{
  "skill_name": "apewisdom",
  "skill_path": "./skills/clawhub-apewisdom",
  "skill_directory": "./skills/clawhub-apewisdom",
  "is_safe": false,
  "max_severity": "HIGH",
  "findings_count": 4,
  "findings": [
    {
      "id": "MANIFEST_MISSING_LICENSE_c5ae9be793",
      "rule_id": "MANIFEST_MISSING_LICENSE",
      "category": "policy_violation",
      "severity": "LOW",
      "title": "Skill does not specify a license",
      "description": "Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": null,
      "remediation": "Add 'license' field to SKILL.md frontmatter (e.g., MIT, Apache-2.0)",
      "analyzer": "static",
      "metadata": {
        "meta_reviewed": true
      }
    },
    {
      "id": "DATA_EXFIL_NETWORK_REQUESTS_cc351bbafd",
      "rule_id": "DATA_EXFIL_NETWORK_REQUESTS",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "HTTP client library imports that enable external communication",
      "description": "Pattern detected: import requests",
      "file_path": "scripts/scan_reddit.py",
      "line_number": 2,
      "snippet": "import requests",
      "remediation": "Ensure network access is necessary and documented. Review all URLs",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "import\\s+requests",
        "matched_text": "import requests",
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "scanner_category": "SECURITY VIOLATION",
        "meta_reviewed": true
      }
    },
    {
      "id": "TOOL_MISMATCH_NETWORK_21a2235db7",
      "rule_id": "TOOL_ABUSE_UNDECLARED_NETWORK",
      "category": "unauthorized_tool_use",
      "severity": "MEDIUM",
      "title": "Undeclared network usage",
      "description": "Skill code uses network libraries but doesn't declare network requirement",
      "file_path": null,
      "line_number": null,
      "snippet": null,
      "remediation": "Declare network usage in compatibility field or remove network calls",
      "analyzer": "static",
      "metadata": {
        "meta_reviewed": true
      }
    },
    {
      "id": "SUSPICIOUS_URL_97d4d18496",
      "rule_id": "BEHAVIOR_SUSPICIOUS_URL",
      "category": "data_exfiltration",
      "severity": "HIGH",
      "title": "Suspicious URL detected: https://apewisdom.io/api/v1.0/filter",
      "description": "Script contains suspicious URL that may be used for data exfiltration",
      "file_path": "skills/clawhub-apewisdom/scripts/scan_reddit.py",
      "line_number": null,
      "snippet": null,
      "remediation": "Review URL and ensure it's legitimate and documented",
      "analyzer": "behavioral",
      "metadata": {
        "url": "https://apewisdom.io/api/v1.0/filter",
        "meta_reviewed": true
      }
    }
  ],
  "scan_duration_seconds": 0.593024730682373,
  "duration_ms": 593,
  "analyzers_used": [
    "static_analyzer",
    "behavioral_analyzer",
    "llm_analyzer",
    "trigger_analyzer",
    "meta_analyzer"
  ],
  "timestamp": "2026-02-03T16:14:59.104342"
}