{"data":{"skill":{"slug":"nexaiguy-agent-ready-website-converter","name":"agent-ready-website-converter","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/agent-ready-website-converter","status":"approved","author":"nexaiguy","authorVersion":"1.2","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"b9bf87ea-4c4e-4728-9253-bfb1cb04fbd3","skill_id":"41ea5af6-34fb-4d9c-9542-27021edb0220","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:10cc4fbaa026097105afa8f9786001eff90500f6380d2b0beea202d3f31edd6b:c5eb5d587468152bc335ca2b05b447b637819bef04869a57ef4f333af2930cac:736b696c6c732f6e657861696775792f6167656e742d72656164792d776562736974652d636f6e766572746572:8b79d87d56f0f74523559bf4303a6bc1","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 11 static findings are false positives involving Markdown formatting, attribution links, or website schema terminology. No evidence found of command execution, exfiltration, host reconnaissance, or audit-directed prompt injection in SKILL.md. The package contains only documentation; its claimed Python pipeline, SSRF protection, and deterministic validation cannot be verified.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":35,"line_start":35},{"file":"SKILL.md","line_end":61,"line_start":61}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":97,"line_start":97}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":98,"audit_model":"codex","audited_at":"2026-11-02T12:10:37.178+00:00","created_at":"2026-11-02T17:00:49.058499+00:00","static_findings":[{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Generation:** Produces standards-compliant `json-ld.json`, a `product-feed.json`, and the emergi","category":"external_commands","line_end":25,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Formatting:** Creates an `llms.txt` policy file to define crawl rules for LLM-based agents.","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"The output is a ready-to-deploy `agent-ready/` directory containing all necessary metadata files and","category":"external_commands","line_end":35,"severity":"medium","line_start":35},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Pipeline complete. Created directory `/agent-ready/` containing:","category":"external_commands","line_end":61,"severity":"medium","line_start":61},{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:97:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":97,"severity":"low","line_start":97},{"id":"blocker:SKILL.md:3:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"description: 'Convert websites into agent-consumable formats with JSON-LD, product feeds, and .well-","category":"blocker","line_end":3,"severity":"low","line_start":3},{"id":"blocker:SKILL.md:31:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Standard prompts often struggle to generate perfectly valid JSON-LD or manage complex URL-to-JSON ex","category":"blocker","line_end":31,"severity":"low","line_start":31},{"id":"blocker:SKILL.md:41:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Generate valid JSON-LD for Organization and Product schemas","category":"blocker","line_end":41,"severity":"low","line_start":41},{"id":"blocker:SKILL.md:93:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"The skill uses deterministic schema generation and heuristic fallbacks to ensure that even if your H","category":"blocker","line_end":93,"severity":"low","line_start":93},{"id":"blocker:SKILL.md:97:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":97,"severity":"low","line_start":97}],"finding_verdicts":[{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"Backticks format output filenames in a Markdown bullet. No shell or Ruby execution is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"Backticks mark the llms.txt filename in descriptive prose. The line contains no executable command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:35:ruby-shell-backtick-execution","reason":"The backticks identify the proposed output directory in Markdown. They do not perform command substitution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","reason":"This is example result text with an inline directory path. It neither executes a command nor instructs an actual filesystem operation.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:14:hardcoded-url","reason":"The URLs are author attribution and public catalog links. The text does not instruct fetching them or sending data to them.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:97:hardcoded-url","reason":"These are promotional attribution links, not network request instructions. No transmission of website data or credentials is described.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:3:system-reconnaissance","reason":"The description discusses website metadata and Organization and Product schemas. It requests no host, account, process, or network inventory.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:31:system-reconnaissance","reason":"This paragraph describes website extraction and claimed SSRF protection. It contains no instruction to inspect the execution host or discover internal systems.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:41:system-reconnaissance","reason":"Organization and Product refer to JSON-LD website schemas. Generating these schemas is not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:93:system-reconnaissance","reason":"The text claims schema generation and SSRF protection for HTML extraction. No reconnaissance command or host discovery instruction appears.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:97:system-reconnaissance","reason":"The footer identifies the author and links to a public catalog. It does not collect system information.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"10cc4fbaa026097105afa8f9786001eff90500f6380d2b0beea202d3f31edd6b","subject_tree_hash":"c5eb5d587468152bc335ca2b05b447b637819bef04869a57ef4f333af2930cac","subject_plugin_path":"skills/nexaiguy/agent-ready-website-converter","audit_payload_hash":"8b79d87d56f0f74523559bf4303a6bc1","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"10cc4fbaa026097105afa8f9786001eff90500f6380d2b0beea202d3f31edd6b","treeHash":"c5eb5d587468152bc335ca2b05b447b637819bef04869a57ef4f333af2930cac","pluginPath":"skills/nexaiguy/agent-ready-website-converter","auditPayloadHash":"8b79d87d56f0f74523559bf4303a6bc1"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-agent-ready-website-converter/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}