{
  "spec": "sak-package-signature/v1",
  "algorithm": "ed25519",
  "sha256": "7ac5cbc9f9ddae1bc839d07710b15bd3767469d9afcbe0f4a2f5c05a895863ae",
  "signature": "AWRoSI22xAVSjmSWbqlfGvGrZJMjNlwJQaZpwLuyHWpBg1OcchwT8cChcjzCVwUt+axGCrNIb5QUpg6A85BQBg==",
  "signing_key_id": "0aff169ecb84607d",
  "signed_at": "2026-08-24T00:29:35.105Z",
  "slug": "gx-amplitude-expert",
  "version": "0.1.0",
  "filename": "gx-amplitude-expert-agent-plugin.zip",
  "bytes": 4856,
  "content_digest": "700252d979e20b40d44287b67325471e5f10df20f0ac1950c7e7ee68836f360f",
  "content_signature": "wyvRmAdYrD42FzInSwcZT8bdaLXwVw55r1qnHy7aRG/Laa3LoviUzsEV2EhoxGIGymaiELTGm0reZCv3vmfeAw==",
  "files": [
    {
      "path": "mcp.json",
      "sha256": "a4ec0149cccb566b6c4b6d8413290229819ff2adcfa9eb5387c3f91d31103a57"
    },
    {
      "path": "plugin.json",
      "sha256": "39880f565228897300ac4103705bbbbf46b2659a93883393e1f9b67befb99d28"
    },
    {
      "path": "skills/gx-amplitude-expert/SKILL.md",
      "sha256": "90b2a0fcb6dc69abb8021806b943ff7356b1495e2eac8b9638b3bdc97d023193"
    },
    {
      "path": "skills/gx-amplitude-expert/references/examples.md",
      "sha256": "6ad58457574a7c18fc2df49606302c28ac021f977bd589be676bd73c513f334b"
    }
  ],
  "verify": {
    "public_key_url": "https://superagentskill.com/api/public/signing-key.pem",
    "instructions": "sha256 the downloaded .zip, compare with `sha256`, then verify the base64 `signature` as an Ed25519 signature over the ascii sha256 hex string using the public key. An extracted or repacked copy can still be verified via `content_digest` / `content_signature`. Helper: node scripts/verify-package-signature.mjs <file.zip> <signature.json> [public-key.pem]"
  }
}