{"id":"cmpwlakzw0003ad07rja9vn8r","owner":"google","name":"skills","url":"https://github.com/google/skills","lastScannedAt":"2026-10-22T01:29:38.085Z","freshness":{"status":"changed","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:14:41.158Z","lastVerifiedAt":null,"lastChangeDetectedAt":"2026-10-21T17:14:41.158Z","scannedHash":null,"latestUpstreamHash":"02b5dd998b925095de6318e3f9c7d27a70bf66bf","nextCheckDueAt":"2026-10-22T18:12:33.302Z"},"skills":[{"id":"cmvhz3y22190xad07c1rh6nho","slug":"bigquery-basics","publicId":"baae683b-dc6e-4b15-8976-bc34cc7098b2","name":"bigquery-basics","description":">-","author":"","version":"1.0.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:29.109Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/bigquery-basics","findings":[{"id":"cmvhz3y22190yad07t1hkhbsy","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/change-history.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvhz3y22190zad07ozvm906l","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:32:38.484Z","lastVerifiedAt":"2026-10-21T10:32:38.484Z","lastChangeDetectedAt":"2026-10-21T10:28:39.268Z","scannedHash":"de6ab5e07db729fb6907c449df5b612613e6355b","latestUpstreamHash":"de6ab5e07db729fb6907c449df5b612613e6355b","nextCheckDueAt":"2026-10-22T09:33:12.627Z"}},{"id":"cmuxo6r9y2xgrad076vsw9fff","slug":"firebase-basics","publicId":"ffeda112-43cc-43cf-b291-5bee33177a2a","name":"firebase-basics","description":">-","author":"","version":"","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:28.899Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/firebase-basics","findings":[{"id":"cmuxo6r9y2xgsad07ue2t9xhn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/flutter_setup.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6r9y2xgtad07x1dcfi12","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:57:39.529Z","lastVerifiedAt":"2026-10-22T02:57:39.529Z","lastChangeDetectedAt":null,"scannedHash":"3b8e91dd3f24b511c92a23246bad949bbfe6fcae","latestUpstreamHash":"3b8e91dd3f24b511c92a23246bad949bbfe6fcae","nextCheckDueAt":"2026-10-23T04:28:28.728Z"}},{"id":"cmuxm1egp20n0ad076xhdcg2f","slug":"gemini-api","publicId":"f8608053-f578-469b-b269-ab8dcd2e0a3e","name":"gemini-api","description":"Use when the user asks about using Gemini in an enterprise environment or explicitly mentions Vertex AI, Google Cloud, or Agent Platform. Guides the usage of the Gemini API on Agent Platform with the Google Gen AI SDK. Covers SDK usage (Python, JS/TS, Go, Java, C#), capabilities like multimodal inputs, tools, media generation, caching, batch prediction, and Live API.","author":"","version":"1.0.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:28.882Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/gemini-api","findings":[{"id":"cmuxm1egq20n1ad07tqrvkvhk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm1egq20n2ad07zeljdgg8","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:31:39.437Z","lastVerifiedAt":"2026-10-22T01:31:39.437Z","lastChangeDetectedAt":"2026-10-09T10:04:29.366Z","scannedHash":"b40c9fc9b374cd3e33074876607746088c56bba0","latestUpstreamHash":"b40c9fc9b374cd3e33074876607746088c56bba0","nextCheckDueAt":"2026-10-23T03:33:43.246Z"}},{"id":"cmv0fv02y7ua9ad06zj87do82","slug":"agent-platform-rag-engine-management","publicId":"f895dce1-e074-498f-9422-1d7376e50eb5","name":"agent-platform-rag-engine-management","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-12T13:03:28.002Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/agent-platform-rag-engine-management","findings":[{"id":"cmv0fv02y7uaaad06myxnbn1k","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:50:39.463Z","lastVerifiedAt":"2026-10-22T01:50:39.463Z","lastChangeDetectedAt":"2026-10-09T05:28:28.862Z","scannedHash":"9340b65568ce658e5d025f2d02d19ac09a2e8034","latestUpstreamHash":"9340b65568ce658e5d025f2d02d19ac09a2e8034","nextCheckDueAt":"2026-10-23T03:52:14.169Z"}},{"id":"cmvhjltb416n8ad07w1z4jzql","slug":"alloydb-basics","publicId":"966f04d9-320a-439f-b511-05b7052608f4","name":"alloydb-basics","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:27.923Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/alloydb-basics","findings