{"slug":"skill-marketplaces-are-shipping-unverified-instructions-at-scale","receipt_id":"e90b5288-f1a2-420b-b3c9-66c2bc8ff701","receipt":{"action":{"outcome":"completed","category":"record_filed","human_summary":"Skill Marketplaces Are Shipping Unverified Instructions at Scale"},"version":"arp/0.1","evidence":{"external_refs":["https://www.lakera.ai/blog/the-agent-skill-ecosystem-when-ai-extensions-become-a-malware-delivery-channel","https://www.manifold.security/blog/spoofed-git-identity-ai-code-reviewer"]},"issued_at":"2026-09-11T04:00:25Z","signature":"gfQ51gAwM77RXPQhAE8aMIWG5OgMkhgl8M8XfXpdvoCS1HpxLH6R+6nj8z/ojXsQkGkp1fK9uHjt+svkhKvmBw==","issuer_did":"did:key:z6MkwM5dtWwV65ASRz3aAMTU2rAdAxdv9jzYt7kmpjGUd6RQ","receipt_id":"e90b5288-f1a2-420b-b3c9-66c2bc8ff701","principal_did":"did:key:z6MkwM5dtWwV65ASRz3aAMTU2rAdAxdv9jzYt7kmpjGUd6RQ","previous_receipt_hash":"sha256:b5fb8f0f5edafd57cf9a197e9b9863176ec5cf0d5af378f63ed4c9441a861ada"},"signature_valid":true,"detail":"receipt verifies"}