{"data":{"skill":{"slug":"nexaiguy-nex-einvoice-pl","name":"nex-einvoice-pl","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-einvoice-pl","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"9af83e61-b434-4fb1-9070-53f5c066e374","skill_id":"24d57bab-cc89-4c71-b6fe-fc67c2dd5b35","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:c31026efe7b71ae29402c492799b2b5b6da15e4d1d6b26fc886f4082a515d3eb:b93e663cbe7a21fd49df5b6eccf9de4e141a6098d3c7ee4e47787a8b1f45b518:736b696c6c732f6e657861696775792f6e65782d65696e766f6963652d706c:7c8af5cc7163a31a8f1f92ce72d52bd7","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: the URLs are attribution links, and the footer contains no reconnaissance instructions. No evidence found of credential collection, data exfiltration, executable commands, or prompt injection in the reviewed SKILL.md. The package contains a written guide rather than executable integration tooling.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":85,"line_start":85}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":86,"audit_model":"codex","audited_at":"2026-11-02T12:33:44.793+00:00","created_at":"2026-11-02T17:04:11.719628+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:85:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":85,"severity":"low","line_start":85},{"id":"blocker:SKILL.md:85:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":85,"severity":"low","line_start":85}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 links to the author website and the skill catalog page as attribution. It does not instruct an agent to fetch content or transmit data.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:85:hardcoded-url","reason":"Line 85 contains author attribution and a paid catalog link. There is no network command, credential request, or instruction to send invoice data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:85:system-reconnaissance","reason":"The entire line is an attribution footer with website links. It contains no system inspection command or request to discover local resources.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"c31026efe7b71ae29402c492799b2b5b6da15e4d1d6b26fc886f4082a515d3eb","subject_tree_hash":"b93e663cbe7a21fd49df5b6eccf9de4e141a6098d3c7ee4e47787a8b1f45b518","subject_plugin_path":"skills/nexaiguy/nex-einvoice-pl","audit_payload_hash":"7c8af5cc7163a31a8f1f92ce72d52bd7","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"c31026efe7b71ae29402c492799b2b5b6da15e4d1d6b26fc886f4082a515d3eb","treeHash":"b93e663cbe7a21fd49df5b6eccf9de4e141a6098d3c7ee4e47787a8b1f45b518","pluginPath":"skills/nexaiguy/nex-einvoice-pl","auditPayloadHash":"7c8af5cc7163a31a8f1f92ce72d52bd7"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-einvoice-pl/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}