-contracts/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/frontend-data-contracts/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/frontend-data-contracts/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":["skills/frontend-data-contracts/SKILL.md: source frontmatter is a canonical URL","sha256-1777ffc06b558037ea548b9338efbdc10b36aa0aafd8d0725accf424b7791315"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/stareezy-1/frontend-architecture-skill/tree/main/skills/frontend-data-contracts"}},"risk":{"evidence":["skills/frontend-data-contracts/SKILL.md: Network/credential snippets are target-application code patterns; the only npx command is a non-executable publishing placeholder. No agent-side remote call or destructive command is prescribed.","sha256-1777ffc06b558037ea548b9338efbdc10b36aa0aafd8d0725accf424b7791315"],"status":"known","value":"safe"},"setup":{"evidence":["skills/frontend-data-contracts/SKILL.md: Architecture/code guidance usable directly by the host; the npx command is in a publishing appendix, not a runtime prerequisite (lines 318-324)."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"authData":{"matches":[{"field":"description","term":"typed","weight":3},{"field":"tags/triggers","term":"data contract","weight":4}],"rank":33,"score":7},"frontendArchitecture":{"matches":[{"field":"id/name","term":"frontend","weight":8},{"field":"description","term":"react","weight":3}],"rank":31,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"frontend-dev-guidelines":{"capabilities":["api-integration-boundary","feature-boundaries","maintainable-component-architecture","shared-ui-conventions","typed-data-contracts"],"capabilityEvidence":[],"content":{"digest":"sha256-20b4e743d94efa6ed31a71317ba5ebebb1fdbf2381c0c2627f0505037c6f97fa","path":"skills/frontend-dev-guidelines/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/frontend-dev-guidelines/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/frontend-dev-guidelines/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","path":"skills/frontend-dev-guidelines/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","contentDigest":"sha256-20b4e743d94efa6ed31a71317ba5ebebb1fdbf2381c0c2627f0505037c6f97fa","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/frontend-dev-guidelines/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/frontend-dev-guidelines/SKILL.md: Code-convention guidance only; fetch/axios mentions are prohibitions/examples, with no agent-side network, credential, or shell behavior.","sha256-20b4e743d94efa6ed31a71317ba5ebebb1fdbf2381c0c2627f0505037c6f97fa"],"status":"known","value":"safe"},"setup":{"evidence":["skills/frontend-dev-guidelines/SKILL.md: Code-convention guidance only; no activation prerequisite is declared."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"id/name","term":"frontend","weight":8},{"field":"description","term":"component","weight":3}],"rank":32,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"frontend-developer":{"capabilities":["accessible-component-guidance","component-test-patterns","frontend-bottleneck-analysis","maintainable-component-architecture","shared-ui-conventions"],"capabilityEvidence":[],"content":{"digest":"sha256-b81de9c6293be713fe0e4e27f2804a09a8a652396672dfef012284a72e6f8586","path":"skills/frontend-developer/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/frontend-developer/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/frontend-developer/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/frontend-developer/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-b81de9c6293be713fe0e4e27f2804a09a8a652396672dfef012284a72e6f8586","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/frontend-developer/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/frontend-developer/SKILL.md: Broad implementation guidance; tool names are recommendations, with no executable command, credential value, remote call, or destructive workflow.","sha256-b81de9c6293be713fe0e4e27f2804a09a8a652396672dfef012284a72e6f8586"],"status":"known","value":"safe"},"setup":{"evidence":["skills/frontend-developer/SKILL.md: Broad code guidance only; mentioned ecosystem tools are optional project choices rather than a host activation contract."],"status":"known","value":"none"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"id/name","term":"frontend","weight":8},{"field":"tags/triggers","term":"react","weight":4},{"field":"description","term":"next.js","weight":3},{"field":"tags/triggers","term":"component","weight":4},{"field":"description","term":"architecture","weight":3}],"rank":3,"score":22}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"frontend-lighthouse":{"capabilities":["lighthouse-regression","regression-evidence","repeatable-performance-budget","result-review","web-vitals-budget"],"capabilityEvidence":[],"content":{"digest":"sha256-15d52359bc4befe8ddac99c651cae61ee299fc0cd070466cb6ab28d7fb3ce54b","path":"skills/frontend-lighthouse/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/frontend-lighthouse/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/frontend-lighthouse/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":["skills/frontend-lighthouse/SKILL.md: source_repo frontmatter identifies the repository","sha256-15d52359bc4befe8ddac99c651cae61ee299fc0cd070466cb6ab28d7fb3ce54b"],"status":"known","value":{"licenseUrl":"https://github.com/stareezy-1/frontend-architecture-skill/blob/main/LICENSE","repository":"stareezy-1/frontend-architecture-skill","type":"repository"}},"risk":{"evidence":["skills/frontend-lighthouse/SKILL.md: Installs @lhci/cli, writes CI/config files, starts production builds and runs GitHub Actions; dependency/runtime integrity is not attested.","sha256-15d52359bc4befe8ddac99c651cae61ee299fc0cd070466cb6ab28d7fb3ce54b"],"status":"unknown","value":null},"setup":{"evidence":["skills/frontend-lighthouse/SKILL.md: Explicitly requires adding @lhci/cli and configuring production build/start plus CI workflow (lines 47-59, 215-260)."],"status":"known","value":"manual"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"performance":{"matches":[{"field":"tags/triggers","term":"performance","weight":4},{"field":"id/name","term":"lighthouse","weight":8},{"field":"tags/triggers","term":"web vitals","weight":4}],"rank":2,"score":16}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"frontend-mobile-development-component-scaffold":{"capabilities":["accessible-component-guidance","component-test-patterns","maintainable-component-architecture","shared-ui-conventions"],"capabilityEvidence":[],"content":{"digest":"sha256-7e13aeca47e65cfada1f1984fd7bc76a0a8d700c0987c85377688ecfb39d93e6","path":"skills/frontend-mobile-development-component-scaffold/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/frontend-mobile-development-component-scaffold/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/frontend-mobile-development-component-scaffold/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/frontend-mobile-development-component-scaffold/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-7e13aeca47e65cfada1f1984fd7bc76a0a8d700c0987c85377688ecfb39d93e6","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/frontend-mobile-development-component-scaffold/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/frontend-mobile-development-component-scaffold/SKILL.md: Code-generation examples only; no shell/network/credential/destructive behavior is prescribed.","sha256-7e13aeca47e65cfada1f1984fd7bc76a0a8d700c0987c85377688ecfb39d93e6"],"status":"known","value":"safe"},"setup":{"evidence":["skills/frontend-mobile-development-component-scaffold/SKILL.md: Generates code/examples without declaring a host-side activation step; project framework packages are task context."],"status":"known","value":"none"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"id/name","term":"frontend","weight":8},{"field":"tags/triggers","term":"react","weight":4},{"field":"id/name","term":"component","weight":8},{"field":"tags/triggers","term":"architecture","weight":4}],"rank":2,"score":24}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"gha-security-review":{"capabilities":["credential-boundaries","dependency-risk-review"],"capabilityEvidence":[{"lineEnd":132,"lineStart":132,"path":"skills/gha-security-review/SKILL.md","supports":["credential-boundaries"]},{"lineEnd":84,"lineStart":84,"path":"skills/gha-security-review/SKILL.md","supports":["dependency-risk-review"]}],"content":{"digest":"sha256-13dcdd011a1e6cbb2414187ec7c54baaf9196f345ff8cec3698f1131f11ec727","path":"skills/gha-security-review/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"9a5062aeec38804db4fd13d6bd7d0150300b95c14ff9b8748f65f8d28f115e36","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"9a5062aeec38804db4fd13d6bd7d0150300b95c14ff9b8748f65f8d28f115e36","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","path":"skills/gha-security-review/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","contentDigest":"sha256-13dcdd011a1e6cbb2414187ec7c54baaf9196f345ff8cec3698f1131f11ec727","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/gha-security-review/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":3,"lineStart":3,"path":"skills/gha-security-review/SKILL.md","type":"line"},{"categories":{"commandExecution":0,"credentials":14,"destructiveOrMutating":2,"network":1},"filesReviewed":1,"treeSha256":"9a5062aeec38804db4fd13d6bd7d0150300b95c14ff9b8748f65f8d28f115e36","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"lineEnd":81,"lineStart":81,"path":"skills/gha-security-review/SKILL.md","type":"line"},{"lineEnd":85,"lineStart":85,"path":"skills/gha-security-review/SKILL.md","type":"line"}],"status":"unknown","value":null}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":42,"lexicalScore":15,"matchedTerms":[{"fields":["id","name","tags","category"],"term":"security"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"github-actions-advanced":{"capabilities":["deployment-gates","environment-separation","pipeline-design","reproducible-ci","safe-automation"],"capabilityEvidence":[{"lineEnd":411,"lineStart":411,"path":"skills/github-actions-advanced/SKILL.md","supports":["deployment-gates"]},{"lineEnd":414,"lineStart":414,"path":"skills/github-actions-advanced/SKILL.md","supports":["environment-separation"]},{"lineEnd":653,"lineStart":653,"path":"skills/github-actions-advanced/SKILL.md","supports":["reproducible-ci"]},{"lineEnd":69,"lineStart":69,"path":"skills/github-actions-advanced/SKILL.md","supports":["safe-automation"]}],"content":{"digest":"sha256-e4a4bca3a3d729dc8cf0a2b5f92a1438539d29fcfbd9659539408e67d5d5b901","path":"skills/github-actions-advanced/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recommendations to docker-expert/kubernetes-architect are routing advice, not required inter-AAS dependencies."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"108b9816dd704e9080c61edc9ec4435184b2232a","path":"skills/github-actions-advanced/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"108b9816dd704e9080c61edc9ec4435184b2232a","contentDigest":"sha256-e4a4bca3a3d729dc8cf0a2b5f92a1438539d29fcfbd9659539408e67d5d5b901","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/github-actions-advanced/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The skill creates workflows with package/image push, production deploy, release publication, write tokens, secret handling, and automated commits/PRs; lines 133-199 and 644-952."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:332-452 configures cloud identity and secrets; lines 768-952 define push, deploy, publish, and automated PR workflows."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["github-actions","ci-cd","pipeline"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"github-actions-templates":{"capabilities":["deployment-gates","pipeline-design","post-release-verification"],"capabilityEvidence":[{"lineEnd":172,"lineStart":172,"path":"skills/github-actions-templates/SKILL.md","supports":["post-release-verification"]},{"lineEnd":222,"lineStart":222,"path":"skills/github-actions-templates/SKILL.md","supports":["deployment-gates"]},{"lineEnd":340,"lineStart":340,"path":"skills/github-actions-templates/SKILL.md","supports":["pipeline-design"]}],"content":{"digest":"sha256-a7510a5deb322ede2d670c879b8ca962c9391f4c2375484c565cc79113ad6049","path":"skills/github-actions-templates/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Related Skills at lines 348+ are advisory; no required inter-AAS dependency is declared."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/github-actions-templates/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-a7510a5deb322ede2d670c879b8ca962c9391f4c2375484c565cc79113ad6049","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/github-actions-templates/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Templates push images, configure cloud credentials, apply Kubernetes resources, publish packages, and invoke external webhooks; lines 84-175 and 238-330."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:84-175 and 238-330 declares registry push, AWS credentials, K8s apply, NPM/Snyk tokens, and webhooks."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["github-actions","pipeline","deployment"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"grafana-dashboards":{"capabilities":["operational-dashboards","service-level-objectives"],"capabilityEvidence":[{"lineEnd":27,"lineStart":27,"path":"skills/grafana-dashboards/SKILL.md","supports":["operational-dashboards"]},{"lineEnd":33,"lineStart":33,"path":"skills/grafana-dashboards/SKILL.md","supports":["service-level-objectives"]}],"content":{"digest":"sha256-0c5de629ba9c5a9be0f22bcb7ef3818babdb5c6540abc86f9a6a86511ff78ce6","path":"skills/grafana-dashboards/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["SKILL.md:381+ Related Skills are advisory; no required inter-AAS dependency is declared."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/grafana-dashboards/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-0c5de629ba9c5a9be0f22bcb7ef3818babdb5c6540abc86f9a6a86511ff78ce6","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/grafana-dashboards/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The skill can deploy dashboards and restart Grafana via provisioning examples at lines 349-371, but does not define a universal approval or target boundary."],"status":"unknown","value":null},"setup":{"evidence":["SKILL.md:224-294 uses Prometheus/Grafana configuration; lines 349-371 provision and deploy dashboard files."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["dashboard","observability"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"helm-chart-scaffolding":{"capabilities":["environment-separation","orchestrated-deployment"],"capabilityEvidence":[{"lineEnd":17,"lineStart":17,"path":"skills/helm-chart-scaffolding/SKILL.md","supports":["orchestrated-deployment"]},{"lineEnd":18,"lineStart":18,"path":"skills/helm-chart-scaffolding/SKILL.md","supports":["environment-separation"]}],"content":{"digest":"sha256-dbd7904131eef531e690f95ddb13d8f625ee1fa7bb12b76d0221342e75439f31","path":"skills/helm-chart-scaffolding/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive six-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive six-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/helm-chart-scaffolding/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-dbd7904131eef531e690f95ddb13d8f625ee1fa7bb12b76d0221342e75439f31","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/helm-chart-scaffolding/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Most Helm execution is local or dry-run, but dependency update/repository operations can use network and mutate local state; no explicit approval/network boundary is defined."],"status":"unknown","value":null},"setup":{"evidence":["resources/implementation-playbook.md:275-344 uses helm dependency update/build, lint, dry-run/template, package, and repo index."