{
  "spec": "sak-package-signature/v1",
  "algorithm": "ed25519",
  "sha256": "1b9a0914b4e78fd8db3e21b169eef3b97ef12a553baa2bcad88f075e774d4643",
  "signature": "G10NIw3WMLEVM+1rIt5fmjByeUOY8K9D2fZCGEpt3UdKPrmJW6H2dLcpvwEHTD99C18oCp+WmYtbQnPIhpBOAQ==",
  "signing_key_id": "0aff169ecb84607d",
  "signed_at": "2026-08-24T01:09:14.002Z",
  "slug": "sd-design-tokens",
  "version": "0.1.0",
  "filename": "sd-design-tokens-agent-plugin.zip",
  "bytes": 3926,
  "content_digest": "90c6ad65a97adce720a939929397497a4fe45f209cc2f7356aa1827dc3938947",
  "content_signature": "HS3e+dpTAbF7VPdzUgDqBu5fS8wXU/JVc4JRId0F0QDv7Mn/NwnqOkFBSa9f/PRA+qpt6ZJlaOrM3Ck7YzwbDA==",
  "files": [
    {
      "path": "mcp.json",
      "sha256": "a4ec0149cccb566b6c4b6d8413290229819ff2adcfa9eb5387c3f91d31103a57"
    },
    {
      "path": "plugin.json",
      "sha256": "a37df04f4f5390380bf0bc004980b024616bb6cb86b88a4559a4453ffda23a39"
    },
    {
      "path": "skills/sd-design-tokens/SKILL.md",
      "sha256": "0e332eb501be613bd89decc1e7afc05bb259e5cc7be2f46c9e1ca11786a5d104"
    }
  ],
  "verify": {
    "public_key_url": "https://superagentskill.com/api/public/signing-key.pem",
    "instructions": "sha256 the downloaded .zip, compare with `sha256`, then verify the base64 `signature` as an Ed25519 signature over the ascii sha256 hex string using the public key. An extracted or repacked copy can still be verified via `content_digest` / `content_signature`. Helper: node scripts/verify-package-signature.mjs <file.zip> <signature.json> [public-key.pem]"
  }
}