":[{"id":"cmvhjltb416n9ad0700nfe94v","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvhjltb416naad077gpdg6pj","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:49:38.339Z","lastVerifiedAt":"2026-10-21T15:49:38.339Z","lastChangeDetectedAt":"2026-10-21T15:46:40.992Z","scannedHash":"666e04a085a06f8d2bd65fbc67b34a4f842be5b5","latestUpstreamHash":"666e04a085a06f8d2bd65fbc67b34a4f842be5b5","nextCheckDueAt":"2026-10-22T14:51:18.185Z"}},{"id":"cmuxm1fk420o4ad07vgc9c06a","slug":"agent-platform-prompt-management","publicId":"0d7f87c7-791f-4ef5-b188-bb1e1091adac","name":"agent-platform-prompt-management","description":">-","author":"","version":"1.0.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-12T13:03:27.821Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/agent-platform-prompt-management","findings":[{"id":"cmuxm1fk420o5ad078p8m0eiu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:26:06.980Z","lastVerifiedAt":"2026-10-22T00:26:06.980Z","lastChangeDetectedAt":"2026-10-09T10:47:29.445Z","scannedHash":"42eda1c6cd2d5fa0949331bc1c43c003a8b4fc38","latestUpstreamHash":"42eda1c6cd2d5fa0949331bc1c43c003a8b4fc38","nextCheckDueAt":"2026-10-23T01:28:08.031Z"}},{"id":"cmvimfpum1irtad07nxposfsv","slug":"google-cloud-waf-reliability","publicId":"9169a6cf-9abc-45d3-b9e0-067ef5ddb52e","name":"google-cloud-waf-reliability","description":">-","author":"","version":"1.0.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:27.809Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-waf-reliability","findings":[{"id":"cmvimfpum1iruad07xg89hm6g","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvimfpun1irvad07yxpjjaou","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:25:38.900Z","lastVerifiedAt":"2026-10-21T21:25:38.900Z","lastChangeDetectedAt":"2026-10-21T21:24:41.671Z","scannedHash":"20c153fc5e057546a85b5d0999b98f45325d3757","latestUpstreamHash":"20c153fc5e057546a85b5d0999b98f45325d3757","nextCheckDueAt":"2026-10-22T22:47:27.935Z"}},{"id":"cmuz1gfal1xcdad06mbwvl4jn","slug":"agent-platform-model-registry","publicId":"6ffb8e6a-3a88-4267-94b6-28c42d1d7a3d","name":"agent-platform-model-registry","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-12T13:03:27.808Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/agent-platform-model-registry","findings":[{"id":"cmuz1gfal1xcead06ehe5388j","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:59:41.015Z","lastVerifiedAt":"2026-10-21T15:59:41.015Z","lastChangeDetectedAt":"2026-10-07T14:38:30.953Z","scannedHash":"af87307e9a7f8c99c30691661e176bd709f80be2","latestUpstreamHash":"af87307e9a7f8c99c30691661e176bd709f80be2","nextCheckDueAt":"2026-10-22T16:14:05.665Z"}},{"id":"cmv9lbxx0epj7ad0622xci1a9","slug":"google-cloud-waf-operational-excellence","publicId":"1a728b12-1303-44db-8f16-faad7186c80a","name":"google-cloud-waf-operational-excellence","description":">-","author":"","version":"1.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:27.727Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-waf-operational-excellence","findings":[{"id":"cmv9lbxx0epj8ad06tpefiips","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmv9lbxx0epj9ad06r3rmndhj","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:50:39.362Z","lastVerifiedAt":"2026-10-21T11:50:39.362Z","lastChangeDetectedAt":"2026-10-15T13:44:34.014Z","scannedHash":"b7501319c3db5a834321a7ae16164d5e8135ab5c","latestUpstreamHash":"b7501319c3db5a834321a7ae16164d5e8135ab5c","nextCheckDueAt":"2026-10-22T13:33:50.839Z"}},{"id":"cmuyxgei81idlad06a0r61r84","slug":"agent-platform-tuning-management","publicId":"d0c087ae-8161-4039-9a22-38c2e01d20e0","name":"agent-platform-tuning-management","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-12T13:03:27.726Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/agent-platform-tuning-management","findings":[{"id":"cmuyxgei81idmad06yx138in2","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:44:03.482Z","lastVerifiedAt":"2026-10-21T21:44:03.482Z","lastChangeDetectedAt":"2026-10-09T05:29:28.865Z","scannedHash":"77e2617044181d619a95330ac694bff1a4cdddce","latestUpstreamHash":"77e2617044181d619a95330ac694bff1a4cdddce","nextCheckDueAt":"2026-10-22T22:57:30.742Z"}},{