{"data":{"skill":{"slug":"nexaiguy-nex-prompt-booster-ext","name":"nex-prompt-booster-ext","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-prompt-booster-ext","status":"approved","author":"nexaiguy","authorVersion":"1.3","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"ea452bc0-0013-48ca-88e7-c891eb684bdc","skill_id":"5fbab0b5-e28e-4126-b6d1-d2fff0f0aa86","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:8dfcc14245b0c7f35fa2ce42936b222522d358bd90d8cb8bb3a0c62a1fddd7ba:00be21b36088420e5f2a8b25b61d72e193534ffaf724d88a7ad25aebe3f2de99:736b696c6c732f6e657861696775792f6e65782d70726f6d70742d626f6f737465722d657874:014112b1df9a6c6748304f9d100ed8b1","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All nine static findings are false positives involving Markdown formatting, promotional links, or ordinary example text. No evidence found of malicious instructions, executable commands, or data exfiltration in the supplied guide. Extension source is absent, so browser behavior and privacy claims cannot be verified.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":42,"line_start":42},{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":45,"line_start":45}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":75,"line_start":75}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":76,"audit_model":"codex","audited_at":"2026-11-02T12:02:14.66+00:00","created_at":"2026-11-02T18:05:14.903542+00:00","static_findings":[{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `index.html`: Main site with te-koop/te-huur filtering & property modals.","category":"external_commands","line_end":42,"severity":"medium","line_start":42},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `admin.html`: Firebase-powered listing manager.","category":"external_commands","line_end":43,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `firestore.rules`: Secure ACLs for property data.","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `RealEstateAgent` Schema: Validated for Gent, BE locale.","category":"external_commands","line_end":45,"severity":"medium","line_start":45},{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:18:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by Nex AI. More skills and info at https://nex-ai.be and https://slopsome.com.","category":"network","line_end":18,"severity":"low","line_start":18},{"id":"network:SKILL.md:75:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":75,"severity":"low","line_start":75},{"id":"blocker:SKILL.md:37:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Build a premium real estate site for 'Immo Gent'. They need a listing grid with filters for buy/rent","category":"blocker","line_end":37,"severity":"low","line_start":37},{"id":"blocker:SKILL.md:75:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":75,"severity":"low","line_start":75}],"finding_verdicts":[{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"Backticks format an example HTML filename in a Markdown list. This line contains no executable shell or Ruby code.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"Backticks format an example admin page filename, followed by a descriptive label. No process execution or command substitution occurs.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"The line names an example Firestore rules file using Markdown code formatting. It neither executes commands nor supplies executable rules.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"The backticks highlight a structured data type in prose, not a shell expression. No executable context exists in this Markdown example.","verdict":"false_positive","confidence":1},{"id":"network:SKILL.md:14:hardcoded-url","reason":"The URLs are attribution and product documentation links in a blockquote. The line contains no network request, payload, or instruction to transmit data.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:18:hardcoded-url","reason":"These are promotional website references in plain prose. They do not initiate requests or direct the agent to send user information.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:75:hardcoded-url","reason":"The footer links identify the author and an external catalog. No automatic retrieval, credential handling, or data upload is specified.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:37:system-reconnaissance","reason":"The text requests a real estate website with property filters and a Firebase administration panel. It contains no system inspection or reconnaissance instructions.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:75:system-reconnaissance","reason":"This line is an author attribution and catalog link. It does not enumerate system information, inspect the environment, or request privileged access.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"8dfcc14245b0c7f35fa2ce42936b222522d358bd90d8cb8bb3a0c62a1fddd7ba","subject_tree_hash":"00be21b36088420e5f2a8b25b61d72e193534ffaf724d88a7ad25aebe3f2de99","subject_plugin_path":"skills/nexaiguy/nex-prompt-booster-ext","audit_payload_hash":"014112b1df9a6c6748304f9d100ed8b1","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"8dfcc14245b0c7f35fa2ce42936b222522d358bd90d8cb8bb3a0c62a1fddd7ba","treeHash":"00be21b36088420e5f2a8b25b61d72e193534ffaf724d88a7ad25aebe3f2de99","pluginPath":"skills/nexaiguy/nex-prompt-booster-ext","auditPayloadHash":"014112b1df9a6c6748304f9d100ed8b1"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-prompt-booster-ext/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}