{"data":{"skill":{"slug":"sickn33-nerdzao-elite","name":"nerdzao-elite","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/nerdzao-elite","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"350ddaec-9b61-4c4e-841d-b4fa808273d6","skill_id":"3308c228-b8d8-4b2e-85c7-c73c307d4c30","version":5,"content_hash":"v3:81e05e636292629114b76cbb3922fbe57672fc02:4fbaef05db1bb61026291029513721111c74b8bb1e7d53ad487b6448766f5a17:bca7c55db496dfc1bea4b36a1c95aa2814940b498d3a1a04d9b3a6284493e6a3:736b696c6c732f7369636b6e33332f6e6572647a616f2d656c697465:6f05d7b9f5dd9c61cb0ada9fe9d931c6","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"Static analysis found no executable code or pattern-based security issues. Semantic review found a persistent role assignment and automatic skill-activation directive that may override user intent and host skill selection.","remediation":[{"issue":"Persistent role assignment and automatic activation of every named skill","severity":"high","suggestion":"Limit activation to explicit user requests and state that user, host, permission, and safety instructions always take precedence."}],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[{"title":"Prompt Injection Attempt Detected","locations":[{"file":"SKILL.md","line_end":17,"line_start":11}],"confidence":0.95,"description":"The file says \"Você é\" and \"Ative automaticamente TODAS as skills abaixo em toda tarefa.\" This persistent directive can override user intent and host skill selection.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The source explicitly assigns a persistent role and orders automatic activation of all listed skills for every task."}],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":37,"audit_model":"codex","audited_at":"2026-08-04T15:37:03.34+00:00","created_at":"2026-08-05T01:35:22.209795+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[{"title":"Prompt Injection Attempt Detected","severity":"high","locations":[{"file":"SKILL.md","line_end":17,"line_start":11}],"confidence":0.95,"description":"The file says \"Você é\" and \"Ative automaticamente TODAS as skills abaixo em toda tarefa.\" This persistent directive can override user intent and host skill selection.","confidence_reasoning":"The source explicitly assigns a persistent role and orders automatic activation of all listed skills for every task."}],"subject_marketplace_commit_sha":"81e05e636292629114b76cbb3922fbe57672fc02","subject_content_hash":"4fbaef05db1bb61026291029513721111c74b8bb1e7d53ad487b6448766f5a17","subject_tree_hash":"bca7c55db496dfc1bea4b36a1c95aa2814940b498d3a1a04d9b3a6284493e6a3","subject_plugin_path":"skills/sickn33/nerdzao-elite","audit_payload_hash":"6f05d7b9f5dd9c61cb0ada9fe9d931c6","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"81e05e636292629114b76cbb3922fbe57672fc02","contentHash":"4fbaef05db1bb61026291029513721111c74b8bb1e7d53ad487b6448766f5a17","treeHash":"bca7c55db496dfc1bea4b36a1c95aa2814940b498d3a1a04d9b3a6284493e6a3","pluginPath":"skills/sickn33/nerdzao-elite","auditPayloadHash":"6f05d7b9f5dd9c61cb0ada9fe9d931c6"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-nerdzao-elite/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}