"id":"cmv72614ae0yuad06eo2zticq","slug":"google-cloud-recipe-onboarding","publicId":"f1c209cb-c76b-4a57-9596-5e6357e4a660","name":"google-cloud-recipe-onboarding","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:27.533Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-recipe-onboarding","findings":[{"id":"cmv72614ae0yvad06ck5n8iek","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmv72614ae0ywad06eha083dp","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:53:41.118Z","lastVerifiedAt":"2026-10-21T16:53:41.118Z","lastChangeDetectedAt":"2026-10-13T19:11:54.121Z","scannedHash":"7734d0c82a97791a3e668dd1c6d33a929052e1cc","latestUpstreamHash":"7734d0c82a97791a3e668dd1c6d33a929052e1cc","nextCheckDueAt":"2026-10-22T19:03:26.121Z"}},{"id":"cmuxm1ic620qrad079bef0fjt","slug":"agent-platform-skill-registry","publicId":"d060b4d2-6b33-4d7b-b942-e46537ceeb53","name":"agent-platform-skill-registry","description":">","author":"","version":"1.0.0","license":"Apache-2.0","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:27.532Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/agent-platform-skill-registry","findings":[{"id":"cmuxm1ic620qsad071tw445r3","source":"cisco","category":"security","label":"Undeclared network usage","detail":"SKILL.md — Skill code uses network libraries but doesn't declare network requirement","severity":"medium","ruleId":"TOOL_ABUSE_UNDECLARED_NETWORK"},{"id":"cmuxm1ic620qtad07e0fhfxuh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxm1ic620quad07egkej5fc","source":"cisco","category":"security","label":"Unpinned dependency","detail":"scripts/requirements.txt:2 — Dependency 'google-auth' has no pinned (==) version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).","severity":"low","ruleId":"SUPPLY_CHAIN_UNPINNED_DEPENDENCY"},{"id":"cmuxm1ic620qvad079xkdrvl2","source":"cisco","category":"security","label":"Unpinned dependency","detail":"scripts/requirements.txt:3 — Dependency 'requests' has no pinned (==) version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).","severity":"low","ruleId":"SUPPLY_CHAIN_UNPINNED_DEPENDENCY"},{"id":"cmuxm1ic720qwad074nebheg8","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:65 — Pattern detected: requests.post(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720qxad07l3b4nii5","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:88 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720qyad0798gl4l1b","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:109 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720qzad070ckgmlqb","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:130 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720r0ad070k5jmfs6","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:151 — Pattern detected: requests.delete(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720r1ad07d2snhj18","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:212 — Pattern detected: requests.patch(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720r2ad07w4erb97h","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:233 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720r3ad07851tbmgt","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:257 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm1ic720r4ad07qshd89oq","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/skill_registry_ops.py:279 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:53:13.425Z","lastVerifiedAt":"2026-10-21T04:53:13.425Z","lastChangeDetectedAt":"2026-10-07T14:24:30.945Z","scannedHash":"71e676f15b18e579bbc0c03b22fbf661d0a5a954","latestUpstreamHash":"71e676f15b18e579bbc0c03b22fbf661d0a5a954","nextCheckDueAt":"2026-10-22T05:47:29.898Z"}},{"id":"cmvfshfa30w0bad07gg7iql1a","slug":"gke-basics","publicId":"ce7aa78d-73fd-497d-8491-d78c0f3215ed","name":"gke-basics","description":">-","author":"","version":"1.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:27.524Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/gke-basics","findings":[{"id":"cmvfshfa30w0cad078vh3wb4f","source":"vettd","category":"security","label":"Kubernetes credential file access","detail":"Detected in references/client-library-usage.md:27 — `config.load_kube_config() # Loads from ~/.kube/config`","severity":"medium","ruleId":"VTD-0010"},{"id":"cmvfshfa30w0dad07lk3s99xl","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/client-library-usage.