{"data":{"skill":{"slug":"nexaiguy-nex-grant-writer-us","name":"nex-grant-writer-us","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-grant-writer-us","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"f5f3b1b1-1aa8-4415-8759-ebf2873d77d9","skill_id":"0f51c727-8f86-4158-95b5-7ecb8748b571","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:6a3cad500a5a719a3cae638df0e647bdb1b580a77e200aa2edbbdff57e7c1a0b:017ca7ad7ef92cf4481c74beae8fcffbeb40d19907c2e6667494114bb912f59e:736b696c6c732f6e657861696775792f6e65782d6772616e742d7772697465722d7573:587e3f4747b625ce61f0e6fea890a3be","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: the URLs provide attribution and catalog links, and the footer contains no system reconnaissance. No evidence found of prompt injection, data exfiltration, or executable commands in the reviewed guide.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":64,"line_start":64}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":65,"audit_model":"codex","audited_at":"2026-11-02T11:52:19.16+00:00","created_at":"2026-11-02T17:05:52.085943+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:64:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":64,"severity":"low","line_start":64},{"id":"blocker:SKILL.md:64:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":64,"severity":"low","line_start":64}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains publisher attribution and a link to the original skill listing. It does not instruct network execution or data transmission.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:64:hardcoded-url","reason":"Line 64 links to the publisher and its paid catalog as footer attribution. No instruction sends user information to either destination.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:64:system-reconnaissance","reason":"Line 64 is a publisher footer with catalog links. It contains no command or instruction to inspect the system, environment, or files.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"6a3cad500a5a719a3cae638df0e647bdb1b580a77e200aa2edbbdff57e7c1a0b","subject_tree_hash":"017ca7ad7ef92cf4481c74beae8fcffbeb40d19907c2e6667494114bb912f59e","subject_plugin_path":"skills/nexaiguy/nex-grant-writer-us","audit_payload_hash":"587e3f4747b625ce61f0e6fea890a3be","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"6a3cad500a5a719a3cae638df0e647bdb1b580a77e200aa2edbbdff57e7c1a0b","treeHash":"017ca7ad7ef92cf4481c74beae8fcffbeb40d19907c2e6667494114bb912f59e","pluginPath":"skills/nexaiguy/nex-grant-writer-us","auditPayloadHash":"587e3f4747b625ce61f0e6fea890a3be"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-grant-writer-us/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}