{"id":"cmv9joax6eor9ad06heysvcej","owner":"AgenticHighway","name":"vettd-skills","url":"https://github.com/AgenticHighway/vettd-skills","lastScannedAt":"2026-10-17T10:42:34.398Z","freshness":{"status":"changed","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:24:15.770Z","lastVerifiedAt":"2026-10-16T11:35:41.575Z","lastChangeDetectedAt":"2026-10-21T07:24:15.770Z","scannedHash":null,"latestUpstreamHash":"aa9c0a37a1ae020d6af3c19301e4fb63aaaa8a98","nextCheckDueAt":"2026-10-22T06:52:14.412Z"},"skills":[{"id":"cmv9jps9uep5uad069tn36ktn","slug":"find-a-safe-skill","publicId":"f8eb29bd-2211-4250-bdc2-979fbc6a7b3a","name":"find-a-safe-skill","description":"Use when a user or agent needs to find an existing skill that performs a task, before writing one from scratch or grabbing the first search result. WHEN: find a skill for X, is there a skill that does X, search the skill directory, which skill should I use, compare candidate skills for safety. DO NOT USE FOR: scanning a skill you already downloaded or chose (use vet-before-install), auditing your own local agent environment (use audit-my-agent-environment).","author":"Agentic Highway","version":"0.2.0","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-10-15T12:59:33.197Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/find-a-safe-skill","findings":[{"id":"cmv9jps9uep5vad06fp7o7e91","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmv9jps9uep5wad069jktfvwc","source":"cisco","category":"security","label":"Active instruction acquires and executes remote content","detail":"SKILL.md:135 — SKILL.md contains an operative statement that explicitly coordinates remote content acquisition with execution.","severity":"high","ruleId":"ACTIVE_REMOTE_ACQUIRE_EXECUTE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:15:39.325Z","lastVerifiedAt":"2026-10-21T11:15:39.325Z","lastChangeDetectedAt":null,"scannedHash":"45d435cb0f14a80a1bc75095f14ca88f7a6711b2","latestUpstreamHash":"45d435cb0f14a80a1bc75095f14ca88f7a6711b2","nextCheckDueAt":"2026-10-22T13:05:51.593Z"}},{"id":"cmv9jprtaep5kad06nc2j4wb5","slug":"pre-publish-self-check","publicId":"52d3e940-34eb-450c-8475-40865b0be3b5","name":"pre-publish-self-check","description":"Use when a skill author has finished writing or editing a skill and wants to check it before pushing to GitHub, opening a PR, or sharing it. WHEN: before publishing a skill, before pushing to GitHub, self-review of a skill I wrote, checking my own skill directory. DO NOT USE FOR: scanning someone else's skill before installing (use vet-before-install), or an environment sweep (use audit-my-agent-environment).","author":"Agentic Highway","version":"0.2.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-10-15T12:59:33.181Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/pre-publish-self-check","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:40:39.352Z","lastVerifiedAt":"2026-10-21T11:40:39.352Z","lastChangeDetectedAt":null,"scannedHash":"89896cade4cd79331b82c686b58c32156179a38b","latestUpstreamHash":"89896cade4cd79331b82c686b58c32156179a38b","nextCheckDueAt":"2026-10-22T10:47:39.678Z"}},{"id":"cmv9jprrkep5dad06dvinfk9r","slug":"browse-directory-api","publicId":"e95a1795-f33d-4200-88d3-1564fb6fc7ca","name":"browse-directory-api","description":"Use when an agent has only HTTPS access (no vettd binary) and needs to search the public vettd directory, check a skill's grade and findings, or download a skill. WHEN: find a skill without installing anything, is this skill safe (by GitHub URL), look up a skill's grade, download a skill from the directory, browse vettd over HTTP. DO NOT USE FOR: scanning local files (use vet-before-install), auditing your own environment (use audit-my-agent-environment), or anything needing an API key.","author":"Agentic Highway","version":"0.1.1","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-10-15T12:59:33.168Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/browse-directory-api","findings":[{"id":"cmv9jprrkep5ead06sb7iz0q6","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:14:39.384Z","lastVerifiedAt":"2026-10-21T12:14:39.384Z","lastChangeDetectedAt":null,"scannedHash":"d545222cf16b14137544e6d963cd7266802ee2f5","latestUpstreamHash":"d545222cf16b14137544e6d963cd7266802ee2f5","nextCheckDueAt":"2026-10-22T11:32:21.763Z"}},{"id":"cmvc9pc0905v4ad07tzidzhxv","slug":"detect-supply-chain-drift","publicId":"d3fc6555-83eb-40f4-8017-5115c734087c","name":"detect-supply-chain-drift","description":"Use when a previously-scanned artifact needs to be checked for changes since its last scan — before re-trusting an update, after a dependency bump, or on a schedule. WHEN: has this changed, did this skill change, re-scan after update, verify no drift, monitor for tampering. DO NOT USE FOR: scanning an artifact the first time (use vet-before-install) or triaging one finding (use triage-a-flagged-finding).","author":"Agentic Highway","version":"0.2.1","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-10-15T12:59:32.571Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/detect-supply-chain-drift","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:03:39.054Z","lastVerifiedAt":"2026-10-21T10:03:39.054Z","lastChangeDetectedAt":"2026-10-17T10:39:34.384Z","scannedHash":"97f31755b39bc4f7d3cb2a4b45a12cc0144fd31e","latestUpstreamHash":"97f31755b39bc4f7d3cb2a4b45a12cc0144fd31e","nextCheckDueAt":"2026-10-22T08:03:26.498Z"}},{"id":"cmv9jprd4eozxad06p3vfkneq","slug":"audit-my-agent-environment","publicId":"4b1280b2-160d-43b1-a55f-fe4a94cd3c19","name":"audit-my-agent-environment","description":"Use when an agent needs to inventory and audit its own runtime environment for dangerous or untrusted artifacts. WHEN: audit my environment, what's installed, check my MCP servers, is my setup safe, self-audit. DO NOT USE FOR: vetting one skill before installing (use vet-before-install), publishing checks (use pre-publish-self-check), one finding (use triage-a-flagged-finding), or drift over time (use detect-supply-chain-drift).","author":"Agentic Highway","version":"0.2.