{
  "spec": "sak-package-signature/v1",
  "algorithm": "ed25519",
  "sha256": "c7b9e881909f44aff7e01fd2c9e7024a615e013eb7e8e74f54b45480667c8bb2",
  "signature": "gL1xuUzVk+cN1j5mBAzlZ4xWHYVOg7vZgAfzFxbHxQ0aHkV8Dw71zkDDLQltXrxKVAh8sN8+ePfqsYd2bLupCg==",
  "signing_key_id": "0aff169ecb84607d",
  "signed_at": "2026-08-24T01:10:51.059Z",
  "slug": "soul-paul-graham",
  "version": "0.1.0",
  "filename": "soul-paul-graham-agent-plugin.zip",
  "bytes": 3929,
  "content_digest": "a2b7a5c24b525b30c184204c6931739558ff9cc10ea603637834e1e8d4a139b6",
  "content_signature": "Wxbjn/HWAo8v3Vbj44lXk9M2NM3D7ThFBlaMcWl4woIKLnhz4RTs5Cy49pIFjrVpAg+Ax0Y3ZcrLFcXwczfEDQ==",
  "files": [
    {
      "path": "mcp.json",
      "sha256": "a4ec0149cccb566b6c4b6d8413290229819ff2adcfa9eb5387c3f91d31103a57"
    },
    {
      "path": "plugin.json",
      "sha256": "5ce193024dc32ab91db2462b826cfac4f73b8ff5bfae5e9f9d7a0cb4fc981749"
    },
    {
      "path": "skills/soul-paul-graham/SKILL.md",
      "sha256": "9cd8787f86b1c8e16f80215eab8bc2cf3db217c388b5e419d1b9f492b7bede01"
    }
  ],
  "verify": {
    "public_key_url": "https://superagentskill.com/api/public/signing-key.pem",
    "instructions": "sha256 the downloaded .zip, compare with `sha256`, then verify the base64 `signature` as an Ed25519 signature over the ascii sha256 hex string using the public key. An extracted or repacked copy can still be verified via `content_digest` / `content_signature`. Helper: node scripts/verify-package-signature.mjs <file.zip> <signature.json> [public-key.pem]"
  }
}