{"id":"cmsdr8fur01vhad06gf41fbyy","owner":"microsoft","name":"skills","url":"https://github.com/microsoft/skills","lastScannedAt":"2026-10-21T18:35:40.840Z","freshness":{"status":"changed","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:13:06.958Z","lastVerifiedAt":null,"lastChangeDetectedAt":"2026-10-22T00:13:06.958Z","scannedHash":null,"latestUpstreamHash":"bd924c165294e72356fdd19260ac81e5a968d889","nextCheckDueAt":"2026-10-22T23:10:57.926Z"},"skills":[{"id":"cmuxjvn6l19wiad07yzi605dp","slug":"slack-to-teams","publicId":"627f992d-2dc3-4053-8ae3-3b2f11e38835","name":"slack-to-teams","description":"Sub-skill of microsoft-365-agents-toolkit. Routed expert system with 100+ micro-expert files for migrating Slack bots to Teams, cross-platform bridging, and dual-platform bot development. USE FOR: migrating Slack bot to Teams, adding Teams support to Slack bot, building dual-platform bots, converting Block Kit to Adaptive Cards, identity/OAuth bridging, deploying bots to Azure or AWS, configuring AI model providers. DO NOT USE FOR: general web development, non-bot projects, standalone Teams development without Slack (use parent skill instead).","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-06T00:12:57.409Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/microsoft-365-agents-toolkit/skills/teams-app-developer/slack-to-teams","findings":[{"id":"cmuxjvn6l19wjad07i2fcqjdl","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:18:39.555Z","lastVerifiedAt":"2026-10-22T03:18:39.555Z","lastChangeDetectedAt":"2026-08-25T19:01:23.959Z","scannedHash":"41f03fb5bb8791de6d0c2d1c76764372d906bc3c","latestUpstreamHash":"41f03fb5bb8791de6d0c2d1c76764372d906bc3c","nextCheckDueAt":"2026-10-23T02:17:12.728Z"}},{"id":"cmuxjxt9g1dzfad072ec1fv6g","slug":"teams-app-developer","publicId":"3387db91-84b0-4980-860a-12bcea8cf699","name":"teams-app-developer","description":"Builds, tests, and deploys Microsoft 365 apps and agents for Teams and Copilot. Includes sub-skills for project creation, local testing, cloud deployment, troubleshooting, and Slack-to-Teams migration. USE FOR: Teams agent, bot, tab, message extension, Declarative Agents, Custom Engine Agents, local testing, Agents Playground, Azure resource provision, remote deployment, Slack to Teams migration, cross-platform bot development, Block Kit to Adaptive Cards conversion. DO NOT USE FOR: general web development, non-bot/non-Teams projects.","author":"","version":"","license":"MIT","overallGrade":"F","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:56.677Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/microsoft-365-agents-toolkit/skills/teams-app-developer/","findings":[{"id":"cmuxjxt9g1dzgad070vruntbm","source":"cisco","category":"security","label":"Skill package contains many files","detail":". — Skill package contains 148 files. Large file counts increase attack surface and may indicate bundled dependencies or unnecessary content.","severity":"low","ruleId":"EXCESSIVE_FILE_COUNT"},{"id":"cmuxjxt9g1dzhad07b71khgh1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxjxt9g1dziad07pvfnkp1s","source":"cisco","category":"security","label":"Dangerous data flow in command pipeline","detail":"experts/models/oss-openai-compatible-ts.md:1 — Pipeline downloads data from the network and executes it: `curl -fsSL https://ollama.com/install.sh | sh`. This is a remote code execution pattern.","severity":"high","ruleId":"PIPELINE_TAINT_FLOW"},{"id":"cmuxjxt9g1dzjad07n2cexu9h","source":"cisco","category":"security","label":"Dangerous data flow in command pipeline","detail":"experts/slack/cli.getting-started.md:1 — Pipeline downloads data from the network and executes it: `irm https://downloads.slack-edge.com/slack-cli/install-windows.ps1 | iex`. This is a remote code execution pattern.","severity":"high","ruleId":"PIPELINE_TAINT_FLOW"},{"id":"cmuxjxt9h1dzkad07f0ol2fpb","source":"cisco","category":"security","label":"Dangerous data flow in command pipeline","detail":"experts/slack/cli.getting-started.md:1 — Pipeline downloads data from the network and executes it: `curl -fsSL https://downloads.slack-edge.com/slack-cli/install.sh | bash`. This is a remote code execution pattern.","severity":"high","ruleId":"PIPELINE_TAINT_FLOW"},{"id":"cmuxjxt9h1dzlad07jfeqf36m","source":"cisco","category":"security","label":"Archive extraction followed by execution","detail":"test-playground/playground.md:14 — An archive is extracted and its contents are then executed. This pattern can deliver and run malicious payloads hidden in archives.","severity":"high","ruleId":"COMPOUND_EXTRACT_EXECUTE"},{"id":"cmuxjxt9h1dzmad07l63l17zo","source":"cisco","category":"security","label":"Dangerous data flow in command pipeline","detail":"troubleshoot/troubleshoot.md:2 — Pipeline downloads data from the network and executes it: `curl -s https://raw.githubusercontent.com/OfficeDev/microsoft-365-agents-toolkit/dev/.github/scripts/install-agentsplayground-linux.sh | bash`. This is a remote code execution pattern.","severity":"high","ruleId":"PIPELINE_TAINT_FLOW"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"F","criticalCount":0,"highCount":5}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:54:39.303Z","lastVerifiedAt":"2026-10-21T10:54:39.303Z","lastChangeDetectedAt":"2026-08-14T15:37:28.695Z","scannedHash":"164d327f3039e037b0ad2cdabeee01e2c6aa6d3f","latestUpstreamHash":"164d327f3039e037b0ad2cdabeee01e2c6aa6d3f","nextCheckDueAt":"2026-10-22T09:21:17.267Z"}},{"id":"cmuxjvn3r19vnad07polowvg4","slug":"entra-app-registration","publicId":"e1b68dcd-3c10-47c5-b516-0ab59cf9d3d5","name":"entra-app-registration","description":"Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.","author":"Microsoft","version":"1.2.1","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:51.933Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/entra-app-registration","findings":[{"id":"cmuxjvn3r19voad07kl4ivl6c","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:39:01.885Z","lastVerifiedAt":"2026-10-21T22:39:01.885Z","lastChangeDetectedAt":"2026-08-25T12:26:05.102Z","scannedHash":"051071c18ecb38347076f857819987e3ec37685e","latestUpstreamHash":"051071c18ecb38347076f857819987e3ec37685e","nextCheckDueAt":"2026-10-22T21:34:30.299Z"}},{"id":"cmuxjxfkh1cgxad07n04xo86n","slug":"azure-storage-file-datalake-py","publicId":"0000e7d4-6488-41a1-989b-de9cca8a88c4","name":"azure-storage-file-datalake-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:51.716Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-storage-file-datalake-py","findings":[{"id":"cmuxjxfkh1cgyad076ilr55rx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:51:06.909Z","lastVerifiedAt":"2026-10-21T23:51:06.909Z","lastChangeDetectedAt":"2026-08-25T16:51:22.756Z","scannedHash":"dd1e5344aef7bd25e2480a9af6a89128923e53db","latestUpstreamHash":"dd1e5344aef7bd25e2480a9af6a89128923e53db","nextCheckDueAt":"2026-10-23T01:54:27.291Z"}},{"id":"cmuxjx0m91bjuad07ebst6a2d","slug":"azure-ai-contentsafety-ts","publicId":"60eebb83-5cc7-4ad4-b92f-232060e480c2","name":"azure-ai-contentsafety-ts","description":"Analyze text and images for harmful content using Azure AI Content Safety (@azure-rest/ai-content-safety). Use when moderating user-generated content, detecting hate speech, violence, sexual content, or self-harm, or managing custom blocklists.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:51.712Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-ai-contentsafety-ts","findings":[{"id":"cmuxjx0m91bjvad07i210dq0n","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:49:08.370Z","lastVerifiedAt":"2026-10-21T19:49:08.370Z","lastChangeDetectedAt":"2026-08-14T15:52:28.684Z","scannedHash":"1d1b8aef636c704c572507714fa26c2e73ec3dce","latestUpstreamHash":"1d1b8aef636c704c572507714fa26c2e73ec3dce","nextCheckDueAt":"2026-10-22T19:42:24.341Z"}},{"id":"cmuxjxfol1ciaad07o2eitxdx","slug":"azure-ai-voicelive-java","publicId":"3505896f-4f14-4a49-8326-5a385a5e651a","name":"azure-ai-voicelive-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:51.709Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-ai-voicelive-java","findings":[{"id":"cmuxjxfol1cidad072si1vmor","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:04:41.353Z","lastVerifiedAt":"2026-10-21T19:04:41.353Z","lastChangeDetectedAt":"2026-08-14T15:57:28.699Z","scannedHash":"ac2032a229e8853b9d4957a9d9146ca958eaeed4","latestUpstreamHash":"ac2032a229e8853b9d4957a9d9146ca958eaeed4","nextCheckDueAt":"2026-10-22T18:38:19.197Z"}},{"id":"cmuxjvlp919j2ad074uvx7oem","slug":"azure-ai-ml-py","publicId":"64978d31-320f-4fb6-9377-d93e9859d3a4","name":"azure-ai-ml-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:50.104Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-ml-py","findings":[{"id":"cmuxjvlp919j3ad07wdeiqjx4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:32:41.189Z","lastVerifiedAt":"2026-10-21T17:32:41.189Z","lastChangeDetectedAt":"2026-08-25T12:32:05.118Z","scannedHash":"4d28e7e22af766b358524eb42873aec1bd0680d8","latestUpstreamHash":"4d28e7e22af766b358524eb42873aec1bd0680d8","nextCheckDueAt":"2026-10-22T19:07:22.399Z"}},{"id":"cmuxjwy0e1bgfad07eprrxml0","slug":"azure-mgmt-fabric-py","publicId":"f70ddf6d-253d-488c-88e7-98b686165e8e","name":"azure-mgmt-fabric-py","description":"|-","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:50.103Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-mgmt-fabric-py","findings":[{"id":"cmuxjwy0e1bggad07qlim300q","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:38:08.291Z","lastVerifiedAt":"2026-10-21T19:38:08.291Z","lastChangeDetectedAt":"2026-08-25T12:25:05.101Z","scannedHash":"26c5eecd68541a029caa2896af3df606d3a77de2","latestUpstreamHash":"26c5eecd68541a029caa2896af3df606d3a77de2","nextCheckDueAt":"2026-10-22T18:46:35.231Z"}},{"id":"cmuxjxmj91d5cad07bnlsrevb","slug":"azure-resource-manager-cosmosdb-dotnet","publicId":"a9347a23-5821-421d-8d82-6cc700626e87","name":"azure-resource-manager-cosmosdb-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:50.099Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-resource-manager-cosmosdb-dotnet","findings":[{"id":"cmuxjxmj91d5dad071t4jwf8s","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:50:41.328Z","lastVerifiedAt":"2026-10-21T18:50:41.328Z","lastChangeDetectedAt":"2026-08-25T19:37:24.053Z","scannedHash":"ae77139599d20bf57a395beb84a68190b5e4382e","latestUpstreamHash":"ae77139599d20bf57a395beb84a68190b5e4382e","nextCheckDueAt":"2026-10-22T19:50:57.864Z"}},{"id":"cmuxjxmx91d8oad07w2bzztwf","slug":"azure-ai-anomalydetector-java","publicId":"717734f9-5baf-4931-bc67-bc0a5730a1dd","name":"azure-ai-anomalydetector-java","description":"Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate/multivariate anomaly detection, time-series analysis, or AI-powered monitoring.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:50.031Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-ai-anomalydetector-java","findings":[{"id":"cmuxjxmx91d8pad07zw0b4zvl","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:21:39.495Z","lastVerifiedAt":"2026-10-22T02:21:39.495Z","lastChangeDetectedAt":"2026-08-25T17:49:22.975Z","scannedHash":"b3e4d266af84eb18450c25a7d8c050824f9e5baa","latestUpstreamHash":"b3e4d266af84eb18450c25a7d8c050824f9e5baa","nextCheckDueAt":"2026-10-23T03:14:54.744Z"}},{"id":"cmuxjvlp719ixad07lcmt57k1","slug":"azure-eventgrid-java","publicId":"a1d1db60-69ee-4813-922b-18aa67b7214b","name":"azure-eventgrid-java","description":"Build event-driven applications with Azure Event Grid SDK for Java. Use when publishing events, implementing pub/sub patterns, or integrating with Azure services via events.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:50.003Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-eventgrid-java","findings":[{"id":"cmuxjvlp719iyad070t4t78mj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:57:58.433Z","lastVerifiedAt":"2026-10-21T14:57:58.433Z","lastChangeDetectedAt":"2026-08-14T15:29:28.693Z","scannedHash":"46ee0d19d1b62cd236e6cf0dd95d9c2507728fb5","latestUpstreamHash":"46ee0d19d1b62cd236e6cf0dd95d9c2507728fb5","nextCheckDueAt":"2026-10-22T15:53:41.176Z"}},{"id":"cmuxjvn3p19viad07h3gex3z5","slug":"azure-eventhub-py","publicId":"20316278-5895-490c-879e-277fa96d6d4c","name":"azure-eventhub-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.914Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-eventhub-py","findings":[{"id":"cmuxjvn3q19vjad072knn6a83","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:47:41.215Z","lastVerifiedAt":"2026-10-21T17:47:41.215Z","lastChangeDetectedAt":"2026-08-25T18:12:23.259Z","scannedHash":"0fbf762f81763b55040414428dcb0a3a0d29bd5f","latestUpstreamHash":"0fbf762f81763b55040414428dcb0a3a0d29bd5f","nextCheckDueAt":"2026-10-22T18:10:04.956Z"}},{"id":"cmuxk2g071lkiad071tapeqjk","slug":"azure-appconfiguration-ts","publicId":"47f8a86d-b2f0-4844-8753-a641bfe1b7b4","name":"azure-appconfiguration-ts","description":"Build applications using Azure App Configuration SDK for JavaScript (@azure/app-configuration). Use when working with configuration settings, feature flags, Key Vault references, dynamic refresh, or centralized configuration management.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.905Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-appconfiguration-ts","findings":[{"id":"cmuxk2g081lkjad07ctqf6ze3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:52:41.223Z","lastVerifiedAt":"2026-10-21T17:52:41.223Z","lastChangeDetectedAt":"2026-08-25T18:10:23.259Z","scannedHash":"bd25e7da45cd666463be87ca57cebbbd7bfdd228","latestUpstreamHash":"bd25e7da45cd666463be87ca57cebbbd7bfdd228","nextCheckDueAt":"2026-10-22T18:10:10.597Z"}},{"id":"cmuxk2vaf1n35ad07vje6ztjh","slug":"azure-ai-voicelive-dotnet","publicId":"b4b26e37-01f9-4383-9b59-d1f6f2d733ad","name":"azure-ai-voicelive-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.818Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-ai-voicelive-dotnet","findings":[{"id":"cmuxk2vaf1n36ad07tomrpv08","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:01:58.405Z","lastVerifiedAt":"2026-10-21T14:01:58.405Z","lastChangeDetectedAt":"2026-08-14T15:26:28.692Z","scannedHash":"5569dda3e6dba27f9101b32be55992a6f62443c9","latestUpstreamHash":"5569dda3e6dba27f9101b32be55992a6f62443c9","nextCheckDueAt":"2026-10-22T12:03:23.956Z"}},{"id":"cmuxk2g2s1ll3ad07dy9un4zc","slug":"azure-web-pubsub-ts","publicId":"46b2f69c-c2cc-49a5-aae9-f7d1f7c45f34","name":"azure-web-pubsub-ts","description":"Build real-time messaging applications using Azure Web PubSub SDKs for JavaScript (@azure/web-pubsub, @azure/web-pubsub-client). Use when implementing WebSocket-based real-time features, pub/sub messaging, group chat, or live notifications.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.816Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-web-pubsub-ts","findings":[{"id":"cmuxk2g2t1ll4ad07vqm6t0ek","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:51:58.431Z","lastVerifiedAt":"2026-10-21T14:51:58.431Z","lastChangeDetectedAt":"2026-08-14T14:31:28.667Z","scannedHash":"d58b609f6ec1d685143378e3e43f9e08f0883917","latestUpstreamHash":"d58b609f6ec1d685143378e3e43f9e08f0883917","nextCheckDueAt":"2026-10-22T14:24:47.820Z"}},{"id":"cmuxjxfoj1ci2ad0758wnqy2j","slug":"azure-microsoft-playwright-testing-ts","publicId":"c70a29f7-e10e-40fb-b218-4f9c6f364e45","name":"azure-microsoft-playwright-testing-ts","description":"Run Playwright tests at scale using Azure Playwright Workspaces (formerly Microsoft Playwright Testing). Use when scaling browser tests across cloud-hosted browsers, integrating with CI/CD pipelines, or publishing test results to the Azure portal.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.811Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-microsoft-playwright-testing-ts","findings":[{"id":"cmuxjxfoj1ci3ad075il8n98s","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:20:39.259Z","lastVerifiedAt":"2026-10-21T10:20:39.259Z","lastChangeDetectedAt":"2026-08-14T15:36:28.695Z","scannedHash":"2c64ca04d7e33d27405771bad5d6de42ce8433ac","latestUpstreamHash":"2c64ca04d7e33d27405771bad5d6de42ce8433ac","nextCheckDueAt":"2026-10-22T08:08:31.126Z"}},{"id":"cmuxk2g331llgad07tm63yjmu","slug":"azure-storage-blob-py","publicId":"d5bf59c5-5546-4a45-9d8c-4164bc826969","name":"azure-storage-blob-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.610Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py","findings":[{"id":"cmuxk2g331llhad075yr529ef","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:53:41.335Z","lastVerifiedAt":"2026-10-21T18:53:41.335Z","lastChangeDetectedAt":"2026-08-14T14:40:28.668Z","scannedHash":"b0b817e0231ec11785ae5b2e6cbe32ff362c320e","latestUpstreamHash":"b0b817e0231ec11785ae5b2e6cbe32ff362c320e","nextCheckDueAt":"2026-10-22T21:17:39.353Z"}},{"id":"cmuxjxfr41cioad07171yucze","slug":"azure-mgmt-apimanagement-py","publicId":"5b5af9db-d123-47be-82b1-faff56fb9290","name":"azure-mgmt-apimanagement-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.607Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-mgmt-apimanagement-py","findings":[{"id":"cmuxjxfr41cipad07wtp22hlb","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:24:41.176Z","lastVerifiedAt":"2026-10-21T17:24:41.176Z","lastChangeDetectedAt":"2026-08-25T11:25:23.466Z","scannedHash":"e7cf59c979b611b71a2b84ce83da54edbf68fe7c","latestUpstreamHash":"e7cf59c979b611b71a2b84ce83da54edbf68fe7c","nextCheckDueAt":"2026-10-22T16:24:56.665Z"}},{"id":"cmuxjvn0x19unad07h4ly4cnf","slug":"azure-monitor-opentelemetry-ts","publicId":"667d5378-723e-4674-a952-01aaf88cb02b","name":"azure-monitor-opentelemetry-ts","description":"Instrument applications with Azure Monitor and OpenTelemetry for JavaScript (@azure/monitor-opentelemetry). Use when adding distributed tracing, metrics, and logs to Node.js applications with Application Insights.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.603Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-monitor-opentelemetry-ts","findings":[{"id":"cmuxjvn0x19uoad07a17tczo2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:26:08.286Z","lastVerifiedAt":"2026-10-21T19:26:08.286Z","lastChangeDetectedAt":"2026-08-25T12:20:05.085Z","scannedHash":"745333bd43aa40a5a5639af738ade6ae35426c08","latestUpstreamHash":"745333bd43aa40a5a5639af738ade6ae35426c08","nextCheckDueAt":"2026-10-22T19:26:45.457Z"}},{"id":"cmuxjvjoc1904ad07es5ttw20","slug":"azure-ai-contentsafety-py","publicId":"8ffbd5b5-989b-4e34-ac98-039676f94173","name":"azure-ai-contentsafety-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.587Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-contentsafety-py","findings":[{"id":"cmuxjvjoc1905ad0730l8fy1o","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:30:58.422Z","lastVerifiedAt":"2026-10-21T14:30:58.422Z","lastChangeDetectedAt":"2026-08-25T12:33:05.122Z","scannedHash":"63dca1fa9603fd7514ce7c586bb1cf1a51ad3761","latestUpstreamHash":"63dca1fa9603fd7514ce7c586bb1cf1a51ad3761","nextCheckDueAt":"2026-10-22T16:22:47.463Z"}},{"id":"cmuxk2v8v1n2tad07ao9vb13y","slug":"azure-monitor-opentelemetry-exporter-py","publicId":"647f7b7f-c596-4ecb-93cd-7ac8e08b0959","name":"azure-monitor-opentelemetry-exporter-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.586Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-monitor-opentelemetry-exporter-py","findings":[{"id":"cmuxk2v8v1n2uad07fserjfdi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:01:08.372Z","lastVerifiedAt":"2026-10-21T20:01:08.372Z","lastChangeDetectedAt":"2026-08-25T11:26:23.555Z","scannedHash":"b9ef1b1944018c8adb2db2e3dae9c654d58f13d6","latestUpstreamHash":"b9ef1b1944018c8adb2db2e3dae9c654d58f13d6","nextCheckDueAt":"2026-10-22T19:56:11.867Z"}},{"id":"cmuxjwzmf1bjcad07xms59oyq","slug":"azure-communication-sms-java","publicId":"1ae27ae4-7aff-4443-b4a4-57097f12d4b7","name":"azure-communication-sms-java","description":"Send SMS messages with Azure Communication Services SMS Java SDK. Use when implementing SMS notifications, alerts, OTP delivery, bulk messaging, or delivery reports.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:49.008Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-communication-sms-java","findings":[{"id":"cmuxjwzmf1bjdad07kcxsyerj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:25:41.569Z","lastVerifiedAt":"2026-10-21T20:25:41.569Z","lastChangeDetectedAt":"2026-08-25T18:56:23.389Z","scannedHash":"d4bea547144aea210f1dcb782658f947847d72a6","latestUpstreamHash":"d4bea547144aea210f1dcb782658f947847d72a6","nextCheckDueAt":"2026-10-22T20:24:24.302Z"}},{"id":"cmuxjxfjl1cgsad07svhal6yx","slug":"azure-monitor-opentelemetry-exporter-java","publicId":"bbf59af9-9956-4494-83fc-bec0685290d6","name":"azure-monitor-opentelemetry-exporter-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.999Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-monitor-opentelemetry-exporter-java","findings":[{"id":"cmuxjxfjl1cgtad07jbzbwfyn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:25:01.668Z","lastVerifiedAt":"2026-10-21T22:25:01.668Z","lastChangeDetectedAt":"2026-08-14T15:49:28.700Z","scannedHash":"1fb82a6bf0c567a8263c6dcf63d72010aab761c2","latestUpstreamHash":"1fb82a6bf0c567a8263c6dcf63d72010aab761c2","nextCheckDueAt":"2026-10-22T23:25:59.988Z"}},{"id":"cmuxjxfok1ci7ad079ux3we3t","slug":"azure-communication-callautomation-java","publicId":"39a1f5dd-faa8-4015-9b14-7a8fa09ba052","name":"azure-communication-callautomation-java","description":"Build call automation workflows with Azure Communication Services Call Automation Java SDK. Use when implementing IVR systems, call routing, call recording, DTMF recognition, text-to-speech, or AI-powered call flows.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.998Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-communication-callautomation-java","findings":[{"id":"cmuxjxfol1ci9ad074lpz5hhn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:07:39.483Z","lastVerifiedAt":"2026-10-22T02:07:39.483Z","lastChangeDetectedAt":"2026-08-25T18:58:23.389Z","scannedHash":"5b42ac2158632a3e14fad272ec0510864f459ed2","latestUpstreamHash":"5b42ac2158632a3e14fad272ec0510864f459ed2","nextCheckDueAt":"2026-10-23T03:34:34.752Z"}},{"id":"cmuxjx0p21bk1ad07tfofxvih","slug":"azure-ai-contentsafety-java","publicId":"1c68b2fe-4f49-4902-a43a-8814b3d79711","name":"azure-ai-contentsafety-java","description":"Build content moderation applications with Azure AI Content Safety SDK for Java. Use when implementing text/image analysis, blocklist management, or harm detection for hate, violence, sexual content, and self-harm.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.925Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-ai-contentsafety-java","findings":[{"id":"cmuxjx0p31bk2ad07vawpxt50","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:05:39.315Z","lastVerifiedAt":"2026-10-21T11:05:39.315Z","lastChangeDetectedAt":"2026-08-14T14:41:28.668Z","scannedHash":"13114aaaa55d03f8e9d0f450b1af0fc9a7dd053f","latestUpstreamHash":"13114aaaa55d03f8e9d0f450b1af0fc9a7dd053f","nextCheckDueAt":"2026-10-22T12:35:50.386Z"}},{"id":"cmuxjvn3o19vdad07p9gmefj2","slug":"azure-ai-vision-imageanalysis-java","publicId":"9beb7b54-4245-43e9-b8b3-093cf19d7acc","name":"azure-ai-vision-imageanalysis-java","description":"Build image analysis applications with Azure AI Vision SDK for Java. Use when implementing image captioning, OCR text extraction, object detection, tagging, or smart cropping.