{
  "spec": "sak-package-signature/v1",
  "algorithm": "ed25519",
  "sha256": "b98d8124f726c5fed35fefbaa829b869171c2f88749c3b8c7fbe37ec0a382da2",
  "signature": "ccsIWqa/brQSTF2DnJElSzyzQ1XEgmpgO0oVQT4S60oSc2X4kgGPaXRYKHRpw314xSGY/qfMDnxMZE3eHas0BQ==",
  "signing_key_id": "0aff169ecb84607d",
  "signed_at": "2026-08-24T01:38:20.230Z",
  "slug": "gx-paid-ads-expert",
  "version": "0.1.0",
  "filename": "gx-paid-ads-expert-agent-plugin.zip",
  "bytes": 4814,
  "content_digest": "6c37db58164735c1d337956fa7847ab890eadba1d8dfe72ac1e2d20c8fe86511",
  "content_signature": "CUmFz08nlFj44+3l44RdGoTp7vgFkSgj2aO/miBouFW8MdQgDhI0DUhz1+1YvDJ2+zgUhIV3qRvcm0Gn0ge2BQ==",
  "files": [
    {
      "path": "mcp.json",
      "sha256": "a4ec0149cccb566b6c4b6d8413290229819ff2adcfa9eb5387c3f91d31103a57"
    },
    {
      "path": "plugin.json",
      "sha256": "b0a6881b1778bbcf0158975b748e5ff6fbce97c78371ed88be3083c75c2fccdc"
    },
    {
      "path": "skills/gx-paid-ads-expert/SKILL.md",
      "sha256": "23804c7975de7c6bab10b10286675b18a2395a8cda072340b5e4ec58fcd8ec5d"
    },
    {
      "path": "skills/gx-paid-ads-expert/references/examples.md",
      "sha256": "16b6dbd965aa8b23eb11d53929d90675277bf6e5b257c31cb04d0d68981664b0"
    }
  ],
  "verify": {
    "public_key_url": "https://superagentskill.com/api/public/signing-key.pem",
    "instructions": "sha256 the downloaded .zip, compare with `sha256`, then verify the base64 `signature` as an Ed25519 signature over the ascii sha256 hex string using the public key. An extracted or repacked copy can still be verified via `content_digest` / `content_signature`. Helper: node scripts/verify-package-signature.mjs <file.zip> <signature.json> [public-key.pem]"
  }
}