{"data":{"skill":{"slug":"nexaiguy-nex-webshop-compliance-eu","name":"nex-webshop-compliance-eu","icon":"📦","repo":"https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/nex-webshop-compliance-eu","status":"approved","author":"nexaiguy","authorVersion":"1.0","skillstoreRevision":1,"license":"MIT"},"licenseCorrection":null,"audit":{"id":"70e0890d-0cca-4fa7-b6f6-db5ceda6ae10","skill_id":"9bf220ca-aacf-486a-a92f-01794921a352","version":1,"content_hash":"v3:3ddfdca559084abffbfdd188f2ba14b597dcfd9c:aa72d5de6ad61de4b5fab7058bba227b0371ee66e3fc26437ee6209ca5f31daf:db024b6736187fa18beba29f151fd3b78119aa582b4eb35ab756541a55b612cb:736b696c6c732f6e657861696775792f6e65782d77656273686f702d636f6d706c69616e63652d6575:a973c716a6cc4345c98b2d524a413766","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All three static findings are false positives: the flagged URLs are attribution and catalog references, and the footer contains no system reconnaissance. The reviewed file is a public guidance document without bundled scripts or instructions to transmit data. No evidence found of prompt injection, credential access, or data exfiltration.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":77,"line_start":77}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":78,"audit_model":"codex","audited_at":"2026-11-02T12:21:48.446+00:00","created_at":"2026-11-02T18:07:49.747044+00:00","static_findings":[{"id":"network:SKILL.md:14:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Free skill by [Nex AI](https://nex-ai.be). This file is the public guide from [Agensi](https://www","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:SKILL.md:77:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"network","line_end":77,"severity":"low","line_start":77},{"id":"blocker:SKILL.md:77:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Built by [Nex AI](https://nex-ai.be). More skills, including the paid catalog: https://www.agensi.io","category":"blocker","line_end":77,"severity":"low","line_start":77}],"finding_verdicts":[{"id":"network:SKILL.md:14:hardcoded-url","reason":"Line 14 links to the author and the public skill listing as attribution. It contains no request instruction, executable network operation, or data transmission.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:77:hardcoded-url","reason":"Line 77 contains author attribution and a paid catalog link. These references do not instruct the agent to contact either domain or send user data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:77:system-reconnaissance","reason":"The complete line is an attribution footer with website links. It contains no command or instruction to inspect the host, environment, files, or processes.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","subject_content_hash":"aa72d5de6ad61de4b5fab7058bba227b0371ee66e3fc26437ee6209ca5f31daf","subject_tree_hash":"db024b6736187fa18beba29f151fd3b78119aa582b4eb35ab756541a55b612cb","subject_plugin_path":"skills/nexaiguy/nex-webshop-compliance-eu","audit_payload_hash":"a973c716a6cc4345c98b2d524a413766","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3ddfdca559084abffbfdd188f2ba14b597dcfd9c","contentHash":"aa72d5de6ad61de4b5fab7058bba227b0371ee66e3fc26437ee6209ca5f31daf","treeHash":"db024b6736187fa18beba29f151fd3b78119aa582b4eb35ab756541a55b612cb","pluginPath":"skills/nexaiguy/nex-webshop-compliance-eu","auditPayloadHash":"a973c716a6cc4345c98b2d524a413766"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/nexaiguy-nex-webshop-compliance-eu/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}