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.915Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-ai-vision-imageanalysis-java","findings":[{"id":"cmuxjvn3o19vead073j74ftae","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:36:08.290Z","lastVerifiedAt":"2026-10-21T19:36:08.290Z","lastChangeDetectedAt":"2026-08-25T16:45:21.775Z","scannedHash":"86f720a7dbed3474b6e4da1d7593db81f9715145","latestUpstreamHash":"86f720a7dbed3474b6e4da1d7593db81f9715145","nextCheckDueAt":"2026-10-22T20:21:38.946Z"}},{"id":"cmuxjwzm91bj6ad07fe8158ry","slug":"azure-containerregistry-py","publicId":"7e9e7d42-3b9a-45d5-915a-9eb301ba3d64","name":"azure-containerregistry-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.808Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-containerregistry-py","findings":[{"id":"cmuxjwzm91bj7ad07dvupzn1v","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:41:13.407Z","lastVerifiedAt":"2026-10-21T04:41:13.407Z","lastChangeDetectedAt":"2026-08-25T21:18:30.571Z","scannedHash":"26cbed5d43ce55fad7487f71421fb9c12f59d7b7","latestUpstreamHash":"26cbed5d43ce55fad7487f71421fb9c12f59d7b7","nextCheckDueAt":"2026-10-22T04:53:54.570Z"}},{"id":"cmuxk2vau1n3fad07c5lbohxe","slug":"azure-data-tables-py","publicId":"0d04821a-2016-49b6-b3d4-e02cb452569e","name":"azure-data-tables-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.804Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-data-tables-py","findings":[{"id":"cmuxk2vav1n3gad07v2i3228f","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:35:21.905Z","lastVerifiedAt":"2026-10-21T20:35:21.905Z","lastChangeDetectedAt":"2026-08-14T15:53:28.687Z","scannedHash":"ffea94e6587f3dfd4db8123207e45dfd71f4c46d","latestUpstreamHash":"ffea94e6587f3dfd4db8123207e45dfd71f4c46d","nextCheckDueAt":"2026-10-22T22:55:18.298Z"}},{"id":"cmuxip4me0ut6ad078p227xit","slug":"azure-resource-visualizer","publicId":"95569a92-947f-42ce-bc9e-e3f89c828926","name":"azure-resource-visualizer","description":"Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources. WHEN: create architecture diagram, visualize Azure resources, show resource relationships, generate Mermaid diagram, analyze resource group, diagram my resources, architecture visualization, resource topology, map Azure infrastructure.","author":"Microsoft","version":"1.2.3","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-06T00:12:48.797Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-resource-visualizer","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:17:39.425Z","lastVerifiedAt":"2026-10-22T01:17:39.425Z","lastChangeDetectedAt":"2026-10-09T06:46:29.020Z","scannedHash":"766da0d5907e804ef1bb1245e306e3f99b598f92","latestUpstreamHash":"766da0d5907e804ef1bb1245e306e3f99b598f92","nextCheckDueAt":"2026-10-22T23:25:17.154Z"}},{"id":"cmv1ava3xbma5ad06z9kuq3am","slug":"azure-kusto","publicId":"735afa70-076f-4c46-ab08-b2249a7033b8","name":"azure-kusto","description":"Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis. WHEN: KQL queries, Kusto database queries, Azure Data Explorer, ADX clusters, log analytics, time series data, IoT telemetry, anomaly detection.","author":"Microsoft","version":"1.2.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.723Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-kusto","findings":[{"id":"cmv1ava3ybma6ad06lyebtgc3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:33:39.507Z","lastVerifiedAt":"2026-10-22T02:33:39.507Z","lastChangeDetectedAt":"2026-10-10T05:46:05.021Z","scannedHash":"8a2191fbf1dd17fc72fc3cc0429977215e2b55fb","latestUpstreamHash":"8a2191fbf1dd17fc72fc3cc0429977215e2b55fb","nextCheckDueAt":"2026-10-23T03:27:38.582Z"}},{"id":"cmuxk2vbf1n3rad07i6nu7moy","slug":"azure-monitor-query-py","publicId":"2ee91729-cd21-474a-958e-e44573c51387","name":"azure-monitor-query-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:48.721Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-monitor-query-py","findings":[{"id":"cmuxk2vbg1n3sad07vqcb30tw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:30:39.026Z","lastVerifiedAt":"2026-10-21T09:30:39.026Z","lastChangeDetectedAt":"2026-08-14T15:45:28.672Z","scannedHash":"6b4f1407426414aa44cd60566d0c49fd10493e73","latestUpstreamHash":"6b4f1407426414aa44cd60566d0c49fd10493e73","nextCheckDueAt":"2026-10-22T07:09:19.303Z"}},{"id":"cmuxit2g30ztyad07pqykpbbb","slug":"azure-app-onboard-prereq","publicId":"48b65649-f27a-4b01-b0ff-d185dc2229c1","name":"azure-app-onboard-prereq","description":"Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: \"evaluate my repo\", \"is my app ready to deploy\", \"what does my app need to deploy\", \"what do I need before deploying\", \"does my app need\", \"can I ship this to Azure\", \"scan my repo for issues\", \"is this app deployable\", \"check if my app is ready for Azure\", \"do I need a Dockerfile\", \"what's blocking my deployment\", \"are there any blockers\", \"are my dependencies compatible\", \"does Azure support my framework\", \"what needs to change before deploying\", \"check my app configuration\".","author":"Microsoft","version":"1.2.3","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-06T00:12:41.516Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard-prereq","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:13:21.977Z","lastVerifiedAt":"2026-10-21T21:13:21.977Z","lastChangeDetectedAt":"2026-10-09T08:55:29.255Z","scannedHash":"da6314ba04834970836b18ea0b39bf6a20cfde13","latestUpstreamHash":"da6314ba04834970836b18ea0b39bf6a20cfde13","nextCheckDueAt":"2026-10-22T20:28:10.841Z"}},{"id":"cmuxjvlpm19j7ad07z9myvyap","slug":"azure-mgmt-botservice-dotnet","publicId":"81ae0483-d519-4237-a253-8619c85ece80","name":"azure-mgmt-botservice-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.918Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-botservice-dotnet","findings":[{"id":"cmuxjvlpm19j8ad07mwi5gwsm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:03:06.940Z","lastVerifiedAt":"2026-10-22T00:03:06.940Z","lastChangeDetectedAt":"2026-08-14T14:49:28.671Z","scannedHash":"35acc4dd431bfb75320c3f00b9bb47b0f86c43c8","latestUpstreamHash":"35acc4dd431bfb75320c3f00b9bb47b0f86c43c8","nextCheckDueAt":"2026-10-23T02:13:19.311Z"}},{"id":"cmuxjxglu1ckpad072qq55vr9","slug":"entra-agent-id","publicId":"f41c17a9-d8ce-49e9-b2b3-f17d25767948","name":"entra-agent-id","description":"|","author":"","version":"","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.814Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/entra-agent-id","findings":[{"id":"cmuxjxglu1ckqad07uay7xgcc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjxglu1ckrad0731g2a9sv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxjxglu1cksad07x3zpy9jp","source":"cisco","category":"security","label":"Active instruction invokes dynamic code or process execution","detail":"SKILL.md:113 — SKILL.md contains a syntax-confirmed dynamic code or process execution call in active instructions.","severity":"high","ruleId":"ACTIVE_DYNAMIC_EXECUTION"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:09:06.844Z","lastVerifiedAt":"2026-10-21T23:09:06.844Z","lastChangeDetectedAt":"2026-08-14T15:39:28.672Z","scannedHash":"3ea709c1b312d75518093040b47faa2f7e23a238","latestUpstreamHash":"3ea709c1b312d75518093040b47faa2f7e23a238","nextCheckDueAt":"2026-10-22T22:30:20.931Z"}},{"id":"cmuxjxmme1d6bad073i3wngpu","slug":"azure-data-tables-java","publicId":"0ecc6702-3e57-4ad4-b252-3f2823472ff1","name":"azure-data-tables-java","description":"Build table storage applications with Azure Tables SDK for Java. Use when working with Azure Table Storage or Cosmos DB Table API for NoSQL key-value data, schemaless storage, or structured data at scale.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.724Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-data-tables-java","findings":[{"id":"cmuxjxmme1d6dad07vdog8you","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:27:41.183Z","lastVerifiedAt":"2026-10-21T17:27:41.183Z","lastChangeDetectedAt":"2026-08-14T15:58:28.697Z","scannedHash":"9aa33d977e6fec260080fb5a25dae296ccb3c9e8","latestUpstreamHash":"9aa33d977e6fec260080fb5a25dae296ccb3c9e8","nextCheckDueAt":"2026-10-22T17:43:44.255Z"}},{"id":"cmuxjxem31ce6ad07gdsr0idz","slug":"m365-agents-dotnet","publicId":"8cdbc45a-d60d-49e0-916a-2dbee585c367","name":"m365-agents-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.722Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/m365-agents-dotnet","findings":[{"id":"cmuxjxem31ce7ad079gdpxmss","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:57:58.402Z","lastVerifiedAt":"2026-10-21T13:57:58.402Z","lastChangeDetectedAt":"2026-08-25T21:15:27.957Z","scannedHash":"2f64c721e9639aede6ce2d0cd1402db021684c69","latestUpstreamHash":"2f64c721e9639aede6ce2d0cd1402db021684c69","nextCheckDueAt":"2026-10-22T13:05:34.487Z"}},{"id":"cmuxjvj8c18wiad07gfutrdy9","slug":"azure-ai-document-intelligence-ts","publicId":"8a150883-adce-49fa-bb85-dde3d79c24af","name":"azure-ai-document-intelligence-ts","description":"Extract text, tables, and structured data from documents using Azure Document Intelligence (@azure-rest/ai-document-intelligence). Use when processing invoices, receipts, IDs, forms, or building custom document models.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.703Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-ai-document-intelligence-ts","findings":[{"id":"cmuxjvj8d18wjad077tq7t8r1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:02:41.023Z","lastVerifiedAt":"2026-10-21T16:02:41.023Z","lastChangeDetectedAt":"2026-08-14T15:42:28.697Z","scannedHash":"15f2f21b7bebeedf12dc47987c3663e56edf26cb","latestUpstreamHash":"15f2f21b7bebeedf12dc47987c3663e56edf26cb","nextCheckDueAt":"2026-10-22T14:37:40.623Z"}},{"id":"cmuxjvlmv19i0ad078ty2ht70","slug":"azure-ai-vision-imageanalysis-py","publicId":"a9a68479-781b-444f-85e7-a5e07b99e32a","name":"azure-ai-vision-imageanalysis-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.605Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-vision-imageanalysis-py","findings":[{"id":"cmuxjvlmw19i1ad071vxxow5h","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:59:39.533Z","lastVerifiedAt":"2026-10-22T02:59:39.533Z","lastChangeDetectedAt":"2026-08-14T15:36:28.695Z","scannedHash":"bc979291b13c4a0b5c3133fb8a12ae94a7a55883","latestUpstreamHash":"bc979291b13c4a0b5c3133fb8a12ae94a7a55883","nextCheckDueAt":"2026-10-23T01:45:50.461Z"}},{"id":"cmuxjvln719ihad07wx7asklp","slug":"azure-messaging-webpubsub-java","publicId":"e30aec5a-3f30-44d2-8543-e4c7e0552052","name":"azure-messaging-webpubsub-java","description":"Build real-time web applications with Azure Web PubSub SDK for Java. Use when implementing WebSocket-based messaging, live updates, chat applications, or server-to-client push notifications.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.399Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-messaging-webpubsub-java","findings":[{"id":"cmuxjvln719iiad0708d3cnzw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:32:06.872Z","lastVerifiedAt":"2026-10-21T23:32:06.872Z","lastChangeDetectedAt":"2026-08-14T14:57:28.669Z","scannedHash":"55e1ef74b4d923403871dd5486bafc6d0cae199a","latestUpstreamHash":"55e1ef74b4d923403871dd5486bafc6d0cae199a","nextCheckDueAt":"2026-10-22T21:11:52.468Z"}},{"id":"cmuxjvfr118joad07yzc7y38g","slug":"azure-identity-dotnet","publicId":"bf13f44f-a2b1-44bd-8319-c1e608b1aaa3","name":"azure-identity-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.397Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-identity-dotnet","findings":[{"id":"cmuxjvfr118jpad0763ciljo0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:19:19.094Z","lastVerifiedAt":"2026-10-21T15:19:19.094Z","lastChangeDetectedAt":"2026-08-14T15:37:28.695Z","scannedHash":"a77d4ff49b15f776a2daad5f4a59fa6561c94414","latestUpstreamHash":"a77d4ff49b15f776a2daad5f4a59fa6561c94414","nextCheckDueAt":"2026-10-22T13:38:01.670Z"}},{"id":"cmuxjvjhx18z0ad073eb8h2de","slug":"azure-communication-common-java","publicId":"c3aef645-8b6d-47ad-b678-457c8efdc520","name":"azure-communication-common-java","description":"Azure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.306Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-communication-common-java","findings":[{"id":"cmuxjvjhx18z1ad07ghpvnx07","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:40:22.020Z","lastVerifiedAt":"2026-10-21T21:40:22.020Z","lastChangeDetectedAt":"2026-08-14T15:38:28.696Z","scannedHash":"7a6a66c205648ad69cda647462d102993115180a","latestUpstreamHash":"7a6a66c205648ad69cda647462d102993115180a","nextCheckDueAt":"2026-10-22T22:38:02.686Z"}},{"id":"cmuxjvlmj19hnad07xgmopus7","slug":"wiki-ado-convert","publicId":"66812ef7-6999-4a32-9139-18d0dee94f24","name":"wiki-ado-convert","description":"Converts VitePress/GFM wiki markdown to Azure DevOps Wiki-compatible format. Generates a Node.js build script that transforms Mermaid syntax, strips front matter, fixes links, and outputs ADO-compatible copies to dist/ado-wiki/.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-06T00:12:40.303Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-ado-convert","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:33:39.029Z","lastVerifiedAt":"2026-10-21T09:33:39.029Z","lastChangeDetectedAt":"2026-08-14T15:38:28.696Z","scannedHash":"1a9d5144324d5891454d25e3607ca09439584eb8","latestUpstreamHash":"1a9d5144324d5891454d25e3607ca09439584eb8","nextCheckDueAt":"2026-10-22T11:35:59.281Z"}},{"id":"cmuxjve2918d8ad07hi04gs07","slug":"azure-ai-textanalytics-py","publicId":"dd81691a-52f9-4164-bcb8-d5644c0c73cd","name":"azure-ai-textanalytics-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:40.220Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-textanalytics-py","findings":[{"id":"cmuxjve2918d9ad075mwzvul2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:57:39.529Z","lastVerifiedAt":"2026-10-22T02:57:39.529Z","lastChangeDetectedAt":"2026-08-25T20:07:24.063Z","scannedHash":"375453ad9ff4f6867adf6623a1b567bfe0c60bfb","latestUpstreamHash":"375453ad9ff4f6867adf6623a1b567bfe0c60bfb","nextCheckDueAt":"2026-10-23T05:04:40.820Z"}},{"id":"cmuxjvljw19h3ad07h70ghp89","slug":"azure-servicebus-py","publicId":"c4ce5a8c-aa90-4871-bf18-664c916548e5","name":"azure-servicebus-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:39.401Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-servicebus-py","findings":[{"id":"cmuxjvljw19h4ad079bawwf1m","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:53:13.425Z","lastVerifiedAt":"2026-10-21T04:53:13.425Z","lastChangeDetectedAt":"2026-08-25T12:19:05.081Z","scannedHash":"0c786cdf38814cdbdcaf42e9fb98b59dae38ca57","latestUpstreamHash":"0c786cdf38814cdbdcaf42e9fb98b59dae38ca57","nextCheckDueAt":"2026-10-22T06:24:02.863Z"}},{"id":"cmuxk2vo51n41ad073o8f7vng","slug":"azure-search-documents-dotnet","publicId":"e9b93bde-d977-44f0-bcf2-61d7756c5636","name":"azure-search-documents-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:39.400Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-search-documents-dotnet","findings":[{"id":"cmuxk2vo51n42ad07a5s61khk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:32:41.189Z","lastVerifiedAt":"2026-10-21T17:32:41.189Z","lastChangeDetectedAt":"2026-08-14T15:10:28.683Z","scannedHash":"49ed94e58508e30be14b5e531d53a243c821de6c","latestUpstreamHash":"49ed94e58508e30be14b5e531d53a243c821de6c","nextCheckDueAt":"2026-10-22T15:51:47.315Z"}},{"id":"cmuxjvlm619hdad077bm0dox8","slug":"azure-cosmos-py","publicId":"ceb49a01-8cc8-446e-b834-c2bccfa889b5","name":"azure-cosmos-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:39.399Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-cosmos-py","findings":[{"id":"cmuxjvlm619head071i22jsxk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:02:41.527Z","lastVerifiedAt":"2026-10-21T20:02:41.527Z","lastChangeDetectedAt":"2026-08-25T12:36:05.126Z","scannedHash":"75a26c6f97359e532458e1e4c9da92328961bf49","latestUpstreamHash":"75a26c6f97359e532458e1e4c9da92328961bf49","nextCheckDueAt":"2026-10-22T19:01:50.848Z"}},{"id":"cmuxjvjjw18zsad075jqcd16c","slug":"azure-keyvault-py","publicId":"188f19db-e157-4cf8-92a3-50d8be1ced6e","name":"azure-keyvault-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:39.398Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-keyvault-py","findings":[{"id":"cmuxjvjjw18ztad07nrri9y5w","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:00:06.823Z","lastVerifiedAt":"2026-10-21T23:00:06.823Z","lastChangeDetectedAt":"2026-08-25T20:36:27.925Z","scannedHash":"27962e81b958c741c87fa87dc34554942a179607","latestUpstreamHash":"27962e81b958c741c87fa87dc34554942a179607","nextCheckDueAt":"2026-10-22T23:31:30.368Z"}},{"id":"cmuxjvjic18z5ad07qz98xk3d","slug":"azure-communication-chat-java","publicId":"3d41fb69-d285-4ca9-b302-f7170cafb885","name":"azure-communication-chat-java","description":"Build real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:39.211Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-communication-chat-java","findings":[{"id":"cmuxjvjic18z6ad07k7914d9u","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:46:41.325Z","lastVerifiedAt":"2026-10-21T18:46:41.325Z","lastChangeDetectedAt":"2026-08-14T14:54:28.669Z","scannedHash":"b58604b7161eec1bf999295046a4fced6f9d4507","latestUpstreamHash":"b58604b7161eec1bf999295046a4fced6f9d4507","nextCheckDueAt":"2026-10-22T19:41:02.878Z"}},{"id":"cmuxk2ygd1nlbad07i0x71o3u","slug":"azure-mgmt-botservice-py","publicId":"303a02bd-614b-4c0c-b7bc-c1e5384701c0","name":"azure-mgmt-botservice-py","description":"|-","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-06T00:12:39.202Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-mgmt-botservice-py","findings":[{"id":"cmuxk2ygd1nlcad07yipf529f","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:53:41.003Z","lastVerifiedAt":"2026-10-21T15:53:41.003Z","lastChangeDetectedAt":"2026-08-25T13:31:21.655Z","scannedHash":"cc3364a8c4e688481e68dc7b567fd95ef52259e8","latestUpstreamHash":"cc3364a8c4e688481e68dc7b567fd95ef52259e8","nextCheckDueAt":"2026-10-22T17:40:05.812Z"}},{"id":"cmuxjvlnf19imad07uowamsjd","slug":"wiki-qa","publicId":"4b0d5d1f-547f-47b4-a99d-dd17a98088d6","name":"wiki-qa","description":"Answers questions about a code repository using source file analysis. Use when the user asks a question about how something works, wants to understand a component, or needs help navigating the codebase.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:51.908Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-qa","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:33:06.993Z","lastVerifiedAt":"2026-10-22T00:33:06.993Z","lastChangeDetectedAt":"2026-08-25T19:07:23.959Z","scannedHash":"80775b0be2ffbef4a1675afeaaa132696bdd1d01","latestUpstreamHash":"80775b0be2ffbef4a1675afeaaa132696bdd1d01","nextCheckDueAt":"2026-10-23T00:14:53.213Z"}},{"id":"cmudc57a16jg7ad07li3oqedl","slug":"unknown","publicId":"d4d083bb-3ed9-4f23-8c82-ec4b4c7f3bda","name":"unknown","description":"","author":"","version":"","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:48.188Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/scaffold","findings":[{"id":"cmudc57a26jgdad07w38uo5c7","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmudc57a26jghad077as3h7wx","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmudc57a16jgcad07r37972b2","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"unknown\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmudc57a26jgiad07w4k18dvs","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmudc57a26jgmad07bo7gvdgh","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmudc57a26jgfad07eqpnsx2k","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"191 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmudc57a26jgjad07tmvu8of7","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmudc57a26jgoad07jkfr4hyf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/bicep-container-apps.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmudc57a26jgpad07nzabkzi5","source":"cisco","category":"security","label":"Deeply nested file references detected","detail":"SKILL.md — Skill has file references nested more than 5 levels deep. This could be an attempt to hide malicious content in files that are only loaded under specific conditions.","severity":"medium","ruleId":"LAZY_LOAD_DEEP_NESTING"},{"id":"cmudc57a16jg8ad07hyzp32nv","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmudc57a26jgnad074k1envfl","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmudc57a16jgaad07b3zmx6ut","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmudc57a26jgsad07p2i6tuyc","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmudc57a16jgbad07nyoebl1e","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmudc57a26jgkad07d1c4ykl3","source":"vettd","category":"scripts","label":"No --help support","detail":"scripts/scaffold-conformance.ps1: Add argument parsing with --help output so agents know the script's interface","severity":"info","ruleId":"VTD-0114"},{"id":"cmudc57a26jgead07th2dnazk","source":"vettd","category":"description","label":"Missing description field","detail":"The description field is required and should describe what the skill does and when to use it","severity":"info","ruleId":"VTD-0109"},{"id":"cmudc57a26jglad076e7vrh4z","source":"vettd","category":"scripts","label":"No --help support","detail":"scripts/scaffold-conformance.sh: Add argument parsing with --help output so agents know the script's interface","severity":"info","ruleId":"VTD-0114"},{"id":"cmudc57a26jgqad07eos91irx","source":"cisco","category":"security","label":"Vague skill description","detail":"SKILL.md — Skill description is too short (16 chars). Provide detailed explanation.","severity":"low","ruleId":"VTD-0087"},{"id":"cmudc57a26jgrad072xon32wt","source":"cisco","category":"security","label":"Skill name does not follow agent skills naming rules","detail":"SKILL.md — Skill name 'cisco-shim-1_tshiue' is invalid. Agent skills require lowercase letters, numbers, and hyphens only, with a maximum length of 64 characters.","severity":"info","ruleId":"VTD-0099"},{"id":"cmudc57a16jg9ad07d03nqq7w","source":"vettd","category":"structure","label":"scripts/ directory present","detail":"Bundled executable scripts found","severity":"info","ruleId":"VTD-0096"},{"id":"cmudc57a26jggad07ititvako","source":"vettd","category":"best-practices","label":"Examples included","detail":"Found code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectively","severity":"info","ruleId":"VTD-0103"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmug64smogi9qad07c96afgsc","slug":"unknown","publicId":"f98b4d02-2a36-4ad6-89a2-1dfa79cc7da9","name":"unknown","description":"","author":"","version":"","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:46.671Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/prepare","findings":[{"id":"cmug64smogi9rad07niuyuwk3","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmug64smogia0ad07rizrlax2","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmug64smogia5ad07syo902wm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/mcp-tools.