{
  "spec": "sak-package-signature/v1",
  "algorithm": "ed25519",
  "sha256": "d1e86c0c4a6a2550b7193a3b23b1d1524ef27dc186c6227ee78b250b6a3e4e3a",
  "signature": "GLGJXrmavMVpuid9gkSkVRwudomoAZBdLqqsiCi7iwwai0OS2ec63khcwVEJgk79hGi1Dgv59+nX0Dc1wvnrCw==",
  "signing_key_id": "0aff169ecb84607d",
  "signed_at": "2026-08-24T01:11:43.984Z",
  "slug": "soul-geoffrey-hinton",
  "version": "0.1.0",
  "filename": "soul-geoffrey-hinton-agent-plugin.zip",
  "bytes": 3967,
  "content_digest": "7c207000e37922fd59b68d93e96a069f0f0efbe0c67afb424236cce818a4f01c",
  "content_signature": "NyYV+adWPowJm/vLg7KfklsxryISgQVsek0zCz+kHGCPDKjwrSYO593ZvuoxC3pPeVJZtZNVd0rN3KA0te/vBw==",
  "files": [
    {
      "path": "mcp.json",
      "sha256": "a4ec0149cccb566b6c4b6d8413290229819ff2adcfa9eb5387c3f91d31103a57"
    },
    {
      "path": "plugin.json",
      "sha256": "c827d60021bdbb777673bc1ce06d3dcbbdb925cf2cbd14bb57e6c08826c71fb1"
    },
    {
      "path": "skills/soul-geoffrey-hinton/SKILL.md",
      "sha256": "87a6ee0cbdce667e0d7c392993f2f13a17fbcd6abf08f1f136e7f195d31b8000"
    }
  ],
  "verify": {
    "public_key_url": "https://superagentskill.com/api/public/signing-key.pem",
    "instructions": "sha256 the downloaded .zip, compare with `sha256`, then verify the base64 `signature` as an Ed25519 signature over the ascii sha256 hex string using the public key. An extracted or repacked copy can still be verified via `content_digest` / `content_signature`. Helper: node scripts/verify-package-signature.mjs <file.zip> <signature.json> [public-key.pem]"
  }
}