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvfshfa30w0ead07ijj6nxx9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:53:03.505Z","lastVerifiedAt":"2026-10-21T21:53:03.505Z","lastChangeDetectedAt":"2026-10-19T21:49:42.980Z","scannedHash":"499ea5e359d9fe95d326d6380343de061c468e4e","latestUpstreamHash":"499ea5e359d9fe95d326d6380343de061c468e4e","nextCheckDueAt":"2026-10-22T19:48:45.671Z"}},{"id":"cmvi01dr519zfad072bcway97","slug":"cloud-sql-basics","publicId":"f6d4df77-1057-47c7-911f-c1f9e96bcdd0","name":"cloud-sql-basics","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:26.821Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/cloud-sql-basics","findings":[{"id":"cmvi01dr519zgad07gh6xjlg8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/client-library-usage.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvi01dr519zhad07xtnzvg9u","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:58:38.478Z","lastVerifiedAt":"2026-10-21T10:58:38.478Z","lastChangeDetectedAt":"2026-10-21T10:54:39.303Z","scannedHash":"3a8cefbb70599a75a720bc581fd3bcaf9f7bdbc4","latestUpstreamHash":"3a8cefbb70599a75a720bc581fd3bcaf9f7bdbc4","nextCheckDueAt":"2026-10-22T11:42:06.754Z"}},{"id":"cmv7xymfqe69xad06euy11a5l","slug":"google-cloud-networking-observability","publicId":"2e0e2914-1adc-4a36-825d-399ae420a413","name":"google-cloud-networking-observability","description":">-","author":"","version":"1.0.5","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:26.758Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-networking-observability","findings":[{"id":"cmv7xymfqe69yad06dv2tlwu2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmv7xymfqe69zad06xr9vgh39","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:02:39.312Z","lastVerifiedAt":"2026-10-21T11:02:39.312Z","lastChangeDetectedAt":"2026-10-14T10:02:37.484Z","scannedHash":"6b2c3f39ce8fe0686d1423081e8fe2050e536b14","latestUpstreamHash":"6b2c3f39ce8fe0686d1423081e8fe2050e536b14","nextCheckDueAt":"2026-10-22T12:49:38.305Z"}},{"id":"cmvim1kwi1inwad07xqax7tim","slug":"google-cloud-waf-cost-optimization","publicId":"6360f708-d95f-4640-8eeb-3975ad7219b8","name":"google-cloud-waf-cost-optimization","description":"Evaluates Google Cloud workloads for cost efficiency and FinOps alignment using the Google Cloud Well-Architected Framework Cost Optimization pillar. Use when the user asks to analyze Google Cloud spend, reduce cloud bills, rightsize resources (for example, Compute, GKE, Storage, Databases), evaluate discount options (for example, CUDs, SUDs, Spot VMs), or eliminate idle capacity. Do not use for standalone product pricing lookups or non-cost architecture design.","author":"","version":"1.0.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:26.756Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-waf-cost-optimization","findings":[{"id":"cmvim1kwi1inxad071e7vn89e","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvim1kwj1inyad077tkh1701","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:14:39.500Z","lastVerifiedAt":"2026-10-21T21:14:39.500Z","lastChangeDetectedAt":"2026-10-21T21:12:21.975Z","scannedHash":"3b98e5ce36c983a75c29b5bfbd942c99b6a3c25f","latestUpstreamHash":"3b98e5ce36c983a75c29b5bfbd942c99b6a3c25f","nextCheckDueAt":"2026-10-22T19:07:58.923Z"}},{"id":"cmvijgz0u1i85ad07eor2i8db","slug":"google-cloud-waf-performance-optimization","publicId":"cc03c254-460d-495c-be6d-c6a8167d9555","name":"google-cloud-waf-performance-optimization","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-12T13:03:26.754Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-waf-performance-optimization","findings":[{"id":"cmvijgz0u1i86ad07e4b5dpxg","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvijgz0u1i87ad07soab39ae","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:02:38.584Z","lastVerifiedAt":"2026-10-21T20:02:38.584Z","lastChangeDetectedAt":"2026-10-21T20:01:41.526Z","scannedHash":"8e28e9805004f46f5b486126fa127f5d0f90764e","latestUpstreamHash":"8e28e9805004f46f5b486126fa127f5d0f90764e","nextCheckDueAt":"2026-10-22T19:24:45.724Z"}},{"id":"cmuxm1drx20m5ad07kpamwea9","slug":"gemini-agents-api","publicId":"46335aa2-77e4-4861-926f-d6ac776de633","name":"gemini-agents-api","description":"Manages custom Agent resources on Gemini Enterprise Agent Platform. Use when the user wants to programmatically create, configure, list, update, or delete stateful, server-managed Agent resources (including mounting files, skills, and tools) before executing conversations.","author":"","version":"1.0.