{"data":{"skill":{"slug":"nexaiguy-nex-site-trust-ext","name":"nex-site-trust-ext","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-site-trust-ext","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"4617684e-1694-4df6-a623-78adfe4cd517","skill_id":"291c1f41-4ce8-4e25-b906-0e207e1c0506","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:37775c12dd3e16bfaa44027ac5b71e767a5137d472fa261213753445bce2d8f9:dbbbc323154449fa212ab82363c490d2969582b8013a8acd8409fab38035dd65:736b696c6c732f6e657861696775792f6e65782d736974652d74727573742d657874:4e5194005c578454428eff5f25b7fa4a","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: the URLs are attribution links, and the footer contains no system reconnaissance commands. No evidence found of prompt injection, credential theft, or executable malicious behavior in the supplied guide. Only documentation is included, so extension behavior and security claims cannot be verified.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":85,"line_start":85}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":86,"audit_model":"codex","audited_at":"2026-11-02T11:41:51.747+00:00","created_at":"2026-11-02T18:06:09.55472+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:85:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":85,"severity":"low","line_start":85},{"id":"blocker:SKILL.md:85:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":85,"severity":"low","line_start":85}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains Markdown attribution and catalog links plus a disclosure that extension source is absent. No request or data transfer is instructed.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:85:hardcoded-url","reason":"Line 85 is an author attribution and paid catalog reference. These links do not execute code, transmit credentials, or instruct an external request.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:85:system-reconnaissance","reason":"The entire cited line contains attribution and a catalog URL. There are no commands or instructions to inspect the host, environment, or system configuration.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"37775c12dd3e16bfaa44027ac5b71e767a5137d472fa261213753445bce2d8f9","subject_tree_hash":"dbbbc323154449fa212ab82363c490d2969582b8013a8acd8409fab38035dd65","subject_plugin_path":"skills/nexaiguy/nex-site-trust-ext","audit_payload_hash":"4e5194005c578454428eff5f25b7fa4a","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"37775c12dd3e16bfaa44027ac5b71e767a5137d472fa261213753445bce2d8f9","treeHash":"dbbbc323154449fa212ab82363c490d2969582b8013a8acd8409fab38035dd65","pluginPath":"skills/nexaiguy/nex-site-trust-ext","auditPayloadHash":"4e5194005c578454428eff5f25b7fa4a"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-site-trust-ext/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}