{"id":"cmv4pnc9ydkzhad06330o01q7","slug":"skill-comply","publicId":"ecc287fb-831a-4066-86ae-f0d42cc7626b","name":"skill-comply","description":"Visualize whether skills, rules, and agent definitions are actually followed — auto-generates scenarios at 3 prompt strictness levels, runs agents, classifies behavioral sequences, and reports compliance rates with full tool call timelines. Use when checking whether agents actually follow the skills, rules, and definitions they were given, rather than assuming they do.","version":"","author":"affaan-m","license":"MIT","compatibility":"","status":"completed","overallGrade":"B","scannerVersion":11,"fileCount":22,"hasSkillMd":true,"hasScripts":true,"hasReferences":false,"hasEvals":true,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/affaan-m/ecc/tree/main/skills/skill-comply","createdAt":"2026-10-12T03:46:46.630Z","completedAt":"2026-10-12T03:46:46.628Z","visibility":"public","publishedAt":"2026-08-06T17:13:28.915Z","category":"","frameworks":[],"badgeStatus":"conditional","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 1 warning in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"pass"}],"consensus":"warn","warnTriggers":["Unrestricted operation framing"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmshryit905r7ad07azjc5kyn","findings":[{"id":"cmv4pnc9ydkziad064i1zbs0g","source":"vettd","category":"security","label":"Unrestricted operation framing","detail":"Detected in tests/test_grader.py:218 (4 matches) — `description=\"reference step with no constraint of its own\",`","severity":"medium","ruleId":"VTD-0070","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"406a1cdaa55e239d54a00916c018cd9a","filepath":"tests/test_grader.py"},{"id":"cmv4pnc9ydkzkad06jocodsjy","source":"cisco","category":"security","label":"Unpinned dependency","detail":"pyproject.toml:6 — Dependency 'pyyaml' has no pinned (==) version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).","severity":"low","ruleId":"SUPPLY_CHAIN_UNPINNED_DEPENDENCY","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"dd7675e0e4b11fc6a234928bf7f4c617","filepath":"pyproject.toml"},{"id":"cmv4pnc9ydkzjad06gid9dt5x","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"592f7ac7731768f0fd0bba83f30850f9","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"A","findingCount":2,"criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"B","findingCount":1,"criticalCount":0,"highCount":0}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"affaan-m","name":"ecc"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T18:49:00.540Z","lastVerifiedAt":"2026-10-22T18:49:00.540Z","lastChangeDetectedAt":"2026-10-12T14:49:26.079Z","scannedHash":"e92f6c54d6fb8a6a692801c66725ed1de90e45e4","latestUpstreamHash":"e92f6c54d6fb8a6a692801c66725ed1de90e45e4","nextCheckDueAt":"2026-10-23T20:13:14.513Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":441,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmv4pncjudl0nad06gyp5h347","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"absent","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null},{"origin":"signal","id":"cmv4pncfpdkzrad06jo8pkv08","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":441,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmv4pnck0dl0pad06m8iuvtpe","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null},{"origin":"signal","id":"cmv4pncfydkztad06z037hp9m","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null},{"origin":"signal","id":"cmv4pnchydl07ad06u7sf4u0x","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"skill-comply","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null},{"origin":"signal","id":"cmv4pncgldkzzad06bztzwce2","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"declared_tool","relatedId":"Bash","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Bash","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null},{"origin":"signal","id":"cmv4pncgvdl01ad06rw53dccp","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"declared_tool","relatedId":"Read","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Read","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null},{"origin":"signal","id":"cmv4pnck7dl0rad06i400y5el","subjectType":"skill_audit","subjectId":"cmv4pnc9ydkzhad06330o01q7","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-12T03:46:45.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":31,"publisherSupplied":["name","description","author","version","license"]}