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmug64smogia3ad073dqz9edw","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmug64smogi9wad07p4x2vfgc","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmug64smogia1ad075lyblhje","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmug64smogia2ad07nxi3ok5v","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmug64smogia7ad075r36h36m","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmug64smogia4ad07j709kyiw","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmug64smogi9tad076qkfgdt7","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmug64smogi9sad07e2qtulg3","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmug64smogia6ad07ug6qdsxb","source":"cisco","category":"security","label":"Vague skill description","detail":"SKILL.md — Skill description is too short (16 chars). Provide detailed explanation.","severity":"low","ruleId":"VTD-0087"},{"id":"cmug64smogi9yad07nmdrrdvo","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"76 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmug64smogi9vad070am24s9y","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"unknown\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmug64smogi9xad07j0v10zs8","source":"vettd","category":"description","label":"Missing description field","detail":"The description field is required and should describe what the skill does and when to use it","severity":"info","ruleId":"VTD-0109"},{"id":"cmug64smogi9zad07zjwrq7pq","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmug64smogi9uad0737u6dccx","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuel9g9waftoad07uzqclbny","slug":"unknown","publicId":"e93960a2-acd0-4605-b064-e89d37b4dab8","name":"unknown","description":"","author":"","version":"","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:45.889Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/deploy","findings":[{"id":"cmuel9g9xaftvad0738tjo5st","source":"vettd","category":"description","label":"Missing description field","detail":"The description field is required and should describe what the skill does and when to use it","severity":"info","ruleId":"VTD-0109"},{"id":"cmuel9g9xafu5ad07lsir7i6w","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuel9g9xafu0ad07tlgyquw3","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmuel9g9xafttad07nu8xztop","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"unknown\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmuel9g9xaftzad07nxcv0bbh","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmuel9g9waftqad07zeg2c62l","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmuel9g9xaftuad074d5dtpph","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmuel9g9xaftxad076iht4puu","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmuel9g9waftrad074qbkychp","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmuel9g9xafu1ad07dmx0064x","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmuel9g9xafu2ad07dvdzh20r","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmuel9g9waftpad079ogueipa","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmuel9g9xafu3ad075ugkocq2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuel9g9xafu4ad07r8ryd8ia","source":"cisco","category":"security","label":"Vague skill description","detail":"SKILL.md — Skill description is too short (16 chars). Provide detailed explanation.","severity":"low","ruleId":"VTD-0087"},{"id":"cmuel9g9xaftwad07b4o4lck7","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"54 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmuel9g9waftsad077mz2wsur","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmuel9g9xaftyad07j35yijg4","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmv1jsur1clrxad0657oqzmu9","slug":"azure-app-onboard","publicId":"43bac606-9285-419e-b0cd-88f3d742d3b1","name":"azure-app-onboard","description":"End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).","author":"Microsoft","version":"1.2.6","license":"MIT","overallGrade":"F","badgeStatus":"flagged","publishedAt":"2026-08-05T23:43:43.733Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/","findings":[{"id":"cmv1jsur1clryad06rd0um2bu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/handoff-protocol.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmv1jsur1clrzad0681hwmicv","source":"cisco","category":"security","label":"Discovery and execution chain (find -exec)","detail":"scaffold/scripts/scaffold-conformance.sh:21 — The find command with -exec executes commands on discovered files. An attacker can use this to find and execute hidden malicious scripts.","severity":"critical","ruleId":"COMPOUND_FIND_EXEC"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"F","criticalCount":1,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:41:40.984Z","lastVerifiedAt":"2026-10-21T15:41:40.984Z","lastChangeDetectedAt":"2026-10-10T16:24:47.098Z","scannedHash":"ce62e3df0d860115631b3fb7658eb7a6c35cf141","latestUpstreamHash":"ce62e3df0d860115631b3fb7658eb7a6c35cf141","nextCheckDueAt":"2026-10-22T14:54:44.189Z"}},{"id":"cmuxjvojz1a8kad07o5u3jekd","slug":"azure-compute","publicId":"91e2de43-ab07-4c67-9439-5d1d756fcbca","name":"azure-compute","description":"Azure VM/VMSS router. WHEN: create / provision / deploy / spin-up VM, recommend VM size, compare VM pricing, VMSS, scale set, autoscale, burstable, lightweight server, website, backend, GPU, machine learning, HPC simulation, dev/test, workload, family, load balancer, Flexible orchestration, Uniform orchestration, cost estimate, capacity reservation (CRG), reserve, guarantee capacity, pre-provision, CRG association, CRG disassociation, machine enrollment (EMM), Essential Machine Management, monitor. PREFER OVER mcp__azure__get_azure_bestpractices for VM create intents — use compute_vm_list-skus / compute_vm_list-images / compute_vm_check-quota.","author":"Microsoft","version":"2.5.1","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:42.387Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-compute","findings":[{"id":"cmuxjvojz1a8lad07ltiy0s48","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/examples/bicep/README.md:8 — `- SSH public key at `~/.ssh/id_rsa.pub``","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvojz1a8mad074dxwj3ei","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/examples/terraform/README.md:9 — `- SSH public key at `~/.ssh/id_rsa.pub``","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvojz1a8nad07uo2wikmy","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/references/delivery-options/save-local.md:47 — `>                adminPublicKey=\"$(cat ~/.ssh/id_rsa.pub)\"`","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvok01a8oad07zm5mvg7r","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/references/depth-probe/beginner.md:13 — `- **Auth:** SSH key from `~/.ssh/id_rsa.pub` (Linux) — read the file; ask only if missing`","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvok01a8pad074yx9pv1y","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/references/output-adapters/az-cli.md:54 — `--ssh-key-values @~/.ssh/id_rsa.pub \\`","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvok01a8qad07zxt6xwh1","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/references/output-adapters/bicep.md:18 — `adminPublicKey=\"$(cat ~/.ssh/id_rsa.pub)\"`","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvok01a8rad07swh4axx8","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/references/output-adapters/terraform.md:18 — `terraform plan  -var \"vm_name={vmName}\" -var \"admin_public_key=$(cat ~/.ssh/id_rsa.pub)\" \\`","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvok01a8sad07l2ay7fwn","source":"vettd","category":"security","label":"SSH private key file access","detail":"Detected in workflows/vm-creator/references/plan-card.md:32 — `| Auth | SSH key from `~/.ssh/id_rsa.pub` | inferred |`","severity":"medium","ruleId":"VTD-0006"},{"id":"cmuxjvok01a8tad076nax3ip8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/retail-prices-api.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:34:41.305Z","lastVerifiedAt":"2026-10-21T18:34:41.305Z","lastChangeDetectedAt":"2026-08-25T20:11:24.063Z","scannedHash":"eac48d13e7b19366050bd7a176c7b5189ad34cdb","latestUpstreamHash":"eac48d13e7b19366050bd7a176c7b5189ad34cdb","nextCheckDueAt":"2026-10-22T17:12:49.507Z"}},{"id":"cmuxinwuz0ta4ad07nukbau9k","slug":"azure-enterprise-infra-planner","publicId":"6c07ea7d-5d21-47e7-88dc-2f126a4ad73e","name":"azure-enterprise-infra-planner","description":"Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.","author":"Microsoft","version":"1.4.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:42.105Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-enterprise-infra-planner","findings":[{"id":"cmuxinwuz0ta5ad07cgdr484y","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/constraints/networking-connectivity.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:20:58.416Z","lastVerifiedAt":"2026-10-21T14:20:58.416Z","lastChangeDetectedAt":"2026-10-09T07:23:29.088Z","scannedHash":"6a82cbd081dc48dd74d5f726e2c032f8092fa3e4","latestUpstreamHash":"6a82cbd081dc48dd74d5f726e2c032f8092fa3e4","nextCheckDueAt":"2026-10-22T11:57:27.868Z"}},{"id":"cmt9142gm2f0wad09uq0pmdhs","slug":"azure-cost","publicId":"6e1b8574-fcab-4a9e-8e99-ecf908d74acc","name":"azure-cost","description":"Azure cost management: query costs, forecast spending, optimize to reduce waste. WHEN: \"Azure costs\", \"Azure bill\", \"cost breakdown\", \"how much am I spending\", \"forecast spending\", \"optimize costs\", \"reduce spending\", \"orphaned resources\", \"rightsize VMs\", \"cost spike\", \"reduce storage costs\", \"AKS cost\". DO NOT USE FOR: deploying resources, provisioning, diagnostics, or security audits.","author":"Microsoft","version":"1.3.1","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:41.530Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-cost","findings":[{"id":"cmt9142gn2f0xad09l5zjjdxb","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmt9142gn2f11ad09f4v9pdry","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"azure-cost\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmt9142gn2f17ad09zfiyfv24","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"},{"id":"cmt9142gn2f16ad09g38jke3f","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmt9142gn2f0yad096bjv9w7g","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmt9142gn2f18ad09r35j8006","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmt9142gn2f13ad09mno2uc7s","source":"vettd","category":"description","label":"Description within character limit","detail":"414/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmt9142gn2f10ad097ftip8mj","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmt9142gn2f12ad09igpf24nj","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmt9142gn2f19ad09n99n2vv7","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmt9142gn2f1aad09hug7ndcz","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmt9142gn2f1bad09ypndc2f3","source":"vettd","category":"security","label":"No external URLs in skill definition","detail":"SKILL.md and references/ files do not reference external URLs","severity":"info","ruleId":"VTD-0093"},{"id":"cmt9142gn2f0zad09rl3ax4y4","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmt9142gn2f15ad099jxsm73q","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"37 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmt9142gn2f14ad09av1c9xh0","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:38:41.311Z","lastVerifiedAt":"2026-09-22T20:08:27.248Z","lastChangeDetectedAt":"2026-08-12T13:09:46.854Z","scannedHash":"299753be880bfe40daefcd8411eb8cf68ec1d99d","latestUpstreamHash":"299753be880bfe40daefcd8411eb8cf68ec1d99d","nextCheckDueAt":"2026-10-28T18:38:41.311Z"}},{"id":"cmuxjvcd9185gad07y8buz0ch","slug":"azure-communication-callingserver-java","publicId":"6d106458-a7af-4c33-a921-852ee3473020","name":"azure-communication-callingserver-java","description":"Azure Communication Services CallingServer (legacy) Java SDK. Note - This SDK is deprecated. Use azure-communication-callautomation instead for new projects. Only use this skill when maintaining legacy code.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:41.529Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-communication-callingserver-java","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:21:06.853Z","lastVerifiedAt":"2026-10-21T23:21:06.853Z","lastChangeDetectedAt":"2026-08-25T17:52:23.075Z","scannedHash":"276440fcfee1858c728b0db63898d52e578ce86b","latestUpstreamHash":"276440fcfee1858c728b0db63898d52e578ce86b","nextCheckDueAt":"2026-10-22T21:14:51.832Z"}},{"id":"cmuxit11a0zowad07vyfj0abb","slug":"appinsights-instrumentation","publicId":"6ec002d2-dcd2-4069-913a-be763af38e79","name":"appinsights-instrumentation","description":"Guidance for instrumenting webapps with Azure Application Insights. Provides telemetry patterns, SDK setup, and configuration references. WHEN: how to instrument app, App Insights SDK, telemetry patterns, what is App Insights, Application Insights guidance, instrumentation examples, APM best practices.","author":"Microsoft","version":"1.2.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:41.440Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/appinsights-instrumentation","findings":[{"id":"cmuxit11b0zoxad07w81j7agm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/auto.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:32:39.569Z","lastVerifiedAt":"2026-10-22T03:32:39.569Z","lastChangeDetectedAt":"2026-10-08T02:16:35.425Z","scannedHash":"2bb1307f9a0f22a26c6efbd8c795caf353be9d72","latestUpstreamHash":"2bb1307f9a0f22a26c6efbd8c795caf353be9d72","nextCheckDueAt":"2026-10-23T02:17:27.265Z"}},{"id":"cmuxjvn0y19utad07ja565ziq","slug":"python-appservice-deploy","publicId":"11fb7742-fc29-4972-b684-e3892a2698ac","name":"python-appservice-deploy","description":"Deploy Python (Flask/Django/FastAPI) code to Azure App Service Linux. WHEN: \"Flask App Service\", \"Django App Service\", \"FastAPI App Service\", \"deploy Python to App Service\". DO NOT USE FOR: Container Apps, Functions, non-Python, Terraform/Bicep/IaC, full infra — use azure-prepare.","author":"Microsoft","version":"1.1.1","license":"MIT","overallGrade":"F","badgeStatus":"flagged","publishedAt":"2026-08-05T23:43:41.436Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/python-appservice-deploy","findings":[{"id":"cmuxjvn2w19uuad07gwoa36ad","source":"vettd","category":"security","label":"Shell variable execution (eval/bash -c with variable)","detail":"Detected in scripts/retry-az-create.sh:36 — `if err=$({ eval \"$SHOW_CMD -o none 2>/dev/null\" || eval \"$CREATE_CMD -o none\"; } 2>&1); then`","severity":"critical","ruleId":"VTD-0023"},{"id":"cmuxjvn2w19uvad078a1wrswu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"F","criticalCount":1,"highCount":1},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:41:41.205Z","lastVerifiedAt":"2026-10-21T17:41:41.205Z","lastChangeDetectedAt":"2026-08-25T12:20:05.085Z","scannedHash":"3003f4d14f1e1a63ec94afd28f958560aab4b273","latestUpstreamHash":"3003f4d14f1e1a63ec94afd28f958560aab4b273","nextCheckDueAt":"2026-10-22T16:22:23.549Z"}},{"id":"cmuximnpy0ry1ad070cl1yhu3","slug":"azure-ai","publicId":"7a657107-fc76-4d5c-ba53-a40daa81b91d","name":"azure-ai","description":"Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.","author":"Microsoft","version":"1.2.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:41.432Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-ai","findings":[{"id":"cmuximnpy0ry2ad07oackv6e8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:34:39.507Z","lastVerifiedAt":"2026-10-22T02:34:39.507Z","lastChangeDetectedAt":"2026-10-08T06:47:35.527Z","scannedHash":"34c27c0761f1a2f730d45ddc1f395c6036723754","latestUpstreamHash":"34c27c0761f1a2f730d45ddc1f395c6036723754","nextCheckDueAt":"2026-10-23T02:26:07.725Z"}},{"id":"cmuxjvlec19fead07tyl5nrw1","slug":"pydantic-models-py","publicId":"f8fa6bfd-8256-457f-b21a-a590eb6ea94b","name":"pydantic-models-py","description":"Create Pydantic models following the multi-model pattern with Base, Create, Update, Response, and InDB variants. Use when defining API request/response schemas, database models, or data validation in Python applications using Pydantic v2.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:41.232Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/pydantic-models-py","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:39:22.020Z","lastVerifiedAt":"2026-10-21T21:39:22.020Z","lastChangeDetectedAt":"2026-08-25T19:08:23.959Z","scannedHash":"f7a11cfe361df8e698cb9ecb42a94dae0889bb77","latestUpstreamHash":"f7a11cfe361df8e698cb9ecb42a94dae0889bb77","nextCheckDueAt":"2026-10-22T20:12:11.999Z"}},{"id":"cmuxjuroq15xgad0719dlsszi","slug":"azure-messaging","publicId":"4775bf29-8fc2-445d-94f9-999a1679ed1a","name":"azure-messaging","description":"Troubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, service bus queue issue, topic subscription error, enable logging event hub, service bus logging, eventhub python, servicebus java, eventhub javascript, servicebus dotnet, event hub checkpoint, event hub not receiving messages, service bus dead letter, batch processing lock, session lock expired, idle timeout, connection inactive, link detach, slow reconnect, session error, duplicate events, offset reset, receive batch.","author":"Microsoft","version":"1.2.1","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:41.033Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-messaging","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:57:21.945Z","lastVerifiedAt":"2026-10-21T20:57:21.945Z","lastChangeDetectedAt":"2026-08-25T11:27:23.573Z","scannedHash":"ea4f43fba357f1cdffec81e0db9415da05dea16a","latestUpstreamHash":"ea4f43fba357f1cdffec81e0db9415da05dea16a","nextCheckDueAt":"2026-10-22T18:57:35.828Z"}},{"id":"cmuxjvcd4185aad07s4yqmzg0","slug":"install-atk","publicId":"02e72876-801e-4341-9602-9c684c5d3d60","name":"install-atk","description":">","author":"","version":"","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:40.734Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/microsoft-365-agents-toolkit/skills/install-atk","findings":[{"id":"cmuxjvcd5185bad07tfm2nya7","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxjvcd5185cad07vg5g8igb","source":"cisco","category":"security","label":"Active instruction acquires and executes remote content","detail":"SKILL.md:32 — SKILL.md contains an operative statement that explicitly coordinates remote content acquisition with execution.","severity":"high","ruleId":"ACTIVE_REMOTE_ACQUIRE_EXECUTE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:01:06.823Z","lastVerifiedAt":"2026-10-21T23:01:06.823Z","lastChangeDetectedAt":"2026-08-14T15:42:28.697Z","scannedHash":"c7be3fb169d02f94492a3d1ca203bed5adacc9ba","latestUpstreamHash":"c7be3fb169d02f94492a3d1ca203bed5adacc9ba","nextCheckDueAt":"2026-10-23T00:09:33.142Z"}},{"id":"cmuxjvej818g8ad07ico76qfo","slug":"wiki-changelog","publicId":"8dd8d3fc-0067-422f-a025-99d8a3c3506c","name":"wiki-changelog","description":"Analyzes git commit history and generates structured changelogs categorized by change type. Use when the user asks about recent changes, wants a changelog, or needs to understand what changed in the repository.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:40.629Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-changelog","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:50:39.648Z","lastVerifiedAt":"2026-10-22T04:50:39.648Z","lastChangeDetectedAt":"2026-08-25T11:26:23.555Z","scannedHash":"f00f784abc5b9276f5a353334afbabb2ea0dfd72","latestUpstreamHash":"f00f784abc5b9276f5a353334afbabb2ea0dfd72","nextCheckDueAt":"2026-10-23T05:52:17.985Z"}},{"id":"cmuxjvczf186xad07pxyrtcgj","slug":"fastapi-router-py","publicId":"3d0faade-a3a9-455c-9044-172db6458a28","name":"fastapi-router-py","description":"Create FastAPI routers with CRUD operations, authentication dependencies, and proper response models. Use when building REST API endpoints, creating new routes, implementing CRUD operations, or adding authenticated endpoints in FastAPI applications.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:40.549Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/fastapi-router-py","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:36:01.875Z","lastVerifiedAt":"2026-10-21T22:36:01.875Z","lastChangeDetectedAt":"2026-08-25T18:33:23.364Z","scannedHash":"995dd3c35e422d29a8fb584b069d4657cd47eefd","latestUpstreamHash":"995dd3c35e422d29a8fb584b069d4657cd47eefd","nextCheckDueAt":"2026-10-23T00:31:11.130Z"}},{"id":"cmuxjvjo718zyad07nlrzeinx","slug":"github-issue-creator","publicId":"82c72421-9eb5-4e46-a8b8-331781010a24","name":"github-issue-creator","description":"Convert raw notes, error logs, voice dictation, or screenshots into crisp GitHub-flavored markdown issue reports. Use when the user pastes bug info, error messages, or informal descriptions and wants a structured GitHub issue. Supports images/GIFs for visual evidence.","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:40.337Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/github-issue-creator","findings":[{"id":"cmuxjvjo818zzad07rsssdhg9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:41:58.427Z","lastVerifiedAt":"2026-10-21T14:41:58.427Z","lastChangeDetectedAt":"2026-08-14T15:30:28.693Z","scannedHash":"bd1b5edf4cefdca8e192610e2e990130f67f704d","latestUpstreamHash":"bd1b5edf4cefdca8e192610e2e990130f67f704d","nextCheckDueAt":"2026-10-22T13:49:31.772Z"}},{"id":"cmuxk2xo11nf2ad07dvbxzge3","slug":"podcast-generation","publicId":"7c1aa7a4-cdf4-45af-a071-9f12b2ba5b19","name":"podcast-generation","description":"Generate AI-powered podcast-style audio narratives using Azure OpenAI's GPT Realtime Mini model via WebSocket. Use when building text-to-speech features, audio narrative generation, podcast creation from content, or integrating with Azure OpenAI Realtime API for real audio output. Covers full-stack implementation from React frontend to Python FastAPI backend with WebSocket streaming.","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:40.141Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/podcast-generation","findings":[{"id":"cmuxk2xo11nf3ad07luo5agpn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk2xo11nf4ad07r8vbxvea","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:34:06.995Z","lastVerifiedAt":"2026-10-22T00:34:06.995Z","lastChangeDetectedAt":"2026-08-25T13:44:21.662Z","scannedHash":"a1aeeb2e902d732035066ed9f7be20cf120ce53c","latestUpstreamHash":"a1aeeb2e902d732035066ed9f7be20cf120ce53c","nextCheckDueAt":"2026-10-23T02:25:48.596Z"}},{"id":"cmuxjuqoq15p3ad0778eu4e1k","slug":"wiki-architect","publicId":"828e09cd-f9a1-4cb1-af30-93b223028d2a","name":"wiki-architect","description":"Analyzes code repositories and generates hierarchical documentation structures with onboarding guides. Use when the user wants to create a wiki, generate documentation, map a codebase structure, or understand a project's architecture at a high level.