{"data":{"skill":{"slug":"nexaiguy-nex-single-section-html","name":"nex-single-section-html","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-single-section-html","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"0783dc52-d0f4-47e2-8a32-20b2d206c4e5","skill_id":"a708cb9c-9562-44bf-bae5-a98ade6cf1e8","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:ba9657eb6db7a189fcd4d7dd61ad54f12ee3838b0eec8747f6006be76041e5e8:6f03b99e2763e06ee031e864a43be4496c4ad3537c68b9f13c73070f52e4d068:736b696c6c732f6e657861696775792f6e65782d73696e676c652d73656374696f6e2d68746d6c:41ca7128aa26d81ca08b95d3de397784","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All five static findings are false positives: the URLs are attribution links, and the flagged prose contains no system reconnaissance instructions. No evidence found of credential access, data exfiltration, command execution, or prompt injection in the reviewed guide. This assessment covers only SKILL.md, not absent package assets or linked websites.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":80,"line_start":80}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":81,"audit_model":"codex","audited_at":"2026-11-02T11:39:21.57+00:00","created_at":"2026-11-02T18:06:01.695376+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:80:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":80,"severity":"low","line_start":80},{"id":"blocker:SKILL.md:3:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"description: 'Generate a zero-dependency, single-file HTML hero section for rapid prototyping and pl","category":"blocker","line_end":3,"severity":"low","line_start":3},{"id":"blocker:SKILL.md:24:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Uses a placeholder-driven structure for rapid content replacement.","category":"blocker","line_end":24,"severity":"low","line_start":24},{"id":"blocker:SKILL.md:80:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":80,"severity":"low","line_start":80}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains Markdown attribution and a source-guide link, not a network operation. It does not instruct the agent to transmit data or download dependencies.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:80:hardcoded-url","reason":"Line 80 links to the author and a paid catalog as promotional references. No request execution, payload, or instruction to send user data appears.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:3:system-reconnaissance","reason":"The frontmatter description concerns HTML hero generation, prototyping, and domain placeholders. It contains no instruction to inspect the host, enumerate resources, or collect system information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:24:system-reconnaissance","reason":"The phrase 'placeholder-driven structure' describes replacing webpage content. It does not request environment discovery or system inspection.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:80:system-reconnaissance","reason":"The footer provides author attribution and a catalog link. No host enumeration, reconnaissance command, or instruction to inspect local resources appears.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"ba9657eb6db7a189fcd4d7dd61ad54f12ee3838b0eec8747f6006be76041e5e8","subject_tree_hash":"6f03b99e2763e06ee031e864a43be4496c4ad3537c68b9f13c73070f52e4d068","subject_plugin_path":"skills/nexaiguy/nex-single-section-html","audit_payload_hash":"41ca7128aa26d81ca08b95d3de397784","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"ba9657eb6db7a189fcd4d7dd61ad54f12ee3838b0eec8747f6006be76041e5e8","treeHash":"6f03b99e2763e06ee031e864a43be4496c4ad3537c68b9f13c73070f52e4d068","pluginPath":"skills/nexaiguy/nex-single-section-html","auditPayloadHash":"41ca7128aa26d81ca08b95d3de397784"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-single-section-html/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}