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["helm","kubernetes","deployment"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"incident-responder":{"capabilities":["hardening-runbook","incident-diagnostics","incident-triage","recurrence-prevention","safe-remediation","service-level-objectives"],"capabilityEvidence":[{"lineEnd":122,"lineStart":122,"path":"skills/incident-responder/SKILL.md","supports":["recurrence-prevention"]},{"lineEnd":127,"lineStart":127,"path":"skills/incident-responder/SKILL.md","supports":["hardening-runbook"]},{"lineEnd":26,"lineStart":26,"path":"skills/incident-responder/SKILL.md","supports":["incident-diagnostics"]},{"lineEnd":39,"lineStart":39,"path":"skills/incident-responder/SKILL.md","supports":["incident-triage"]},{"lineEnd":61,"lineStart":61,"path":"skills/incident-responder/SKILL.md","supports":["service-level-objectives"]},{"lineEnd":98,"lineStart":98,"path":"skills/incident-responder/SKILL.md","supports":["safe-remediation"]}],"content":{"digest":"sha256-f65d143254144bcfeedce6c87c261a28d188bfe97bb0f18a97dd62621e7a6ca4","path":"skills/incident-responder/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict.",{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"108644d4d602ab035f057a60c06b13d4a2cb69332769b335c9a43cdc52a26d0a","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":["Service dependency mapping is an incident-analysis concept, not an inter-AAS dependency; full-content audit found none.",{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"108644d4d602ab035f057a60c06b13d4a2cb69332769b335c9a43cdc52a26d0a","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/incident-responder/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-f65d143254144bcfeedce6c87c261a28d188bfe97bb0f18a97dd62621e7a6ca4","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/incident-responder/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The file is diagnosis, coordination, and validation guidance; it contains no executable command, credential value, network endpoint, or instruction to mutate production directly.",{"lineEnd":99,"lineStart":99,"path":"skills/incident-responder/SKILL.md","type":"line"},{"categories":{"commandExecution":0,"credentials":1,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"108644d4d602ab035f057a60c06b13d4a2cb69332769b335c9a43cdc52a26d0a","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":["SKILL.md:43-71 describes war-room, tracing, metrics, and network analysis inputs but no host plugin requirement.",{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"108644d4d602ab035f057a60c06b13d4a2cb69332769b335c9a43cdc52a26d0a","type":"full-content-audit"}],"status":"unknown","value":null}},"intents":["deployment-devops","security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"},{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":57,"lexicalScore":14,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"incident"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"},{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["sre","incident","observability"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"incident-runbook-templates":{"capabilities":["hardening-runbook","incident-triage","safe-remediation"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/incident-runbook-templates/SKILL.md","supports":["hardening-runbook"]},{"lineEnd":50,"lineStart":50,"path":"skills/incident-runbook-templates/SKILL.md","supports":["incident-triage"]},{"lineEnd":54,"lineStart":54,"path":"skills/incident-runbook-templates/SKILL.md","supports":["safe-remediation"]}],"content":{"digest":"sha256-531c5e1a943bd16687d665d87b415c6fba4b5345c99d52f9ca266f7a59d5d828","path":"skills/incident-runbook-templates/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"42dcd2b90ca2c101d28ae924cef42d5e22bcd60aead7e733170a359f31e9b505","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"42dcd2b90ca2c101d28ae924cef42d5e22bcd60aead7e733170a359f31e9b505","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/incident-runbook-templates/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-531c5e1a943bd16687d665d87b415c6fba4b5345c99d52f9ca266f7a59d5d828","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/incident-runbook-templates/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":131,"lineStart":131,"path":"skills/incident-runbook-templates/SKILL.md","type":"line"},{"categories":{"commandExecution":17,"credentials":0,"destructiveOrMutating":5,"network":15},"filesReviewed":1,"treeSha256":"42dcd2b90ca2c101d28ae924cef42d5e22bcd60aead7e733170a359f31e9b505","type":"focused-static-scan"}],"status":"known","value":"critical"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"42dcd2b90ca2c101d28ae924cef42d5e22bcd60aead7e733170a359f31e9b505","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":6,"lexicalScore":29,"matchedTerms":[{"fields":["description"],"term":"mitigation"},{"fields":["id","name","tags","description"],"term":"incident"},{"fields":["id","name","tags","description"],"term":"runbook"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"jest-skill":{"capabilities":["component-test-patterns","coverage-reporting","deterministic-mocking","repeatable-integration-runner","unit-test-runner"],"capabilityEvidence":[],"content":{"digest":"sha256-dec4f0ba5bce7458365573b6b084fb429f5e93ceca1b34f4e3b6764a0ce60f04","path":"skills/jest-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/jest-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/jest-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/jest-skill/SKILL.md: source frontmatter is a canonical URL","sha256-dec4f0ba5bce7458365573b6b084fb429f5e93ceca1b34f4e3b6764a0ce60f04"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/LambdaTest/agent-skills/tree/main/jest-skill"}},"risk":{"evidence":["skills/jest-skill/SKILL.md: Runs npx Jest, may update snapshots, and uses optional dependencies; package acquisition and write boundaries are not attested.","sha256-dec4f0ba5bce7458365573b6b084fb429f5e93ceca1b34f4e3b6764a0ce60f04"],"status":"unknown","value":null},"setup":{"evidence":["skills/jest-skill/SKILL.md: Commands use npx jest and optional Testing Library, but installation/configuration provenance is not defined (lines 103-174)."],"status":"unknown","value":null}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"integrationContract":{"matches":[{"field":"tags/triggers","term":"integration test","weight":4}],"rank":8,"score":4},"unitComponent":{"matches":[{"field":"description","term":"component test","weight":3},{"field":"id/name","term":"jest","weight":8},{"field":"tags/triggers","term":"mocking","weight":4}],"rank":1,"score":15}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"junit-5-skill":{"capabilities":["deterministic-mocking","repeatable-integration-runner","unit-test-runner"],"capabilityEvidence":[],"content":{"digest":"sha256-a8e1ef97d7dcf715b5b911da08930d7509f0a61126dba0f5b29f1fa285d704d6","path":"skills/junit-5-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/junit-5-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/junit-5-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/junit-5-skill/SKILL.md: source frontmatter is a canonical URL","sha256-a8e1ef97d7dcf715b5b911da08930d7509f0a61126dba0f5b29f1fa285d704d6"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/LambdaTest/agent-skills/tree/main/junit-5-skill"}},"risk":{"evidence":["skills/junit-5-skill/SKILL.md: Runs Maven/Gradle and adds dependencies; package resolution and test-side effects are not attested.","sha256-a8e1ef97d7dcf715b5b911da08930d7509f0a61126dba0f5b29f1fa285d704d6"],"status":"unknown","value":null},"setup":{"evidence":["skills/junit-5-skill/SKILL.md: Explicit Maven dependency block and Maven/Gradle run commands require project dependency setup (lines 183-207)."],"status":"known","value":"manual"}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"integrationContract":{"matches":[{"field":"tags/triggers","term":"integration test","weight":4}],"rank":9,"score":4},"unitComponent":{"matches":[{"field":"description","term":"unit test","weight":3},{"field":"id/name","term":"junit","weight":8},{"field":"description","term":"mocking","weight":3}],"rank":2,"score":14}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"k6-load-testing":{"capabilities":["latency-thresholds","load-scenario-design","repeatable-performance-budget","repeatable-performance-run","result-review"],"capabilityEvidence":[],"content":{"digest":"sha256-9b171afbebd31e355a87f91399ef519b89ce65ea1e2f4aa23bc3bf7f3ef06e27","path":"skills/k6-load-testing/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/k6-load-testing/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/k6-load-testing/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"c0a9b7a36352ee498925c12cbd67af3a06d5f10c","path":"skills/k6-load-testing/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"c0a9b7a36352ee498925c12cbd67af3a06d5f10c","contentDigest":"sha256-9b171afbebd31e355a87f91399ef519b89ce65ea1e2f4aa23bc3bf7f3ef06e27","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/k6-load-testing/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/k6-load-testing/SKILL.md: Installs/runs k6, can issue authenticated load against APIs/browsers, and includes production-impact warnings; target/rate/credential controls are not enforced.","sha256-9b171afbebd31e355a87f91399ef519b89ce65ea1e2f4aa23bc3bf7f3ef06e27"],"status":"unknown","value":null},"setup":{"evidence":["skills/k6-load-testing/SKILL.md: Explicit platform-specific k6 install commands and optional Chromium install are provided (lines 35-49, 258)."],"status":"known","value":"manual"}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"tags/triggers","term":"browser","weight":4}],"rank":27,"score":4},"performance":{"matches":[{"field":"tags/triggers","term":"performance","weight":4},{"field":"tags/triggers","term":"load test","weight":4},{"field":"tags/triggers","term":"load testing","weight":4},{"field":"id/name","term":"k6","weight":8}],"rank":1,"score":20}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"k8s-security-policies":{"capabilities":["cloud-permission-review","deployment-policy","workload-isolation"],"capabilityEvidence":[{"lineEnd":27,"lineStart":27,"path":"skills/k8s-security-policies/SKILL.md","supports":["deployment-policy","workload-isolation"]},{"lineEnd":33,"lineStart":33,"path":"skills/k8s-security-policies/SKILL.md","supports":["cloud-permission-review"]}],"content":{"digest":"sha256-db47d1214878a5e5bbb636c94b7926c28057737e3af0dcda60822f96d0a9614d","path":"skills/k8s-security-policies/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":3,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"17f7c9aa5db00ca9c7b2655dadf342c3685d6fffd4a8f8fb1eb376b7d2451fe3","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":3,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":346,"lineStart":346,"path":"skills/k8s-security-policies/SKILL.md"}],"treeSha256":"17f7c9aa5db00ca9c7b2655dadf342c3685d6fffd4a8f8fb1eb376b7d2451fe3","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/k8s-security-policies/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-db47d1214878a5e5bbb636c94b7926c28057737e3af0dcda60822f96d0a9614d","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/k8s-security-policies/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":144,"lineStart":144,"path":"skills/k8s-security-policies/references/rbac-patterns.md","type":"line"},{"categories":{"commandExecution":9,"credentials":30,"destructiveOrMutating":3,"network":0},"filesReviewed":3,"treeSha256":"17f7c9aa5db00ca9c7b2655dadf342c3685d6fffd4a8f8fb1eb376b7d2451fe3","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":144,"lineStart":144,"path":"skills/k8s-security-policies/references/rbac-patterns.md","type":"line"}],"status":"known","value":"manual"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":43,"lexicalScore":15,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"security"},{"fields":["description"],"term":"kubernetes"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"kubernetes-architect":{"capabilities":["container-build","orchestrated-deployment","progressive-delivery","rollback-validation","runtime-hardening"],"capabilityEvidence":[{"lineEnd":13,"lineStart":13,"path":"skills/kubernetes-architect/SKILL.md","supports":["orchestrated-deployment","progressive-delivery"]},{"lineEnd":28,"lineStart":28,"path":"skills/kubernetes-architect/SKILL.md","supports":["rollback-validation"]},{"lineEnd":79,"lineStart":79,"path":"skills/kubernetes-architect/SKILL.md","supports":["container-build","runtime-hardening"]}],"content":{"digest":"sha256-122d2a64642bd0ce5a7fe56017d892496cd08b64f99871d4e2546d4ba8fd0bb9","path":"skills/kubernetes-architect/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Tool names are technology options, not inter-AAS dependencies; full-content audit found no required skill."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/kubernetes-architect/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-122d2a64642bd0ce5a7fe56017d892496cd08b64f99871d4e2546d4ba8fd0bb9","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/kubernetes-architect/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["No executable cluster command is supplied, and SKILL.md:30-32 explicitly forbids production changes without approvals and rollback plans."],"status":"known","value":"safe"},"setup":{"evidence":["The audited file is architecture/design guidance; cluster credentials are not required to activate or produce the design."],"status":"known","value":"none"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["kubernetes","orchestration","progressive"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"kubernetes-deployment":{"capabilities":["container-build","deployment-gates","orchestrated-deployment","post-release-verification"],"capabilityEvidence":[{"lineEnd":145,"lineStart":145,"path":"skills/kubernetes-deployment/SKILL.md","supports":["post-release-verification"]},{"lineEnd":153,"lineStart":153,"path":"skills/kubernetes-deployment/SKILL.md","supports":["deployment-gates"]},{"lineEnd":3,"lineStart":3,"path":"skills/kubernetes-deployment/SKILL.md","supports":["orchestrated-deployment"]},{"lineEnd":34,"lineStart":34,"path":"skills/kubernetes-deployment/SKILL.md","supports":["container-build"]}],"content":{"digest":"sha256-f0eeb740a2c5cd9a709e45516ff55860203586d668c3bd3c996d34081c98a6e4","path":"skills/kubernetes-deployment/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["SKILL.md:29-150 labels these as Skills to Invoke across seven workflow phases; every ID resolves in the catalog."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","path":"skills/kubernetes-deployment/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","contentDigest":"sha256-f0eeb740a2c5cd9a709e45516ff55860203586d668c3bd3c996d34081c98a6e4","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/kubernetes-deployment/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Actions include image push, secret creation, service-mesh install, monitoring-stack install, and cluster deploy at lines 33-146."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:25-150 is an orchestration workflow that explicitly invokes other skills and culminates in registry push, mesh install, and cluster deployment."