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:11:05.187Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/gemini-agents-api","findings":[{"id":"cmuxm1drx20m6ad0780iv2xes","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm1drx20m7ad0741vkff44","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:35:39.571Z","lastVerifiedAt":"2026-10-22T03:35:39.571Z","lastChangeDetectedAt":"2026-10-08T05:57:35.510Z","scannedHash":"f638b712a67ec7700c14f97f55c60f88d5f4f903","latestUpstreamHash":"f638b712a67ec7700c14f97f55c60f88d5f4f903","nextCheckDueAt":"2026-10-23T03:14:55.994Z"}},{"id":"cmvfvdlr70webad074uwbtam8","slug":"gcloud","publicId":"af851abd-f04a-4a00-a2f1-44ea54099e08","name":"gcloud","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:11:02.346Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/gcloud","findings":[{"id":"cmvfvdlr70wecad07jf27lcy8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvfvdlr70wedad07ccwgkpdm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:49:58.431Z","lastVerifiedAt":"2026-10-21T14:49:58.431Z","lastChangeDetectedAt":"2026-10-20T15:39:04.402Z","scannedHash":"1005ea84462339f391d44a93d7dc64a361007807","latestUpstreamHash":"1005ea84462339f391d44a93d7dc64a361007807","nextCheckDueAt":"2026-10-22T15:30:58.738Z"}},{"id":"cmvgdt6oo10nwad077v7r7ywn","slug":"google-cloud-recipe-auth","publicId":"75b42324-71d1-446c-8295-22bd2d81b736","name":"google-cloud-recipe-auth","description":"Provides expert guidance on Identity and Access Management (IAM) and authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.","author":"","version":"1.0.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:11:00.577Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-recipe-auth","findings":[{"id":"cmvgdt6op10nxad07godsurn3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvgdt6op10nyad07uprnso10","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:56:13.548Z","lastVerifiedAt":"2026-10-21T05:56:13.548Z","lastChangeDetectedAt":"2026-10-20T07:47:42.735Z","scannedHash":"d4d99becf3987748ca6b8221a9e76c724f216b9f","latestUpstreamHash":"d4d99becf3987748ca6b8221a9e76c724f216b9f","nextCheckDueAt":"2026-10-22T08:12:28.424Z"}},{"id":"cmuyxb94a1hsxad06q0pthjf4","slug":"agent-platform-deploy","publicId":"8c3c24b5-0f51-4927-b9e5-e2fcbc13fb4a","name":"agent-platform-deploy","description":">-","author":"","version":"1.0.4","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:10:58.289Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/agent-platform-deploy","findings":[{"id":"cmuyxb94a1hsyad0694og4ze5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuyxb94a1hszad06x283wvq6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuyxb94a1ht0ad06w1ghghtb","source":"cisco","category":"security","label":"File extension does not match actual content type","detail":"references/undeploy_guide.md — Markdown file 'undeploy_guide.md' reads mostly as Shell script (shell). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.","severity":"low","ruleId":"FILE_MAGIC_MISMATCH"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:22:41.560Z","lastVerifiedAt":"2026-10-21T20:22:41.560Z","lastChangeDetectedAt":"2026-10-09T10:40:29.435Z","scannedHash":"60e0889968e3ac11fe22953a2c5cba593ab15f69","latestUpstreamHash":"60e0889968e3ac11fe22953a2c5cba593ab15f69","nextCheckDueAt":"2026-10-22T20:30:20.774Z"}},{"id":"cmviv5i771khkad077a9y3iqa","slug":"google-cloud-waf-sustainability","publicId":"3e205ff4-a92c-4653-b3e7-35a0e73ce96f","name":"google-cloud-waf-sustainability","description":">-","author":"","version":"1.0.