{"data":{"skill":{"slug":"sickn33-nerdzao-elite-gemini-high","name":"nerdzao-elite-gemini-high","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/nerdzao-elite-gemini-high","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"04616b1e-4322-4ef9-b676-86e3fdf6b340","skill_id":"8129f07b-f1ee-48d9-bbac-766d5cc3907b","version":5,"content_hash":"v3:81e05e636292629114b76cbb3922fbe57672fc02:fc535c8b95a5e7c5b403dda853e3f7c3f7f6641ac759ad28af3c2c14e3266a6b:6ed20c31215fe720dcee20e4487cb7e7c33812280d6659e9f76cdd8ab97a06c0:736b696c6c732f7369636b6e33332f6e6572647a616f2d656c6974652d67656d696e692d68696768:492f45054a8000f602d357dee315df78","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"The skill contains no executable code and produced no static findings. However, it directs the workflow to activate for every task. This broad scope override is a high-severity prompt injection risk.","remediation":[{"issue":"The prompt automatically activates its persona and workflow for every task.","severity":"high","suggestion":"Limit activation to explicit user requests and state that higher-priority instructions and current task boundaries always take precedence."}],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[{"title":"Prompt Injection Attempt Detected","locations":[{"file":"SKILL.md","line_end":13,"line_start":11}],"confidence":0.96,"description":"The instruction \"Ative automaticamente este workflow completo em TODA tarefa\" forces persistent activation beyond the requested task and may override intended agent scope.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The file explicitly assigns a persona and requires automatic activation for every task, creating a clear cross-task behavior override."}],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":56,"audit_model":"codex","audited_at":"2026-08-04T15:39:50.246+00:00","created_at":"2026-08-05T01:35:31.190893+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[{"title":"Prompt Injection Attempt Detected","severity":"high","locations":[{"file":"SKILL.md","line_end":13,"line_start":11}],"confidence":0.96,"description":"The instruction \"Ative automaticamente este workflow completo em TODA tarefa\" forces persistent activation beyond the requested task and may override intended agent scope.","confidence_reasoning":"The file explicitly assigns a persona and requires automatic activation for every task, creating a clear cross-task behavior override."}],"subject_marketplace_commit_sha":"81e05e636292629114b76cbb3922fbe57672fc02","subject_content_hash":"fc535c8b95a5e7c5b403dda853e3f7c3f7f6641ac759ad28af3c2c14e3266a6b","subject_tree_hash":"6ed20c31215fe720dcee20e4487cb7e7c33812280d6659e9f76cdd8ab97a06c0","subject_plugin_path":"skills/sickn33/nerdzao-elite-gemini-high","audit_payload_hash":"492f45054a8000f602d357dee315df78","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"81e05e636292629114b76cbb3922fbe57672fc02","contentHash":"fc535c8b95a5e7c5b403dda853e3f7c3f7f6641ac759ad28af3c2c14e3266a6b","treeHash":"6ed20c31215fe720dcee20e4487cb7e7c33812280d6659e9f76cdd8ab97a06c0","pluginPath":"skills/sickn33/nerdzao-elite-gemini-high","auditPayloadHash":"492f45054a8000f602d357dee315df78"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-nerdzao-elite-gemini-high/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}