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["kubernetes","deployment","orchestration"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"mcp-builder":{"capabilities":["mcp-tool-contract","schema-validation","stdio-lifecycle"],"capabilityEvidence":[{"lineEnd":100,"lineStart":100,"path":"skills/mcp-builder/SKILL.md","supports":["schema-validation"]},{"lineEnd":50,"lineStart":50,"path":"skills/mcp-builder/SKILL.md","supports":["mcp-tool-contract"]},{"lineEnd":56,"lineStart":56,"path":"skills/mcp-builder/SKILL.md","supports":["stdio-lifecycle"]}],"content":{"digest":"sha256-e2d89c7a913b74c4ced2f122603f61ca7cfdd6185d8c82d80ab0fd257909f9af","path":"skills/mcp-builder/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":10,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[{"lineEnd":54,"lineStart":54,"path":"skills/mcp-builder/reference/mcp_best_practices.md"}],"treeSha256":"13d694a7f21d3848dd62cbf5da976a73615dea74ac807c09dd820b6b2b9c3099","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":10,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"13d694a7f21d3848dd62cbf5da976a73615dea74ac807c09dd820b6b2b9c3099","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","path":"skills/mcp-builder/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","contentDigest":"sha256-e2d89c7a913b74c4ced2f122603f61ca7cfdd6185d8c82d80ab0fd257909f9af","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/mcp-builder/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":370,"lineStart":370,"path":"skills/mcp-builder/scripts/evaluation.py","type":"line"},{"lineEnd":235,"lineStart":235,"path":"skills/mcp-builder/reference/python_mcp_server.md","type":"line"},{"categories":{"commandExecution":4,"credentials":24,"destructiveOrMutating":4,"network":29},"filesReviewed":10,"treeSha256":"13d694a7f21d3848dd62cbf5da976a73615dea74ac807c09dd820b6b2b9c3099","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":143,"lineStart":143,"path":"skills/mcp-builder/SKILL.md","type":"line"},{"lineEnd":387,"lineStart":387,"path":"skills/mcp-builder/reference/evaluation.md","type":"line"}],"status":"known","value":"manual"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":46,"lexicalScore":21,"matchedTerms":[{"fields":["category"],"term":"agent"},{"fields":["category"],"term":"agents"},{"fields":["id","name","tags","description"],"term":"mcp"},{"fields":["description"],"term":"model-context-protocol"},{"fields":["description"],"term":"tool"},{"fields":["description"],"term":"context"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"mcp-builder-ms":{"capabilities":["mcp-tool-contract","schema-validation","stdio-lifecycle"],"capabilityEvidence":[{"lineEnd":155,"lineStart":155,"path":"skills/mcp-builder-ms/SKILL.md","supports":["schema-validation"]},{"lineEnd":28,"lineStart":28,"path":"skills/mcp-builder-ms/SKILL.md","supports":["stdio-lifecycle"]},{"lineEnd":90,"lineStart":90,"path":"skills/mcp-builder-ms/SKILL.md","supports":["mcp-tool-contract"]}],"content":{"digest":"sha256-32fd41110dbde6aac8a614a0f20db8c9aa84b28fb7a0fecfda357623853d4c84","path":"skills/mcp-builder-ms/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"90c6b462408b0f8d191a80b6419bfd2fa9c012d9feb813fb7dc1a40a94b11305","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"90c6b462408b0f8d191a80b6419bfd2fa9c012d9feb813fb7dc1a40a94b11305","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","path":"skills/mcp-builder-ms/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","contentDigest":"sha256-32fd41110dbde6aac8a614a0f20db8c9aa84b28fb7a0fecfda357623853d4c84","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/mcp-builder-ms/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":300,"lineStart":300,"path":"skills/mcp-builder-ms/SKILL.md","type":"line"},{"categories":{"commandExecution":2,"credentials":4,"destructiveOrMutating":0,"network":10},"filesReviewed":1,"treeSha256":"90c6b462408b0f8d191a80b6419bfd2fa9c012d9feb813fb7dc1a40a94b11305","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"90c6b462408b0f8d191a80b6419bfd2fa9c012d9feb813fb7dc1a40a94b11305","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":52,"lexicalScore":18,"matchedTerms":[{"fields":["category"],"term":"agent"},{"fields":["category"],"term":"agents"},{"fields":["id","name","tags","description"],"term":"mcp"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"mcp-tool-developer":{"capabilities":["mcp-tool-contract","read-only-resource","schema-validation","stdio-lifecycle","tool-permission-boundaries"],"capabilityEvidence":[{"lineEnd":103,"lineStart":103,"path":"skills/mcp-tool-developer/SKILL.md","supports":["schema-validation"]},{"lineEnd":119,"lineStart":119,"path":"skills/mcp-tool-developer/SKILL.md","supports":["tool-permission-boundaries"]},{"lineEnd":21,"lineStart":21,"path":"skills/mcp-tool-developer/SKILL.md","supports":["mcp-tool-contract"]},{"lineEnd":37,"lineStart":37,"path":"skills/mcp-tool-developer/SKILL.md","supports":["read-only-resource"]},{"lineEnd":41,"lineStart":41,"path":"skills/mcp-tool-developer/SKILL.md","supports":["stdio-lifecycle"]}],"content":{"digest":"sha256-9bd2b02ff5027c3853737cc4dca505f20caa62834ec594f8c049d83d25c63f68","path":"skills/mcp-tool-developer/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"efd6e38b0baae84a8a99d17077b15f7a43a90ff255f181ce1e6395cc9e34e58e","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":129,"lineStart":129,"path":"skills/mcp-tool-developer/SKILL.md"}],"treeSha256":"efd6e38b0baae84a8a99d17077b15f7a43a90ff255f181ce1e6395cc9e34e58e","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":7,"lineStart":7,"path":"skills/mcp-tool-developer/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/demo112/yunqu-ai-skills","kind":"canonical-repository"}},"risk":{"evidence":[{"lineEnd":119,"lineStart":119,"path":"skills/mcp-tool-developer/SKILL.md","type":"line"},{"categories":{"commandExecution":0,"credentials":5,"destructiveOrMutating":2,"network":0},"filesReviewed":1,"treeSha256":"efd6e38b0baae84a8a99d17077b15f7a43a90ff255f181ce1e6395cc9e34e58e","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"efd6e38b0baae84a8a99d17077b15f7a43a90ff255f181ce1e6395cc9e34e58e","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":2,"lexicalScore":41,"matchedTerms":[{"fields":["tags"],"term":"agent"},{"fields":["id","name","tags","description"],"term":"mcp"},{"fields":["tags","description"],"term":"model-context-protocol"},{"fields":["id","name","tags","category","description"],"term":"tool"},{"fields":["tags","description"],"term":"context"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"memory-systems":{"capabilities":["context-budget","context-retrieval","memory-boundaries","stale-memory-controls"],"capabilityEvidence":[{"lineEnd":100,"lineStart":100,"path":"skills/memory-systems/SKILL.md","supports":["stale-memory-controls"]},{"lineEnd":123,"lineStart":123,"path":"skills/memory-systems/SKILL.md","supports":["context-retrieval"]},{"lineEnd":29,"lineStart":29,"path":"skills/memory-systems/SKILL.md","supports":["memory-boundaries"]},{"lineEnd":65,"lineStart":65,"path":"skills/memory-systems/SKILL.md","supports":["context-budget"]}],"content":{"digest":"sha256-faf64d266d50c810ba99807249258949d9b67bbe79b16ac5763e34c351d98cf0","path":"skills/memory-systems/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"d5a31ca307e6cdb1af63cfccea50c0d5fef0884974397d90ce1b84cd4cbab513","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":212,"lineStart":212,"path":"skills/memory-systems/SKILL.md"}],"treeSha256":"d5a31ca307e6cdb1af63cfccea50c0d5fef0884974397d90ce1b84cd4cbab513","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":5,"lineStart":5,"path":"skills/memory-systems/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/memory-systems","kind":"canonical-skill-url"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":0,"destructiveOrMutating":1,"network":1},"filesReviewed":1,"treeSha256":"d5a31ca307e6cdb1af63cfccea50c0d5fef0884974397d90ce1b84cd4cbab513","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"d5a31ca307e6cdb1af63cfccea50c0d5fef0884974397d90ce1b84cd4cbab513","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":53,"lexicalScore":18,"matchedTerms":[{"fields":["description"],"term":"agent"},{"fields":["description"],"term":"agents"},{"fields":["id","name","tags","category","description"],"term":"memory"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"multi-agent-architect":{"capabilities":["agent-boundaries","delegation-policy","failure-handling","prompt-injection-controls","tool-orchestration","tool-permission-boundaries"],"capabilityEvidence":[{"lineEnd":23,"lineStart":23,"path":"skills/multi-agent-architect/SKILL.md","supports":["agent-boundaries","tool-orchestration"]},{"lineEnd":305,"lineStart":305,"path":"skills/multi-agent-architect/SKILL.md","supports":["failure-handling"]},{"lineEnd":326,"lineStart":326,"path":"skills/multi-agent-architect/SKILL.md","supports":["prompt-injection-controls"]},{"lineEnd":327,"lineStart":327,"path":"skills/multi-agent-architect/SKILL.md","supports":["tool-permission-boundaries"]},{"lineEnd":37,"lineStart":37,"path":"skills/multi-agent-architect/SKILL.md","supports":["delegation-policy"]}],"content":{"digest":"sha256-46c9287a5d9b81ab08ca39a5059f391e874e50d06cff7823ea6d70901c221ff8","path":"skills/multi-agent-architect/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"f4599046512ba1cbd566cfc3d94d0c1633642ee4a2ba81abfea96429f5365346","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":357,"lineStart":357,"path":"skills/multi-agent-architect/SKILL.md"}],"treeSha256":"f4599046512ba1cbd566cfc3d94d0c1633642ee4a2ba81abfea96429f5365346","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":8,"lineStart":8,"path":"skills/multi-agent-architect/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/pravin-python/antigravity-awesome-skills","kind":"canonical-repository"}},"risk":{"evidence":[{"lineEnd":327,"lineStart":327,"path":"skills/multi-agent-architect/SKILL.md","type":"line"},{"categories":{"commandExecution":0,"credentials":6,"destructiveOrMutating":0,"network":1},"filesReviewed":1,"treeSha256":"f4599046512ba1cbd566cfc3d94d0c1633642ee4a2ba81abfea96429f5365346","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"f4599046512ba1cbd566cfc3d94d0c1633642ee4a2ba81abfea96429f5365346","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":4,"lexicalScore":38,"matchedTerms":[{"fields":["id","name","tags","description"],"term":"agent"},{"fields":["tags","description"],"term":"agents"},{"fields":["tags"],"term":"tool"},{"fields":["tags"],"term":"orchestration"},{"fields":["id","name","tags","description"],"term":"multi-agent"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"multi-agent-patterns":{"capabilities":["agent-boundaries","context-budget","delegation-policy","failure-handling","tool-orchestration"],"capabilityEvidence":[{"lineEnd":168,"lineStart":168,"path":"skills/multi-agent-patterns/SKILL.md","supports":["failure-handling"]},{"lineEnd":23,"lineStart":23,"path":"skills/multi-agent-patterns/SKILL.md","supports":["agent-boundaries"]},{"lineEnd":32,"lineStart":32,"path":"skills/multi-agent-patterns/SKILL.md","supports":["tool-orchestration"]},{"lineEnd":36,"lineStart":36,"path":"skills/multi-agent-patterns/SKILL.md","supports":["context-budget"]},{"lineEnd":62,"lineStart":62,"path":"skills/multi-agent-patterns/SKILL.md","supports":["delegation-policy"]}],"content":{"digest":"sha256-8e1d659fe32c68fb4580697ee4110eb895e4a72a43bfde6d4db2cc29bd7d2733","path":"skills/multi-agent-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"437dfd91520ebeeb20c047be0b3ed78594282a39b5360396688a7ed788d20488","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":238,"lineStart":238,"path":"skills/multi-agent-patterns/SKILL.md"}],"treeSha256":"437dfd91520ebeeb20c047be0b3ed78594282a39b5360396688a7ed788d20488","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"dde0467e420523ac7225ebe25a85f95ee5f88d8a","path":"skills/multi-agent-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"dde0467e420523ac7225ebe25a85f95ee5f88d8a","contentDigest":"sha256-8e1d659fe32c68fb4580697ee4110eb895e4a72a43bfde6d4db2cc29bd7d2733","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/multi-agent-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":6,"destructiveOrMutating":0,"network":4},"filesReviewed":1,"treeSha256":"437dfd91520ebeeb20c047be0b3ed78594282a39b5360396688a7ed788d20488","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"437dfd91520ebeeb20c047be0b3ed78594282a39b5360396688a7ed788d20488","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":16,"lexicalScore":32,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"agent"},{"fields":["category","description"],"term":"agents"},{"fields":["description"],"term":"handoff"},{"fields":["description"],"term":"context"},{"fields":["id","name","description"],"term":"multi-agent"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"nextjs-best-practices":{"capabilities":["api-integration-boundary","maintainable-component-architecture","shared-ui-conventions","typed-data-contracts"],"capabilityEvidence":[],"content":{"digest":"sha256-6488e1e2e001d737d688957c19264d42b29e558a8b2b9daff1d18863674e6106","path":"skills/nextjs-best-practices/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/nextjs-best-practices/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/nextjs-best-practices/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","path":"skills/nextjs-best-practices/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","contentDigest":"sha256-6488e1e2e001d737d688957c19264d42b29e558a8b2b9daff1d18863674e6106","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/nextjs-best-practices/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/nextjs-best-practices/SKILL.md: Framework examples include API/DELETE semantics but do not instruct the agent to call a real endpoint or handle credentials; no shell or destructive workflow.","sha256-6488e1e2e001d737d688957c19264d42b29e558a8b2b9daff1d18863674e6106"],"status":"known","value":"safe"},"setup":{"evidence":["skills/nextjs-best-practices/SKILL.md: Framework guidance only; no extra host activation prerequisite is declared."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"category","term":"frontend","weight":6},{"field":"description","term":"next.js","weight":3},{"field":"tags/triggers","term":"component","weight":4}],"rank":15,"score":13}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"observability-and-instrumentation":{"capabilities":["distributed-tracing","service-level-objectives","structured-telemetry"],"capabilityEvidence":[{"lineEnd":126,"lineStart":126,"path":"skills/observability-and-instrumentation/SKILL.md","supports":["distributed-tracing"]},{"lineEnd":161,"lineStart":161,"path":"skills/observability-and-instrumentation/SKILL.md","supports":["service-level-objectives"]},{"lineEnd":61,"lineStart":61,"path":"skills/observability-and-instrumentation/SKILL.md","supports":["structured-telemetry"]}],"content":{"digest":"sha256-fc60780d33bc4c6a5bac8dca553ca8b60825a59dcaa6907a3f56ef030ace3bf9","path":"skills/observability-and-instrumentation/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Cross-skill mentions at lines 29-30 and 98 are advisory; no skill is required for activation."],"status":"known","value":[]},"provenance":{"evidence":["skills/observability-and-instrumentation/SKILL.md:5-6"],"status":"known","value":{"repo":"addyosmani/agent-skills","url":"https://github.com/addyosmani/agent-skills/tree/main/skills/observability-and-instrumentation"}},"risk":{"evidence":["Lines 168-171 send test traffic and temporarily lower alert thresholds; lines 215-216 require verification/approval but do not define a machine-enforced boundary."],"status":"unknown","value":null},"setup":{"evidence":["SKILL.md:126-142 uses OpenTelemetry; lines 168-171 require staging traffic, traces, and alert delivery for validation."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["observability","instrumentation","telemetry"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"observability-engineer":{"capabilities":["alert-quality","incident-diagnostics","operational-dashboards","service-level-objectives"],"capabilityEvidence":[{"lineEnd":26,"lineStart":26,"path":"skills/observability-engineer/SKILL.md","supports":["operational-dashboards","service-level-objectives"]},{"lineEnd":27,"lineStart":27,"path":"skills/observability-engineer/SKILL.md","supports":["alert-quality"]},{"lineEnd":76,"lineStart":76,"path":"skills/observability-engineer/SKILL.md","supports":["incident-diagnostics"]}],"content":{"digest":"sha256-c682926e888b0814f9c6bd7404b5c0054146014a3ad2e33b5a45aaba46f83527","path":"skills/observability-engineer/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Technology dependency mapping is not an inter-AAS dependency; full-content audit found none."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/observability-engineer/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-c682926e888b0814f9c6bd7404b5c0054146014a3ad2e33b5a45aaba46f83527","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/observability-engineer/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The skill covers collector deployment, automated monitoring setup, Terraform modules, and network monitoring but lacks a universal approval/target boundary; SKILL.md:94-110 and 140-144."],"status":"unknown","value":null},"setup":{"evidence":["SKILL.md:40-107 names Prometheus, Grafana, Jaeger, Zipkin, Kubernetes, and Docker integration points."