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:40.051Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-architect","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:16:13.464Z","lastVerifiedAt":"2026-10-21T05:16:13.464Z","lastChangeDetectedAt":"2026-08-25T20:09:24.063Z","scannedHash":"124c5bec7008b1e25940cfc67ea09b069af0dbea","latestUpstreamHash":"124c5bec7008b1e25940cfc67ea09b069af0dbea","nextCheckDueAt":"2026-10-22T06:02:14.797Z"}},{"id":"cmuxjur0y15rpad07fep8tmv9","slug":"react-flow-node-ts","publicId":"58d13a49-d22b-4477-a2bd-9329f324f4c5","name":"react-flow-node-ts","description":"Create React Flow node components with TypeScript types, handles, and Zustand integration. Use when building custom nodes for React Flow canvas, creating visual workflow editors, or implementing node-based UI components.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:40.050Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/react-flow-node-ts","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:20:06.850Z","lastVerifiedAt":"2026-10-21T23:20:06.850Z","lastChangeDetectedAt":"2026-08-25T16:44:21.774Z","scannedHash":"ba384d63f352c5518b3dd77168e5c49af2220e8a","latestUpstreamHash":"ba384d63f352c5518b3dd77168e5c49af2220e8a","nextCheckDueAt":"2026-10-23T00:44:38.731Z"}},{"id":"cmuxjurru15zaad07o906ecv3","slug":"microsoft-docs","publicId":"4e4df982-5054-47a9-af48-7e0697eb5521","name":"microsoft-docs","description":"Understand Microsoft technologies by querying official documentation. Use whenever the user asks how something works, wants tutorials, needs configuration options, limits, quotas, or best practices for any Microsoft technology (Azure, .NET, M365, Windows, Power Platform, etc.)—even if they don't mention \"docs.\" If the question is about understanding a concept rather than writing code, this is the right skill.","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T23:43:39.943Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/microsoft-docs","findings":[{"id":"cmuxjurru15zbad07hydjc5t9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjurru15zcad07swpusbgn","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:53:41.620Z","lastVerifiedAt":"2026-10-21T20:53:41.620Z","lastChangeDetectedAt":"2026-08-25T13:25:21.574Z","scannedHash":"2e0eef527e4fafac394cca00144736954ecc9528","latestUpstreamHash":"2e0eef527e4fafac394cca00144736954ecc9528","nextCheckDueAt":"2026-10-22T20:29:50.415Z"}},{"id":"cmuxjvfay18ivad07k1k1xfjn","slug":"zustand-store-ts","publicId":"d6633669-8b9e-4ad5-b1d2-8d6874535e4e","name":"zustand-store-ts","description":"Create Zustand stores with TypeScript, subscribeWithSelector middleware, and proper state/action separation. Use when building React state management, creating global stores, or implementing reactive state patterns with Zustand.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:39.936Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/zustand-store-ts","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:10:41.254Z","lastVerifiedAt":"2026-10-21T18:10:41.254Z","lastChangeDetectedAt":"2026-08-14T14:59:28.677Z","scannedHash":"8dc1658099b269c1e6347b7d0ffbe38d6f7058c1","latestUpstreamHash":"8dc1658099b269c1e6347b7d0ffbe38d6f7058c1","nextCheckDueAt":"2026-10-22T16:43:15.667Z"}},{"id":"cmuxjvlpo19jcad07j6e42o1z","slug":"continual-learning","publicId":"e5894a84-58bc-482e-9cfe-a9428f0e3b9c","name":"continual-learning","description":"Guide for implementing continual learning in AI coding agents — hooks, memory scoping, reflection patterns. Use when setting up learning infrastructure for agents.","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T23:43:39.931Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/continual-learning","findings":[{"id":"cmuxjvlpo19jdad073wudt639","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:01:39.311Z","lastVerifiedAt":"2026-10-21T11:01:39.311Z","lastChangeDetectedAt":"2026-08-25T12:20:05.085Z","scannedHash":"0c2b5645bbb3fe92e02f2c7b1d11fb51da02eeac","latestUpstreamHash":"0c2b5645bbb3fe92e02f2c7b1d11fb51da02eeac","nextCheckDueAt":"2026-10-22T12:26:50.027Z"}},{"id":"cmuxjut5p16bhad07xwbuwafz","slug":"m365-agent-evaluator","publicId":"de6c5186-fb9b-444e-8970-53886867a0b1","name":"m365-agent-evaluator","description":">","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:59:45.266Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/microsoft-365-agents-toolkit/skills/m365-agent-evaluator","findings":[{"id":"cmuxjut5q16biad07kc3s1tkc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/output-schema.json — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjut5q16bjad07nxg5l8rj","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:10:39.487Z","lastVerifiedAt":"2026-10-22T02:10:39.487Z","lastChangeDetectedAt":"2026-08-25T18:56:23.389Z","scannedHash":"15aceb8b6d27b175ab0d54cf34b5d6b1c345e5d1","latestUpstreamHash":"15aceb8b6d27b175ab0d54cf34b5d6b1c345e5d1","nextCheckDueAt":"2026-10-23T00:51:25.174Z"}},{"id":"cmuxk2zgb1nusad07t2l6ko6i","slug":"azure-cloud-migrate","publicId":"96cda138-11f6-4090-9383-6d69673c2ecc","name":"azure-cloud-migrate","description":"Assess and migrate cross-cloud workloads to Azure with reports and code conversion. Supports Lambda→Functions, Beanstalk/Heroku/App Engine→App Service, Fargate/Kubernetes/Cloud Run/Spring Boot→Container Apps. WHEN: migrate Lambda to Functions, AWS to Azure, migrate Beanstalk, migrate Heroku, migrate App Engine, Cloud Run migration, Fargate to ACA, ECS/Kubernetes/GKE/EKS to Container Apps, Spring Boot to Container Apps, cross-cloud migration.","author":"Microsoft","version":"1.3.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:59:37.620Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-cloud-migrate","findings":[{"id":"cmuxk2zgb1nuuad07ij43sifb","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:56:02.282Z","lastVerifiedAt":"2026-10-21T22:56:02.282Z","lastChangeDetectedAt":"2026-09-07T22:51:58.908Z","scannedHash":"064dc66880cee5694234690f2b9be17e135dd1dd","latestUpstreamHash":"064dc66880cee5694234690f2b9be17e135dd1dd","nextCheckDueAt":"2026-10-22T21:32:30.264Z"}},{"id":"cmuxiirii0n0bad07xxnxdbpq","slug":"azure-deploy","publicId":"47c625ce-1d6c-4e99-aa25-b055092d605d","name":"azure-deploy","description":"Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: \"run azd up\", \"run azd deploy\", \"execute deployment\", \"push to production\", \"push to cloud\", \"go live\", \"ship it\", \"bicep deploy\", \"terraform apply\", \"publish to Azure\", \"launch on Azure\". DO NOT USE WHEN: \"create and deploy\", \"build and deploy\", \"create a new app\", \"set up infrastructure\", \"create and deploy to Azure using Terraform\" — use azure-prepare for these.","author":"Microsoft","version":"1.2.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:59:37.606Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-deploy","findings":[{"id":"cmuxiirii0n0cad078i8tkbrt","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxiirii0n0dad07to3l9tr2","source":"cisco","category":"security","label":"Discovery and execution chain (find -exec)","detail":"references/recipes/azd/ef-migrations.md:10 — The find command with -exec executes commands on discovered files. An attacker can use this to find and execute hidden malicious scripts. (found in documentation — may be instructional)","severity":"medium","ruleId":"COMPOUND_FIND_EXEC"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:55:58.257Z","lastVerifiedAt":"2026-10-21T12:55:58.257Z","lastChangeDetectedAt":"2026-10-09T08:35:29.223Z","scannedHash":"782b021717e199423ed37720a6ba5436b2951aa7","latestUpstreamHash":"782b021717e199423ed37720a6ba5436b2951aa7","nextCheckDueAt":"2026-10-22T12:57:39.795Z"}},{"id":"cmuximmyj0rriad07t99nw6jp","slug":"azure-compliance","publicId":"e47fcce3-ec98-4a06-9ba6-74963de7f057","name":"azure-compliance","description":"Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.","author":"Microsoft","version":"1.2.3","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:59:02.838Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-compliance","findings":[{"id":"cmuximmyj0rrjad07ic0l4y4v","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/auth-best-practices.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:48:02.252Z","lastVerifiedAt":"2026-10-21T22:48:02.252Z","lastChangeDetectedAt":"2026-10-09T11:25:29.527Z","scannedHash":"83ec452ff0bb131e41363be040ad22251d7bcb5a","latestUpstreamHash":"83ec452ff0bb131e41363be040ad22251d7bcb5a","nextCheckDueAt":"2026-10-23T01:00:55.787Z"}},{"id":"cmuxip7gs0v7cad07yw7jqwxi","slug":"azure-storage","publicId":"08dea11a-56ad-47a5-8b5e-ca3dad418408","name":"azure-storage","description":"Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake. Answers questions about storage access tiers (hot, cool, cold, archive), when to use each tier, and tier comparison. Provides object storage, SMB file shares, async messaging, NoSQL key-value, and big data analytics. Includes lifecycle management. USE FOR: blob storage, file shares, queue storage, table storage, data lake, upload files, download blobs, storage accounts, access tiers, storage tiers, hot cool cold archive, storage tier comparison, when to use storage tiers, lifecycle management, Azure Storage concepts. DO NOT USE FOR: SQL databases, Cosmos DB (use azure-prepare), messaging with Event Hubs or Service Bus (use azure-messaging).","author":"Microsoft","version":"1.2.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:57.638Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-storage","findings":[{"id":"cmuxip7gt0v7dad07ijwv4ok1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:53:39.047Z","lastVerifiedAt":"2026-10-21T09:53:39.047Z","lastChangeDetectedAt":"2026-10-08T07:16:35.538Z","scannedHash":"4c077fa32d77e27b1c1b105d532af6945bb7604f","latestUpstreamHash":"4c077fa32d77e27b1c1b105d532af6945bb7604f","nextCheckDueAt":"2026-10-22T08:45:28.180Z"}},{"id":"cmv189eombbeaad06t82nn5e1","slug":"unknown","publicId":"47fc1971-5aed-43a8-91e2-f7d149ad6582","name":"unknown","description":"","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:57.637Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/prepare","findings":[{"id":"cmv189eombbebad06yx33svms","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/mcp-tools.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmv189eombbecad06r8r8tfl2","source":"cisco","category":"security","label":"Vague skill description","detail":"SKILL.md — Skill description is too short (16 chars). Provide detailed explanation.","severity":"low","ruleId":"VTD-0087"},{"id":"cmv189eombbedad069l2i6qr2","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:06:39.316Z","lastVerifiedAt":"2026-10-21T11:06:39.316Z","lastChangeDetectedAt":"2026-10-10T12:21:30.770Z","scannedHash":"570b29ff2383aa013cfbd6b48f6009036e4bca76","latestUpstreamHash":"570b29ff2383aa013cfbd6b48f6009036e4bca76","nextCheckDueAt":"2026-10-22T12:32:32.095Z"}},{"id":"cmuxjvljn19gtad079x1yg67t","slug":"azure-keyvault-keys-ts","publicId":"27b7695d-768f-47f0-a262-154a7d7a3939","name":"azure-keyvault-keys-ts","description":"Manage cryptographic keys using Azure Key Vault Keys SDK for JavaScript (@azure/keyvault-keys). Use when creating, encrypting/decrypting, signing, or rotating keys.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:57.435Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-keyvault-keys-ts","findings":[{"id":"cmuxjvljn19guad07olqh3p4g","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:33:39.439Z","lastVerifiedAt":"2026-10-22T01:33:39.439Z","lastChangeDetectedAt":"2026-08-14T14:47:28.671Z","scannedHash":"edf929a691b6dbbd1f5c214e832a3c650b259890","latestUpstreamHash":"edf929a691b6dbbd1f5c214e832a3c650b259890","nextCheckDueAt":"2026-10-23T03:09:08.887Z"}},{"id":"cmuxjurlk15wcad07t2wnnd5a","slug":"azure-keyvault-secrets-ts","publicId":"66f189d0-f9e7-4398-b2ce-73e89d4cdce3","name":"azure-keyvault-secrets-ts","description":"Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets). Use when storing and retrieving application secrets or configuration values.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:57.434Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-keyvault-secrets-ts","findings":[{"id":"cmuxjurll15wdad07sbh6px96","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:20:13.596Z","lastVerifiedAt":"2026-10-21T06:20:13.596Z","lastChangeDetectedAt":"2026-08-14T15:32:28.694Z","scannedHash":"2dd97bf732af6c7d5ec00e23d05db80e9a56ce26","latestUpstreamHash":"2dd97bf732af6c7d5ec00e23d05db80e9a56ce26","nextCheckDueAt":"2026-10-22T05:42:51.467Z"}},{"id":"cmuxjurpu15xyad0778bu4bhf","slug":"azure-ai-agents-persistent-java","publicId":"5ce2b90f-1bb9-46e4-9fc6-a73fbd647e5a","name":"azure-ai-agents-persistent-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:53.641Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-ai-agents-persistent-java","findings":[{"id":"cmuxjurpu15xzad07yeaulbtk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:13:41.651Z","lastVerifiedAt":"2026-10-21T21:13:41.651Z","lastChangeDetectedAt":"2026-08-14T15:31:28.672Z","scannedHash":"a4c692537c1bf669d70f8fe56a5f43f6d65fc76f","latestUpstreamHash":"a4c692537c1bf669d70f8fe56a5f43f6d65fc76f","nextCheckDueAt":"2026-10-22T20:47:50.867Z"}},{"id":"cmv1ydhbdd0uuad064h2q0xh3","slug":"airunway-aks-setup","publicId":"f2d956eb-af1f-498c-b313-520b5e29301e","name":"airunway-aks-setup","description":"Set up AI Runway on AKS — from bare cluster to running model. Covers cluster verification, controller install, GPU assessment, provider setup, and first deployment. WHEN: \"setup AI Runway\", \"onboard AKS cluster\", \"install AI Runway\", \"airunway setup\", \"deploy model to AKS\", \"GPU inference on AKS\", \"KAITO setup on AKS\", \"run LLM on AKS\", \"vLLM on AKS\", \"set up model serving on AKS\", \"AI Runway controller\".","author":"Microsoft","version":"1.1.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:53.639Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/airunway-aks-setup","findings":[{"id":"cmv1ydhbdd0uvad06hndq044w","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/steps/step-6-summary.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:50:21.935Z","lastVerifiedAt":"2026-10-21T20:50:21.935Z","lastChangeDetectedAt":"2026-10-10T13:10:32.255Z","scannedHash":"f1188c99d276aada84992b4e60387f2ad5814dd8","latestUpstreamHash":"f1188c99d276aada84992b4e60387f2ad5814dd8","nextCheckDueAt":"2026-10-22T22:53:27.727Z"}},{"id":"cmuxjur2615ryad076w2xv02u","slug":"frontend-design-review","publicId":"5a1039c4-9c71-4a9f-acfa-dbb7aa8d3fb4","name":"frontend-design-review","description":">","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:53.538Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/frontend-design-review","findings":[{"id":"cmuxjur2615rzad07c82hwb9s","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjur2615s0ad07yx2818uz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:09:06.844Z","lastVerifiedAt":"2026-10-21T23:09:06.844Z","lastChangeDetectedAt":"2026-08-14T15:47:28.675Z","scannedHash":"5168482e112971181f4c4fec05ce694792bafd02","latestUpstreamHash":"5168482e112971181f4c4fec05ce694792bafd02","nextCheckDueAt":"2026-10-22T23:38:26.474Z"}},{"id":"cmuxjurlp15wnad07kqlpwsbv","slug":"azure-ai-projects-java","publicId":"fc601b0b-bef7-434f-b3df-ca3060d72386","name":"azure-ai-projects-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:53.534Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-ai-projects-java","findings":[{"id":"cmuxjurlp15woad07u3r715kj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:11:58.437Z","lastVerifiedAt":"2026-10-21T15:11:58.437Z","lastChangeDetectedAt":"2026-08-25T11:25:23.466Z","scannedHash":"7476d650fa39aa40ca73da5587a56531b652c6cd","latestUpstreamHash":"7476d650fa39aa40ca73da5587a56531b652c6cd","nextCheckDueAt":"2026-10-22T14:54:26.713Z"}},{"id":"cmuxjurqg15yead07l0k9k4xi","slug":"azure-aigateway","publicId":"ddaf4134-e1f1-4200-b42c-aa8a2145ee5a","name":"azure-aigateway","description":"Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.","author":"Microsoft","version":"3.2.1","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:51.235Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-aigateway","findings":[{"id":"cmuxjurqg15ygad07y9btxht6","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:00:58.405Z","lastVerifiedAt":"2026-10-21T14:00:58.405Z","lastChangeDetectedAt":"2026-08-25T13:37:21.658Z","scannedHash":"8529348e07a31f48a46f0345a34fcaae9b27e7d0","latestUpstreamHash":"8529348e07a31f48a46f0345a34fcaae9b27e7d0","nextCheckDueAt":"2026-10-22T15:43:09.194Z"}},{"id":"cmuxjvjje18zbad07jysgnmn4","slug":"azure-ai-transcription-py","publicId":"68922827-cd5c-4574-b1a0-58202dd9702a","name":"azure-ai-transcription-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:51.232Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-transcription-py","findings":[{"id":"cmuxjvjje18zcad07loszmfu1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:48:22.031Z","lastVerifiedAt":"2026-10-21T21:48:22.031Z","lastChangeDetectedAt":"2026-08-25T20:00:24.065Z","scannedHash":"c21d6071b1414199c46f08dcf3a1a0632843d00d","latestUpstreamHash":"c21d6071b1414199c46f08dcf3a1a0632843d00d","nextCheckDueAt":"2026-10-22T22:18:57.455Z"}},{"id":"cmuxjurf415uoad07b09yc1ke","slug":"wiki-vitepress","publicId":"9ddb5d5f-245b-466e-b05b-d2eb5fcd9098","name":"wiki-vitepress","description":"Packages generated wiki Markdown into a VitePress static site with dark theme, dark-mode Mermaid diagrams with click-to-zoom, and production build output. Use when the user wants to create a browsable website from generated wiki pages.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T22:58:51.139Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-vitepress","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:18:13.470Z","lastVerifiedAt":"2026-10-21T05:18:13.470Z","lastChangeDetectedAt":"2026-08-14T14:51:28.668Z","scannedHash":"fb40a7721e7038dde865905b9626602b7a2da77d","latestUpstreamHash":"fb40a7721e7038dde865905b9626602b7a2da77d","nextCheckDueAt":"2026-10-22T06:52:04.615Z"}},{"id":"cmuxjvjgm18yaad0783mxqo2b","slug":"azure-cosmos-rust","publicId":"b12f9db9-d9ea-47fa-8c6a-d55470d51eef","name":"azure-cosmos-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:51.137Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-cosmos-rust","findings":[{"id":"cmuxjvjgm18ybad07b8gk6f2a","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:06:58.407Z","lastVerifiedAt":"2026-10-21T14:06:58.407Z","lastChangeDetectedAt":"2026-08-14T14:35:28.666Z","scannedHash":"ed1e2001dc9d80548aa651ad7390b8eeb6df8ede","latestUpstreamHash":"ed1e2001dc9d80548aa651ad7390b8eeb6df8ede","nextCheckDueAt":"2026-10-22T14:27:53.896Z"}},{"id":"cmuxjuqg315mzad079h3peg73","slug":"wiki-llms-txt","publicId":"04ef9d27-9dd1-404e-93b9-40f66b5461e4","name":"wiki-llms-txt","description":"Generates llms.txt and llms-full.txt files for LLM-friendly project documentation following the llms.txt specification. Use when the user wants to create LLM-readable summaries, llms.txt files, or make their wiki accessible to language models.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:50.836Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-llms-txt","findings":[{"id":"cmuxjuqg415n0ad07751r32o8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:46:41.213Z","lastVerifiedAt":"2026-10-21T17:46:41.213Z","lastChangeDetectedAt":"2026-08-14T15:06:28.681Z","scannedHash":"b3a045c0f510f263fc05abba5daccaab4efcf164","latestUpstreamHash":"b3a045c0f510f263fc05abba5daccaab4efcf164","nextCheckDueAt":"2026-10-22T15:47:08.702Z"}},{"id":"cmuxjvjji18zgad077wuxirem","slug":"azure-keyvault-secrets-rust","publicId":"030a9118-8070-4e62-9cd1-5fb9a849bc30","name":"azure-keyvault-secrets-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:50.763Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-keyvault-secrets-rust","findings":[{"id":"cmuxjvjji18zhad07kxhxv1gs","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:59:21.948Z","lastVerifiedAt":"2026-10-21T20:59:21.948Z","lastChangeDetectedAt":"2026-08-14T14:27:28.666Z","scannedHash":"8549b0a1e53fdb031fd4ba5f2fbecf541178a8e9","latestUpstreamHash":"8549b0a1e53fdb031fd4ba5f2fbecf541178a8e9","nextCheckDueAt":"2026-10-22T22:15:54.263Z"}},{"id":"cmuxjuqor15p8ad070193sx17","slug":"wiki-page-writer","publicId":"1e604480-348f-4823-b04e-d65f546aa93d","name":"wiki-page-writer","description":"Generates rich technical documentation pages with dark-mode Mermaid diagrams, source code citations, and first-principles depth. Use when writing documentation, generating wiki pages, creating technical deep-dives, or documenting specific components or systems.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T22:58:49.441Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-page-writer","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:34:06.878Z","lastVerifiedAt":"2026-10-21T23:34:06.878Z","lastChangeDetectedAt":"2026-08-14T15:52:28.684Z","scannedHash":"ffadefd1fab729385cc3d59ac46202305ff4688f","latestUpstreamHash":"ffadefd1fab729385cc3d59ac46202305ff4688f","nextCheckDueAt":"2026-10-22T23:32:59.999Z"}},{"id":"cmuxig2u00kjgad07chacbfkw","slug":"azure-resource-lookup","publicId":"76bb4ed8-9e37-4169-9883-01433e7ea337","name":"azure-resource-lookup","description":"List, find, and show Azure resources across subscriptions or resource groups. Handles prompts like \"list the websites in my subscription\", \"list my web apps\", \"show my app services\", \"list virtual machines\", \"list my VMs\", \"show storage accounts\", \"find container apps\", and \"what resources do I have\". USE FOR: list websites, list web apps, list app services, show websites in subscription, resource inventory, find resources by tag, tag analysis, orphaned resource discovery (not for cost analysis), unattached disks, count resources by type, cross-subscription lookup, and Azure Resource Graph queries. DO NOT USE FOR: deploying/changing resources (use azure-deploy), cost optimization (use cost-optimization from the optional azure-cost plugin), or non-Azure clouds.","author":"Microsoft","version":"1.2.3","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T22:58:49.342Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-resource-lookup","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:39:54.877Z","lastVerifiedAt":"2026-10-21T13:39:54.877Z","lastChangeDetectedAt":"2026-10-08T12:58:35.699Z","scannedHash":"ba9b018e96ff88bd68d6bfd120eac1f281e4248e","latestUpstreamHash":"ba9b018e96ff88bd68d6bfd120eac1f281e4248e","nextCheckDueAt":"2026-10-22T14:41:37.674Z"}},{"id":"cmuxjvg7y18kkad078f5ve4a4","slug":"azure-identity-rust","publicId":"b9c09a0d-3fb3-4bea-8718-145e1ebe9c06","name":"azure-identity-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:49.339Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-identity-rust","findings":[{"id":"cmuxjvg7y18klad07k2bpnvwb","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:42:41.604Z","lastVerifiedAt":"2026-10-21T20:42:41.604Z","lastChangeDetectedAt":"2026-08-25T13:23:21.572Z","scannedHash":"2a047dcea30ab4010b31c88846fa987716d21456","latestUpstreamHash":"2a047dcea30ab4010b31c88846fa987716d21456","nextCheckDueAt":"2026-10-22T21:09:29.614Z"}},{"id":"cmuxk2xcl1nccad07awt3uua6","slug":"wiki-researcher","publicId":"60fd0948-10e0-42e9-91b2-452ef60d83d9","name":"wiki-researcher","description":"Conducts multi-turn iterative deep research on specific topics within a codebase with zero tolerance for shallow analysis. Use when the user wants an in-depth investigation, needs to understand how something works across multiple files, or asks for comprehensive analysis of a specific system or pattern.