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-10-15T12:59:32.561Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/audit-my-agent-environment","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:47:15.887Z","lastVerifiedAt":"2026-10-21T08:47:15.887Z","lastChangeDetectedAt":null,"scannedHash":"5b967eb7ec47511c65e4bfa8f6749669157e5b82","latestUpstreamHash":"5b967eb7ec47511c65e4bfa8f6749669157e5b82","nextCheckDueAt":"2026-10-22T09:39:53.170Z"}},{"id":"cmv9jpr9leozhad06whkv8dug","slug":"setup-vettd","publicId":"9c247e29-098a-4e2f-a7fa-410fce476d8c","name":"setup-vettd","description":"Use when the vettd binary is missing, unauthenticated, or unreachable, or when a command from another vettd skill fails because vettd itself isn't set up. WHEN: vettd not found, command not found vettd, install vettd, configure vettd, vettd auth, connection refused from vettd, vettd endpoint wrong. DO NOT USE FOR: scanning anything (use vet-before-install or audit-my-agent-environment).","author":"Agentic Highway","version":"0.1.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-10-15T12:59:32.523Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/setup-vettd","findings":[{"id":"cmv9jpr9leoziad06x08l3kkf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:20:39.330Z","lastVerifiedAt":"2026-10-21T11:20:39.330Z","lastChangeDetectedAt":null,"scannedHash":"7d610cc7b11d63cc120490745992b202e5d305ba","latestUpstreamHash":"7d610cc7b11d63cc120490745992b202e5d305ba","nextCheckDueAt":"2026-10-22T09:20:41.352Z"}},{"id":"cmv9jpr8seozbad06fn4vmkv4","slug":"clean-skill","publicId":"6bf00852-43c2-40f5-84fe-00d0dd3f4ae4","name":"clean-skill","description":"Use when running vettd-skills CI to verify a scan of a well-formed, low-risk skill still yields a clean result. This is a fixture, not a real skill.","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-10-15T12:59:32.519Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/ci/fixtures/clean-skill","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:26:58.419Z","lastVerifiedAt":"2026-10-21T14:26:58.419Z","lastChangeDetectedAt":null,"scannedHash":"9db5a38a0c1f572d6b345d0c792524d79ad1febd","latestUpstreamHash":"9db5a38a0c1f572d6b345d0c792524d79ad1febd","nextCheckDueAt":"2026-10-22T15:35:21.194Z"}},{"id":"cmv9jpr8reoz7ad06ilosq2qx","slug":"triage-a-flagged-finding","publicId":"8e9bd5a2-8a74-4516-a83c-859ee9f97ecb","name":"triage-a-flagged-finding","description":"Use when handed one or more specific scan findings and needing to decide whether to remediate, remove, or accept-with-justification. WHEN: triage this finding, what do I do about this flagged rule, decide on this security finding, handed a finding from vettd, resolve this flagged rule ID. DO NOT USE FOR: running the initial scan that produces findings (use vet-before-install or audit-my-agent-environment), or searching for a new skill to install (use find-a-safe-skill).","author":"Agentic Highway","version":"0.2.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-10-15T12:59:32.518Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/triage-a-flagged-finding","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:33:19.106Z","lastVerifiedAt":"2026-10-21T15:33:19.106Z","lastChangeDetectedAt":null,"scannedHash":"886f9e14142ed7daf552baa2d112342731a6c5df","latestUpstreamHash":"886f9e14142ed7daf552baa2d112342731a6c5df","nextCheckDueAt":"2026-10-22T13:53:36.079Z"}},{"id":"cmv9jpr8oeoz3ad06r2y3q9ee","slug":"vet-before-install","publicId":"67dfefc1-c833-434a-9f0a-316a8b29a8bc","name":"vet-before-install","description":"Use when about to install, adopt, or wire in a skill, MCP server, or agent config from an external source. WHEN: install this skill, add this MCP server, adopt this agent config, pull in this skill, before trusting a new integration. DO NOT USE FOR: artifacts already live (use audit-my-agent-environment), your own skill before publishing (use pre-publish-self-check), or findings you already have (use triage-a-flagged-finding).","author":"Agentic Highway","version":"0.2.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-10-15T12:59:32.516Z","sourceUrl":"https://github.com/AgenticHighway/vettd-skills/tree/main/skills/vet-before-install","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:50:39.362Z","lastVerifiedAt":"2026-10-21T11:50:39.362Z","lastChangeDetectedAt":null,"scannedHash":"19c01ad073bf1746ae879a9feb10837d06bb2bf8","latestUpstreamHash":"19c01ad073bf1746ae879a9feb10837d06bb2bf8","nextCheckDueAt":"2026-10-22T11:34:37.189Z"}}],"publisherSupplied":["skills[].name","skills[].description","skills[].author","skills[].version","skills[].license"]}