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["observability","slo","incident","alert"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"openapi-spec-generation":{"capabilities":["api-contract-fixtures","machine-readable-documentation","openapi-definition","stable-api-contract"],"capabilityEvidence":[{"lineEnd":11,"lineStart":11,"path":"skills/openapi-spec-generation/SKILL.md","supports":["machine-readable-documentation","openapi-definition"]},{"lineEnd":17,"lineStart":17,"path":"skills/openapi-spec-generation/SKILL.md","supports":["stable-api-contract"]}],"content":{"digest":"sha256-9e38d12b362f01e0f72c86ccda38902ea87ed41eaf6f1ab1f063a67ddd221643","path":"skills/openapi-spec-generation/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive two-file audit found no explicit inter-AAS conflict.","skills/openapi-spec-generation/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["Recursive two-file audit found no explicit inter-AAS dependency.","skills/openapi-spec-generation/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/openapi-spec-generation/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-9e38d12b362f01e0f72c86ccda38902ea87ed41eaf6f1ab1f063a67ddd221643","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/openapi-spec-generation/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The playbook prescribes global npm installs and generator execution at lines 897-1000; the root safety text does not fully constrain install scope or network approval.","skills/openapi-spec-generation/SKILL.md: Specification guidance only; no shell/network/credential/destructive behavior is prescribed.","sha256-9e38d12b362f01e0f72c86ccda38902ea87ed41eaf6f1ab1f063a67ddd221643"],"status":"unknown","value":null},"setup":{"evidence":["skills/openapi-spec-generation/resources/implementation-playbook.md:897-899 and 983-1000.","skills/openapi-spec-generation/SKILL.md: Specification/design guidance only; no concrete validator/generator prerequisite is declared."],"status":"unknown","value":null}},"intents":["api-backend-delivery","test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"},{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"integrationContract":{"matches":[{"field":"description","term":"api contract","weight":3},{"field":"id/name","term":"openapi","weight":8}],"rank":2,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"},{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["openapi","api","contract"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"openapi-spec-generator":{"capabilities":["machine-readable-documentation","openapi-definition"],"capabilityEvidence":[{"lineEnd":19,"lineStart":19,"path":"skills/openapi-spec-generator/SKILL.md","supports":["machine-readable-documentation","openapi-definition"]}],"content":{"digest":"sha256-789fd78cd7a5296cebf2a448f7e2b6da77cf031f6a65fe9d8486e9bc0c7fe7e5","path":"skills/openapi-spec-generator/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["skills/openapi-spec-generator/SKILL.md:313-324 asks the user first, then invokes the named skill if installed; no matching catalog ID exists."],"status":"known","value":[]},"provenance":{"evidence":["skills/openapi-spec-generator/SKILL.md:5-6"],"status":"known","value":{"repo":"LambdaTest/agent-skills","url":"https://github.com/LambdaTest/agent-skills/tree/main/api-skill/openapi-spec-generator"}},"risk":{"evidence":["Generates an inert specification, asks before the optional follow-up, and requires approval before destructive/costly actions at lines 331-335."],"status":"known","value":"safe"},"setup":{"evidence":["Core specification generation needs no host setup; the optional follow-up is represented as a conditional dependency."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["openapi","swagger","api"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"pagespeed-enhancer":{"capabilities":["frontend-bottleneck-analysis","remediation-priorities","result-review"],"capabilityEvidence":[],"content":{"digest":"sha256-ee0de808ea6059782e79fa36697f454e922c8ffc1bc389759bae0fb540c2990b","path":"skills/pagespeed-enhancer/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/pagespeed-enhancer/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/pagespeed-enhancer/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"a5b38cfb65da4c1155033adeb2a576133950171f","path":"skills/pagespeed-enhancer/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"a5b38cfb65da4c1155033adeb2a576133950171f","contentDigest":"sha256-ee0de808ea6059782e79fa36697f454e922c8ffc1bc389759bae0fb540c2990b","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/pagespeed-enhancer/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/pagespeed-enhancer/SKILL.md: Can download assets, edit headers/code and uninstall/install packages; tools and rollback boundaries are not attested.","sha256-ee0de808ea6059782e79fa36697f454e922c8ffc1bc389759bae0fb540c2990b"],"status":"unknown","value":null},"setup":{"evidence":["skills/pagespeed-enhancer/SKILL.md: Report review needs no install, but full fix mode assumes cwebp, sharp or Pillow and external downloads; one setup state cannot be proven (lines 280-315, 539-543)."],"status":"unknown","value":null}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"description","term":"accessibility","weight":3}],"rank":19,"score":3},"performance":{"matches":[{"field":"tags/triggers","term":"performance","weight":4},{"field":"tags/triggers","term":"lighthouse","weight":4}],"rank":11,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"performance-profiling":{"capabilities":["latency-profiling"],"capabilityEvidence":[{"lineEnd":11,"lineStart":11,"path":"skills/performance-profiling/SKILL.md","supports":["latency-profiling"]},{"lineEnd":48,"lineStart":48,"path":"skills/performance-profiling/SKILL.md","supports":["latency-profiling"]}],"content":{"digest":"sha256-0da78d260358a60f03ae275e1e790b7a148743cc7733bf2814f3f146c58b5730","path":"skills/performance-profiling/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive two-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive two-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","path":"skills/performance-profiling/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"4e8e5069fa4fea811d26cf9d6066e20d2054c141","contentDigest":"sha256-0da78d260358a60f03ae275e1e790b7a148743cc7733bf2814f3f146c58b5730","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/performance-profiling/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The bundled script launches Lighthouse against an arbitrary URL and lacks an allowlist, SSRF boundary, or explicit network approval contract."],"status":"unknown","value":null},"setup":{"evidence":["SKILL.md:15 says to execute automated profiling; scripts/lighthouse_audit.py:8 and 58 require a globally available Lighthouse CLI."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["performance","profiling"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"playwright-java":{"capabilities":["critical-browser-journeys","cross-browser-execution","deterministic-test-isolation","failure-diagnostics","maintainable-e2e-patterns","stable-locators"],"capabilityEvidence":[],"content":{"digest":"sha256-926783e260e485b9e49d9e30a6fa79506fab9d9b873a66cd8c61e641aa4aa170","path":"skills/playwright-java/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/playwright-java/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/playwright-java/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"e7501f1dced3c7babb92f097448a7fe744c1b96a","path":"skills/playwright-java/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"e7501f1dced3c7babb92f097448a7fe744c1b96a","contentDigest":"sha256-926783e260e485b9e49d9e30a6fa79506fab9d9b873a66cd8c61e641aa4aa170","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/playwright-java/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/playwright-java/SKILL.md: Installs browser dependencies, runs Maven browser tests and handles stored auth state/artifacts; execution and credential boundaries are not attested.","sha256-926783e260e485b9e49d9e30a6fa79506fab9d9b873a66cd8c61e641aa4aa170"],"status":"unknown","value":null},"setup":{"evidence":["skills/playwright-java/SKILL.md: Requires Java 17+, Playwright 1.44+, JUnit 5 and Allure plus browser install in CI (lines 17-19, 318-331)."],"status":"known","value":"manual"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"tags/triggers","term":"e2e","weight":4},{"field":"id/name","term":"playwright","weight":8},{"field":"tags/triggers","term":"selenium","weight":4}],"rank":3,"score":16},"unitComponent":{"matches":[{"field":"tags/triggers","term":"junit","weight":4}],"rank":13,"score":4}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"playwright-skill":{"capabilities":["browser-critical-paths","stable-locators"],"capabilityEvidence":[],"content":{"digest":"sha256-47291c4891287075d2e07de0155dc501d4d111caf74b322629a4c7cd527a0790","path":"skills/playwright-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/playwright-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/playwright-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","path":"skills/playwright-skill/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","contentDigest":"sha256-47291c4891287075d2e07de0155dc501d4d111caf74b322629a4c7cd527a0790","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/playwright-skill/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/playwright-skill/SKILL.md: Downloads Playwright/Chromium, writes and executes temporary scripts, launches a visible browser and may automate authenticated flows; runtime is not independently attested.","sha256-47291c4891287075d2e07de0155dc501d4d111caf74b322629a4c7cd527a0790"],"status":"unknown","value":null},"setup":{"evidence":["skills/playwright-skill/SKILL.md: Frontmatter explicitly requires npm run setup to install Playwright and Chromium before first use (lines 8-10, 56-61)."],"status":"known","value":"manual"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"id/name","term":"playwright","weight":8}],"rank":19,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"postgresql":{"capabilities":["data-model-design","query-discipline"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/postgresql/SKILL.md","supports":["data-model-design","query-discipline"]}],"content":{"digest":"sha256-4908afc41b07fa0d9764f8c8f3b9439bd1c9841d8fce4ffbdb76599d3eb5d157","path":"skills/postgresql/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/postgresql/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-4908afc41b07fa0d9764f8c8f3b9439bd1c9841d8fce4ffbdb76599d3eb5d157","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/postgresql/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["SKILL.md:139 and 152-156 discuss dropping indexes, columns, constraints, and functions; safeguards exist at lines 34 and 152, but no universal approval/execution boundary is defined."],"status":"unknown","value":null},"setup":{"evidence":["The skill is usable for design without a connection; live validation necessarily depends on a target database."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["postgresql","schema","query"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"pre-release-review":{"capabilities":["deployment-gates","safe-automation"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/pre-release-review/SKILL.md","supports":["deployment-gates"]},{"lineEnd":32,"lineStart":32,"path":"skills/pre-release-review/SKILL.md","supports":["safe-automation"]}],"content":{"digest":"sha256-135ef93385198f91a40687831e76055f9b9efa81dfa61147e2eb52067b97056f","path":"skills/pre-release-review/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive three-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive three-file audit found no explicit inter-AAS skill dependency."],"status":"known","value":[]},"provenance":{"evidence":["skills/pre-release-review/SKILL.md:7 and 14 declare source_repo plus canonical license URL."],"status":"known","value":{"repo":"chaunsin/agent-skills","url":"https://github.com/chaunsin/agent-skills"}},"risk":{"evidence":["SKILL.md:30-40 and 187 strictly prohibit writes, deploys, tags, migrations, secret disclosure, or infrastructure changes; all commands are read-only inspection."],"status":"known","value":"safe"},"setup":{"evidence":["SKILL.md:69-72 makes gh optional/fail-closed; lines 88-106 list read-only git inspection commands."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","tags"],"matchedTerms":["release","deployment","rollback"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"pre-ship-gate":{"capabilities":["deployment-gates","health-checks","post-release-verification","progressive-delivery"],"capabilityEvidence":[{"lineEnd":21,"lineStart":21,"path":"skills/pre-ship-gate/SKILL.md","supports":["deployment-gates"]},{"lineEnd":42,"lineStart":42,"path":"skills/pre-ship-gate/SKILL.md","supports":["progressive-delivery"]},{"lineEnd":49,"lineStart":49,"path":"skills/pre-ship-gate/SKILL.md","supports":["post-release-verification"]},{"lineEnd":54,"lineStart":54,"path":"skills/pre-ship-gate/SKILL.md","supports":["health-checks"]}],"content":{"digest":"sha256-9ad874fca7c06b2981f52fd6ab708888506a49e4592078eb73adb3974df10071","path":"skills/pre-ship-gate/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["SKILL.md:126-129 contains Related Skills only; full-content audit found no required dependency."],"status":"known","value":[]},"provenance":{"evidence":["skills/pre-ship-gate/SKILL.md:7 and 14 declare source_repo plus canonical license URL."],"status":"known","value":{"repo":"Sharrmavishal/operating-kit","url":"https://github.com/Sharrmavishal/operating-kit"}},"risk":{"evidence":["Network action is a read-only GET; lines 47, 104, and 123 keep the actual deploy with human/tooling, and line 124 forbids credentials in URLs."],"status":"known","value":"safe"},"setup":{"evidence":["SKILL.md:64-67 and 122 describe the read-only live revision check and placeholder replacement."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","tags"],"matchedTerms":["deploy","deployment","quality-gate"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"protect-mcp-governance":{"capabilities":["auditable-operations","tool-permission-boundaries"],"capabilityEvidence":[{"lineEnd":19,"lineStart":19,"path":"skills/protect-mcp-governance/SKILL.md","supports":["tool-permission-boundaries"]},{"lineEnd":20,"lineStart":20,"path":"skills/protect-mcp-governance/SKILL.md","supports":["auditable-operations"]}],"content":{"digest":"sha256-2e595e690b2578b5887184dea51388a288542320929c705eed7e5cb5083c4bd8","path":"skills/protect-mcp-governance/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"1118de8342ec27d9968b657d8b2a3aabecca388dc8e0919623f67c2c8a7494f4","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":275,"lineStart":275,"path":"skills/protect-mcp-governance/SKILL.md"}],"treeSha256":"1118de8342ec27d9968b657d8b2a3aabecca388dc8e0919623f67c2c8a7494f4","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":6,"lineStart":6,"path":"skills/protect-mcp-governance/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/scopeblind/scopeblind-gateway","kind":"canonical-repository"}},"risk":{"evidence":[{"lineEnd":105,"lineStart":105,"path":"skills/protect-mcp-governance/SKILL.md","type":"line"},{"categories":{"commandExecution":13,"credentials":1,"destructiveOrMutating":3,"network":6},"filesReviewed":1,"treeSha256":"1118de8342ec27d9968b657d8b2a3aabecca388dc8e0919623f67c2c8a7494f4","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":105,"lineStart":105,"path":"skills/protect-mcp-governance/SKILL.md","type":"line"},{"lineEnd":177,"lineStart":177,"path":"skills/protect-mcp-governance/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":65,"lexicalScore":16,"matchedTerms":[{"fields":["description"],"term":"agent"},{"fields":["id","name","tags","description"],"term":"mcp"},{"fields":["description"],"term":"tool"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"pytest-skill":{"capabilities":["boundary-mocking","coverage-reporting","deterministic-mocking","repeatable-integration-runner","unit-test-runner"],"capabilityEvidence":[],"content":{"digest":"sha256-2d43dd94763519e9308f8ed81155d9c33b84c6067018dc2bae35a10301034cf7","path":"skills/pytest-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/pytest-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/pytest-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/pytest-skill/SKILL.md: source frontmatter is a canonical URL","sha256-2d43dd94763519e9308f8ed81155d9c33b84c6067018dc2bae35a10301034cf7"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/LambdaTest/agent-skills/tree/main/pytest-skill"}},"risk":{"evidence":["skills/pytest-skill/SKILL.md: Runs pytest plus optional plugins and local API clients; dependency acquisition and test side effects are not attested.","sha256-2d43dd94763519e9308f8ed81155d9c33b84c6067018dc2bae35a10301034cf7"],"status":"unknown","value":null},"setup":{"evidence":["skills/pytest-skill/SKILL.md: The skill assumes pytest and several optional plugins but contains no install/activation contract (lines 