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T22:58:49.335Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-researcher","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:05:58.436Z","lastVerifiedAt":"2026-10-21T15:05:58.436Z","lastChangeDetectedAt":"2026-08-25T13:31:21.655Z","scannedHash":"22777f05d7f11b559c120d6cae7f09848828b9d2","latestUpstreamHash":"22777f05d7f11b559c120d6cae7f09848828b9d2","nextCheckDueAt":"2026-10-22T17:22:34.333Z"}},{"id":"cmuxk2xa51nbxad07u81u1g3m","slug":"azure-ai-language-conversations-py","publicId":"b27c7cab-bac5-4fb6-a032-fbcc21c8da06","name":"azure-ai-language-conversations-py","description":"Implement Conversational Language Understanding (CLU) using the azure-ai-language-conversations Python SDK. Use when working with ConversationAnalysisClient to analyze conversation intent and entities, building NLP features, or integrating language understanding into applications.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T22:58:49.088Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-language-conversations-py","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:18:39.614Z","lastVerifiedAt":"2026-10-22T04:18:39.614Z","lastChangeDetectedAt":"2026-08-25T20:10:24.063Z","scannedHash":"065885039d26abe547d0059e2248cb2da1097717","latestUpstreamHash":"065885039d26abe547d0059e2248cb2da1097717","nextCheckDueAt":"2026-10-23T04:45:53.852Z"}},{"id":"cmvh3e0t3148pad07199u42sp","slug":"azure-upgrade","publicId":"cdc90df0-3ebf-418e-ac07-144e36fe8ed6","name":"azure-upgrade","description":"Assess and upgrade Azure workloads between plans, tiers, or SKUs, or modernize Azure SDK dependencies in source code. WHEN: upgrade Consumption to Flex Consumption, upgrade Azure Functions plan, change hosting plan, function app SKU, migrate App Service to Container Apps, modernize legacy Azure Java SDKs (com.microsoft.azure to com.azure), migrate Azure Cache for Redis (ACR/ACRE) to Azure Managed Redis (AMR).","author":"Microsoft","version":"1.2.3","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:36.637Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-upgrade","findings":[{"id":"cmvh3e0t3148qad07ay0yx0cx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvh3e0t3148rad07zs2anwyn","source":"cisco","category":"security","label":"Undeclared network usage","detail":"SKILL.md — Skill code uses network libraries but doesn't declare network requirement","severity":"medium","ruleId":"TOOL_ABUSE_UNDECLARED_NETWORK"},{"id":"cmvh3e0t3148sad07od0il7ip","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"references/languages/java/scripts/upgrade_bom.py:82 — Pattern detected: urllib.request.urlopen(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:25:41.179Z","lastVerifiedAt":"2026-10-21T17:25:41.179Z","lastChangeDetectedAt":"2026-10-20T19:43:28.158Z","scannedHash":"a6d9570e0e6d239a624592fd6eb667e20bb7e02d","latestUpstreamHash":"a6d9570e0e6d239a624592fd6eb667e20bb7e02d","nextCheckDueAt":"2026-10-22T19:12:20.798Z"}},{"id":"cmt916m702fibad09dd9h8ezh","slug":"slack-to-teams","publicId":"5f1c74d8-864c-4272-b0be-7a314facd273","name":"slack-to-teams","description":"Sub-skill of microsoft-365-agents-toolkit. Routed expert system with 100+ micro-expert files for migrating Slack bots to Teams, cross-platform bridging, and dual-platform bot development. USE FOR: migrating Slack bot to Teams, adding Teams support to Slack bot, building dual-platform bots, converting Block Kit to Adaptive Cards, identity/OAuth bridging, deploying bots to Azure or AWS, configuring AI model providers. DO NOT USE FOR: general web development, non-bot projects, standalone Teams development without Slack (use parent skill instead).","author":"","version":"","license":"","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T22:58:36.381Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/microsoft-365-agents-toolkit/skills/teams-app-developer/slack-to-teams","findings":[{"id":"cmt916m712ficad09kpj9alio","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmt916m712fiead09mm9yedhf","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmt916m712fioad09vqdhgn9q","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmt916m712fiiad099dc3njl1","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmt916m712fikad094omie4cz","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmt916m712finad09eoob8q3m","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmt916m712fiqad097d1w75io","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmt916m712fimad091dmroe0o","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmt916m712fifad090cy7vih5","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"slack-to-teams\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmt916m712filad09q8dc8ikn","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmt916m712figad09x7kj2aln","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmt916m712fihad09kjjqhhi2","source":"vettd","category":"description","label":"Description within character limit","detail":"549/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmt916m712fijad09t4694r3h","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"164 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmt916m712fipad09yl1pcusy","source":"vettd","category":"security","label":"No external URLs in skill definition","detail":"SKILL.md and references/ files do not reference external URLs","severity":"info","ruleId":"VTD-0093"},{"id":"cmt916m712fidad09cclcwa1q","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxjvjrv191nad07yhpcaepv","slug":"azure-ai-translation-ts","publicId":"e49765c7-41d4-4762-a98f-4bcb2fae4303","name":"azure-ai-translation-ts","description":"Build translation applications using Azure Translation SDKs for JavaScript (@azure-rest/ai-translation-text, @azure-rest/ai-translation-document). Use when implementing text translation, transliteration, language detection, or batch document translation.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:31.430Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-ai-translation-ts","findings":[{"id":"cmuxjvjrv191oad07dy0ijr1n","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:55:07.028Z","lastVerifiedAt":"2026-10-22T00:55:07.028Z","lastChangeDetectedAt":"2026-08-25T11:29:23.573Z","scannedHash":"e5a6c3d8a10610fa17d95d68cf103e92d575293f","latestUpstreamHash":"e5a6c3d8a10610fa17d95d68cf103e92d575293f","nextCheckDueAt":"2026-10-23T02:18:45.079Z"}},{"id":"cmuxjurot15xkad07dbww201k","slug":"azure-monitor-opentelemetry-py","publicId":"d0b6cba9-b9f7-4448-8bb6-8e0278ae56db","name":"azure-monitor-opentelemetry-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:31.345Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-monitor-opentelemetry-py","findings":[{"id":"cmuxjurot15xlad075va9xul3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:21:39.495Z","lastVerifiedAt":"2026-10-22T02:21:39.495Z","lastChangeDetectedAt":"2026-08-25T16:43:21.773Z","scannedHash":"43c5891abcc3d700972f42cd3427f5f73b19edcc","latestUpstreamHash":"43c5891abcc3d700972f42cd3427f5f73b19edcc","nextCheckDueAt":"2026-10-23T00:06:00.687Z"}},{"id":"cmuxjvljl19gnad07gn1y5vif","slug":"azure-keyvault-keys-rust","publicId":"97a41d0c-6abc-43bc-b895-3dde72d3b4e8","name":"azure-keyvault-keys-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:31.344Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-keyvault-keys-rust","findings":[{"id":"cmuxjvljl19goad07ltq6i25v","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:45:39.516Z","lastVerifiedAt":"2026-10-22T02:45:39.516Z","lastChangeDetectedAt":"2026-08-25T13:24:21.574Z","scannedHash":"14b39462ab5460308b52aafb3cde010e9e0da8b8","latestUpstreamHash":"14b39462ab5460308b52aafb3cde010e9e0da8b8","nextCheckDueAt":"2026-10-23T04:43:31.284Z"}},{"id":"cmuxm1mks20vmad070epoux31","slug":"unknown","publicId":"3ae750ac-109e-449b-98fa-1deb0cacc1b6","name":"unknown","description":"","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:31.160Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/deploy","findings":[{"id":"cmuxm1mks20vnad077xzep9za","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm1mks20voad07ct9wdcmc","source":"cisco","category":"security","label":"Vague skill description","detail":"SKILL.md — Skill description is too short (16 chars). Provide detailed explanation.","severity":"low","ruleId":"VTD-0087"},{"id":"cmuxm1mks20vpad07m9jelofk","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:56:06.921Z","lastVerifiedAt":"2026-10-21T23:56:06.921Z","lastChangeDetectedAt":"2026-10-08T04:41:35.483Z","scannedHash":"5c50a635606448f89c2a833b648296ae6dd19c62","latestUpstreamHash":"5c50a635606448f89c2a833b648296ae6dd19c62","nextCheckDueAt":"2026-10-22T23:58:51.855Z"}},{"id":"cmuxjurrm15yxad075r66hq2c","slug":"azure-eventhub-ts","publicId":"d6f62730-ea36-4939-99a4-b5ad05b0cdf1","name":"azure-eventhub-ts","description":"Build event streaming applications using Azure Event Hubs SDK for JavaScript (@azure/event-hubs). Use when implementing high-throughput event ingestion, real-time analytics, IoT telemetry, or event-driven architectures with partitioned consumers.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:27.469Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-eventhub-ts","findings":[{"id":"cmuxjurrm15yyad07t6787c1x","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:58:39.532Z","lastVerifiedAt":"2026-10-22T02:58:39.532Z","lastChangeDetectedAt":"2026-08-14T15:58:28.697Z","scannedHash":"c4cfb748dfa88feb9bcac3d1ae0f31a9dd0a6982","latestUpstreamHash":"c4cfb748dfa88feb9bcac3d1ae0f31a9dd0a6982","nextCheckDueAt":"2026-10-23T01:51:30.983Z"}},{"id":"cmuxjurn815x6ad072mcbi1k1","slug":"azure-storage-queue-py","publicId":"e15acd6b-997d-46a5-8cec-3ac5ee5a4e2a","name":"azure-storage-queue-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:27.467Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-storage-queue-py","findings":[{"id":"cmuxjurn815x7ad07y0ptx311","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:57:12.181Z","lastVerifiedAt":"2026-10-21T21:57:12.181Z","lastChangeDetectedAt":"2026-08-14T15:39:28.672Z","scannedHash":"58287bdc78694230979293fbf56a05858e3b8720","latestUpstreamHash":"58287bdc78694230979293fbf56a05858e3b8720","nextCheckDueAt":"2026-10-23T00:05:29.510Z"}},{"id":"cmuxjurg615v3ad07azjbcq1f","slug":"azure-messaging-webpubsubservice-py","publicId":"16323375-f4e9-4bea-91ff-56fe6ef7cc18","name":"azure-messaging-webpubsubservice-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:25.332Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-messaging-webpubsubservice-py","findings":[{"id":"cmuxjurg615v4ad07ia77yw53","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:23:01.664Z","lastVerifiedAt":"2026-10-21T22:23:01.664Z","lastChangeDetectedAt":"2026-08-14T14:58:28.677Z","scannedHash":"3d4959574cec66dc53330d47e557bf225e250e13","latestUpstreamHash":"3d4959574cec66dc53330d47e557bf225e250e13","nextCheckDueAt":"2026-10-22T23:00:40.708Z"}},{"id":"cmuxjvjrx191tad07min3g7qg","slug":"azure-monitor-ingestion-py","publicId":"73ccf005-28fe-4464-a0dc-b60a8660003c","name":"azure-monitor-ingestion-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:25.073Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-monitor-ingestion-py","findings":[{"id":"cmuxjvjrx191uad07yi0fuy67","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:48:58.401Z","lastVerifiedAt":"2026-10-21T13:48:58.401Z","lastChangeDetectedAt":"2026-08-14T15:32:28.694Z","scannedHash":"cf9873304bb7524e71c91e20d6b9188624f38975","latestUpstreamHash":"cf9873304bb7524e71c91e20d6b9188624f38975","nextCheckDueAt":"2026-10-22T14:32:35.512Z"}},{"id":"cmuxjvlmj19hoad07yctea96u","slug":"azure-identity-ts","publicId":"ffd65e73-7748-4e7f-bc95-8952f6f43282","name":"azure-identity-ts","description":"Authenticate to Azure services using Azure Identity library for JavaScript (@azure/identity). Use when configuring authentication with DefaultAzureCredential, managed identity, service principals, or interactive browser login.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:25.072Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-identity-ts","findings":[{"id":"cmuxjvlmj19hrad07xy99w8w1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:08:41.031Z","lastVerifiedAt":"2026-10-21T16:08:41.031Z","lastChangeDetectedAt":"2026-08-25T11:26:23.555Z","scannedHash":"b275cc7fb988e6502965015d0d091605332f87c1","latestUpstreamHash":"b275cc7fb988e6502965015d0d091605332f87c1","nextCheckDueAt":"2026-10-22T16:42:30.890Z"}},{"id":"cmuxjvcwp1866ad07si9239e5","slug":"azure-eventhub-rust","publicId":"a522d8f5-b18b-477a-a2da-05261e9c2181","name":"azure-eventhub-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:25.068Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-eventhub-rust","findings":[{"id":"cmuxjvcwq1867ad07ovk5i8q4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:21:01.655Z","lastVerifiedAt":"2026-10-21T22:21:01.655Z","lastChangeDetectedAt":"2026-08-25T13:19:21.567Z","scannedHash":"e7f76b1759742674de009cc3d75bb5668da0d004","latestUpstreamHash":"e7f76b1759742674de009cc3d75bb5668da0d004","nextCheckDueAt":"2026-10-22T21:04:37.994Z"}},{"id":"cmuxjurrr15z4ad07irlx8dow","slug":"azure-eventgrid-py","publicId":"9d07238b-9a88-48ed-b7cc-cbf8e20cac67","name":"azure-eventgrid-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:25.053Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-eventgrid-py","findings":[{"id":"cmuxjurrr15z5ad07dpr82gu3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:44:41.102Z","lastVerifiedAt":"2026-10-21T16:44:41.102Z","lastChangeDetectedAt":"2026-08-25T21:25:27.968Z","scannedHash":"90c336cbe658115749f78e8f7ef89e1d120b7669","latestUpstreamHash":"90c336cbe658115749f78e8f7ef89e1d120b7669","nextCheckDueAt":"2026-10-22T15:32:24.209Z"}},{"id":"cmuxjuqe715msad07qah5hhd3","slug":"azure-mgmt-arizeaiobservabilityeval-dotnet","publicId":"d862cd18-111c-4fc8-b7eb-7d4da15a7fcd","name":"azure-mgmt-arizeaiobservabilityeval-dotnet","description":"Azure Resource Manager SDK for Arize AI Observability and Evaluation (.NET). Use when managing Arize AI organizations on Azure via Azure Marketplace, creating/updating/deleting Arize resources, or integrating Arize ML observability into .NET applications. Triggers: \"Arize AI\", \"ML observability\", \"ArizeAIObservabilityEval\", \"Arize organization\".","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:23.430Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-arizeaiobservabilityeval-dotnet","findings":[{"id":"cmuxjuqe715mtad07gjgdt7s5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:32:06.872Z","lastVerifiedAt":"2026-10-21T23:32:06.872Z","lastChangeDetectedAt":"2026-08-25T13:23:21.572Z","scannedHash":"87d564bcece7e8f237f84d118cf2f540c0aa922f","latestUpstreamHash":"87d564bcece7e8f237f84d118cf2f540c0aa922f","nextCheckDueAt":"2026-10-22T21:56:45.034Z"}},{"id":"cmuxjurom15xbad07b0y5eva6","slug":"azure-appconfiguration-py","publicId":"f0032a0d-170f-42be-9fb2-8a14b81b0d80","name":"azure-appconfiguration-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:23.429Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-appconfiguration-py","findings":[{"id":"cmuxjuron15xcad07082ufk0s","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:53:02.266Z","lastVerifiedAt":"2026-10-21T22:53:02.266Z","lastChangeDetectedAt":"2026-08-25T11:28:23.573Z","scannedHash":"ec240bbbb4fc7e96000e5e9919451c78a07d1fab","latestUpstreamHash":"ec240bbbb4fc7e96000e5e9919451c78a07d1fab","nextCheckDueAt":"2026-10-22T21:22:33.517Z"}},{"id":"cmuxjvcdj185pad072bxd01fy","slug":"m365-agents-ts","publicId":"ba9c96f8-1388-4a41-928a-48848ea17e4c","name":"m365-agents-ts","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:23.263Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/m365-agents-ts","findings":[{"id":"cmuxjvcdj185qad076zn0qhot","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:43:08.335Z","lastVerifiedAt":"2026-10-21T19:43:08.335Z","lastChangeDetectedAt":"2026-08-14T14:57:28.669Z","scannedHash":"0bcb6ef9c55c8f8bae331e85d40f8585844c4bc7","latestUpstreamHash":"0bcb6ef9c55c8f8bae331e85d40f8585844c4bc7","nextCheckDueAt":"2026-10-22T18:59:20.028Z"}},{"id":"cmuxjvlmx19i5ad07px70wfvm","slug":"azure-ai-projects-ts","publicId":"e62c1d9b-702e-4006-a331-877b595965e9","name":"azure-ai-projects-ts","description":"Build AI applications using Azure AI Projects SDK for JavaScript (@azure/ai-projects). Use when working with Foundry project clients, agents, connections, deployments, datasets, indexes, evaluations, or getting OpenAI clients.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:23.234Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-ai-projects-ts","findings":[{"id":"cmuxjvlmy19i6ad07w1hncwo0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:44:39.516Z","lastVerifiedAt":"2026-10-22T02:44:39.516Z","lastChangeDetectedAt":"2026-08-25T20:45:27.932Z","scannedHash":"f1d68f1c635903c22d4bfc6d85349a0405e2f175","latestUpstreamHash":"f1d68f1c635903c22d4bfc6d85349a0405e2f175","nextCheckDueAt":"2026-10-23T01:23:23.978Z"}},{"id":"cmuxjupwr15hgad07yyqj5c4k","slug":"azure-keyvault-certificates-rust","publicId":"edf71f6f-83bc-4778-a915-2e83a141d93d","name":"azure-keyvault-certificates-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:22.935Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-keyvault-certificates-rust","findings":[{"id":"cmuxjupwr15hhad07950eh0s2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:30:06.989Z","lastVerifiedAt":"2026-10-22T00:30:06.989Z","lastChangeDetectedAt":"2026-08-25T21:31:27.971Z","scannedHash":"0df025484a282e71a0bee75de5d3fdc4e1f83e3e","latestUpstreamHash":"0df025484a282e71a0bee75de5d3fdc4e1f83e3e","nextCheckDueAt":"2026-10-23T02:16:24.400Z"}},{"id":"cmuxjuox3159vad07ljbyf3y9","slug":"azure-cosmos-java","publicId":"21187538-c9cb-495c-9096-2246c4d0b068","name":"azure-cosmos-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:22.133Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-cosmos-java","findings":[{"id":"cmuxjuox3159wad07z3dkfs3x","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:46:06.902Z","lastVerifiedAt":"2026-10-21T23:46:06.902Z","lastChangeDetectedAt":"2026-08-14T14:57:28.669Z","scannedHash":"11dfaafad2fac0ca15d3b328d0ae76f8338da917","latestUpstreamHash":"11dfaafad2fac0ca15d3b328d0ae76f8338da917","nextCheckDueAt":"2026-10-22T22:54:20.821Z"}},{"id":"cmuxjurj215vrad07hjunrl5n","slug":"azure-monitor-ingestion-java","publicId":"ff6f33a7-bb67-4322-aa4c-4e206a58d265","name":"azure-monitor-ingestion-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:22.041Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-monitor-ingestion-java","findings":[{"id":"cmuxjurj215vsad07j3i3o9nx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:59:21.948Z","lastVerifiedAt":"2026-10-21T20:59:21.948Z","lastChangeDetectedAt":"2026-08-25T12:28:05.108Z","scannedHash":"99ffd5484dfa60d3c5c38d0bd22b3d2861d8a624","latestUpstreamHash":"99ffd5484dfa60d3c5c38d0bd22b3d2861d8a624","nextCheckDueAt":"2026-10-22T20:23:58.374Z"}},{"id":"cmuxjuqan15lead07n2y3267a","slug":"azure-storage-queue-rust","publicId":"8953970c-e0b6-4110-90b1-e2d0f1faf72b","name":"azure-storage-queue-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:22.040Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-storage-queue-rust","findings":[{"id":"cmuxjuqao15lgad07e2llhbw3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:40:41.205Z","lastVerifiedAt":"2026-10-21T17:40:41.205Z","lastChangeDetectedAt":"2026-08-14T15:41:28.671Z","scannedHash":"a72fa4d7cea88cc8e0ccf45e5231db6863fe4ff2","latestUpstreamHash":"a72fa4d7cea88cc8e0ccf45e5231db6863fe4ff2","nextCheckDueAt":"2026-10-22T15:29:02.275Z"}},{"id":"cmuxjuqe615mnad07n0sz6snx","slug":"azure-storage-file-share-py","publicId":"cbe3f0ea-88f4-472c-a79a-b77c4877a077","name":"azure-storage-file-share-py","description":"|-","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:21.840Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-storage-file-share-py","findings":[{"id":"cmuxjuqe615moad07uesvzprx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:50:58.257Z","lastVerifiedAt":"2026-10-21T12:50:58.257Z","lastChangeDetectedAt":"2026-08-25T12:33:05.122Z","scannedHash":"08ad8bd92ae39f83a50f89eeb5f327569afa6464","latestUpstreamHash":"08ad8bd92ae39f83a50f89eeb5f327569afa6464","nextCheckDueAt":"2026-10-22T12:13:58.596Z"}},{"id":"cmuxjvjuk192had07nzis48t3","slug":"azure-search-documents-ts","publicId":"9457b06b-ef17-4e8e-a111-500ac779c4d0","name":"azure-search-documents-ts","description":"Build search applications using Azure AI Search SDK for JavaScript (@azure/search-documents). Use when creating/managing indexes, implementing vector/hybrid search, semantic ranking, or building agentic retrieval with knowledge bases.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:21.837Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-search-documents-ts","findings":[{"id":"cmuxjvjuk192iad07eb4jtqde","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:31:19.105Z","lastVerifiedAt":"2026-10-21T15:31:19.105Z","lastChangeDetectedAt":"2026-08-14T15:47:28.675Z","scannedHash":"22089c7f7b4340797d5767cd7842822e9433dc97","latestUpstreamHash":"22089c7f7b4340797d5767cd7842822e9433dc97","nextCheckDueAt":"2026-10-22T15:31:04.786Z"}},{"id":"cmuxjvfcb18j4ad073sn203nm","slug":"azure-servicebus-ts","publicId":"15a698dc-a3bd-4502-b824-dd292a73b286","name":"azure-servicebus-ts","description":"Build messaging applications using Azure Service Bus SDK for JavaScript (@azure/service-bus). Use when implementing queues, topics/subscriptions, message sessions, dead-letter handling, or enterprise messaging patterns.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:58:20.352Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-servicebus-ts","findings":[{"id":"cmuxjvfcb18j5ad07jteztw5a","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:29:58.266Z","lastVerifiedAt":"2026-10-21T13:29:58.266Z","lastChangeDetectedAt":"2026-08-14T15:38:28.696Z","scannedHash":"575e0399b5116369a5b57fd614a9d58f10b48f76","latestUpstreamHash":"575e0399b5116369a5b57fd614a9d58f10b48f76","nextCheckDueAt":"2026-10-22T11:15:23.210Z"}},{"id":"cmv1hxwx8cf5dad06peqnfvoj","slug":"azure-kubernetes-automatic-readiness","publicId":"d613e59a-6945-4a19-9047-56af38e46174","name":"azure-kubernetes-automatic-readiness","description":"Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility. Identifies incompatibilities, generates fixes, and guides migration from AKS Standard to AKS Automatic. WHEN: migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess cluster for Automatic compatibility, fix deployment for Automatic compatibility, identify AKS Automatic migration blockers, is my cluster ready for AKS Automatic.","author":"Microsoft","version":"1.1.