API

public · generated from the OpenAPI document

GET /api/skills/lookup

Keyless trust lookup. A known skill returns its grade, summary, finding counts, and canonical detail URL. An unassessed skill returns HTTP 200 with status "unknown"; the response documents the next step for getting it assessed rather than failing.

auth: none · rate limit: 60/min per IP

Field
Type
Description
urlstringSource URL of the skill (e.g. a GitHub tree URL)
EXAMPLE · curl
curl -s "https://vettd.agentichighway.ai/api/skills/lookup?url=https://github.com/{owner}/{repo}/tree/main/skills/{skill}"
EXAMPLE RESPONSE · schematic
{
  "status": "A | B | C | F",
  "severity": "low | medium | high | critical",
  "name": "example-skill",
  "summary": "<generated security summary>",
  "grade": "A | B | C | F",
  "findingCounts": {
    "critical": 0, "high": 0,
    "medium": 0, "low": 0, "info": 0
  },
  "assessedAt": "<ISO 8601>",
  "detailUrl": "<origin>/skill/<publicId>"
}
.well-known/vettd.json
{
  "registry": "https://vettd.agentichighway.ai",
  "openapi": "https://vettd.agentichighway.ai/api/openapi.json",
  "agent_guide": "https://vettd.agentichighway.ai/agent.md",
  "mcp": null,
  "public_key": null,
  "frameworks": [
    "OWASP",
    "NIST 800-53",
    "CMMC",
    "ISO 42001",
    "EU AI Act",
    "CISA"
  ]
}