{"data":{"skill":{"slug":"nexaiguy-nex-hipaa-small-practice","name":"nex-hipaa-small-practice","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-hipaa-small-practice","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"d43cd551-2224-437e-be12-d07fde0c8016","skill_id":"fe77e504-02df-4d6e-b6f1-904e0c6c769f","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:0a2ea3c547deb28faf3741401e5727a9e454b47762d6e677735341d98e2ea636:78d1d47b626542f40937b81f29b378a2f599622ec5a0835ce0cbc8c2941049ef:736b696c6c732f6e657861696775792f6e65782d68697061612d736d616c6c2d7072616374696365:7a01f7c238f3112a901c03f1a396ebf3","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Both URL findings are informational attribution or catalog links, with no instructions to transmit data. The reconnaissance finding matches promotional text, not system inspection. No evidence found of prompt injection, data exfiltration, or other malicious instructions in the supplied guide.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":68,"line_start":68}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":69,"audit_model":"codex","audited_at":"2026-11-02T11:54:53.342+00:00","created_at":"2026-11-02T17:06:01.306692+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:68:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":68,"severity":"low","line_start":68},{"id":"blocker:SKILL.md:68:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":68,"severity":"low","line_start":68}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 links to the author and public skill listing, and explains package limitations. It neither requests network execution nor directs data transmission.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:68:hardcoded-url","reason":"Line 68 contains author attribution and a catalog link. These informational links include no upload instructions, executable requests, or sensitive data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:68:system-reconnaissance","reason":"The entire line is promotional attribution with website links. It contains no commands or instructions to inspect the host, environment, files, or credentials.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"0a2ea3c547deb28faf3741401e5727a9e454b47762d6e677735341d98e2ea636","subject_tree_hash":"78d1d47b626542f40937b81f29b378a2f599622ec5a0835ce0cbc8c2941049ef","subject_plugin_path":"skills/nexaiguy/nex-hipaa-small-practice","audit_payload_hash":"7a01f7c238f3112a901c03f1a396ebf3","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"0a2ea3c547deb28faf3741401e5727a9e454b47762d6e677735341d98e2ea636","treeHash":"78d1d47b626542f40937b81f29b378a2f599622ec5a0835ce0cbc8c2941049ef","pluginPath":"skills/nexaiguy/nex-hipaa-small-practice","auditPayloadHash":"7a01f7c238f3112a901c03f1a396ebf3"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-hipaa-small-practice/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}