{"data":{"skill":{"slug":"nexaiguy-nex-overheidsopdrachten-tender","name":"nex-overheidsopdrachten-tender","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-overheidsopdrachten-tender","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"1975bd37-197e-4c77-9024-cafd1f860b70","skill_id":"dc086280-56e0-47b4-9628-5177b84e958e","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:5cea8b9826cd785b9edec33ce0d6523d7aef39db38596a0e47f195c47dbc6fc3:20c820c7523e03add08b395b4b79abcdbc9d7041305204f64deae944077a49d0:736b696c6c732f6e657861696775792f6e65782d6f76657268656964736f70647261636874656e2d74656e646572:9046a4ee53c65e96858aca9a3463a7d8","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All four static findings are false positives: the URLs are attribution links, and the reconnaissance matches contain procurement criteria or promotional text. No evidence found of prompt injection, credential access, exfiltration, or executable commands in the reviewed guide. The guide claims current procurement thresholds but supplies no threshold table or update mechanism.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":70,"line_start":70}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":71,"audit_model":"codex","audited_at":"2026-11-02T11:56:11.163+00:00","created_at":"2026-11-02T18:04:59.449423+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:70:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":70,"severity":"low","line_start":70},{"id":"blocker:SKILL.md:51:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Gunningscriteria:** Prijs (50%), Plan van Aanpak (30%), Duurzaamheid (20%).","category":"blocker","line_end":51,"severity":"low","line_start":51},{"id":"blocker:SKILL.md:70:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":70,"severity":"low","line_start":70}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains author and marketplace attribution links and states that package scripts and templates are absent. No request or data transmission is instructed.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:70:hardcoded-url","reason":"Line 70 links to the author website and marketplace catalog as attribution. It contains no instruction to upload tender documents or other data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:51:system-reconnaissance","reason":"Line 51 lists example award criteria and percentage weights for price, approach, and sustainability. It does not inspect a system or request host information.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:70:system-reconnaissance","reason":"Line 70 is a promotional footer with public website links. No system enumeration, environment inspection, or reconnaissance instruction appears there.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"5cea8b9826cd785b9edec33ce0d6523d7aef39db38596a0e47f195c47dbc6fc3","subject_tree_hash":"20c820c7523e03add08b395b4b79abcdbc9d7041305204f64deae944077a49d0","subject_plugin_path":"skills/nexaiguy/nex-overheidsopdrachten-tender","audit_payload_hash":"9046a4ee53c65e96858aca9a3463a7d8","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"5cea8b9826cd785b9edec33ce0d6523d7aef39db38596a0e47f195c47dbc6fc3","treeHash":"20c820c7523e03add08b395b4b79abcdbc9d7041305204f64deae944077a49d0","pluginPath":"skills/nexaiguy/nex-overheidsopdrachten-tender","auditPayloadHash":"9046a4ee53c65e96858aca9a3463a7d8"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-overheidsopdrachten-tender/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}