43-193)."],"status":"unknown","value":null}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"integrationContract":{"matches":[{"field":"tags/triggers","term":"fixture","weight":4}],"rank":11,"score":4},"unitComponent":{"matches":[{"field":"id/name","term":"pytest","weight":8},{"field":"tags/triggers","term":"mocking","weight":4}],"rank":4,"score":12}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"python-testing-patterns":{"capabilities":["boundary-mocking","deterministic-mocking","repeatable-integration-runner","unit-test-runner"],"capabilityEvidence":[],"content":{"digest":"sha256-467fdbc399027e09da7df551c2088dad0e2fa7cba590be3059b40bfcbc63794a","path":"skills/python-testing-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/python-testing-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/python-testing-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/python-testing-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-467fdbc399027e09da7df551c2088dad0e2fa7cba590be3059b40bfcbc63794a","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/python-testing-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/python-testing-patterns/SKILL.md: Testing guidance only; no executable command, credential, network target, or destructive behavior is prescribed.","sha256-467fdbc399027e09da7df551c2088dad0e2fa7cba590be3059b40bfcbc63794a"],"status":"known","value":"safe"},"setup":{"evidence":["skills/python-testing-patterns/SKILL.md: Guidance skill; no concrete activation/install step is declared."],"status":"known","value":"none"}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"integrationContract":{"matches":[{"field":"tags/triggers","term":"fixture","weight":4}],"rank":12,"score":4},"unitComponent":{"matches":[{"field":"tags/triggers","term":"pytest","weight":4},{"field":"tags/triggers","term":"mocking","weight":4}],"rank":8,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"react-best-practices":{"capabilities":["frontend-bottleneck-analysis"],"capabilityEvidence":[],"content":{"digest":"sha256-75a1cf7ee1d59f56604b4db52d3cb680d1bfdbe5b064f6abc7acf8ba30acc1d3","path":"skills/react-best-practices/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/react-best-practices/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/react-best-practices/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"c86c93582ea5d0fb6a5f188236c9477961723800","path":"skills/react-best-practices/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"c86c93582ea5d0fb6a5f188236c9477961723800","contentDigest":"sha256-75a1cf7ee1d59f56604b4db52d3cb680d1bfdbe5b064f6abc7acf8ba30acc1d3","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/react-best-practices/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/react-best-practices/SKILL.md: Static performance rules only; no shell/network/credential/destructive behavior is prescribed.","sha256-75a1cf7ee1d59f56604b4db52d3cb680d1bfdbe5b064f6abc7acf8ba30acc1d3"],"status":"known","value":"safe"},"setup":{"evidence":["skills/react-best-practices/SKILL.md: Static performance-rule guidance; no activation prerequisite is declared."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"id/name","term":"react","weight":8},{"field":"description","term":"next.js","weight":3},{"field":"description","term":"component","weight":3}],"rank":12,"score":14}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"react-component-performance":{"capabilities":["frontend-bottleneck-analysis"],"capabilityEvidence":[],"content":{"digest":"sha256-e5ed04f3693f9ab303dd66b5c241134781bf1b10dfac23aa386d10cbd93a6d1a","path":"skills/react-component-performance/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/react-component-performance/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/react-component-performance/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/react-component-performance/SKILL.md: source frontmatter contains an owner/repository identifier","sha256-e5ed04f3693f9ab303dd66b5c241134781bf1b10dfac23aa386d10cbd93a6d1a"],"status":"known","value":{"repository":"Dimillian/Skills","type":"repository"}},"risk":{"evidence":["skills/react-component-performance/SKILL.md: Bounded local profiling and one-at-a-time code optimization with before/after validation; no network, credentials, or destructive command.","sha256-e5ed04f3693f9ab303dd66b5c241134781bf1b10dfac23aa386d10cbd93a6d1a"],"status":"known","value":"safe"},"setup":{"evidence":["skills/react-component-performance/SKILL.md: Validation requires React DevTools Profiler and baseline recordings (lines 24-26, 125-130)."],"status":"known","value":"manual"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"frontendArchitecture":{"matches":[{"field":"id/name","term":"react","weight":8},{"field":"id/name","term":"component","weight":8}],"rank":6,"score":16},"performance":{"matches":[{"field":"id/name","term":"performance","weight":8}],"rank":16,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"saga-orchestration":{"capabilities":["failure-compensation","idempotent-retries"],"capabilityEvidence":[{"lineEnd":28,"lineStart":28,"path":"skills/saga-orchestration/SKILL.md","supports":["failure-compensation"]},{"lineEnd":487,"lineStart":487,"path":"skills/saga-orchestration/SKILL.md","supports":["idempotent-retries"]}],"content":{"digest":"sha256-41cb5389c48cf7a66154a8bb568f7959b059105bd77365e613dce88ac267ca53","path":"skills/saga-orchestration/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive two-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive two-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/saga-orchestration/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-41cb5389c48cf7a66154a8bb568f7959b059105bd77365e613dce88ac267ca53","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/saga-orchestration/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["All event publication and compensation paths are code templates over abstract services; no command, credential, or real endpoint is embedded."],"status":"known","value":"safe"},"setup":{"evidence":["Event stores and publishers are abstract example interfaces, not configured host prerequisites."],"status":"known","value":"none"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["saga","workflow"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"screen-reader-testing":{"capabilities":["assistive-technology-evidence","keyboard-and-screen-reader-validation"],"capabilityEvidence":[],"content":{"digest":"sha256-351a27532ecfefb9ed832fc525466636b6f18c4f01ae0f96e5dbc59366ccfac4","path":"skills/screen-reader-testing/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/screen-reader-testing/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/screen-reader-testing/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/screen-reader-testing/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-351a27532ecfefb9ed832fc525466636b6f18c4f01ae0f96e5dbc59366ccfac4","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/screen-reader-testing/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/screen-reader-testing/SKILL.md: Manual accessibility-validation guidance only; no shell/network/credentials/destructive behavior is prescribed.","sha256-351a27532ecfefb9ed832fc525466636b6f18c4f01ae0f96e5dbc59366ccfac4"],"status":"known","value":"safe"},"setup":{"evidence":["skills/screen-reader-testing/SKILL.md: Effective use requires a configured screen reader/browser environment; the skill gives testing guidance but no automatic setup (lines 13-20)."],"status":"known","value":"manual"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"tags/triggers","term":"accessibility","weight":4},{"field":"tags/triggers","term":"screen reader","weight":4}],"rank":6,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"secrets-management":{"capabilities":["credential-boundaries","rotation-guidance","secret-lifecycle"],"capabilityEvidence":[{"lineEnd":33,"lineStart":33,"path":"skills/secrets-management/SKILL.md","supports":["credential-boundaries","secret-lifecycle"]},{"lineEnd":36,"lineStart":36,"path":"skills/secrets-management/SKILL.md","supports":["rotation-guidance"]}],"content":{"digest":"sha256-37518ec421cf00ffa306ccc719bf320b1f5595b5ac76295593f35712476d6f90","path":"skills/secrets-management/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"be59995a7def8d41677d9128c6af64976bc163c308e319a731c3f4c444a4fb4d","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":363,"lineStart":363,"path":"skills/secrets-management/SKILL.md"}],"treeSha256":"be59995a7def8d41677d9128c6af64976bc163c308e319a731c3f4c444a4fb4d","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/secrets-management/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-37518ec421cf00ffa306ccc719bf320b1f5595b5ac76295593f35712476d6f90","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/secrets-management/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":141,"lineStart":141,"path":"skills/secrets-management/SKILL.md","type":"line"},{"categories":{"commandExecution":10,"credentials":99,"destructiveOrMutating":12,"network":12},"filesReviewed":1,"treeSha256":"be59995a7def8d41677d9128c6af64976bc163c308e319a731c3f4c444a4fb4d","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":82,"lineStart":82,"path":"skills/secrets-management/SKILL.md","type":"line"},{"lineEnd":134,"lineStart":134,"path":"skills/secrets-management/SKILL.md","type":"line"},{"lineEnd":210,"lineStart":210,"path":"skills/secrets-management/SKILL.md","type":"line"}],"status":"unknown","value":null}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":19,"lexicalScore":17,"matchedTerms":[{"fields":["category"],"term":"security"},{"fields":["description"],"term":"secure"},{"fields":["id","name","tags","description"],"term":"secret"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"security-and-hardening":{"capabilities":["authentication-hardening","credential-boundaries","dependency-risk-review","mitigation-mapping","threat-enumeration","trust-boundary-review"],"capabilityEvidence":[{"lineEnd":287,"lineStart":287,"path":"skills/security-and-hardening/SKILL.md","supports":["dependency-risk-review"]},{"lineEnd":32,"lineStart":32,"path":"skills/security-and-hardening/SKILL.md","supports":["threat-enumeration","trust-boundary-review"]},{"lineEnd":36,"lineStart":36,"path":"skills/security-and-hardening/SKILL.md","supports":["mitigation-mapping"]},{"lineEnd":43,"lineStart":43,"path":"skills/security-and-hardening/SKILL.md","supports":["authentication-hardening"]},{"lineEnd":74,"lineStart":74,"path":"skills/security-and-hardening/SKILL.md","supports":["credential-boundaries"]}],"content":{"digest":"sha256-3ba7d0f45bb7ffd5550ca9738db602b1b5dcb23cba47aa6b3e21b9a6fbe123a5","path":"skills/security-and-hardening/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"74a35a6f1e6f314bfa7bcc76c76c9ffd18b2a0458413c6f885601b53cb1d84d9","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"74a35a6f1e6f314bfa7bcc76c76c9ffd18b2a0458413c6f885601b53cb1d84d9","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":5,"lineStart":5,"path":"skills/security-and-hardening/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/addyosmani/agent-skills/tree/main/skills/security-and-hardening","kind":"canonical-skill-url"}},"risk":{"evidence":[{"lineEnd":357,"lineStart":357,"path":"skills/security-and-hardening/SKILL.md","type":"line"},{"categories":{"commandExecution":4,"credentials":43,"destructiveOrMutating":1,"network":7},"filesReviewed":1,"treeSha256":"74a35a6f1e6f314bfa7bcc76c76c9ffd18b2a0458413c6f885601b53cb1d84d9","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"74a35a6f1e6f314bfa7bcc76c76c9ffd18b2a0458413c6f885601b53cb1d84d9","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":7,"lexicalScore":29,"matchedTerms":[{"fields":["id","name","tags","category"],"term":"security"},{"fields":["id","name","tags"],"term":"hardening"},{"fields":["description"],"term":"authentication"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"security-auditor":{"capabilities":["authentication-hardening","container-hardening","dependency-risk-review","mitigation-mapping","secret-lifecycle","security-requirements","supply-chain-evidence","threat-enumeration"],"capabilityEvidence":[{"lineEnd":14,"lineStart":14,"path":"skills/security-auditor/SKILL.md","supports":["mitigation-mapping"]},{"lineEnd":47,"lineStart":47,"path":"skills/security-auditor/SKILL.md","supports":["container-hardening"]},{"lineEnd":48,"lineStart":48,"path":"skills/security-auditor/SKILL.md","supports":["dependency-risk-review","supply-chain-evidence"]},{"lineEnd":49,"lineStart":49,"path":"skills/security-auditor/SKILL.md","supports":["secret-lifecycle"]},{"lineEnd":52,"lineStart":52,"path":"skills/security-auditor/SKILL.md","supports":["authentication-hardening"]},{"lineEnd":62,"lineStart":62,"path":"skills/security-auditor/SKILL.md","supports":["security-requirements"]},{"lineEnd":65,"lineStart":65,"path":"skills/security-auditor/SKILL.md","supports":["threat-enumeration"]}],"content":{"digest":"sha256-f57c553e805fed8babb2f1803186bcb1939875b9fdbaf15ba0bd58c15adb45d2","path":"skills/security-auditor/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"a5a9e2a4f096ee7c610bf7ede1961a8788feb3c227db1256fc788164f1c3a7dc","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"a5a9e2a4f096ee7c610bf7ede1961a8788feb3c227db1256fc788164f1c3a7dc","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/security-auditor/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-f57c553e805fed8babb2f1803186bcb1939875b9fdbaf15ba0bd58c15adb45d2","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/security-auditor/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":64,"lineStart":64,"path":"skills/security-auditor/SKILL.md","type":"line"},{"categories":{"commandExecution":1,"credentials":14,"destructiveOrMutating":1,"network":1},"filesReviewed":1,"treeSha256":"a5a9e2a4f096ee7c610bf7ede1961a8788feb3c227db1256fc788164f1c3a7dc","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"a5a9e2a4f096ee7c610bf7ede1961a8788feb3c227db1256fc788164f1c3a7dc","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":35,"lexicalScore":16,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"security"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"security-bluebook-builder":{"capabilities":["authentication-hardening","credential-boundaries","hardening-runbook","security-requirements","threat-enumeration","trust-boundary-review"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/security-bluebook-builder/SKILL.md","supports":["security-requirements"]},{"lineEnd":35,"lineStart":35,"path":"skills/security-bluebook-builder/SKILL.md","supports":["credential-boundaries"]},{"lineEnd":42,"lineStart":42,"path":"skills/security-bluebook-builder/SKILL.md","supports":["threat-enumeration"]},{"lineEnd":44,"lineStart":44,"path":"skills/security-bluebook-builder/SKILL.md","supports":["trust-boundary-review"]},{"lineEnd":45,"lineStart":45,"path":"skills/security-bluebook-builder/SKILL.md","supports":["authentication-hardening"]},{"lineEnd":49,"lineStart":49,"path":"skills/security-bluebook-builder/SKILL.md","supports":["hardening-runbook"]}],"content":{"digest":"sha256-d4f053069cb503b3756fa6937003052d783c814fcccff25ae23dc1865b014085","path":"skills/security-bluebook-builder/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"529707b2fec1decda7bfe087952061c85834953e343aebec52c03f4e3575632a","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"529707b2fec1decda7bfe087952061c85834953e343aebec52c03f4e3575632a","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"dde0467e420523ac7225ebe25a85f95ee5f88d8a","path":"skills/security-bluebook-builder/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"dde0467e420523ac7225ebe25a85f95ee5f88d8a","contentDigest":"sha256-d4f053069cb503b3756fa6937003052d783c814fcccff25ae23dc1865b014085","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/security-bluebook-builder/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":5,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"529707b2fec1decda7bfe087952061c85834953e343aebec52c03f4e3575632a","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"529707b2fec1decda7bfe087952061c85834953e343aebec52c03f4e3575632a","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":36,"lexicalScore":16,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"security"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"security-requirement-extraction":{"capabilities":["security-requirements"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/security-requirement-