{"data":{"skill":{"slug":"nexaiguy-nex-meeting-finder","name":"nex-meeting-finder","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-meeting-finder","status":"approved","author":"nexaiguy","authorVersion":"1.2","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"6bffab56-2090-42b7-9eb0-0120a8fa7744","skill_id":"f6619865-05dc-4dc9-a2af-2fa271b617b6","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:a4972aca41bf7d8a798a891bb79b593491b890b55f5b206e63d7a253de01a26e:cee7008387ada2472d7a674c923c069f972250e7e011de950c1df81803e8bebf:736b696c6c732f6e657861696775792f6e65782d6d656574696e672d66696e646572:fd5b53233549bb51ee337d179599fd74","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All ten static findings are false positives: Markdown backticks name files, and the URLs provide attribution or catalog references. No evidence found of executable commands, reconnaissance, data exfiltration, or prompt injection in the supplied guide. Extension source is absent, so its security and advertised behavior cannot be verified.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":58,"line_start":58},{"file":"SKILL.md","line_end":61,"line_start":61},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":63,"line_start":63},{"file":"SKILL.md","line_end":64,"line_start":64}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":35,"line_start":35},{"file":"SKILL.md","line_end":94,"line_start":94}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":95,"audit_model":"codex","audited_at":"2026-11-02T11:47:19.886+00:00","created_at":"2026-11-02T18:04:36.162142+00:00","static_findings":[{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"A complete `/extension` directory containing the manifest, content scripts, background workers, and ","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"I have generated the full Manifest V3 source code in `assets/extension/`.","category":"external_commands","line_end":58,"severity":"medium","line_start":58},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `manifest.json`: Configured with required permissions.","category":"external_commands","line_end":61,"severity":"medium","line_start":61},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `content.js`: Handles link detection and button injection.","category":"external_commands","line_end":62,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `platforms.js`: Definitions for Zoom, Meet, Teams, etc.","category":"external_commands","line_end":63,"severity":"medium","line_start":63},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `popup.html`: The UI for your meeting list.","category":"external_commands","line_end":64,"severity":"medium","line_start":64},{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:35:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by Nex AI. More skills and info at [nex-ai.be](https://nex-ai.be) and [slopsome.com](https://s","category":"network","line_end":35,"severity":"low","line_start":35},{"id":"network:SKILL.md:94:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":94,"severity":"low","line_start":94},{"id":"blocker:SKILL.md:94:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":94,"severity":"low","line_start":94}],"finding_verdicts":[{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The backticks format a directory name in descriptive Markdown. There is no shell command or execution instruction on this line.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","reason":"The example response formats an alleged output directory using Markdown backticks. It contains no executable shell or Ruby expression.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","reason":"The backticks format a manifest filename in a documentation list. They do not perform command substitution or invoke a process.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The backticks format a content-script filename in a documentation list. No script contents or executable commands appear on this line.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","reason":"The backticks format a platform-definition filename in descriptive Markdown. There is no shell execution or dynamic evaluation.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:64:ruby-shell-backtick-execution","reason":"The backticks format a popup filename in a documentation list. No command or execution mechanism is present.","verdict":"false_positive","confidence":1},{"id":"network:SKILL.md:14:hardcoded-url","reason":"The URLs are author and product attribution links in a blockquote. The text neither initiates network requests nor instructs transmission of user data.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:35:hardcoded-url","reason":"The URLs are informational links in an attribution sentence. No automated requests, downloads, or data transfers are specified.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:94:hardcoded-url","reason":"The footer links to the author and a paid catalog. It does not direct the assistant to fetch remote instructions or transmit information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:94:system-reconnaissance","reason":"The complete line contains only attribution and catalog URLs. No environment inspection, system enumeration, or reconnaissance command appears.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"a4972aca41bf7d8a798a891bb79b593491b890b55f5b206e63d7a253de01a26e","subject_tree_hash":"cee7008387ada2472d7a674c923c069f972250e7e011de950c1df81803e8bebf","subject_plugin_path":"skills/nexaiguy/nex-meeting-finder","audit_payload_hash":"fd5b53233549bb51ee337d179599fd74","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"a4972aca41bf7d8a798a891bb79b593491b890b55f5b206e63d7a253de01a26e","treeHash":"cee7008387ada2472d7a674c923c069f972250e7e011de950c1df81803e8bebf","pluginPath":"skills/nexaiguy/nex-meeting-finder","auditPayloadHash":"fd5b53233549bb51ee337d179599fd74"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-meeting-finder/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}