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:54:36.060Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness","findings":[{"id":"cmv1hxwx8cf5ead06rp8kxv7j","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:53:39.047Z","lastVerifiedAt":"2026-10-21T09:53:39.047Z","lastChangeDetectedAt":"2026-10-10T14:12:46.957Z","scannedHash":"c8ffe7bbfd195951701a5514cbdad6263c817e7a","latestUpstreamHash":"c8ffe7bbfd195951701a5514cbdad6263c817e7a","nextCheckDueAt":"2026-10-22T11:52:11.072Z"}},{"id":"cmuxjvcdk185uad07ipkcb0zr","slug":"azure-ai-contentunderstanding-py","publicId":"14736bb0-7e78-48d4-95e8-5a97c557f940","name":"azure-ai-contentunderstanding-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:54:32.482Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-contentunderstanding-py","findings":[{"id":"cmuxjvcdk185vad075qlwg8pm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:27:15.855Z","lastVerifiedAt":"2026-10-21T08:27:15.855Z","lastChangeDetectedAt":"2026-08-25T18:17:23.261Z","scannedHash":"bdc77f05d3f0f8fceb5c6160d84a7c8814906e6b","latestUpstreamHash":"bdc77f05d3f0f8fceb5c6160d84a7c8814906e6b","nextCheckDueAt":"2026-10-22T07:30:00.801Z"}},{"id":"cmuxjurll15wfad0720dxo6vl","slug":"azure-mgmt-apimanagement-dotnet","publicId":"70f0132c-0ac8-40e6-ba79-e6264a422bf4","name":"azure-mgmt-apimanagement-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:54:32.260Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-apimanagement-dotnet","findings":[{"id":"cmuxjurlm15wgad07s23ns98l","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:18:39.329Z","lastVerifiedAt":"2026-10-21T11:18:39.329Z","lastChangeDetectedAt":"2026-08-14T15:06:28.681Z","scannedHash":"6a3ef007b414bbd0cc2e23fd2d0c5dbcd318c33d","latestUpstreamHash":"6a3ef007b414bbd0cc2e23fd2d0c5dbcd318c33d","nextCheckDueAt":"2026-10-22T09:52:16.033Z"}},{"id":"cmuxjurr815ymad070u9o42r6","slug":"azure-resource-manager-sql-dotnet","publicId":"d0f1bf43-dcf7-47d9-862e-5727da1aeab6","name":"azure-resource-manager-sql-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:54:32.257Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-resource-manager-sql-dotnet","findings":[{"id":"cmuxjurr815ynad072ssnogq4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:20:19.095Z","lastVerifiedAt":"2026-10-21T15:20:19.095Z","lastChangeDetectedAt":"2026-08-25T12:18:05.077Z","scannedHash":"02e74e01786d668b7d51f8a9592bdb5dc05e401e","latestUpstreamHash":"02e74e01786d668b7d51f8a9592bdb5dc05e401e","nextCheckDueAt":"2026-10-22T15:31:02.308Z"}},{"id":"cmuxjupd415dvad07c4wmfxow","slug":"azure-resource-manager-playwright-dotnet","publicId":"ea611fad-6ead-481f-98f0-d6c9d86bd499","name":"azure-resource-manager-playwright-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:54:31.141Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-resource-manager-playwright-dotnet","findings":[{"id":"cmuxjupd415dwad07l373p4ie","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:16:06.846Z","lastVerifiedAt":"2026-10-21T23:16:06.846Z","lastChangeDetectedAt":"2026-08-25T12:30:05.114Z","scannedHash":"982606adb8bcbcff01af1a0338ac6c5e44aa0edd","latestUpstreamHash":"982606adb8bcbcff01af1a0338ac6c5e44aa0edd","nextCheckDueAt":"2026-10-23T00:54:44.835Z"}},{"id":"cmuxjvf1g18goad07jh6gxo5j","slug":"azure-ai-translation-document-py","publicId":"c307736d-fc5e-45ca-89e8-63a905ecd4bf","name":"azure-ai-translation-document-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:54:31.139Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-translation-document-py","findings":[{"id":"cmuxjvf1h18gpad07g88mzrjc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:01:39.311Z","lastVerifiedAt":"2026-10-21T11:01:39.311Z","lastChangeDetectedAt":"2026-08-14T14:32:28.667Z","scannedHash":"e548c746ec02f0ec9d2acb4adf18334d6ca0edf3","latestUpstreamHash":"e548c746ec02f0ec9d2acb4adf18334d6ca0edf3","nextCheckDueAt":"2026-10-22T08:47:25.584Z"}},{"id":"cmuxjuqb615lpad07d7swo6c0","slug":"debugview","publicId":"126125c5-6ef0-4d1e-8fda-365cecb4222b","name":"debugview","description":"|","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-05T22:54:31.046Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/debugview","findings":[{"id":"cmuxjuqb615lqad07zcxzwxhl","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:23:06.975Z","lastVerifiedAt":"2026-10-22T00:23:06.975Z","lastChangeDetectedAt":"2026-08-14T15:37:28.695Z","scannedHash":"1a9e965776b48abb8e0934c27cf9f5f100fc2d95","latestUpstreamHash":"1a9e965776b48abb8e0934c27cf9f5f100fc2d95","nextCheckDueAt":"2026-10-23T02:44:14.930Z"}},{"id":"cmuxjvjrr191gad07uybrz76m","slug":"azure-storage-blob-rust","publicId":"61e10290-fbf7-4db7-98b2-eda6333664d1","name":"azure-storage-blob-rust","description":"|","author":"Microsoft","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-05T22:54:30.542Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-storage-blob-rust","findings":[{"id":"cmuxjvjrs191had07ncafgaqm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:05:41.355Z","lastVerifiedAt":"2026-10-21T19:05:41.355Z","lastChangeDetectedAt":"2026-08-25T19:36:23.985Z","scannedHash":"1d22a03690fb949dfcdb9e1ce298e0059a90989b","latestUpstreamHash":"1d22a03690fb949dfcdb9e1ce298e0059a90989b","nextCheckDueAt":"2026-10-22T17:44:14.809Z"}},{"id":"cmuxjup5815byad07f303oumv","slug":"azure-ai-translation-text-py","publicId":"f46efb57-9228-4fae-accf-2780096700bc","name":"azure-ai-translation-text-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:48:05.161Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-translation-text-py","findings":[{"id":"cmuxjup5815bzad07q1ws5ssw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:18:58.262Z","lastVerifiedAt":"2026-10-21T13:18:58.262Z","lastChangeDetectedAt":"2026-08-14T14:52:28.673Z","scannedHash":"1d0affb190094b511470c1f6b9622044d5c3c25f","latestUpstreamHash":"1d0affb190094b511470c1f6b9622044d5c3c25f","nextCheckDueAt":"2026-10-22T11:27:50.799Z"}},{"id":"cmuxjuq2k15iuad07rdmq1quo","slug":"azure-storage-blob-java","publicId":"36c0714b-760e-4d08-8960-f0acb2a60620","name":"azure-storage-blob-java","description":"Build blob storage applications with Azure Storage Blob SDK for Java. Use when uploading, downloading, or managing files in Azure Blob Storage, working with containers, or implementing streaming data operations.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:48:03.767Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-storage-blob-java","findings":[{"id":"cmuxjuq2k15ivad07jg6allld","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:05:13.446Z","lastVerifiedAt":"2026-10-21T05:05:13.446Z","lastChangeDetectedAt":"2026-08-25T11:25:23.466Z","scannedHash":"546766fa052b52e814f86f445b686f9bd04364fa","latestUpstreamHash":"546766fa052b52e814f86f445b686f9bd04364fa","nextCheckDueAt":"2026-10-22T06:11:36.445Z"}},{"id":"cmuxjuozf15aead07o22vkddd","slug":"azure-eventhub-dotnet","publicId":"0c0edda7-ef41-412c-9af8-933f15ccfbab","name":"azure-eventhub-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:48:02.160Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-eventhub-dotnet","findings":[{"id":"cmuxjuozf15afad07ot9bfm4h","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:19:41.167Z","lastVerifiedAt":"2026-10-21T17:19:41.167Z","lastChangeDetectedAt":"2026-08-14T15:06:28.681Z","scannedHash":"61210008d0cda928fe40b6463925443054d79f7b","latestUpstreamHash":"61210008d0cda928fe40b6463925443054d79f7b","nextCheckDueAt":"2026-10-22T16:54:25.871Z"}},{"id":"cmuxjuqrh15pzad07o863r9pr","slug":"azure-identity-java","publicId":"648f8213-b8b6-43ab-b177-7e37cf81fd3d","name":"azure-identity-java","description":"Azure Identity library for Java authentication with Azure services. Use when implementing DefaultAzureCredential, managed identity, service principal, or any Azure authentication pattern in Java applications.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:48:00.587Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-identity-java","findings":[{"id":"cmuxjuqrh15q0ad07ip76qoqf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:17:41.269Z","lastVerifiedAt":"2026-10-21T18:17:41.269Z","lastChangeDetectedAt":"2026-08-25T16:44:21.774Z","scannedHash":"3b21b1a4c9189a1b1ad32f411194375f7d8ebf3f","latestUpstreamHash":"3b21b1a4c9189a1b1ad32f411194375f7d8ebf3f","nextCheckDueAt":"2026-10-22T15:55:14.293Z"}},{"id":"cmuxjurp715xpad07knl706j1","slug":"azure-ai-projects-py","publicId":"7c638645-1210-489a-877c-9f45f311b7d6","name":"azure-ai-projects-py","description":"Build AI applications using the Azure AI Projects Python SDK (azure-ai-projects). Use when working with Foundry project clients, creating versioned agents with PromptAgentDefinition, running evaluations, managing connections/deployments/datasets/indexes, or using OpenAI-compatible clients. This is the high-level Foundry SDK - for low-level agent operations, use azure-ai-agents-python skill.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:59.463Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-projects-py","findings":[{"id":"cmuxjurp715xqad07616sfcoh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:46:40.992Z","lastVerifiedAt":"2026-10-21T15:46:40.992Z","lastChangeDetectedAt":"2026-08-14T15:51:28.682Z","scannedHash":"6d23ede5e1afb2839765204309097c3143a67564","latestUpstreamHash":"6d23ede5e1afb2839765204309097c3143a67564","nextCheckDueAt":"2026-10-22T16:03:44.857Z"}},{"id":"cmuxjuqzk15raad072szzs19n","slug":"azure-servicebus-dotnet","publicId":"c22c6b55-548c-429b-9a20-53393e182769","name":"azure-servicebus-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:57.647Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-servicebus-dotnet","findings":[{"id":"cmuxjuqzk15rbad07uyyzv1ls","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:41:39.037Z","lastVerifiedAt":"2026-10-21T09:41:39.037Z","lastChangeDetectedAt":"2026-08-14T14:31:28.667Z","scannedHash":"2bfd232583ad2850a49c787169e16782f87bc1d7","latestUpstreamHash":"2bfd232583ad2850a49c787169e16782f87bc1d7","nextCheckDueAt":"2026-10-22T11:38:16.385Z"}},{"id":"cmuxjupp915ghad07dwhvsb16","slug":"azure-eventhub-java","publicId":"df085eda-f618-4aa2-991f-2aa199749139","name":"azure-eventhub-java","description":"Build real-time streaming applications with Azure Event Hubs SDK for Java. Use when implementing event streaming, high-throughput data ingestion, or building event-driven architectures.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:56.436Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-eventhub-java","findings":[{"id":"cmuxjupp915giad07ytpv8tz2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:20:41.440Z","lastVerifiedAt":"2026-10-21T19:20:41.440Z","lastChangeDetectedAt":"2026-08-14T15:32:28.694Z","scannedHash":"83b03c95ba3346a76ad291867fb3a4c9803dc545","latestUpstreamHash":"83b03c95ba3346a76ad291867fb3a4c9803dc545","nextCheckDueAt":"2026-10-22T19:00:46.321Z"}},{"id":"cmuxjuq9015kvad07gdnxvrue","slug":"azure-mgmt-weightsandbiases-dotnet","publicId":"2d8bbc20-ee13-48b8-8663-82b2c4a889b9","name":"azure-mgmt-weightsandbiases-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:55.216Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-weightsandbiases-dotnet","findings":[{"id":"cmuxjuq9015kwad07mc77l0mb","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:10:01.585Z","lastVerifiedAt":"2026-10-21T22:10:01.585Z","lastChangeDetectedAt":"2026-08-25T11:24:23.461Z","scannedHash":"8f2587380047b7bed88ee6a35c0aeae040342709","latestUpstreamHash":"8f2587380047b7bed88ee6a35c0aeae040342709","nextCheckDueAt":"2026-10-22T22:54:11.483Z"}},{"id":"cmuxjuqgp15nhad0713gnhc99","slug":"azure-ai-voicelive-py","publicId":"be80e3a4-e4ab-4121-a17e-1018f7bfac98","name":"azure-ai-voicelive-py","description":"Build real-time voice AI applications using Azure AI Voice Live SDK (azure-ai-voicelive). Use this skill when creating Python applications that need real-time bidirectional audio communication with Azure AI, including voice assistants, voice-enabled chatbots, real-time speech-to-speech translation, voice-driven avatars, or any WebSocket-based audio streaming with AI models. Supports Server VAD (Voice Activity Detection), turn-based conversation, function calling, MCP tools, avatar integration, and transcription.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:53.876Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-ai-voicelive-py","findings":[{"id":"cmuxjuqgp15niad0757oivwkw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:21:39.332Z","lastVerifiedAt":"2026-10-21T11:21:39.332Z","lastChangeDetectedAt":"2026-08-14T15:37:28.695Z","scannedHash":"c9e31e86696d1af0604abc9aa11f6b1b9ce8b87c","latestUpstreamHash":"c9e31e86696d1af0604abc9aa11f6b1b9ce8b87c","nextCheckDueAt":"2026-10-22T12:26:47.323Z"}},{"id":"cmuxjuqp315pnad07phaxt7dj","slug":"azure-mgmt-fabric-dotnet","publicId":"5dc51d70-ac29-4088-b816-74c34ae60bf2","name":"azure-mgmt-fabric-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:52.519Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-fabric-dotnet","findings":[{"id":"cmuxjuqp415poad070jswcfsk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:27:21.889Z","lastVerifiedAt":"2026-10-21T20:27:21.889Z","lastChangeDetectedAt":"2026-08-25T19:17:23.979Z","scannedHash":"fb958f3071a3896afd1340cf879eabd417ff6e91","latestUpstreamHash":"fb958f3071a3896afd1340cf879eabd417ff6e91","nextCheckDueAt":"2026-10-22T18:41:22.535Z"}},{"id":"cmuxjuq5l15k7ad07bcqxq3ba","slug":"azure-security-keyvault-keys-java","publicId":"dfd10e98-0c0b-4648-a4c1-5072825dda44","name":"azure-security-keyvault-keys-java","description":"Azure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:51.113Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-security-keyvault-keys-java","findings":[{"id":"cmuxjuq5l15k8ad07n27jcsc2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:19:41.167Z","lastVerifiedAt":"2026-10-21T17:19:41.167Z","lastChangeDetectedAt":"2026-08-25T12:36:05.126Z","scannedHash":"1bedbdd6834c29fe29dcb3b6834d5ddec89b068a","latestUpstreamHash":"1bedbdd6834c29fe29dcb3b6834d5ddec89b068a","nextCheckDueAt":"2026-10-22T15:33:02.304Z"}},{"id":"cmuxjuoiu1589ad07pi64slc3","slug":"azure-ai-projects-dotnet","publicId":"2089ea58-a281-4227-81eb-1be928a92d4f","name":"azure-ai-projects-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:50.030Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-ai-projects-dotnet","findings":[{"id":"cmuxjuoiv158aad07r9lhye9y","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:06:39.604Z","lastVerifiedAt":"2026-10-22T04:06:39.604Z","lastChangeDetectedAt":"2026-08-25T20:14:27.970Z","scannedHash":"2dabc3855c1b4ea3c8bf6f855ccf310c9e36eccd","latestUpstreamHash":"2dabc3855c1b4ea3c8bf6f855ccf310c9e36eccd","nextCheckDueAt":"2026-10-23T03:21:08.334Z"}},{"id":"cmuxjuq5g15jwad07fovq25dp","slug":"azure-mgmt-mongodbatlas-dotnet","publicId":"e593c475-5950-4aba-9b74-5aaf0b242ef7","name":"azure-mgmt-mongodbatlas-dotnet","description":"Manage MongoDB Atlas Organizations as Azure ARM resources using Azure.ResourceManager.MongoDBAtlas SDK. Use when creating, updating, listing, or deleting MongoDB Atlas organizations through Azure Marketplace integration. This SDK manages the Azure-side organization resource, not Atlas clusters/databases directly.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:48.956Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-mongodbatlas-dotnet","findings":[{"id":"cmuxjuq5g15jxad07ez46q2p9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:25:01.668Z","lastVerifiedAt":"2026-10-21T22:25:01.668Z","lastChangeDetectedAt":"2026-08-14T14:50:28.672Z","scannedHash":"4d3f7bfa53fcab38401f88969c8b3643f709cb2b","latestUpstreamHash":"4d3f7bfa53fcab38401f88969c8b3643f709cb2b","nextCheckDueAt":"2026-10-22T22:33:50.682Z"}},{"id":"cmuxjuptf15gtad07xn4eji5a","slug":"azure-ai-agents-persistent-dotnet","publicId":"18a97ed8-4fe9-4c4c-9719-8599f1275789","name":"azure-ai-agents-persistent-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:47.921Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-ai-agents-persistent-dotnet","findings":[{"id":"cmuxjuptf15guad07cnjrti81","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:21:58.263Z","lastVerifiedAt":"2026-10-21T13:21:58.263Z","lastChangeDetectedAt":"2026-08-14T15:41:28.671Z","scannedHash":"62d6ee2d1e7ffe649e6bae74b9235d061b852376","latestUpstreamHash":"62d6ee2d1e7ffe649e6bae74b9235d061b852376","nextCheckDueAt":"2026-10-22T11:56:17.157Z"}},{"id":"cmuxjupal15d6ad07bz1i3bwr","slug":"azure-cosmos-db-py","publicId":"985de4d2-a802-453b-9798-2f80cead1333","name":"azure-cosmos-db-py","description":"Build Azure Cosmos DB NoSQL services with Python/FastAPI following production-grade patterns. Use when implementing database client setup with dual auth (DefaultAzureCredential + emulator), service layer classes with CRUD operations, partition key strategies, parameterized queries, or TDD patterns for Cosmos. Triggers on phrases like \"Cosmos DB\", \"NoSQL database\", \"document store\", \"add persistence\", \"database service layer\", or \"Python Cosmos SDK\".","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:46.860Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-cosmos-db-py","findings":[{"id":"cmuxjupal15d7ad07taghm3dz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjupal15d8ad07fppxzyrd","source":"cisco","category":"security","label":"Infinite loop without clear exit condition","detail":"assets/service_template.py:127 — Pattern detected: while True:","severity":"high","ruleId":"RESOURCE_ABUSE_INFINITE_LOOP"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:32:19.106Z","lastVerifiedAt":"2026-10-21T15:32:19.106Z","lastChangeDetectedAt":"2026-08-14T15:41:28.671Z","scannedHash":"1a03b83a1054d4183c58bd828db8c7997f1c38eb","latestUpstreamHash":"1a03b83a1054d4183c58bd828db8c7997f1c38eb","nextCheckDueAt":"2026-10-22T16:10:07.405Z"}},{"id":"cmuxjupdm15e8ad077391qpr0","slug":"azure-ai-document-intelligence-dotnet","publicId":"a4f62db0-40cf-447e-9b61-8374ab772323","name":"azure-ai-document-intelligence-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:45.051Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-ai-document-intelligence-dotnet","findings":[{"id":"cmuxjupdm15e9ad07jqg0vi57","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:40:12.237Z","lastVerifiedAt":"2026-10-21T22:40:12.237Z","lastChangeDetectedAt":"2026-08-25T18:58:23.389Z","scannedHash":"17be5880febf72e104b84d32e626197693d90e3b","latestUpstreamHash":"17be5880febf72e104b84d32e626197693d90e3b","nextCheckDueAt":"2026-10-22T20:17:27.968Z"}},{"id":"cmuxjurpx15y3ad07t6h1kbsv","slug":"azure-compute-batch-java","publicId":"129885ac-f8fb-46d7-8f2b-3842d63f3b6c","name":"azure-compute-batch-java","description":"|-","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:43.537Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-compute-batch-java","findings":[{"id":"cmuxjurpx15y4ad07dplxztj0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:27:58.265Z","lastVerifiedAt":"2026-10-21T13:27:58.265Z","lastChangeDetectedAt":"2026-08-25T12:24:05.098Z","scannedHash":"84c4838dbba5893e78a5ea42565ea35feddbcd1c","latestUpstreamHash":"84c4838dbba5893e78a5ea42565ea35feddbcd1c","nextCheckDueAt":"2026-10-22T11:39:16.755Z"}},{"id":"cmuxhzc4t0j4mad07rokda19j","slug":"azure-cosmos-ts","publicId":"6af034e5-c20b-46f5-9be6-ed5bae972ce1","name":"azure-cosmos-ts","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:40.812Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-cosmos-ts","findings":[{"id":"cmuxhzc4u0j4nad075uh67tly","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:25:58.418Z","lastVerifiedAt":"2026-10-21T14:25:58.418Z","lastChangeDetectedAt":"2026-08-14T15:00:28.678Z","scannedHash":"1ce58804be03d192a379cd5049d15237d112f214","latestUpstreamHash":"1ce58804be03d192a379cd5049d15237d112f214","nextCheckDueAt":"2026-10-22T15:59:46.783Z"}},{"id":"cmuxjuq5i15k2ad07ufvgc8dg","slug":"azure-speech-to-text-rest-py","publicId":"55da2676-d62f-4b99-bc7f-40ba64c2a3a7","name":"azure-speech-to-text-rest-py","description":"|-","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:39.635Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-speech-to-text-rest-py","findings":[{"id":"cmuxjuq5i15k3ad07jyhr4j9i","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:01:08.372Z","lastVerifiedAt":"2026-10-21T20:01:08.372Z","lastChangeDetectedAt":"2026-08-25T11:27:23.573Z","scannedHash":"d6a54c61e1c1772e43b6cd3a15849328161b4f25","latestUpstreamHash":"d6a54c61e1c1772e43b6cd3a15849328161b4f25","nextCheckDueAt":"2026-10-22T20:56:24.528Z"}},{"id":"cmv8h3vqeecc8ad064qolgtrq","slug":"azure-quotas","publicId":"41bae59c-e228-42e9-ab4d-6ec9b5b75d34","name":"azure-quotas","description":"Check/manage Azure quotas and usage across providers. For deployment planning, capacity validation, region selection. WHEN: \"check quotas\", \"service limits\", \"current usage\", \"request quota increase\", \"quota exceeded\", \"validate capacity\", \"regional availability\", \"provisioning limits\", \"vCPU limit\", \"how many vCPUs available in my subscription\".","author":"Microsoft","version":"1.2.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:38.457Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-quotas","findings":[{"id":"cmv8h3vqeecc9ad06rpu0vghx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:31:19.105Z","lastVerifiedAt":"2026-10-21T15:31:19.105Z","lastChangeDetectedAt":"2026-10-15T10:49:14.264Z","scannedHash":"9abe51b3cbdf48bcb9783700021c78063c0b020b","latestUpstreamHash":"9abe51b3cbdf48bcb9783700021c78063c0b020b","nextCheckDueAt":"2026-10-22T17:50:34.955Z"}},{"id":"cmuxjurah15tkad074zf3j764","slug":"mcp-builder","publicId":"989cff30-3566-4ab3-86e3-e31066c7fe03","name":"mcp-builder","description":"Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP), Node/TypeScript (MCP SDK), or C#/.NET (Microsoft MCP SDK).","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:37.188Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/mcp-builder","findings":[{"id":"cmuxjurai15tlad07m3ds2h8k","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjurai15tmad07iprrseji","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxjurai15tnad07q72rr3gr","source":"cisco","category":"security","label":"Unpinned dependency","detail":"scripts/requirements.txt:1 — Dependency 'anthropic' has no pinned (==) version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).","severity":"low","ruleId":"SUPPLY_CHAIN_UNPINNED_DEPENDENCY"},{"id":"cmuxjurai15toad07fbe1oycj","source":"cisco","category":"security","label":"Unpinned dependency","detail":"scripts/requirements.txt:2 — Dependency 'mcp' has no pinned (==) version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).","severity":"low","ruleId":"SUPPLY_CHAIN_UNPINNED_DEPENDENCY"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:33:06.993Z","lastVerifiedAt":"2026-10-22T00:33:06.993Z","lastChangeDetectedAt":"2026-08-14T15:48:28.699Z","scannedHash":"c87383e3a3a307ff9867adf610672e9f0b24687b","latestUpstreamHash":"c87383e3a3a307ff9867adf610672e9f0b24687b","nextCheckDueAt":"2026-10-23T02:27:30.028Z"}},{"id":"cmuxjup8615csad07gwb0kxff","slug":"azure-resource-manager-redis-dotnet","publicId":"482dd513-9cdf-4c09-b21b-1c6905324453","name":"azure-resource-manager-redis-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:34.478Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-resource-manager-redis-dotnet","findings":[{"id":"cmuxjup8615ctad07k38swdxi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:14:06.845Z","lastVerifiedAt":"2026-10-21T23:14:06.845Z","lastChangeDetectedAt":"2026-08-14T15:44:28.698Z","scannedHash":"761c421a38337a78693190a8f69bfe267a586406","latestUpstreamHash":"761c421a38337a78693190a8f69bfe267a586406","nextCheckDueAt":"2026-10-22T21:19:50.234Z"}},{"id":"cmuxjuqbj15lvad07md1fq8pv","slug":"azure-security-keyvault-secrets-java","publicId":"d8c2a5e0-bdf3-497a-b7d7-9f5e8bc87acf","name":"azure-security-keyvault-secrets-java","description":"Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:33.241Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-security-keyvault-secrets-java","findings":[{"id":"cmuxjuqbj15lwad07ipanei5p","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:46:39.518Z","lastVerifiedAt":"2026-10-22T02:46:39.518Z","lastChangeDetectedAt":"2026-08-14T15:35:28.695Z","scannedHash":"712a8838341a4ce44b275e1e906a1b3de2150c59","latestUpstreamHash":"712a8838341a4ce44b275e1e906a1b3de2150c59","nextCheckDueAt":"2026-10-23T03:41:51.388Z"}},{"id":"cmuxjuqdt15mfad078773vkme","slug":"agent-framework-azure-ai-py","publicId":"61c5cc72-cac8-46f3-9d3e-9ad227b26f56","name":"agent-framework-azure-ai-py","description":"Build Azure AI Foundry agents using the Microsoft Agent Framework Python SDK (agent-framework-azure-ai). Use when creating persistent agents with AzureAIAgentsProvider, using hosted tools (code interpreter, file search, web search), integrating MCP servers, managing conversation threads, or implementing streaming responses. Covers function tools, structured outputs, and multi-tool agents.