extraction/SKILL.md","supports":["security-requirements"]}],"content":{"digest":"sha256-bdcb50621b8b36f698969c5605fa5a815d65b8d1dc6471f4e63a870b48ebcc61","path":"skills/security-requirement-extraction/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":2,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"dd70fa52a9b0bac88e71a593528b33a0b3fe8ac0a45802430bdf7e07f1d562c2","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":2,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"dd70fa52a9b0bac88e71a593528b33a0b3fe8ac0a45802430bdf7e07f1d562c2","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/security-requirement-extraction/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-bdcb50621b8b36f698969c5605fa5a815d65b8d1dc6471f4e63a870b48ebcc61","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/security-requirement-extraction/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":22,"destructiveOrMutating":0,"network":3},"filesReviewed":2,"treeSha256":"dd70fa52a9b0bac88e71a593528b33a0b3fe8ac0a45802430bdf7e07f1d562c2","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"dd70fa52a9b0bac88e71a593528b33a0b3fe8ac0a45802430bdf7e07f1d562c2","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":13,"lexicalScore":18,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"security"},{"fields":["description"],"term":"threat"},{"fields":["description"],"term":"threat-model"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"security-scanning-security-dependencies":{"capabilities":["advisory-triage","dependency-risk-review","supply-chain-evidence","upgrade-prioritization"],"capabilityEvidence":[{"lineEnd":27,"lineStart":27,"path":"skills/security-scanning-security-dependencies/SKILL.md","supports":["advisory-triage"]},{"lineEnd":27,"lineStart":27,"path":"skills/security-scanning-security-dependencies/SKILL.md","supports":["dependency-risk-review","upgrade-prioritization"]},{"lineEnd":3,"lineStart":3,"path":"skills/security-scanning-security-dependencies/SKILL.md","supports":["supply-chain-evidence"]}],"content":{"digest":"sha256-eb8f129a63658067c9b34d1cb929dbe12cb2cffb222e1b459fe9ff422521c8eb","path":"skills/security-scanning-security-dependencies/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":2,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"babed22a5f1e8bfb7282457bb83f68c92bc04cb4cbc359cf35f894b20e62c0b8","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":2,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"babed22a5f1e8bfb7282457bb83f68c92bc04cb4cbc359cf35f894b20e62c0b8","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/security-scanning-security-dependencies/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-eb8f129a63658067c9b34d1cb929dbe12cb2cffb222e1b459fe9ff422521c8eb","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/security-scanning-security-dependencies/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":398,"lineStart":398,"path":"skills/security-scanning-security-dependencies/resources/implementation-playbook.md","type":"line"},{"categories":{"commandExecution":11,"credentials":0,"destructiveOrMutating":0,"network":6},"filesReviewed":2,"treeSha256":"babed22a5f1e8bfb7282457bb83f68c92bc04cb4cbc359cf35f894b20e62c0b8","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":356,"lineStart":356,"path":"skills/security-scanning-security-dependencies/resources/implementation-playbook.md","type":"line"},{"lineEnd":519,"lineStart":519,"path":"skills/security-scanning-security-dependencies/resources/implementation-playbook.md","type":"line"}],"status":"known","value":"manual"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":11,"lexicalScore":19,"matchedTerms":[{"fields":["id","name","tags","category","description"],"term":"security"},{"fields":["description"],"term":"dependency"},{"fields":["description"],"term":"supply-chain"},{"fields":["description"],"term":"sbom"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"selenium-skill":{"capabilities":["critical-browser-journeys","cross-browser-execution","failure-diagnostics","maintainable-e2e-patterns","stable-locators"],"capabilityEvidence":[],"content":{"digest":"sha256-1b4ccb03b23ba99237c29776aafcc8d9507cb6465270779615efaf68a38e2210","path":"skills/selenium-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/selenium-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/selenium-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/selenium-skill/SKILL.md: source frontmatter is a canonical URL","sha256-1b4ccb03b23ba99237c29776aafcc8d9507cb6465270779615efaf68a38e2210"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/LambdaTest/agent-skills/tree/main/selenium-skill"}},"risk":{"evidence":["skills/selenium-skill/SKILL.md: Runs language-specific dependencies/drivers or cloud Grid and may embed cloud credentials; execution/credential boundaries are not attested.","sha256-1b4ccb03b23ba99237c29776aafcc8d9507cb6465270779615efaf68a38e2210"],"status":"unknown","value":null},"setup":{"evidence":["skills/selenium-skill/SKILL.md: Requires a language binding/test runner and browser driver or Grid; project/cloud setup references are explicit (lines 43-59, 209-230)."],"status":"known","value":"manual"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"description","term":"browser","weight":3},{"field":"id/name","term":"selenium","weight":8}],"rank":10,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"senior-frontend":{"capabilities":["accessible-component-guidance","component-test-patterns","frontend-bottleneck-analysis","maintainable-component-architecture"],"capabilityEvidence":[],"content":{"digest":"sha256-dc3ac3f3d3ae7e7fcfaec3c10065fa87b22562200b6e145440b7554c487b3942","path":"skills/senior-frontend/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/senior-frontend/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/senior-frontend/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/senior-frontend/SKILL.md: source frontmatter is a canonical URL","sha256-dc3ac3f3d3ae7e7fcfaec3c10065fa87b22562200b6e145440b7554c487b3942"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/alirezarezvani/claude-skills"}},"risk":{"evidence":["skills/senior-frontend/SKILL.md: Runs bundled Python generators and npm install/dev commands and writes project scaffolds; script/runtime integrity was not independently reviewed.","sha256-dc3ac3f3d3ae7e7fcfaec3c10065fa87b22562200b6e145440b7554c487b3942"],"status":"unknown","value":null},"setup":{"evidence":["skills/senior-frontend/SKILL.md: Scaffolding uses bundled Python scripts followed by npm install and project commands (lines 39-57, 94-120)."],"status":"known","value":"manual"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"description","term":"accessibility","weight":3}],"rank":20,"score":3},"frontendArchitecture":{"matches":[{"field":"id/name","term":"frontend","weight":8},{"field":"tags/triggers","term":"react","weight":4},{"field":"description","term":"next.js","weight":3},{"field":"description","term":"component","weight":3}],"rank":5,"score":18}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"shipping-and-launch":{"capabilities":["health-checks","post-release-verification","progressive-delivery","release-procedure","rollback-validation"],"capabilityEvidence":[{"lineEnd":134,"lineStart":134,"path":"skills/shipping-and-launch/SKILL.md","supports":["progressive-delivery"]},{"lineEnd":17,"lineStart":17,"path":"skills/shipping-and-launch/SKILL.md","supports":["release-procedure","rollback-validation"]},{"lineEnd":237,"lineStart":237,"path":"skills/shipping-and-launch/SKILL.md","supports":["health-checks","post-release-verification"]}],"content":{"digest":"sha256-c89dd75cdf4213c3ac6caeaf19d1a92960dd0fefc652a591f3f13f2c1cb19404","path":"skills/shipping-and-launch/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":["skills/shipping-and-launch/SKILL.md:5-6"],"status":"known","value":{"repo":"addyosmani/agent-skills","url":"https://github.com/addyosmani/agent-skills/tree/main/skills/shipping-and-launch"}},"risk":{"evidence":["The launch workflow performs production deployment and includes git push and database rollback commands at lines 104-134 and 260-265; approval notes do not make those effects read-only."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:104-134 describes staged production deploy; lines 260 and 265 use git push and Prisma rollback."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["deployment","launch","rollback"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"skill-scanner":{"capabilities":["dependency-risk-review","supply-chain-evidence"],"capabilityEvidence":[{"lineEnd":124,"lineStart":124,"path":"skills/skill-scanner/SKILL.md","supports":["dependency-risk-review"]},{"lineEnd":176,"lineStart":176,"path":"skills/skill-scanner/SKILL.md","supports":["supply-chain-evidence"]}],"content":{"digest":"sha256-9b6ecdd8f13ffcff6dd95dfaeea9b8d21cf87500eab7dc5d61b48d1f1cedcacc","path":"skills/skill-scanner/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"5cff0aa92c45ef6f31cb1f38dc5971e210b4d7358c9b4fe242a4d2c00bde392e","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"5cff0aa92c45ef6f31cb1f38dc5971e210b4d7358c9b4fe242a4d2c00bde392e","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","path":"skills/skill-scanner/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","contentDigest":"sha256-9b6ecdd8f13ffcff6dd95dfaeea9b8d21cf87500eab7dc5d61b48d1f1cedcacc","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/skill-scanner/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":26,"lineStart":26,"path":"skills/skill-scanner/SKILL.md","type":"line"},{"categories":{"commandExecution":4,"credentials":7,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"5cff0aa92c45ef6f31cb1f38dc5971e210b4d7358c9b4fe242a4d2c00bde392e","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":26,"lineStart":26,"path":"skills/skill-scanner/SKILL.md","type":"line"},{"lineEnd":136,"lineStart":136,"path":"skills/skill-scanner/SKILL.md","type":"line"}],"status":"unknown","value":null}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":95,"lexicalScore":4,"matchedTerms":[{"fields":["description"],"term":"security"},{"fields":["description"],"term":"secret"},{"fields":["description"],"term":"supply-chain"},{"fields":["description"],"term":"permission"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"slo-implementation":{"capabilities":["service-level-objectives"],"capabilityEvidence":[{"lineEnd":27,"lineStart":27,"path":"skills/slo-implementation/SKILL.md","supports":["service-level-objectives"]}],"content":{"digest":"sha256-bf994ee1b0d9b38796aab724c92a6ae6b0e962190e11a6ddb0ffe6130580d639","path":"skills/slo-implementation/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/slo-implementation/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-bf994ee1b0d9b38796aab724c92a6ae6b0e962190e11a6ddb0ffe6130580d639","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/slo-implementation/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Content produces SLO definitions, PromQL, and alert-rule examples; no command, credential value, destructive action, or live write path is prescribed."],"status":"known","value":"safe"},"setup":{"evidence":["The skill can define SLOs offline; live calculation requires service metrics but no host plugin is mandatory."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["slo"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"sql-optimization-patterns":{"capabilities":["query-discipline"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/sql-optimization-patterns/SKILL.md","supports":["query-discipline"]}],"content":{"digest":"sha256-6b52f067a0e6ecd032c5b2567362bf96f7a1eeabf6f6dda3f9a742604ccd4444","path":"skills/sql-optimization-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive two-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive two-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/sql-optimization-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-6b52f067a0e6ecd032c5b2567362bf96f7a1eeabf6f6dda3f9a742604ccd4444","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/sql-optimization-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The playbook recommends ANALYZE and index changes affecting writes but does not define a target/approval boundary; lines 428-454."],"status":"unknown","value":null},"setup":{"evidence":["resources/implementation-playbook.md:428-454 recommends index/statistics changes that require database access when executed."],"status":"known","value":"manual"}},"intents":["api-backend-delivery"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["sql","query"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"stride-analysis-patterns":{"capabilities":["threat-enumeration"],"capabilityEvidence":[{"lineEnd":11,"lineStart":11,"path":"skills/stride-analysis-patterns/SKILL.md","supports":["threat-enumeration"]}],"content":{"digest":"sha256-0cd0d8f0ab8775503fb1e9fe66005802c78b6f7717a7dd7a67be25b504a6cffd","path":"skills/stride-analysis-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":2,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"a9cb40c60d7b6db22ee83ad20429ae2320936327fa3447ca921874e3b3eba85c","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":2,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"a9cb40c60d7b6db22ee83ad20429ae2320936327fa3447ca921874e3b3eba85c","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/stride-analysis-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-0cd0d8f0ab8775503fb1e9fe66005802c78b6f7717a7dd7a67be25b504a6cffd","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/stride-analysis-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":19,"destructiveOrMutating":2,"network":3},"filesReviewed":2,"treeSha256":"a9cb40c60d7b6db22ee83ad20429ae2320936327fa3447ca921874e3b3eba85c","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"a9cb40c60d7b6db22ee83ad20429ae2320936327fa3447ca921874e3b3eba85c","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":79,"lexicalScore":5,"matchedTerms":[{"fields":["category","description"],"term":"security"},{"fields":["description"],"term":"threat"},{"fields":["description"],"term":"threat-model"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"supply-chain-risk-auditor":{"capabilities":["dependency-risk-review","supply-chain-evidence"],"capabilityEvidence":[{"lineEnd":20,"lineStart":20,"path":"skills/supply-chain-risk-auditor/SKILL.md","supports":["dependency-risk-review"]},{"lineEnd":60,"lineStart":60,"path":"skills/supply-chain-risk-auditor/SKILL.md","supports":["supply-chain-evidence"]}],"content":{"digest":"sha256-799e965b7e6d91dfc147907ef59900aeaa1a3712c1b21c8459504584c7eaa2d7","path":"skills/supply-chain-risk-auditor/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"ec86d4d596480d96610d2806226d98dda9ad8f6f31df0cf72e2e4a11c577233d","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"ec86d4d596480d96610d2806226d98dda9ad8f6f31df0cf72e2e4a11c577233d","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","path":"skills/supply-chain-risk-auditor/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"f313788985c5f88297e0a3b70bb3ea0755436d23","contentDigest":"sha256-799e965b7e6d91dfc147907ef59900aeaa1a3712c1b21c8459504584c7eaa2d7","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/supply-chain-risk-auditor/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"lineEnd":6,"lineStart":6,"path":"skills/supply-chain-risk-auditor/SKILL.md","type":"line"},{"categories":{"commandExecution":2,"credentials":0,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"ec86d4d596480d96610d2806226d98dda9ad8f6f31df0cf72e2e4a11c577233d","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":47,"lineStart":47,"path":"skills/supply-chain-risk-auditor/SKILL.md","type":"line"},{"lineEnd":53,"lineStart":53,"path":"skills/supply-chain-risk-auditor/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":64,"lexicalScore":13,"matchedTerms":[{"fields":["description"],"term":"security"},{"fields":["description"],"term":"dependency"},{"fields":["id","name","description"],"term":"supply-chain"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"tailwind-design-system":{"capabilities":["accessible-component-guidance","maintainable-component-architecture","shared-ui-conventions"],"capabilityEvidence":[],"content":{"digest":"sha256-2d2852085d419997ec8a75d798666afe20ff265e99602fc4ad78e6353c0f3746","path":"skills/tailwind-design-system/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/tailwind-design-system/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/tailwind-design-system/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/tailwind-design-system/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-2d2852085d419997ec8a75d798666afe20ff265e99602fc4ad78e6353c0f3746","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/tailwind-design-system/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/tailwind-design-system/SKILL.md: Static design-system guidance only; no shell/network/credential/destructive behavior is prescribed.","sha256-2d2852085d419997ec8a75d798666afe20ff265e99602fc4ad78e6353c0f3746"],"status":"known","value":"safe"},"setup":{"evidence":["skills/tailwind-design-system/SKILL.md: Design-system guidance only; no extra host activation step is declared."