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:10:56.809Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-waf-sustainability","findings":[{"id":"cmviv5i771khlad07ja7c9mdn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmviv5i771khmad07b5ltlfqh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:29:38.954Z","lastVerifiedAt":"2026-10-22T01:29:38.954Z","lastChangeDetectedAt":"2026-10-22T01:28:39.435Z","scannedHash":"94571f44c2c3525d9b6e588bf3c9515546f22744","latestUpstreamHash":"94571f44c2c3525d9b6e588bf3c9515546f22744","nextCheckDueAt":"2026-10-23T00:19:21.811Z"}},{"id":"cmuyw62id1cugad06fxzuto6i","slug":"agent-platform-tuning","publicId":"814e9fc5-5801-4f50-8379-0c3af033b098","name":"agent-platform-tuning","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:10:54.674Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/agent-platform-tuning","findings":[{"id":"cmuyw62id1cuhad06n4qxm9sp","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuyw62id1cuiad06fg7uwlt1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuyw62id1cujad06pmgknntn","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/tune_open_model.py:71 — Script contacts or configures 'console.cloud.google.com' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:35:06.999Z","lastVerifiedAt":"2026-10-22T00:35:06.999Z","lastChangeDetectedAt":"2026-10-09T12:16:29.637Z","scannedHash":"a7c8dee32420433981bbee0630afeba619ad8ac5","latestUpstreamHash":"a7c8dee32420433981bbee0630afeba619ad8ac5","nextCheckDueAt":"2026-10-22T22:54:35.095Z"}},{"id":"cmuxilm6x0r0oad07et0f759k","slug":"gemini-interactions-api","publicId":"ed179bc0-f38d-4f48-a100-3cf3426d5da0","name":"gemini-interactions-api","description":"Guides the usage of Gemini Interactions API on Gemini Enterprise Agent Platform. Use when the user wants to use the stateful, server-managed Interactions API for multi-turn conversations, background execution, streaming, structured output, and function calling on the Agent Platform.","author":"","version":"2.0.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:10:54.670Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/gemini-interactions-api","findings":[{"id":"cmuxilm6y0r0pad075yqqjmow","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxilm6y0r0qad07mwveqbif","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:12:58.260Z","lastVerifiedAt":"2026-10-21T13:12:58.260Z","lastChangeDetectedAt":"2026-10-09T05:38:28.877Z","scannedHash":"b964a9c55e564bc53b2e87b26a32bda0f87223ed","latestUpstreamHash":"b964a9c55e564bc53b2e87b26a32bda0f87223ed","nextCheckDueAt":"2026-10-22T15:23:59.764Z"}},{"id":"cmvip1l0h1jagad078glgn6vq","slug":"google-cloud-waf-security","publicId":"39182e2f-cb75-4cbd-a0ce-d396e9333b19","name":"google-cloud-waf-security","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:10:53.478Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/google-cloud-waf-security","findings":[{"id":"cmvip1l0h1jahad07ulkk9hoh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvip1l0h1jaiad07wkcohlac","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:59:37.289Z","lastVerifiedAt":"2026-10-21T22:59:37.289Z","lastChangeDetectedAt":"2026-10-21T22:55:02.281Z","scannedHash":"e154a69c8ccd69564af1245d88bc77ac12311b22","latestUpstreamHash":"e154a69c8ccd69564af1245d88bc77ac12311b22","nextCheckDueAt":"2026-10-23T00:07:17.513Z"}},{"id":"cmvfn0nte0v8uad07e0qcxytd","slug":"cloud-run-basics","publicId":"30e55c85-3779-4f5f-8e78-595b142e3b28","name":"cloud-run-basics","description":">-","author":"","version":"1.0.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-06-02T12:10:53.473Z","sourceUrl":"https://github.com/google/skills/tree/main/skills/cloud/cloud-run-basics","findings":[{"id":"cmvfn0nte0v8vad07c4zu1xp5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvfn0nte0v8wad07f96fev64","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:14:41.262Z","lastVerifiedAt":"2026-10-21T18:14:41.262Z","lastChangeDetectedAt":"2026-10-20T16:05:04.428Z","scannedHash":"03d252816fc8e4d2444d2574ad53f0522ab744b2","latestUpstreamHash":"03d252816fc8e4d2444d2574ad53f0522ab744b2","nextCheckDueAt":"2026-10-22T18:32:01.116Z"}}],"publisherSupplied":["skills[].name","skills[].description","skills[].author","skills[].version","skills[].license"]}