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:31.748Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/agent-framework-azure-ai-py","findings":[{"id":"cmuxjuqdt15mgad07umk2ayzu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:35:41.305Z","lastVerifiedAt":"2026-10-21T18:35:41.305Z","lastChangeDetectedAt":"2026-08-14T15:04:28.679Z","scannedHash":"e9e12ca2e693ff23016569cc3fe61d289dca736a","latestUpstreamHash":"e9e12ca2e693ff23016569cc3fe61d289dca736a","nextCheckDueAt":"2026-10-22T20:03:24.289Z"}},{"id":"cmuxjuqp215piad07s44za1oe","slug":"azure-security-keyvault-keys-dotnet","publicId":"6f73e15a-0194-4e69-82a8-23de5a5cf15b","name":"azure-security-keyvault-keys-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:30.260Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-security-keyvault-keys-dotnet","findings":[{"id":"cmuxjuqp315pjad07vsmau8u6","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:48:41.609Z","lastVerifiedAt":"2026-10-21T20:48:41.609Z","lastChangeDetectedAt":"2026-08-25T13:22:21.571Z","scannedHash":"6a9a7395f14b97c73fd882e6e1ae1d4e8ffff10b","latestUpstreamHash":"6a9a7395f14b97c73fd882e6e1ae1d4e8ffff10b","nextCheckDueAt":"2026-10-22T22:25:30.167Z"}},{"id":"cmv18stxhbdmuad06j4dei4gx","slug":"azure-prepare","publicId":"c3e48578-9148-4cba-8732-234c996e9140","name":"azure-prepare","description":"Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.","author":"Microsoft","version":"1.3.6","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:28.711Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-prepare","findings":[{"id":"cmv18stxhbdmvad06vn3aybjd","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/apim.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmv18stxhbdmwad061hrsuvv5","source":"cisco","category":"security","label":"Skill package contains many files","detail":". — Skill package contains 166 files. Large file counts increase attack surface and may indicate bundled dependencies or unnecessary content.","severity":"low","ruleId":"EXCESSIVE_FILE_COUNT"},{"id":"cmv18stxhbdmxad06byg7g0ek","source":"cisco","category":"security","label":"Deeply nested file references detected","detail":"SKILL.md — Skill has file references nested more than 5 levels deep. This could be an attempt to hide malicious content in files that are only loaded under specific conditions.","severity":"medium","ruleId":"LAZY_LOAD_DEEP_NESTING"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:22:19.097Z","lastVerifiedAt":"2026-10-21T15:22:19.097Z","lastChangeDetectedAt":"2026-10-10T17:00:47.117Z","scannedHash":"4003cdc806c09cc3bd422d27505a02a1b57625b8","latestUpstreamHash":"4003cdc806c09cc3bd422d27505a02a1b57625b8","nextCheckDueAt":"2026-10-22T13:00:27.191Z"}},{"id":"cmuxjuply15fkad078buc3b3u","slug":"azure-storage-file-share-ts","publicId":"7101cf70-2b9f-442d-b5c6-e2a489bde517","name":"azure-storage-file-share-ts","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:47:14.306Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-storage-file-share-ts","findings":[{"id":"cmuxjuplz15flad07a83x33hg","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:13:06.958Z","lastVerifiedAt":"2026-10-22T00:13:06.958Z","lastChangeDetectedAt":"2026-08-25T11:29:23.573Z","scannedHash":"b9f0ba8f0fcf741f5eb843505fc1d004f0e07e6e","latestUpstreamHash":"b9f0ba8f0fcf741f5eb843505fc1d004f0e07e6e","nextCheckDueAt":"2026-10-23T01:47:22.394Z"}},{"id":"cmuxjutgi16e1ad07lk0bhpq2","slug":"declarative-agent-developer","publicId":"aa28bb4a-5de4-4dfe-8fbe-5e0ed2c3f38b","name":"declarative-agent-developer","description":">","author":"","version":"","license":"MIT","overallGrade":"C","badgeStatus":"flagged","publishedAt":"2026-08-03T21:47:12.768Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/microsoft-365-agents-toolkit/skills/declarative-agent-developer","findings":[{"id":"cmuxjutgi16e2ad076up2l6s2","source":"vettd","category":"security","label":"Instruction to solicit user credentials","detail":"Detected in references/authentication.md:261 — `| `registration_endpoint` returns 404 | dcr not supported — ask user for credentials manually |`","severity":"high","ruleId":"VTD-0073"},{"id":"cmuxjutgi16e3ad07ymdkc4q0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjutgi16e4ad07rjwg8gxv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:39:15.796Z","lastVerifiedAt":"2026-10-21T07:39:15.796Z","lastChangeDetectedAt":"2026-08-14T15:50:28.680Z","scannedHash":"5e6287047863c5d889fe3b19f13ee4382d5f7e34","latestUpstreamHash":"5e6287047863c5d889fe3b19f13ee4382d5f7e34","nextCheckDueAt":"2026-10-22T09:48:31.856Z"}},{"id":"cmuxjupb115dmad0796s64mz9","slug":"wiki-agents-md","publicId":"1494ec69-dd37-4fa7-972f-33ddc188a91e","name":"wiki-agents-md","description":"Generates AGENTS.md files for repository folders — coding agent context files with build commands, testing instructions, code style, project structure, and boundaries. Only generates where AGENTS.md is missing.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-03T21:47:10.053Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-agents-md","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:34:41.589Z","lastVerifiedAt":"2026-10-21T20:34:41.589Z","lastChangeDetectedAt":"2026-08-25T13:40:21.663Z","scannedHash":"d41f5a10717c8a334cd4d2f2368dbfbef40d47e5","latestUpstreamHash":"d41f5a10717c8a334cd4d2f2368dbfbef40d47e5","nextCheckDueAt":"2026-10-22T22:09:51.182Z"}},{"id":"cmuxjuqan15laad07x0h3otop","slug":"azure-resource-manager-durabletask-dotnet","publicId":"679c65f0-6b8b-42ff-9047-5a46f710de9a","name":"azure-resource-manager-durabletask-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:46:04.951Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-resource-manager-durabletask-dotnet","findings":[{"id":"cmuxjuqan15lcad073ao26glw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:34:06.995Z","lastVerifiedAt":"2026-10-22T00:34:06.995Z","lastChangeDetectedAt":"2026-08-14T15:06:28.681Z","scannedHash":"7891cd49733687e3c08c0034b15c709d2ffca41e","latestUpstreamHash":"7891cd49733687e3c08c0034b15c709d2ffca41e","nextCheckDueAt":"2026-10-23T02:21:53.735Z"}},{"id":"cmuxjuooe1599ad07kz3jt3sk","slug":"azure-storage-blob-ts","publicId":"2e917ebc-f0c5-4f2a-85fb-4679f59f7f9c","name":"azure-storage-blob-ts","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:46:03.571Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-storage-blob-ts","findings":[{"id":"cmuxjuooe159aad074epb95rr","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:43:39.354Z","lastVerifiedAt":"2026-10-21T11:43:39.354Z","lastChangeDetectedAt":"2026-08-25T12:19:05.081Z","scannedHash":"1a845c3512fef61674ff30a5cd9132e100f42d3f","latestUpstreamHash":"1a845c3512fef61674ff30a5cd9132e100f42d3f","nextCheckDueAt":"2026-10-22T13:45:28.612Z"}},{"id":"cmuxhzc8d0j5aad07730bqiek","slug":"azure-postgres-ts","publicId":"9f67f965-ba7e-4d4c-aa91-f7ede96e42f5","name":"azure-postgres-ts","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:46:01.627Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-postgres-ts","findings":[{"id":"cmuxhzc8d0j5bad07p1aeerjk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:43:39.456Z","lastVerifiedAt":"2026-10-22T01:43:39.456Z","lastChangeDetectedAt":"2026-08-14T15:40:28.695Z","scannedHash":"ead63d786ddd1ed88a4ce1b1df175e37bb836d0f","latestUpstreamHash":"ead63d786ddd1ed88a4ce1b1df175e37bb836d0f","nextCheckDueAt":"2026-10-23T00:10:29.707Z"}},{"id":"cmuxjuq0e15iaad07ww5r64y4","slug":"azure-ai-formrecognizer-java","publicId":"587be240-086b-40b0-b4f7-acc7b27b4fc1","name":"azure-ai-formrecognizer-java","description":"|","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:46:00.280Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-ai-formrecognizer-java","findings":[{"id":"cmuxjuq0e15ibad07cyop53uf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjuq0e15icad070n56jre4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:14:41.651Z","lastVerifiedAt":"2026-10-21T21:14:41.651Z","lastChangeDetectedAt":"2026-08-25T20:06:24.063Z","scannedHash":"87ed30f519f37b28d0e05f2391d2729c47b94be6","latestUpstreamHash":"87ed30f519f37b28d0e05f2391d2729c47b94be6","nextCheckDueAt":"2026-10-22T23:16:36.204Z"}},{"id":"cmuxjupp015g7ad07s33wdiu5","slug":"azure-ai-openai-dotnet","publicId":"4badc4aa-e04a-41fa-bc90-0b52c8c3f32c","name":"azure-ai-openai-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:59.060Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-ai-openai-dotnet","findings":[{"id":"cmuxjupp115g8ad07s5a4xaby","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:56:41.122Z","lastVerifiedAt":"2026-10-21T16:56:41.122Z","lastChangeDetectedAt":"2026-08-14T14:41:28.668Z","scannedHash":"38bd23798e46c5c010737ecabfcf2bc8d8033d9a","latestUpstreamHash":"38bd23798e46c5c010737ecabfcf2bc8d8033d9a","nextCheckDueAt":"2026-10-22T16:42:00.896Z"}},{"id":"cmuxjuqyr15qyad07y4xd4xlq","slug":"azure-mgmt-apicenter-dotnet","publicId":"00709613-0090-4aad-a1a5-6d82313cb23f","name":"azure-mgmt-apicenter-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:57.989Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-apicenter-dotnet","findings":[{"id":"cmuxjuqyr15qzad07ockwp0a5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:40:41.095Z","lastVerifiedAt":"2026-10-21T16:40:41.095Z","lastChangeDetectedAt":"2026-08-14T15:46:28.699Z","scannedHash":"267b94e36949f787a72d3c9f2e0b1f1e88ba2615","latestUpstreamHash":"267b94e36949f787a72d3c9f2e0b1f1e88ba2615","nextCheckDueAt":"2026-10-22T14:25:01.976Z"}},{"id":"cmuxjuqam15l6ad075c7cf7ix","slug":"wiki-onboarding","publicId":"846e2233-c20a-4905-8192-3942b75ed476","name":"wiki-onboarding","description":"Generates four audience-tailored onboarding guides in an onboarding/ folder — Contributor, Staff Engineer, Executive, and Product Manager. Use when the user wants onboarding documentation for a codebase.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-03T21:45:56.894Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/deep-wiki/skills/wiki-onboarding","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:14:39.492Z","lastVerifiedAt":"2026-10-22T02:14:39.492Z","lastChangeDetectedAt":"2026-08-25T20:38:29.876Z","scannedHash":"3c95e30a619b223fb2ad107322fcbb9be46f13f5","latestUpstreamHash":"3c95e30a619b223fb2ad107322fcbb9be46f13f5","nextCheckDueAt":"2026-10-23T01:50:00.043Z"}},{"id":"cmuxjupb115dnad07panl7ruu","slug":"azure-ai-voicelive-ts","publicId":"0d6ab5b9-3221-493b-856b-7db881cd4545","name":"azure-ai-voicelive-ts","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:55.682Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-ai-voicelive-ts","findings":[{"id":"cmuxjupb215dqad07w1yn0tcr","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:10:41.152Z","lastVerifiedAt":"2026-10-21T17:10:41.152Z","lastChangeDetectedAt":"2026-08-25T11:28:23.573Z","scannedHash":"4d6a5df8e338ca17974ece250d9e574dbd6ed524","latestUpstreamHash":"4d6a5df8e338ca17974ece250d9e574dbd6ed524","nextCheckDueAt":"2026-10-22T16:30:17.842Z"}},{"id":"cmuxjuqb515lkad07mn5wghx4","slug":"m365-agents-py","publicId":"4662fb53-eb47-416b-9552-4c6c780ebd5d","name":"m365-agents-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:54.252Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/m365-agents-py","findings":[{"id":"cmuxjuqb515llad07o97mphpr","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:08:58.409Z","lastVerifiedAt":"2026-10-21T14:08:58.409Z","lastChangeDetectedAt":"2026-08-25T12:33:05.122Z","scannedHash":"7d30932e571b05101cc0060eb2adab2195f7aec8","latestUpstreamHash":"7d30932e571b05101cc0060eb2adab2195f7aec8","nextCheckDueAt":"2026-10-22T13:43:14.861Z"}},{"id":"cmuxjuq5315jead0789eaxz1r","slug":"azure-appconfiguration-java","publicId":"85694f1e-5781-4f85-9b5c-5ce106569ae5","name":"azure-appconfiguration-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"F","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:52.824Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-appconfiguration-java","findings":[{"id":"cmuxjuq5315jfad07aupfv0tz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxjuq5415jgad0700f7frgv","source":"cisco","category":"security","label":"JAILBREAK detected by YARA","detail":"references/examples.md:12 — Jailbreak attempt patterns: References","severity":"high","ruleId":"YARA_jailbreak_generic"},{"id":"cmuxjuq5415jhad07td0hc7bc","source":"cisco","category":"security","label":"JAILBREAK detected by YARA","detail":"references/examples.md:18 — Jailbreak attempt patterns: Example","severity":"high","ruleId":"YARA_jailbreak_generic"},{"id":"cmuxjuq5415jiad076xfhswkx","source":"cisco","category":"security","label":"JAILBREAK detected by YARA","detail":"references/examples.md:360 — Jailbreak attempt patterns: Enable dark mode","severity":"high","ruleId":"YARA_jailbreak_generic"},{"id":"cmuxjuq5415jjad07n3crfaff","source":"cisco","category":"security","label":"JAILBREAK detected by YARA","detail":"references/examples.md:386 — Jailbreak attempt patterns: example","severity":"high","ruleId":"YARA_jailbreak_generic"},{"id":"cmuxjuq5415jkad07fwe3t3p5","source":"cisco","category":"security","label":"JAILBREAK detected by YARA","detail":"references/examples.md:452 — Jailbreak attempt patterns: References","severity":"high","ruleId":"YARA_jailbreak_generic"},{"id":"cmuxjuq5415jlad0719stiycf","source":"cisco","category":"security","label":"JAILBREAK detected by YARA","detail":"references/examples.md:700 — Jailbreak attempt patterns: Example","severity":"high","ruleId":"YARA_jailbreak_generic"},{"id":"cmuxjuq5415jmad07nwpm0q7g","source":"cisco","category":"security","label":"JAILBREAK detected by YARA","detail":"references/examples.md:858 — Jailbreak attempt patterns: references","severity":"high","ruleId":"YARA_jailbreak_generic"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"F","criticalCount":0,"highCount":7}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:37:58.164Z","lastVerifiedAt":"2026-10-21T12:37:58.164Z","lastChangeDetectedAt":"2026-08-14T14:49:28.671Z","scannedHash":"869a8ab74ba9a470461a6c9948a8d018d1efe36b","latestUpstreamHash":"869a8ab74ba9a470461a6c9948a8d018d1efe36b","nextCheckDueAt":"2026-10-22T10:45:53.308Z"}},{"id":"cmuxhzcwz0jaxad074hflpo1h","slug":"azure-storage-queue-ts","publicId":"ef51b61b-17d2-43b8-9f5c-3fe920b0ebe8","name":"azure-storage-queue-ts","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:50.646Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/azure-storage-queue-ts","findings":[{"id":"cmuxhzcwz0jayad07ki0i2y7w","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:00:39.371Z","lastVerifiedAt":"2026-10-21T12:00:39.371Z","lastChangeDetectedAt":"2026-08-14T14:38:28.666Z","scannedHash":"e3b60c7b5588d8ebc701484fd5ca850a82d3b3ee","latestUpstreamHash":"e3b60c7b5588d8ebc701484fd5ca850a82d3b3ee","nextCheckDueAt":"2026-10-22T14:18:06.635Z"}},{"id":"cmuxjuooe159bad073g8b2104","slug":"azure-monitor-query-java","publicId":"52c3c6ac-b512-44bf-bb62-67fb1d37a287","name":"azure-monitor-query-java","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:49.202Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-java/skills/azure-monitor-query-java","findings":[{"id":"cmuxjuoof159dad07ao9neqow","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:23:39.335Z","lastVerifiedAt":"2026-10-21T11:23:39.335Z","lastChangeDetectedAt":"2026-08-25T13:42:21.664Z","scannedHash":"5a8c8f952a2e64ad8ade693b6ec964818191e55f","latestUpstreamHash":"5a8c8f952a2e64ad8ade693b6ec964818191e55f","nextCheckDueAt":"2026-10-22T11:45:57.496Z"}},{"id":"cmuxhyc960i45ad073cv99jqc","slug":"azure-eventgrid-dotnet","publicId":"b815ffe0-97dd-4eeb-bf0f-85f377d5b4f2","name":"azure-eventgrid-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:48.036Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-eventgrid-dotnet","findings":[{"id":"cmuxhyc960i46ad07fidpz7bz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:38:41.481Z","lastVerifiedAt":"2026-10-21T19:38:41.481Z","lastChangeDetectedAt":"2026-08-25T12:33:05.122Z","scannedHash":"482dbcdcc9a1108a63e53395c16d08ac5b3fef22","latestUpstreamHash":"482dbcdcc9a1108a63e53395c16d08ac5b3fef22","nextCheckDueAt":"2026-10-22T18:35:09.575Z"}},{"id":"cmuxhydnl0ifiad07s8x0q42r","slug":"azure-resource-manager-mysql-dotnet","publicId":"d4e50281-8ab3-4146-a262-3efb09318538","name":"azure-resource-manager-mysql-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:46.891Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-resource-manager-mysql-dotnet","findings":[{"id":"cmuxhydnl0ifjad07cg0rq1j4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:28:39.268Z","lastVerifiedAt":"2026-10-21T10:28:39.268Z","lastChangeDetectedAt":"2026-08-14T15:03:28.678Z","scannedHash":"e0816f9a38d4d5d2fc8012d59fb1a08f7ab0921d","latestUpstreamHash":"e0816f9a38d4d5d2fc8012d59fb1a08f7ab0921d","nextCheckDueAt":"2026-10-22T12:09:03.229Z"}},{"id":"cmuxk2yli1nmoad07gcniiii5","slug":"unknown","publicId":"ccd42121-a668-4fc5-90da-b2d10c391d7c","name":"unknown","description":"","author":"","version":"","license":"MIT","overallGrade":"F","badgeStatus":"flagged","publishedAt":"2026-08-03T21:45:45.483Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/scaffold","findings":[{"id":"cmuxk2yli1nmpad07e3e6fad9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/bicep-container-apps.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk2yli1nmqad07gxqolcxz","source":"cisco","category":"security","label":"Deeply nested file references detected","detail":"SKILL.md — Skill has file references nested more than 5 levels deep. This could be an attempt to hide malicious content in files that are only loaded under specific conditions.","severity":"medium","ruleId":"LAZY_LOAD_DEEP_NESTING"},{"id":"cmuxk2yli1nmrad07ucd85k35","source":"cisco","category":"security","label":"Vague skill description","detail":"SKILL.md — Skill description is too short (16 chars). Provide detailed explanation.","severity":"low","ruleId":"VTD-0087"},{"id":"cmuxk2yli1nmsad076hwqn4ie","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxk2yli1nmtad07sf1sww02","source":"cisco","category":"security","label":"Discovery and execution chain (find -exec)","detail":"scripts/scaffold-conformance.sh:21 — The find command with -exec executes commands on discovered files. An attacker can use this to find and execute hidden malicious scripts.","severity":"critical","ruleId":"COMPOUND_FIND_EXEC"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"F","criticalCount":1,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:17:41.435Z","lastVerifiedAt":"2026-10-21T19:17:41.435Z","lastChangeDetectedAt":"2026-09-22T23:59:27.755Z","scannedHash":"c43badece1100a61710db2cd73867cbac2e3a9a9","latestUpstreamHash":"c43badece1100a61710db2cd73867cbac2e3a9a9","nextCheckDueAt":"2026-10-22T20:11:18.283Z"}},{"id":"cmuxhydn40if3ad07e2e5g4bd","slug":"frontend-ui-dark-ts","publicId":"25594bce-d0cd-4883-8750-f0961a8a7076","name":"frontend-ui-dark-ts","description":"Build dark-themed React applications using Tailwind CSS with custom theming, glassmorphism effects, and Framer Motion animations. Use when creating dashboards, admin panels, or data-rich interfaces with a refined dark aesthetic.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:41.448Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/frontend-ui-dark-ts","findings":[{"id":"cmuxhydn40if5ad0743mrd8gq","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:42:39.577Z","lastVerifiedAt":"2026-10-22T03:42:39.577Z","lastChangeDetectedAt":"2026-08-25T20:14:27.970Z","scannedHash":"1f15eeae63b8e03b5c10f6dbfa550095079b2409","latestUpstreamHash":"1f15eeae63b8e03b5c10f6dbfa550095079b2409","nextCheckDueAt":"2026-10-23T03:33:57.326Z"}},{"id":"cmt8myrzg0p72ad09d5478ctp","slug":"azure-kubernetes-automatic-readiness","publicId":"fcb6864b-7e2b-4519-8c42-b8dbd05bc28f","name":"azure-kubernetes-automatic-readiness","description":"Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility. Identifies incompatibilities, generates fixes, and guides migration from AKS Standard to AKS Automatic. WHEN: migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess cluster for Automatic compatibility, fix deployment for Automatic compatibility, identify AKS Automatic migration blockers, is my cluster ready for AKS Automatic.","author":"Microsoft","version":"1.0.1","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:40.186Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness","findings":[{"id":"cmt8myrzg0p7gad09ai6eyoca","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmt8myrzg0p7had09brycnws4","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmt8myrzg0p76ad09uooam68g","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmt8myrzg0p73ad097b5m008x","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmt8myrzg0p7cad09bauqr929","source":"vettd","category":"best-practices","label":"Examples included","detail":"Found code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectively","severity":"info","ruleId":"VTD-0103"},{"id":"cmt8myrzg0p7ead09ki8r4f76","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmt8myrzg0p7dad09ljyghaxd","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmt8myrzg0p74ad09k09q9xeq","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmt8myrzg0p77ad09qyl2uogb","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"azure-kubernetes-automatic-readiness\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmt8myrzg0p78ad09k58lbrg1","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmt8myrzg0p7fad095n9drpjy","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmt8myrzg0p7bad0962uh4oqs","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"241 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmt8myrzg0p79ad096swuzsna","source":"vettd","category":"description","label":"Description within character limit","detail":"457/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmt8myrzg0p7aad09ao79vhfb","source":"vettd","category":"description","label":"Description lacks usage context","detail":"Add context like \"Use this skill when...