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"tags/triggers","term":"accessibility","weight":4}],"rank":12,"score":4}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"terraform-aws-modules":{"capabilities":["environment-separation","plan-review","reusable-infrastructure","state-safety"],"capabilityEvidence":[{"lineEnd":14,"lineStart":14,"path":"skills/terraform-aws-modules/SKILL.md","supports":["environment-separation"]},{"lineEnd":3,"lineStart":3,"path":"skills/terraform-aws-modules/SKILL.md","supports":["reusable-infrastructure","state-safety"]},{"lineEnd":70,"lineStart":70,"path":"skills/terraform-aws-modules/SKILL.md","supports":["plan-review"]}],"content":{"digest":"sha256-a53eac06b4e71bb552d9c9dbebc1af4fb7684d7fc4f95c79348f5df2f56a8d9d","path":"skills/terraform-aws-modules/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"a709a253e5d960b2f305f869cd2feff61cba528e","path":"skills/terraform-aws-modules/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"a709a253e5d960b2f305f869cd2feff61cba528e","contentDigest":"sha256-a53eac06b4e71bb552d9c9dbebc1af4fb7684d7fc4f95c79348f5df2f56a8d9d","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/terraform-aws-modules/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["SKILL.md:77-78 instructs terraform force-unlock against shared state; the skill targets live AWS infrastructure even though it requires confirming no competing operation."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:27, 70, and 77-78 requires Terraform validation/plan and can force-unlock remote state."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["terraform","module","state"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"terraform-infrastructure":{"capabilities":["deployment-gates","environment-separation","reusable-infrastructure","state-safety"],"capabilityEvidence":[{"lineEnd":14,"lineStart":14,"path":"skills/terraform-infrastructure/SKILL.md","supports":["environment-separation","reusable-infrastructure","state-safety"]},{"lineEnd":150,"lineStart":150,"path":"skills/terraform-infrastructure/SKILL.md","supports":["deployment-gates"]}],"content":{"digest":"sha256-457d530e81474ff50f730636f0ceb342630410953838fd31616023a0e61c269d","path":"skills/terraform-infrastructure/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["SKILL.md:29-147 labels these Skills to Invoke across seven phases; duplicate references were deduplicated and all IDs resolve in the catalog."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","path":"skills/terraform-infrastructure/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","contentDigest":"sha256-457d530e81474ff50f730636f0ceb342630410953838fd31616023a0e61c269d","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/terraform-infrastructure/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Workflow actions provision cloud resources, configure networking/state/secrets, and implement plan/apply pipelines; lines 33-157."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:25-157 explicitly invokes other skills to initialize, provision, manage state, plan/apply, and secure cloud infrastructure."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["terraform","infrastructure","module","state"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"terraform-module-library":{"capabilities":["reusable-infrastructure"],"capabilityEvidence":[{"lineEnd":27,"lineStart":27,"path":"skills/terraform-module-library/SKILL.md","supports":["reusable-infrastructure"]}],"content":{"digest":"sha256-54e3ae6d4ef73ff7594c0d30e8c6157742df21641d92ce28feb7653863b5a446","path":"skills/terraform-module-library/SKILL.md"},"fields":{"conflicts":{"evidence":["Recursive two-file audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Recursive two-file audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/terraform-module-library/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-54e3ae6d4ef73ff7594c0d30e8c6157742df21641d92ce28feb7653863b5a446","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/terraform-module-library/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["Terratest example at SKILL.md:253-254 creates and destroys real infrastructure when executed."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:253-254 calls terraform.InitAndApply and terraform.Destroy."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["terraform","module","infrastructure"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"terraform-specialist":{"capabilities":["deployment-gates","environment-separation","reproducible-ci","reusable-infrastructure","state-safety"],"capabilityEvidence":[{"lineEnd":125,"lineStart":125,"path":"skills/terraform-specialist/SKILL.md","supports":["reproducible-ci"]},{"lineEnd":13,"lineStart":13,"path":"skills/terraform-specialist/SKILL.md","supports":["environment-separation"]},{"lineEnd":155,"lineStart":155,"path":"skills/terraform-specialist/SKILL.md","supports":["reusable-infrastructure"]},{"lineEnd":3,"lineStart":3,"path":"skills/terraform-specialist/SKILL.md","supports":["state-safety"]},{"lineEnd":91,"lineStart":91,"path":"skills/terraform-specialist/SKILL.md","supports":["deployment-gates"]}],"content":{"digest":"sha256-622bebadc27b73eb7a5026974eb46055929cf4764ecbdab3a2004a2065f455ca","path":"skills/terraform-specialist/SKILL.md"},"fields":{"conflicts":{"evidence":["Full-content audit found no explicit inter-AAS conflict."],"status":"known","value":[]},"dependencies":{"evidence":["Full-content audit found no explicit inter-AAS dependency."],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/terraform-specialist/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-622bebadc27b73eb7a5026974eb46055929cf4764ecbdab3a2004a2065f455ca","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/terraform-specialist/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["The skill manages state, apply, recovery, deployment automation, and infrastructure migration; review safeguards at lines 31-32 reduce but do not remove live-infrastructure impact."],"status":"known","value":"critical"},"setup":{"evidence":["SKILL.md:26-32 and 88-124 covers apply workflows, state protection/recovery, and deployment automation."],"status":"known","value":"manual"}},"intents":["deployment-devops"],"reviews":[{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","auditId":"api-deploy.semantic-2026-07-17","provenance":{"matchedFields":["id","description","category"],"matchedTerms":["terraform","infrastructure","state","module"],"ruleVersion":"public-lexical-cluster-semantic-admission-v1"},"selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a"}]},"testing-patterns":{"capabilities":["component-test-patterns","coverage-reporting","deterministic-mocking"],"capabilityEvidence":[],"content":{"digest":"sha256-0413a6d6a75664f1fecd7a5007156ff5df1b2ae563aed96f97c8dea5e16f4c95","path":"skills/testing-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/testing-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/testing-patterns/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","path":"skills/testing-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","contentDigest":"sha256-0413a6d6a75664f1fecd7a5007156ff5df1b2ae563aed96f97c8dea5e16f4c95","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/testing-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/testing-patterns/SKILL.md: Writes tests and runs npm scripts; project command behavior and dependency integrity are not attested.","sha256-0413a6d6a75664f1fecd7a5007156ff5df1b2ae563aed96f97c8dea5e16f4c95"],"status":"unknown","value":null},"setup":{"evidence":["skills/testing-patterns/SKILL.md: Assumes Jest/Testing Library and npm test scripts but does not state how dependencies are installed or verified (lines 248-256)."],"status":"unknown","value":null}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"unitComponent":{"matches":[{"field":"tags/triggers","term":"unit test","weight":4},{"field":"tags/triggers","term":"jest","weight":4},{"field":"tags/triggers","term":"mocking","weight":4}],"rank":5,"score":12}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"testing-qa":{"capabilities":["browser-critical-paths","coverage-reporting","repeatable-integration-runner","unit-test-runner"],"capabilityEvidence":[],"content":{"digest":"sha256-98756bbfbec107c77f9a52800efdd77be7e40749e298d07f79967fdc1b23241f","path":"skills/testing-qa/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/testing-qa/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/testing-qa/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","path":"skills/testing-qa/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"6dd1307be6462397eff16f34aeff282eac93cbc3","contentDigest":"sha256-98756bbfbec107c77f9a52800efdd77be7e40749e298d07f79967fdc1b23241f","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/testing-qa/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/testing-qa/SKILL.md: Invokes a broad set of mutating/test/security/review skills; aggregate command/network/write behavior is not closed or attested.","sha256-98756bbfbec107c77f9a52800efdd77be7e40749e298d07f79967fdc1b23241f"],"status":"unknown","value":null},"setup":{"evidence":["skills/testing-qa/SKILL.md: Composition bundle requires many other skills/toolchains and does not provide a closed activation procedure (lines 32-204)."],"status":"unknown","value":null}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"tags/triggers","term":"browser","weight":4},{"field":"tags/triggers","term":"e2e","weight":4}],"rank":21,"score":8},"integrationContract":{"matches":[{"field":"description","term":"integration test","weight":3}],"rank":14,"score":3},"unitComponent":{"matches":[{"field":"description","term":"unit test","weight":3}],"rank":24,"score":3}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"threat-mitigation-mapping":{"capabilities":["mitigation-mapping"],"capabilityEvidence":[{"lineEnd":3,"lineStart":3,"path":"skills/threat-mitigation-mapping/SKILL.md","supports":["mitigation-mapping"]}],"content":{"digest":"sha256-aa524fe3c3603b1fc611a5b7953003de010e4904032b9c8c78c2ad1e3bd4a9fb","path":"skills/threat-mitigation-mapping/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":2,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"70effc036878e2b31f73755a76920efab7f770534001f2e97ee8cb9789766977","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":2,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"70effc036878e2b31f73755a76920efab7f770534001f2e97ee8cb9789766977","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/threat-mitigation-mapping/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-aa524fe3c3603b1fc611a5b7953003de010e4904032b9c8c78c2ad1e3bd4a9fb","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/threat-mitigation-mapping/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":2,"credentials":12,"destructiveOrMutating":2,"network":5},"filesReviewed":2,"treeSha256":"70effc036878e2b31f73755a76920efab7f770534001f2e97ee8cb9789766977","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"70effc036878e2b31f73755a76920efab7f770534001f2e97ee8cb9789766977","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":3,"lexicalScore":31,"matchedTerms":[{"fields":["category","description"],"term":"security"},{"fields":["id","name","tags","description"],"term":"threat"},{"fields":["id","name","tags","description"],"term":"mitigation"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"threat-modeling-expert":{"capabilities":["mitigation-mapping","security-requirements","threat-enumeration","trust-boundary-review"],"capabilityEvidence":[{"lineEnd":41,"lineStart":41,"path":"skills/threat-modeling-expert/SKILL.md","supports":["threat-enumeration","trust-boundary-review"]},{"lineEnd":47,"lineStart":47,"path":"skills/threat-modeling-expert/SKILL.md","supports":["mitigation-mapping"]},{"lineEnd":61,"lineStart":61,"path":"skills/threat-modeling-expert/SKILL.md","supports":["security-requirements"]}],"content":{"digest":"sha256-e091531614639439ab664277be72870ba7159cc6efc4a744f74b478dff0a09d1","path":"skills/threat-modeling-expert/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"1d0da2f21b71987fa018e713d17e02588399b7aa6ac1085f7ce389b126f268d4","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[],"treeSha256":"1d0da2f21b71987fa018e713d17e02588399b7aa6ac1085f7ce389b126f268d4","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/threat-modeling-expert/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-e091531614639439ab664277be72870ba7159cc6efc4a744f74b478dff0a09d1","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/threat-modeling-expert/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":1,"destructiveOrMutating":0,"network":0},"filesReviewed":1,"treeSha256":"1d0da2f21b71987fa018e713d17e02588399b7aa6ac1085f7ce389b126f268d4","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"1d0da2f21b71987fa018e713d17e02588399b7aa6ac1085f7ce389b126f268d4","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["security-review-hardening"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":8,"lexicalScore":29,"matchedTerms":[{"fields":["category","description"],"term":"security"},{"fields":["description"],"term":"secure"},{"fields":["id","name","tags","description"],"term":"threat"},{"fields":["id","name","description"],"term":"threat-model"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"tool-design":{"capabilities":["context-budget","failure-handling","tool-orchestration"],"capabilityEvidence":[{"lineEnd":16,"lineStart":16,"path":"skills/tool-design/SKILL.md","supports":["tool-orchestration"]},{"lineEnd":40,"lineStart":40,"path":"skills/tool-design/SKILL.md","supports":["failure-handling"]},{"lineEnd":60,"lineStart":60,"path":"skills/tool-design/SKILL.md","supports":["context-budget"]}],"content":{"digest":"sha256-8c291bb71cf261a1e6f3dd1eda47467fe8acd655b3fee7be2483ea38e58ea829","path":"skills/tool-design/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[],"treeSha256":"29c09ba7ad3f226d95acedeafe7e52f5c19df78d5f9be707d89cad5c1a99753e","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":301,"lineStart":301,"path":"skills/tool-design/SKILL.md"}],"treeSha256":"29c09ba7ad3f226d95acedeafe7e52f5c19df78d5f9be707d89cad5c1a99753e","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":5,"lineStart":5,"path":"skills/tool-design/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/tool-design","kind":"canonical-skill-url"}},"risk":{"evidence":[{"categories":{"commandExecution":0,"credentials":4,"destructiveOrMutating":0,"network":1},"filesReviewed":1,"treeSha256":"29c09ba7ad3f226d95acedeafe7e52f5c19df78d5f9be707d89cad5c1a99753e","type":"focused-static-scan"}],"status":"known","value":"safe"},"setup":{"evidence":[{"finding":"No activation-time install, authentication, host configuration, or mandatory external runtime prerequisite was declared.","treeSha256":"29c09ba7ad3f226d95acedeafe7e52f5c19df78d5f9be707d89cad5c1a99753e","type":"full-content-audit"}],"status":"known","value":"none"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":104,"lexicalScore":13,"matchedTerms":[{"fields":["description"],"term":"agent"},{"fields":["description"],"term":"agents"},{"fields":["id","name","description"],"term":"tool"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"tree-ring-memory":{"capabilities":["auditable-operations","context-budget","context-retrieval","memory-boundaries","stale-memory-controls"],"capabilityEvidence":[{"lineEnd":127,"lineStart":127,"path":"skills/tree-ring-memory/SKILL.md","supports":["stale-memory-controls"]},{"lineEnd":23,"lineStart":23,"path":"skills/tree-ring-memory/SKILL.md","supports":["context-budget","memory-boundaries"]},{"lineEnd":27,"lineStart":27,"path":"skills/tree-ring-memory/SKILL.md","supports":["auditable-operations"]},{"lineEnd":27,"lineStart":27,"path":"skills/tree-ring-memory/SKILL.md","supports":["context-retrieval"]}],"content":{"digest":"sha256-0748f05ca636975086851c9ee0f850bb614ba5572e1736d1e416994d6cc9fee6","path":"skills/tree-ring-memory/SKILL.md"},"fields":{"conflicts":{"evidence":[{"filesReviewed":1,"finding":"No