{
  "schema_version": "deerflow.skill-review-waivers.v1",
  "waivers": [
    {
      "package": "skills/public/skill-creator",
      "source": "skillscan",
      "rule_id": "python-subprocess",
      "path": "scripts/improve_description.py",
      "line": 35,
      "evidence": "subprocess.run",
      "file_sha256": "sha256:87d864570220b699fac52da309d2d6efdb060647bfebc74f768128e646accf80",
      "preapproved_file_sha256s": [
        "sha256:2877bde08bf3f437b9dae3d57585a0840b9b1024736d2e5c6c657b71899269d0"
      ],
      "reason": "Required Claude CLI invocation uses a fixed executable, an argv list, prompt input over stdin, and shell=False.",
      "expires_on": "2027-02-28"
    },
    {
      "package": "skills/public/skill-creator",
      "source": "skillscan",
      "rule_id": "python-subprocess",
      "path": "scripts/run_eval.py",
      "line": 85,
      "evidence": "subprocess.Popen",
      "file_sha256": "sha256:43e3b8f80dbf69c343967ba77e268fae991d9fa3ed68b32a0ff02532cd48657f",
      "preapproved_file_sha256s": [
        "sha256:ea2521ba41c8fd16b2900758c890bb6c6d2b4b01da10b4a860facb8587ed0bde"
      ],
      "reason": "Required Claude CLI invocation uses a fixed executable, an argv list, captured output streams, and shell=False.",
      "expires_on": "2027-02-28"
    }
  ]
}