{"data":{"skill":{"slug":"nexaiguy-nex-component-library-formatter","name":"nex-component-library-formatter","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-component-library-formatter","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"9f4b67bc-52dd-43cc-9f62-775d83ac4a9a","skill_id":"c140e9d0-a2a7-4adb-820a-9e6e3aea3d28","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:b2df29be49e79097af41fb406dbd89bd23e4523b5ffed775720162332cdcade8:ddc9c55b172985c0051ef3642d71b483a74978e5cc3e29e51b44e212d68689ee:736b696c6c732f6e657861696775792f6e65782d636f6d706f6e656e742d6c6962726172792d666f726d6174746572:f1b8ce4e30e53653d342066798b550f8","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: the URLs provide attribution and catalog references, and the footer contains no system reconnaissance instructions. No evidence found of prompt injection, data exfiltration, or malicious execution in SKILL.md. The package contains guidance only, not the advertised validation engine.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":86,"line_start":86}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":87,"audit_model":"codex","audited_at":"2026-11-02T12:17:22.248+00:00","created_at":"2026-11-02T17:03:16.968043+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:86:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":86,"severity":"low","line_start":86},{"id":"blocker:SKILL.md:86:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":86,"severity":"low","line_start":86}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains attribution and a public catalog link, with no request to transmit component data or retrieve executable content. The surrounding text explicitly identifies this package as a public guide.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:86:hardcoded-url","reason":"Line 86 links to the publisher and paid catalog as promotional references. It contains no network command, data submission instruction, or credential collection request.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:86:system-reconnaissance","reason":"The complete footer at line 86 contains only publisher attribution and a catalog URL. It does not instruct system inspection, host enumeration, or collection of environment information.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"b2df29be49e79097af41fb406dbd89bd23e4523b5ffed775720162332cdcade8","subject_tree_hash":"ddc9c55b172985c0051ef3642d71b483a74978e5cc3e29e51b44e212d68689ee","subject_plugin_path":"skills/nexaiguy/nex-component-library-formatter","audit_payload_hash":"f1b8ce4e30e53653d342066798b550f8","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"b2df29be49e79097af41fb406dbd89bd23e4523b5ffed775720162332cdcade8","treeHash":"ddc9c55b172985c0051ef3642d71b483a74978e5cc3e29e51b44e212d68689ee","pluginPath":"skills/nexaiguy/nex-component-library-formatter","auditPayloadHash":"f1b8ce4e30e53653d342066798b550f8"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-component-library-formatter/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}