explicit inter-AAS stack conflict or mutually exclusive skill declaration found. Scope exclusions were not reclassified as conflicts.","lexicalMatchesReviewedAsNonInterAAS":[{"lineEnd":198,"lineStart":198,"path":"skills/tree-ring-memory/SKILL.md"}],"treeSha256":"389358db3f89312f0a19d6b8ab2fcb23b10ab46418d78ddfe3dd24df1b3dfd25","type":"full-content-audit"}],"status":"known","value":[]},"dependencies":{"evidence":[{"filesReviewed":1,"finding":"No explicit required inter-AAS dependency declared. Related/recommended skills were not reclassified as dependencies.","lexicalMatchesReviewedAsNonInterAAS":[],"relatedOrRecommendedMatches":[{"lineEnd":209,"lineStart":209,"path":"skills/tree-ring-memory/SKILL.md"}],"treeSha256":"389358db3f89312f0a19d6b8ab2fcb23b10ab46418d78ddfe3dd24df1b3dfd25","type":"full-content-audit"}],"status":"known","value":[]},"provenance":{"evidence":[{"lineEnd":7,"lineStart":7,"path":"skills/tree-ring-memory/SKILL.md","type":"line"}],"status":"known","value":{"canonicalUrl":"https://github.com/TerminallyLazy/Tree-Ring-Memory","kind":"canonical-repository"}},"risk":{"evidence":[{"lineEnd":65,"lineStart":65,"path":"skills/tree-ring-memory/SKILL.md","type":"line"},{"categories":{"commandExecution":0,"credentials":2,"destructiveOrMutating":0,"network":3},"filesReviewed":1,"treeSha256":"389358db3f89312f0a19d6b8ab2fcb23b10ab46418d78ddfe3dd24df1b3dfd25","type":"focused-static-scan"}],"status":"unknown","value":null},"setup":{"evidence":[{"lineEnd":65,"lineStart":65,"path":"skills/tree-ring-memory/SKILL.md","type":"line"}],"status":"known","value":"manual"}},"intents":["agent-mcp-development"],"reviews":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","auditId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","provenance":{"benchmarkGoldIdsUsed":false,"fullCatalogPopulation":1965,"heldOutRead":false,"lexicalRank":54,"lexicalScore":18,"matchedTerms":[{"fields":["tags","description"],"term":"agent"},{"fields":["id","name","tags","description"],"term":"memory"}],"ruleVersion":"aas-v1-public-lexical-audit-1","semanticReview":"manual-read-of-canonical-SKILL.md-with-explicit-line-evidence"},"selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8"}]},"ui-a11y":{"capabilities":["accessible-component-guidance","keyboard-and-screen-reader-validation","wcag-audit"],"capabilityEvidence":[],"content":{"digest":"sha256-6b273632251fcfafcc559747d0d87e76d00ddd935a8162247e358ab9a6953773","path":"skills/ui-a11y/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/ui-a11y/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/ui-a11y/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/ui-a11y/SKILL.md: source frontmatter is a canonical URL","sha256-6b273632251fcfafcc559747d0d87e76d00ddd935a8162247e358ab9a6953773"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/bitjaru/styleseed/tree/main/engine/.claude/skills/ss-a11y"}},"risk":{"evidence":["skills/ui-a11y/SKILL.md: Bounded static source fixes; no shell/network/credential operation or destructive workflow is prescribed.","sha256-6b273632251fcfafcc559747d0d87e76d00ddd935a8162247e358ab9a6953773"],"status":"known","value":"safe"},"setup":{"evidence":["skills/ui-a11y/SKILL.md: Static code audit/fix guidance; runtime screen-reader simulation is explicitly out of scope (lines 21-24)."],"status":"known","value":"none"}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"tags/triggers","term":"accessibility","weight":4},{"field":"id/name","term":"a11y","weight":8}],"rank":3,"score":12}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"ui-review":{"capabilities":["accessible-component-guidance","shared-ui-conventions","wcag-audit"],"capabilityEvidence":[],"content":{"digest":"sha256-4b3dc445c56ad66e9ebc92219c4fee7031267be2490fb532a8272ff3423ebd33","path":"skills/ui-review/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/ui-review/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/ui-review/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":["skills/ui-review/SKILL.md: source frontmatter is a canonical URL","sha256-4b3dc445c56ad66e9ebc92219c4fee7031267be2490fb532a8272ff3423ebd33"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/bitjaru/styleseed/tree/main/engine/.claude/skills/ss-review"}},"risk":{"evidence":["skills/ui-review/SKILL.md: Explicit review checklist with no edits, commands, network calls, credentials, or destructive operations.","sha256-4b3dc445c56ad66e9ebc92219c4fee7031267be2490fb532a8272ff3423ebd33"],"status":"known","value":"none"},"setup":{"evidence":["skills/ui-review/SKILL.md: Read-only UI review checklist; no extra host/tool prerequisite is declared."],"status":"known","value":"none"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"tags/triggers","term":"accessibility","weight":4}],"rank":14,"score":4}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"unit-testing-test-generate":{"capabilities":["component-test-patterns","coverage-reporting","deterministic-mocking","unit-test-runner"],"capabilityEvidence":[],"content":{"digest":"sha256-3fdc338d79aa50a5e546c1ecfe983b583dd13827804dd8236b44d1de056748fe","path":"skills/unit-testing-test-generate/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/unit-testing-test-generate/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/unit-testing-test-generate/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/unit-testing-test-generate/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-3fdc338d79aa50a5e546c1ecfe983b583dd13827804dd8236b44d1de056748fe","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/unit-testing-test-generate/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/unit-testing-test-generate/SKILL.md: Generates test source examples; no shell/network/credential/destructive behavior is prescribed.","sha256-3fdc338d79aa50a5e546c1ecfe983b583dd13827804dd8236b44d1de056748fe"],"status":"known","value":"safe"},"setup":{"evidence":["skills/unit-testing-test-generate/SKILL.md: Generates framework-specific test source; no host activation prerequisite is declared."],"status":"known","value":"none"}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"unitComponent":{"matches":[{"field":"description","term":"unit test","weight":3},{"field":"tags/triggers","term":"coverage","weight":4}],"rank":9,"score":7}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"vitest-skill":{"capabilities":["component-test-patterns","coverage-reporting","deterministic-mocking","repeatable-integration-runner","unit-test-runner"],"capabilityEvidence":[],"content":{"digest":"sha256-dfd406a1ee995cbe2de1b5a0d155ab8d500ab8761da78ca61cc1b5ce5d3a7779","path":"skills/vitest-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/vitest-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/vitest-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/vitest-skill/SKILL.md: source frontmatter is a canonical URL","sha256-dfd406a1ee995cbe2de1b5a0d155ab8d500ab8761da78ca61cc1b5ce5d3a7779"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/LambdaTest/agent-skills/tree/main/vitest-skill"}},"risk":{"evidence":["skills/vitest-skill/SKILL.md: Runs npx Vitest and optional UI/coverage/API paths; package acquisition and test side effects are not attested.","sha256-dfd406a1ee995cbe2de1b5a0d155ab8d500ab8761da78ca61cc1b5ce5d3a7779"],"status":"unknown","value":null},"setup":{"evidence":["skills/vitest-skill/SKILL.md: Uses npx vitest and optional UI/coverage/component packages but does not define installation/setup (lines 124-157)."],"status":"unknown","value":null}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"unitComponent":{"matches":[{"field":"id/name","term":"vitest","weight":8},{"field":"tags/triggers","term":"jest","weight":4}],"rank":6,"score":12}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"wcag-audit-patterns":{"capabilities":["accessibility-audit","accessible-component-guidance","keyboard-and-screen-reader-validation","remediation-priorities","wcag-audit"],"capabilityEvidence":[],"content":{"digest":"sha256-f1ae46b2e7eeece4ae2bedae1af536b3d37af2d9c680c4424a04c3996a72885d","path":"skills/wcag-audit-patterns/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/wcag-audit-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/wcag-audit-patterns/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","path":"skills/wcag-audit-patterns/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"0ffee448285d6830e442b769f9002f7a9dba91b0","contentDigest":"sha256-f1ae46b2e7eeece4ae2bedae1af536b3d37af2d9c680c4424a04c3996a72885d","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/wcag-audit-patterns/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/wcag-audit-patterns/SKILL.md: Calls for standard audit scans and manual checks but provides no remote target, credentials, destructive command, or automatic write; remediation remains user-scoped.","sha256-f1ae46b2e7eeece4ae2bedae1af536b3d37af2d9c680c4424a04c3996a72885d"],"status":"known","value":"safe"},"setup":{"evidence":["skills/wcag-audit-patterns/SKILL.md: Workflow calls for axe, Lighthouse and WAVE scans but does not define whether those tools are available or how they are activated (lines 30-32)."],"status":"unknown","value":null}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"accessibility":{"matches":[{"field":"id/name","term":"wcag","weight":8}],"rank":7,"score":8}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"web-performance-optimization":{"capabilities":["frontend-bottleneck-analysis","regression-evidence","result-review"],"capabilityEvidence":[],"content":{"digest":"sha256-38cf09230d50f48d37ae28e6b5324aea9f6fdeccfffdba76ecd444f6fee8e263","path":"skills/web-performance-optimization/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/web-performance-optimization/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/web-performance-optimization/SKILL.md: explicit AAS relationships listed above"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"ebdc51708c3aebc85c55d5fc058948085c931777","path":"skills/web-performance-optimization/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"ebdc51708c3aebc85c55d5fc058948085c931777","contentDigest":"sha256-38cf09230d50f48d37ae28e6b5324aea9f6fdeccfffdba76ecd444f6fee8e263","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/web-performance-optimization/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/web-performance-optimization/SKILL.md: Runs external audits, installs/uninstalls packages, edits application assets and references live URLs; package/network/write boundaries are not attested.","sha256-38cf09230d50f48d37ae28e6b5324aea9f6fdeccfffdba76ecd444f6fee8e263"],"status":"unknown","value":null},"setup":{"evidence":["skills/web-performance-optimization/SKILL.md: Uses Lighthouse, bundle analysis, package install/uninstall and optional image tools without a single declared activation contract (lines 151-158, 354-359, 524)."],"status":"unknown","value":null}},"intents":["test-qa-automation","web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"performance":{"matches":[{"field":"id/name","term":"performance","weight":8},{"field":"description","term":"web vitals","weight":3}],"rank":7,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"webapp-testing":{"capabilities":["browser-critical-paths"],"capabilityEvidence":[],"content":{"digest":"sha256-da02c666083f0642b4ae7a106f1b38d9ada0d6da01ff4e014b49d0300ab8a9ea","path":"skills/webapp-testing/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/webapp-testing/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/webapp-testing/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":[{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","path":"skills/webapp-testing/SKILL.md","type":"git-addition-history"}],"status":"known","value":{"commit":"7f46ed8ca119949ad3b406bc85e727db84ee6ece","contentDigest":"sha256-da02c666083f0642b4ae7a106f1b38d9ada0d6da01ff4e014b49d0300ab8a9ea","kind":"aas-import-provenance","limitation":"AAS import provenance does not independently attest the upstream publisher account","path":"skills/webapp-testing/SKILL.md","repository":"sickn33/agentic-awesome-skills"}},"risk":{"evidence":["skills/webapp-testing/SKILL.md: Writes and runs Python Playwright scripts against a server; Python/browser dependency and target boundaries are not attested.","sha256-da02c666083f0642b4ae7a106f1b38d9ada0d6da01ff4e014b49d0300ab8a9ea"],"status":"unknown","value":null},"setup":{"evidence":["skills/webapp-testing/SKILL.md: Requires Python Playwright and a packaged with_server.py helper; the skill shows execution but no automatic dependency acquisition (lines 42-61)."],"status":"known","value":"manual"}},"intents":["web-application-delivery"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"tags/triggers","term":"playwright","weight":4}],"rank":33,"score":4}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]},"webdriverio-skill":{"capabilities":["boundary-mocking","critical-browser-journeys","cross-browser-execution","failure-diagnostics"],"capabilityEvidence":[],"content":{"digest":"sha256-5d884620f500ec3d06f81ec72e264456ca24b3c2e4cfe2fcd915d486feefd18a","path":"skills/webdriverio-skill/SKILL.md"},"fields":{"conflicts":{"evidence":["skills/webdriverio-skill/SKILL.md: full-content review found no explicit inter-AAS-skill conflict declaration"],"status":"known","value":[]},"dependencies":{"evidence":["skills/webdriverio-skill/SKILL.md: full-content review found no explicit inter-AAS-skill relationship"],"status":"known","value":[]},"provenance":{"evidence":["skills/webdriverio-skill/SKILL.md: source frontmatter is a canonical URL","sha256-5d884620f500ec3d06f81ec72e264456ca24b3c2e4cfe2fcd915d486feefd18a"],"status":"known","value":{"type":"canonical-url","url":"https://github.com/LambdaTest/agent-skills/tree/main/webdriverio-skill"}},"risk":{"evidence":["skills/webdriverio-skill/SKILL.md: Initializes and runs WDIO with optional cloud/API paths; dependency/network/credential behavior is not attested.","sha256-5d884620f500ec3d06f81ec72e264456ca24b3c2e4cfe2fcd915d486feefd18a"],"status":"unknown","value":null},"setup":{"evidence":["skills/webdriverio-skill/SKILL.md: Explicit setup command npm init wdio@latest and WDIO run commands are required (lines 121-124)."],"status":"known","value":"manual"}},"intents":["test-qa-automation"],"reviews":[{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17"}],"selectionEvidence":[{"auditDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","auditId":"aas-v1-web-test-public-semantic-audit-2026-07-17","provenance":{"qualifyingFamilies":{"browserE2E":{"matches":[{"field":"description","term":"browser","weight":3},{"field":"id/name","term":"webdriverio","weight":8}],"rank":12,"score":11}},"ruleVersion":"aas-v1-public-lexical-audit-v1"},"selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d"}]}},"sourceAudits":[{"fieldDigest":"sha256-af0149cce28e8c82e6e84c26b4aa629d127804db69bf820dd1b7b8afd81b5d61","fieldId":"aas-v1-security-agent-field-audit-2026-07-17","fieldPath":"security-agent.fields.json","selectorDigest":"sha256-9de9d1bb9458389b04d4c7c16762851f31e7f5d4c265ba3bc2ad3f5e130a42e8","semanticDigest":"sha256-56b5719c26309658b43be5c93be9530194552805942e01377614384bb94c30d0","semanticId":"aas-v1-security-agent-semantic-metadata-audit-2026-07-17","semanticPath":"security-agent.semantic.json"},{"fieldDigest":"sha256-bd38168499eb033d55c0fb1b439f942ebf39689c26709ca3d13970070fe02a20","fieldId":"aas-v1-web-test-field-evidence-v1","fieldPath":"web-test.fields.json","selectorDigest":"sha256-dd7bffc1675bdc703ddc5e64e46db72a02cab03e34287dc30de2e0cc671a3c2d","semanticDigest":"sha256-c70c0ccd468aca75f384f28417393cf2cace1f44042edbe78ab868f81fe69134","semanticId":"aas-v1-web-test-public-semantic-audit-2026-07-17","semanticPath":"web-test.semantic.json"},{"fieldDigest":"sha256-5dffa62314d6210cbb414b42eea066026eb9bb9f0a300f67f7dd74c19b157379","fieldId":"api-deploy.fields-2026-07-17","fieldPath":"api-deploy.fields.json","selectorDigest":"sha256-47bb92d4dd37f8650b049626a2acca12b0b9a1f69e569cbfce4afc9b5dcdf43a","semanticDigest":"sha256-a974782da6acd6d6e926fcd03f400531b4322243df4a436ae8afa8dc7d11fa65","semanticId":"api-deploy.semantic-2026-07-17","semanticPath":"api-deploy.semantic.json"}]}
|