{"data":{"skill":{"slug":"nexaiguy-nex-one-sector-classifier","name":"nex-one-sector-classifier","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-one-sector-classifier","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"b95e6959-bdbd-4f52-81f8-a4070f6ac18e","skill_id":"77a44e1a-d4da-46a2-afbc-b3e892ca3fb8","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:f2736fbde7c11e8beb3332b48deec287b3853250b29947cedb750005afd0b4f4:b1acc16f6dfec109c0f658502043757c9785793239ae37654cece61f10c285be:736b696c6c732f6e657861696775792f6e65782d6f6e652d736563746f722d636c6173736966696572:774904369f9f6f83d38ef72fa29139f1","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All four static findings are false positives: attribution links and ordinary FAQ text do not demonstrate network execution or system reconnaissance. No evidence found of prompt injection, credential access, or data exfiltration in SKILL.md. The package contains only a public guide, so advertised script and pipeline behavior cannot be verified.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":64,"line_start":64}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":65,"audit_model":"codex","audited_at":"2026-11-02T11:53:26.515+00:00","created_at":"2026-11-02T18:04:51.665463+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:64:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":64,"severity":"low","line_start":64},{"id":"blocker:SKILL.md:54:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"### What is the difference between this and the paid version?","category":"blocker","line_end":54,"severity":"low","line_start":54},{"id":"blocker:SKILL.md:64:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":64,"severity":"low","line_start":64}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains Markdown attribution and catalog links, not executable network requests. No instruction sends business data or credentials to these destinations.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:64:hardcoded-url","reason":"Line 64 credits the author and links to a creator catalog. It contains no request execution, upload instruction, or data transmission.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:54:system-reconnaissance","reason":"Line 54 is a FAQ heading comparing free and paid versions. It contains no command or instruction to inspect the host system.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:64:system-reconnaissance","reason":"Line 64 is author attribution and a marketplace link, not a system discovery operation. No host inspection or environment enumeration is requested.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"f2736fbde7c11e8beb3332b48deec287b3853250b29947cedb750005afd0b4f4","subject_tree_hash":"b1acc16f6dfec109c0f658502043757c9785793239ae37654cece61f10c285be","subject_plugin_path":"skills/nexaiguy/nex-one-sector-classifier","audit_payload_hash":"774904369f9f6f83d38ef72fa29139f1","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"f2736fbde7c11e8beb3332b48deec287b3853250b29947cedb750005afd0b4f4","treeHash":"b1acc16f6dfec109c0f658502043757c9785793239ae37654cece61f10c285be","pluginPath":"skills/nexaiguy/nex-one-sector-classifier","auditPayloadHash":"774904369f9f6f83d38ef72fa29139f1"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-one-sector-classifier/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}