{
  "spec": "sak-package-signature/v1",
  "algorithm": "ed25519",
  "sha256": "a2091762b2e919debb72dfddf6a15e25b8b76310659887e0690f1761f255e2b1",
  "signature": "UW4lLVTrRBfsX4aygY/4lDFBVavAJ+b89XlC+2Lnm4Z4W6JSgqlE23nPHUtRy0DOmXLLEoqvd8liHMa/u0KwBQ==",
  "signing_key_id": "0aff169ecb84607d",
  "signed_at": "2026-11-01T17:58:33.003Z",
  "slug": "supplier-contract-tracker",
  "version": "0.1.4",
  "filename": "supplier-contract-tracker-agent-plugin.zip",
  "bytes": 58358,
  "content_digest": "dd2fedbda7b58ff381cb6ce930abf3a2fdbb7e142bd9a669e4e36e9f240acc4f",
  "content_signature": "dc+yD4C435NwG9pdfFd4hEqHXe5QxFsCvys9mQkSF02QkFrFYGnnH10xwg95e6/hiwFzzKlQMdz9Z44KPro3DA==",
  "files": [
    {
      "path": "plugin.json",
      "sha256": "6393f089a5ee344d9860fe6fa2429e75e91783ee0221a91856c04bb5cc5ca755"
    },
    {
      "path": "skills/supplier-contract-tracker/SKILL.md",
      "sha256": "8b2ab54414115e207970255ca4bb0eec23056c17a6ae145fe6838a86a0352c59"
    },
    {
      "path": "skills/supplier-contract-tracker/references/contract.json",
      "sha256": "daf8d800300e77c7994ee3a24363fd168028eea0625caff639589ea0eaf3b277"
    },
    {
      "path": "skills/supplier-contract-tracker/references/model-profile.json",
      "sha256": "1e1fd071305600cec5c05a7424a309a62adff7eda085f4c724be2195e6031d0f"
    },
    {
      "path": "skills/supplier-contract-tracker/references/system-prompt.txt",
      "sha256": "dcd9cd51b8b6b7e1b91169c35487e545b7fd69bb14affdaf41146bd679ccfae2"
    },
    {
      "path": "skills/supplier-contract-tracker/scripts/check_input.py",
      "sha256": "b7043b2eb7b7a407ec68d12253d6f9b75b72d254e5eff80d66879c5905a94260"
    },
    {
      "path": "skills/supplier-contract-tracker/scripts/local_runtime.py",
      "sha256": "9fda01b2205de3b0e0b1888ab9b2b83e4b318898fa4ed8e37aa22f9f5fa9ba31"
    },
    {
      "path": "skills/supplier-contract-tracker/scripts/run_request.py",
      "sha256": "a5bd9fb046af144f3eaae011f45ba709f9b4f0d41a7b1d3ceffc42138ae9cb96"
    },
    {
      "path": "skills/supplier-contract-tracker/tests/input.json",
      "sha256": "ea3a28cf1437eb59025a1ae553fbe78b8ab59582378a44f96176be7e208a275a"
    }
  ],
  "verify": {
    "public_key_url": "https://superagentskill.com/api/public/signing-key.pem",
    "instructions": "sha256 the downloaded .zip, compare with `sha256`, then verify the base64 `signature` as an Ed25519 signature over the ascii sha256 hex string using the public key. An extracted or repacked copy can still be verified via `content_digest` / `content_signature`. Helper: node scripts/verify-package-signature.mjs <file.zip> <signature.json> [public-key.pem]"
  }
}