{"data":{"skill":{"slug":"nexaiguy-nex-einvoice-de","name":"nex-einvoice-de","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-einvoice-de","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"88f0b38e-30d8-4116-9cea-459e1eef98d8","skill_id":"cdcd4513-8f0a-46fc-a2ed-fe60f84aea4b","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:92bcff69d47a68331cee9a61be01d7f4b40f127f17cad4d280ecf59f98fac311:11e6a0ac441a365f4589b3d127f58062cc054ee073e90dcc866fd5400b85a425:736b696c6c732f6e657861696775792f6e65782d65696e766f6963652d6465:f46a7487ce72c30ed06ceab5eccb886e","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: two attribution links and a footer incorrectly flagged as system reconnaissance. No evidence found of exfiltration, system inspection, or prompt injection in the reviewed guide. The linked sites and absent package components were not evaluated.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":84,"line_start":84}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":85,"audit_model":"codex","audited_at":"2026-11-02T12:25:16.079+00:00","created_at":"2026-11-02T17:03:44.183246+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:84:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":84,"severity":"low","line_start":84},{"id":"blocker:SKILL.md:84:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":84,"severity":"low","line_start":84}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains Markdown attribution and a public product-page link. It does not instruct network access or transmit invoice data or credentials.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:84:hardcoded-url","reason":"Line 84 links to the publisher and its paid catalog as footer attribution. No request execution, sensitive payload, or upload instruction appears.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:84:system-reconnaissance","reason":"The complete line is publisher attribution and a catalog URL. It contains no commands or instructions to inspect the host, environment, users, or system configuration.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"92bcff69d47a68331cee9a61be01d7f4b40f127f17cad4d280ecf59f98fac311","subject_tree_hash":"11e6a0ac441a365f4589b3d127f58062cc054ee073e90dcc866fd5400b85a425","subject_plugin_path":"skills/nexaiguy/nex-einvoice-de","audit_payload_hash":"f46a7487ce72c30ed06ceab5eccb886e","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"92bcff69d47a68331cee9a61be01d7f4b40f127f17cad4d280ecf59f98fac311","treeHash":"11e6a0ac441a365f4589b3d127f58062cc054ee073e90dcc866fd5400b85a425","pluginPath":"skills/nexaiguy/nex-einvoice-de","auditPayloadHash":"f46a7487ce72c30ed06ceab5eccb886e"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-einvoice-de/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}