{"data":{"skill":{"slug":"nexaiguy-nex-einvoice-es","name":"nex-einvoice-es","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-einvoice-es","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"dabacd5a-5f12-42b0-a2ad-e42be9857bbc","skill_id":"d728d6fd-2906-498e-90c1-c116adc693c8","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:d67860f55c837385fdbea595f3e39f1ef0703e2da5038a27e959e88b99964688:744436e3a5e2b2309655eda21cc39e9a3d504f9acac728388c9210088a95f2c7:736b696c6c732f6e657861696775792f6e65782d65696e766f6963652d6573:89066c599411aaa686c0e64614f313c8","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: the URLs provide attribution and catalog links, and the footer contains no system reconnaissance. No evidence found of prompt injection, credential access, executable commands, or data exfiltration in the reviewed file. Regulatory claims require independent verification; this security review does not validate legal accuracy.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":85,"line_start":85}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":86,"audit_model":"codex","audited_at":"2026-11-02T12:28:15.759+00:00","created_at":"2026-11-02T17:03:53.338549+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:85:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":85,"severity":"low","line_start":85},{"id":"blocker:SKILL.md:85:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":85,"severity":"low","line_start":85}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains ordinary Markdown attribution and a public catalog link. It does not instruct the agent to fetch content or transmit data.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:85:hardcoded-url","reason":"Line 85 links to the author website and public catalog. There is no request, upload instruction, or sensitive data embedded in these links.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:85:system-reconnaissance","reason":"The complete line is an attribution footer with catalog links. It contains no commands or instructions to inspect the host, environment, or system configuration.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"d67860f55c837385fdbea595f3e39f1ef0703e2da5038a27e959e88b99964688","subject_tree_hash":"744436e3a5e2b2309655eda21cc39e9a3d504f9acac728388c9210088a95f2c7","subject_plugin_path":"skills/nexaiguy/nex-einvoice-es","audit_payload_hash":"89066c599411aaa686c0e64614f313c8","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"d67860f55c837385fdbea595f3e39f1ef0703e2da5038a27e959e88b99964688","treeHash":"744436e3a5e2b2309655eda21cc39e9a3d504f9acac728388c9210088a95f2c7","pluginPath":"skills/nexaiguy/nex-einvoice-es","auditPayloadHash":"89066c599411aaa686c0e64614f313c8"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-einvoice-es/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}