{"data":{"skill":{"slug":"nexaiguy-nex-trucking-compliance","name":"nex-trucking-compliance","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-trucking-compliance","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"09506c05-06cd-4b0e-9c73-140debd139bf","skill_id":"563d6bd1-5617-439e-811c-cd80489c3bbe","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:ef6755949b43b50fd1b035f806a49f955ff50986e934b0f280853abbfb99b312:8c40064ef7f2c698ae55c45c060fc9f4217f59685389c1db1c9af48f7fb9c674:736b696c6c732f6e657861696775792f6e65782d747275636b696e672d636f6d706c69616e6365:ccdb94c0910c3f589f4126227c6ebab4","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All four static findings are false positives: attribution links and ordinary trucking compliance text do not show reconnaissance or data transmission. No evidence found of malicious instructions, credential access, or exfiltration in SKILL.md. This package contains guidance only; regulatory claims and promised automation require independent verification.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":81,"line_start":81}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":82,"audit_model":"codex","audited_at":"2026-11-02T11:49:20.125+00:00","created_at":"2026-11-02T18:06:32.676526+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:81:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":81,"severity":"low","line_start":81},{"id":"blocker:SKILL.md:36:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Calculating quarterly IFTA returns to avoid the 10 percent late filing penalty.","category":"blocker","line_end":36,"severity":"low","line_start":36},{"id":"blocker:SKILL.md:81:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":81,"severity":"low","line_start":81}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 contains Markdown attribution and a link to the skill listing. It does not instruct network requests or transmit user data.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:81:hardcoded-url","reason":"Line 81 links to the author and a paid catalog as promotional attribution. No instruction sends records, credentials, or other data to these destinations.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:36:system-reconnaissance","reason":"Line 36 describes quarterly IFTA returns and a claimed late filing penalty. It contains no command or instruction to inspect the host system.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:81:system-reconnaissance","reason":"Line 81 is author attribution and a catalog URL, not an instruction to enumerate system information. The surrounding footer contains no reconnaissance behavior.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"ef6755949b43b50fd1b035f806a49f955ff50986e934b0f280853abbfb99b312","subject_tree_hash":"8c40064ef7f2c698ae55c45c060fc9f4217f59685389c1db1c9af48f7fb9c674","subject_plugin_path":"skills/nexaiguy/nex-trucking-compliance","audit_payload_hash":"ccdb94c0910c3f589f4126227c6ebab4","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"ef6755949b43b50fd1b035f806a49f955ff50986e934b0f280853abbfb99b312","treeHash":"8c40064ef7f2c698ae55c45c060fc9f4217f59685389c1db1c9af48f7fb9c674","pluginPath":"skills/nexaiguy/nex-trucking-compliance","auditPayloadHash":"ccdb94c0910c3f589f4126227c6ebab4"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-trucking-compliance/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}