\" to help agents know when to activate it","severity":"info","ruleId":"VTD-0111"},{"id":"cmt8myrzg0p7iad09vwnha4zf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmt8myrzg0p75ad09e0n3c3au","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxhycf80i5kad07ndpjz1gb","slug":"microsoft-azure-webjobs-extensions-authentication-events-dotnet","publicId":"79bfbc8f-a341-48bd-8bbc-7b863aa0121a","name":"microsoft-azure-webjobs-extensions-authentication-events-dotnet","description":"Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions. Use for token enrichment, custom claims, attribute collection, and OTP customization in Entra ID. Triggers: \"Authentication Events\", \"WebJobsAuthenticationEventsTrigger\", \"OnTokenIssuanceStart\", \"OnAttributeCollectionStart\", \"custom claims\", \"token enrichment\", \"Entra custom extension\", \"authentication extension\".","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:38.980Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/microsoft-azure-webjobs-extensions-authentication-events-dotnet","findings":[{"id":"cmuxhycf80i5lad077gkxth1m","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:07:41.534Z","lastVerifiedAt":"2026-10-21T20:07:41.534Z","lastChangeDetectedAt":"2026-08-14T15:01:28.677Z","scannedHash":"15a35dcb0638dad179c9bbc5fe10a7587a27dee7","latestUpstreamHash":"15a35dcb0638dad179c9bbc5fe10a7587a27dee7","nextCheckDueAt":"2026-10-22T22:16:12.440Z"}},{"id":"cmuxhzc4w0j4rad07noyuda38","slug":"azure-maps-search-dotnet","publicId":"7b2259e1-b486-4d9c-b6f6-3dfbb5fa0696","name":"azure-maps-search-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:37.699Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-maps-search-dotnet","findings":[{"id":"cmuxhzc4w0j4sad075ekdcxpz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:15:41.265Z","lastVerifiedAt":"2026-10-21T18:15:41.265Z","lastChangeDetectedAt":"2026-08-14T14:39:28.667Z","scannedHash":"4d9a9dcd4d8143792c0f2a377c156524b901e981","latestUpstreamHash":"4d9a9dcd4d8143792c0f2a377c156524b901e981","nextCheckDueAt":"2026-10-22T20:15:54.980Z"}},{"id":"cmuxhzcad0j5jad073ou0oltq","slug":"azure-resource-manager-postgresql-dotnet","publicId":"005d2647-1cd6-4d08-a48d-ce970711d2f7","name":"azure-resource-manager-postgresql-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:34.929Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-resource-manager-postgresql-dotnet","findings":[{"id":"cmuxhzcad0j5kad0730pxzkr8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:35:41.475Z","lastVerifiedAt":"2026-10-21T19:35:41.475Z","lastChangeDetectedAt":"2026-08-14T14:47:28.671Z","scannedHash":"0eb8cd54476d9d72fffb81b24285c708b10af293","latestUpstreamHash":"0eb8cd54476d9d72fffb81b24285c708b10af293","nextCheckDueAt":"2026-10-22T20:56:44.087Z"}},{"id":"cmuxhzcaf0j5oad07ild1ty0z","slug":"entra-agent-id","publicId":"bdf5a5b2-76e0-462d-8f44-2378bc66fd21","name":"entra-agent-id","description":"Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry).","author":"Microsoft","version":"1.1.1","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:32.593Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/entra-agent-id","findings":[{"id":"cmuxhzcag0j5pad07z76brby1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhzcag0j5qad0744a43c93","source":"cisco","category":"security","label":"Active instruction invokes dynamic code or process execution","detail":"SKILL.md:136 — SKILL.md contains a syntax-confirmed dynamic code or process execution call in active instructions.","severity":"high","ruleId":"ACTIVE_DYNAMIC_EXECUTION"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:03:58.436Z","lastVerifiedAt":"2026-10-21T15:03:58.436Z","lastChangeDetectedAt":"2026-08-14T15:38:28.696Z","scannedHash":"2757439372801955542e909dc218f74914811203","latestUpstreamHash":"2757439372801955542e909dc218f74914811203","nextCheckDueAt":"2026-10-22T17:04:55.958Z"}},{"id":"cmuxhzcfz0j6sad07831kx67u","slug":"cloud-solution-architect","publicId":"2e161082-b80f-406c-82e1-97d9af37bfad","name":"cloud-solution-architect","description":">-","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:30.771Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/cloud-solution-architect","findings":[{"id":"cmuxhzcfz0j6uad07d8vjxloe","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhzcfz0j6vad07zrt0exmz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:36:41.594Z","lastVerifiedAt":"2026-10-21T20:36:41.594Z","lastChangeDetectedAt":"2026-08-14T15:00:28.678Z","scannedHash":"cf94add87e80c754b41298fe08dc16cd9b442531","latestUpstreamHash":"cf94add87e80c754b41298fe08dc16cd9b442531","nextCheckDueAt":"2026-10-22T21:18:39.970Z"}},{"id":"cmuxhydq30ig3ad07mf705jjh","slug":"azure-identity-py","publicId":"81629b4a-5d70-4da4-b43e-be2ea5610dd7","name":"azure-identity-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:28.982Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-identity-py","findings":[{"id":"cmuxhydq30ig4ad071u5tfal8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:07:41.146Z","lastVerifiedAt":"2026-10-21T17:07:41.146Z","lastChangeDetectedAt":"2026-08-25T13:29:21.578Z","scannedHash":"024a029bb7accc557287d8a118404e7dea88cbca","latestUpstreamHash":"024a029bb7accc557287d8a118404e7dea88cbca","nextCheckDueAt":"2026-10-22T15:26:29.569Z"}},{"id":"cmuxhzczl0jbead07ms5tyrxo","slug":"azure-search-documents-py","publicId":"3a3872b2-2801-4e56-aaf6-aaae29147a81","name":"azure-search-documents-py","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:27.790Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills/azure-search-documents-py","findings":[{"id":"cmuxhzczl0jbfad07l57wyukz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhzczl0jbgad07e74u6533","source":"cisco","category":"security","label":"File extension does not match actual content type","detail":"references/vector-search.md — Markdown file 'vector-search.md' reads mostly as Python source (python). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.","severity":"low","ruleId":"FILE_MAGIC_MISMATCH"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:28:01.671Z","lastVerifiedAt":"2026-10-21T22:28:01.671Z","lastChangeDetectedAt":"2026-08-25T13:20:21.568Z","scannedHash":"629dedbea4c5b2112e6eeae902145e4c0d5d6cc7","latestUpstreamHash":"629dedbea4c5b2112e6eeae902145e4c0d5d6cc7","nextCheckDueAt":"2026-10-22T23:29:09.963Z"}},{"id":"cmuxhydnv0ifsad07ew3qf1gp","slug":"azure-mgmt-applicationinsights-dotnet","publicId":"383d9fb6-cd0a-4332-93f4-6cb5fd635f8d","name":"azure-mgmt-applicationinsights-dotnet","description":"|","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:26.569Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-mgmt-applicationinsights-dotnet","findings":[{"id":"cmuxhydnv0iftad07a4us2nx9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:06:58.259Z","lastVerifiedAt":"2026-10-21T13:06:58.259Z","lastChangeDetectedAt":"2026-08-14T15:12:28.684Z","scannedHash":"97d0a70bf390fa9ba763eacc544c441e7a64fd5f","latestUpstreamHash":"97d0a70bf390fa9ba763eacc544c441e7a64fd5f","nextCheckDueAt":"2026-10-22T15:22:48.372Z"}},{"id":"cmuxhychj0i5uad073f31m4k7","slug":"kql","publicId":"9ea893cf-3d34-4340-b1d2-f61ec8401944","name":"kql","description":"KQL language expertise for writing correct, efficient Kusto Query Language queries. Covers syntax gotchas, join patterns, dynamic types, datetime pitfalls, regex patterns, serialization, memory management, result-size discipline, and advanced functions (geo, vector, graph). USE THIS SKILL whenever writing, debugging, or reviewing KQL queries — even simple ones — because the gotchas section prevents the most common errors that waste tool calls and cause expensive retry cascades. Trigger on: KQL, Kusto, ADX, Azure Data Explorer, Fabric Real-Time Intelligence, EventHouse, Log Analytics, log analysis, data exploration, time series, anomaly detection, summarize, where clause, join, extend, project, let statement, parse operator, extract function, any mention of pipe-forward query syntax.","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:25.438Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/kql","findings":[{"id":"cmuxhychj0i5vad0764i3tidf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhychj0i5wad079lv26rxt","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:38:41.089Z","lastVerifiedAt":"2026-10-21T16:38:41.089Z","lastChangeDetectedAt":"2026-08-14T14:49:28.671Z","scannedHash":"2dcd3bc9c947fd36356d5b91cc7d88841c9ce0c6","latestUpstreamHash":"2dcd3bc9c947fd36356d5b91cc7d88841c9ce0c6","nextCheckDueAt":"2026-10-22T15:32:32.108Z"}},{"id":"cmuxhydsn0ignad07v8l6p86f","slug":"applicationinsights-web-ts","publicId":"0ebac194-b1fd-4772-8684-3e8404ce5562","name":"applicationinsights-web-ts","description":"Instrument browser/web apps with the Application Insights JavaScript SDK (@microsoft/applicationinsights-web). Use for Real User Monitoring (RUM) — page views, clicks, AJAX/fetch dependencies, exceptions, custom events, and browser-side GenAI agent traces correlated to backend OpenTelemetry traces. Covers SDK Loader Script and npm setup, framework extensions (React, React Native, Angular), Click Analytics, telemetry initializers, and OTel GenAI semantic conventions for agent/tool/model spans emitted from the browser.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:24.105Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-typescript/skills/applicationinsights-web-ts","findings":[{"id":"cmuxhydsn0igoad0735ujb6sd","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:51:41.328Z","lastVerifiedAt":"2026-10-21T18:51:41.328Z","lastChangeDetectedAt":"2026-08-25T20:10:24.063Z","scannedHash":"cb03b364b8f9dcb5fc2ee9662758a1f949c23102","latestUpstreamHash":"cb03b364b8f9dcb5fc2ee9662758a1f949c23102","nextCheckDueAt":"2026-10-22T16:41:34.668Z"}},{"id":"cmuxhydq60ig8ad07hrdbyo6p","slug":"applicationinsights-web-ts","publicId":"457573af-5bad-43cb-b61b-03e08e13fa60","name":"applicationinsights-web-ts","description":"Instrument browser/web apps with the Application Insights JavaScript SDK (@microsoft/applicationinsights-web). Use for Real User Monitoring (RUM) — page views, clicks, AJAX/fetch dependencies, exceptions, custom events, and browser-side GenAI agent traces correlated to backend OpenTelemetry traces. Covers SDK Loader Script and npm setup, framework extensions (React, React Native, Angular), Click Analytics, telemetry initializers, and OTel GenAI semantic conventions for agent/tool/model spans emitted from the browser.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:22.657Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/applicationinsights-web-ts","findings":[{"id":"cmuxhydq60ig9ad072ldwgpl2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:55:08.370Z","lastVerifiedAt":"2026-10-21T19:55:08.370Z","lastChangeDetectedAt":"2026-08-25T18:31:23.275Z","scannedHash":"cb03b364b8f9dcb5fc2ee9662758a1f949c23102","latestUpstreamHash":"cb03b364b8f9dcb5fc2ee9662758a1f949c23102","nextCheckDueAt":"2026-10-22T17:58:11.094Z"}},{"id":"cmuxhydvi0ih6ad07uibvqdq5","slug":"ui-widget-developer","publicId":"b64dbfd5-296a-463e-aa2a-b8934d061c9a","name":"ui-widget-developer","description":"|","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:20.838Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/microsoft-365-agents-toolkit/skills/ui-widget-developer","findings":[{"id":"cmuxhydvi0ih7ad07lheq52ng","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhydvi0ih8ad07l1lkf87l","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:40:41.315Z","lastVerifiedAt":"2026-10-21T18:40:41.315Z","lastChangeDetectedAt":"2026-08-25T12:33:05.122Z","scannedHash":"782d9f253d9bf51bf98a274d6c4e0d262bc1b54c","latestUpstreamHash":"782d9f253d9bf51bf98a274d6c4e0d262bc1b54c","nextCheckDueAt":"2026-10-22T20:16:12.528Z"}},{"id":"cmuxm1o9x20wtad07g66i95wc","slug":"preset","publicId":"043339f5-29d8-40a5-bcd9-666a91dba271","name":"preset","description":"Intelligently deploys Azure OpenAI models to optimal regions by analyzing capacity across all available regions. Automatically checks current region first and shows alternatives if needed. USE FOR: quick deployment, optimal region, best region, automatic region selection, fast setup, multi-region capacity check, high availability deployment, deploy to best location. DO NOT USE FOR: custom SKU selection (use customize), specific version selection (use customize), custom capacity configuration (use customize), PTU deployments (use customize).","author":"Microsoft","version":"1.0.1","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:03.264Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/preset","findings":[{"id":"cmuxm1o9x20wuad07ovakhxfm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/preset-workflow.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:11:39.321Z","lastVerifiedAt":"2026-10-21T11:11:39.321Z","lastChangeDetectedAt":"2026-10-08T05:42:35.503Z","scannedHash":"643a38ce95fbe3e737002335bd52cb2b164b4380","latestUpstreamHash":"643a38ce95fbe3e737002335bd52cb2b164b4380","nextCheckDueAt":"2026-10-22T11:28:56.064Z"}},{"id":"cmuxhycbw0i4sad07c5h8ixzr","slug":"customize","publicId":"e1a98507-4eb7-4834-a19b-2d9f06685c18","name":"customize","description":"Interactive guided deployment flow for Azure OpenAI models with full customization control. Step-by-step selection of model version, SKU (GlobalStandard/Standard/ProvisionedManaged), capacity, RAI policy (content filter), and advanced options (dynamic quota, priority processing, spillover). USE FOR: custom deployment, customize model deployment, choose version, select SKU, set capacity, configure content filter, RAI policy, deployment options, detailed deployment, advanced deployment, PTU deployment, provisioned throughput. DO NOT USE FOR: quick deployment to optimal region (use preset).","author":"Microsoft","version":"1.0.1","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:45:02.275Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/customize","findings":[{"id":"cmuxhycbw0i4tad079hpoiirt","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/customize-workflow.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:28:41.291Z","lastVerifiedAt":"2026-10-21T18:28:41.291Z","lastChangeDetectedAt":"2026-08-25T13:20:21.568Z","scannedHash":"118035ed1dad47d2389464e2968c92923dc2c7b5","latestUpstreamHash":"118035ed1dad47d2389464e2968c92923dc2c7b5","nextCheckDueAt":"2026-10-22T20:41:27.498Z"}},{"id":"cmuxhyecg0ikzad07x8t91srd","slug":"capacity","publicId":"61d031d9-6cc4-4070-8e98-056d34230e4d","name":"capacity","description":"Discovers available Azure OpenAI model capacity across regions and projects. Analyzes quota limits, compares availability, and recommends optimal deployment locations based on capacity requirements. USE FOR: find capacity, check quota, where can I deploy, capacity discovery, best region for capacity, multi-project capacity search, quota analysis, model availability, region comparison, check TPM availability. DO NOT USE FOR: actual deployment (hand off to preset or customize after discovery), quota increase requests (direct user to Azure Portal), listing existing deployments.","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-03T21:45:01.148Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity","findings":[],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:30:15.780Z","lastVerifiedAt":"2026-10-21T07:30:15.780Z","lastChangeDetectedAt":"2026-08-25T13:23:21.572Z","scannedHash":"547adfbf066ba49a8e748a4cb0bbd827c2ab6cbd","latestUpstreamHash":"547adfbf066ba49a8e748a4cb0bbd827c2ab6cbd","nextCheckDueAt":"2026-10-22T09:51:55.450Z"}},{"id":"cmuxm1o9x20wrad074mu53pur","slug":"deploy-model","publicId":"a7d02ca9-221a-4864-92ee-ccb4c01f81df","name":"deploy-model","description":"Unified Azure OpenAI model deployment skill with intelligent intent-based routing. Handles quick preset deployments, fully customized deployments (version/SKU/capacity/RAI policy), and capacity discovery across regions and projects. USE FOR: deploy model, deploy gpt, create deployment, model deployment, deploy openai model, set up model, provision model, find capacity, check model availability, where can I deploy, best region for model, capacity analysis. DO NOT USE FOR: listing existing deployments (use foundry_models_deployments_list MCP tool), deleting deployments, agent creation (use agent/create), project creation (use project/create).","author":"Microsoft","version":"1.0.0","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-03T21:45:00.370Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model","findings":[{"id":"cmuxm1o9x20wsad07qm347azz","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/generate_deployment_url.sh:87 — Script contacts or configures 'ai.azure.com' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:29:58.266Z","lastVerifiedAt":"2026-10-21T13:29:58.266Z","lastChangeDetectedAt":"2026-10-09T06:44:29.016Z","scannedHash":"5e60a08596808fd2dc6209ab309d682664d2e03c","latestUpstreamHash":"5e60a08596808fd2dc6209ab309d682664d2e03c","nextCheckDueAt":"2026-10-22T14:59:37.949Z"}},{"id":"cmuxhyg1c0iwzad077pbpkedu","slug":"finetuning","publicId":"329ef124-aab3-4a26-9e88-4e01af13f4d8","name":"finetuning","description":"Fine-tune models on Microsoft Foundry using SFT (supervised), DPO (preference), or RFT (reinforcement with graders). Covers dataset preparation, training job submission, deployment, and evaluation. USE FOR: fine-tune, SFT, DPO, RFT, training data, grader, distillation, fine-tuned model, training job, large file upload, calibrate grader, deploy fine-tuned model, evaluate fine-tuned model. DO NOT USE FOR: general model deployment without fine-tuning (use deploy-model), agent creation (use agents), prompt optimization without training (use prompt-optimizer).","author":"Microsoft","version":"0.0.0-placeholder","license":"MIT","overallGrade":"F","badgeStatus":"flagged","publishedAt":"2026-08-03T21:44:59.183Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/microsoft-foundry/finetuning","findings":[{"id":"cmuxhyg1c0ix0ad07xva65xic","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in scripts/calibrate_grader.py:54 — `exec(compile(source, grader_path, \"exec\"), namespace)`","severity":"critical","ruleId":"VTD-0018"},{"id":"cmuxhyg1c0ix1ad0728j9h20u","source":"vettd","category":"security","label":"System prompt override attempt","detail":"Detected in scripts/evaluate_model.py:188 — `help=\"override system prompt for all examples (default: use per-example system prompt from test data)\")`","severity":"critical","ruleId":"VTD-0066"},{"id":"cmuxhyg1c0ix2ad07w9ar55cu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/agentic-rft.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhyg1c0ix3ad07uyqaxm7e","source":"cisco","category":"security","label":"Undeclared network usage","detail":"SKILL.md — Skill code uses network libraries but doesn't declare network requirement","severity":"medium","ruleId":"TOOL_ABUSE_UNDECLARED_NETWORK"},{"id":"cmuxhyg1c0ix4ad07u05e3xwl","source":"cisco","category":"security","label":"Dangerous code execution functions that can execute arbitrary code","detail":"scripts/calibrate_grader.py:54 — Pattern detected: exec(","severity":"critical","ruleId":"COMMAND_INJECTION_EVAL"},{"id":"cmuxhyg1c0ix5ad07br1esz5q","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/deploy_model.py:120 — Pattern detected: requests.put(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxhyg1c0ix6ad07kavoe5gg","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/deploy_model.py:141 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxhyg1c0ix7ad078oq25xkg","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/deploy_model.py:167 — Pattern detected: requests.delete(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxhyg1d0ix8ad07unhukstg","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/deploy_model.py:178 — Pattern detected: requests.get(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxhyg1d0ix9ad07xiu1lqxv","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/submit_training.py:84 — Pattern detected: requests.post(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"F","criticalCount":2,"highCount":2},{"source":"cisco","status":"success","verdict":null,"grade":"F","criticalCount":1,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:56:39.593Z","lastVerifiedAt":"2026-10-22T03:56:39.593Z","lastChangeDetectedAt":"2026-08-25T11:24:23.461Z","scannedHash":"91b3afacfb2c855870109207d0b584e8e2993f8e","latestUpstreamHash":"91b3afacfb2c855870109207d0b584e8e2993f8e","nextCheckDueAt":"2026-10-23T02:23:59.608Z"}},{"id":"cmuxio97a0ujnad07hrqs4k7m","slug":"azure-reliability","publicId":"0be516e5-8132-4db4-a37c-d98ee7738939","name":"azure-reliability","description":"Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover. Presents a feature-pivoted checklist, then drives staged remediation (CLI or IaC patches) end-to-end with user confirmation. WHEN: \"assess reliability\", \"check reliability\", \"zone redundant\", \"multi-region failover\", \"high availability\", \"disaster recovery\", \"single points of failure\", \"reliability posture\", \"resiliency\".","author":"Microsoft","version":"1.1.2","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:44:38.082Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-reliability","findings":[{"id":"cmuxio97a0ujoad07ib1p69yk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/configure-health-probes.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:02:13.315Z","lastVerifiedAt":"2026-10-21T04:02:13.315Z","lastChangeDetectedAt":"2026-10-09T09:51:29.345Z","scannedHash":"9330ac7bb6e8dbe5748219ac467ed066d8baa476","latestUpstreamHash":"9330ac7bb6e8dbe5748219ac467ed066d8baa476","nextCheckDueAt":"2026-10-22T05:27:21.661Z"}},{"id":"cmuxhye6w0ijmad07q5l1gyz8","slug":"copilot-sdk","publicId":"a514142f-1a88-4837-afde-042056623978","name":"copilot-sdk","description":"Build applications powered by GitHub Copilot using the Copilot SDK. Use when creating programmatic integrations with Copilot across Node.js/TypeScript, Python, Go, or .NET. Covers session management, custom tools, streaming, hooks, MCP servers, BYOK providers, session persistence, custom agents, skills, and deployment patterns. Requires GitHub Copilot CLI installed and a GitHub Copilot subscription (unless using BYOK).","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:44:36.013Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/copilot-sdk","findings":[{"id":"cmuxhye6w0ijnad07a8mbbp4m","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhye6w0ijoad07r76d8j1a","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:53:41.226Z","lastVerifiedAt":"2026-10-21T17:53:41.226Z","lastChangeDetectedAt":"2026-08-14T15:04:28.679Z","scannedHash":"dbdf15d9f078af5a2996a8b9a3bf719e80330aed","latestUpstreamHash":"dbdf15d9f078af5a2996a8b9a3bf719e80330aed","nextCheckDueAt":"2026-10-22T17:16:04.790Z"}},{"id":"cmuxhyew50ipfad07l9e5m62z","slug":"skill-creator","publicId":"38648585-2fdd-43dd-887b-4e15c3bdfbfd","name":"skill-creator","description":"Guide for creating effective skills for AI coding agents working with Azure SDKs and Microsoft Foundry services. Use when creating new skills or updating existing skills.","author":"","version":"","license":"MIT","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-08-03T21:44:34.227Z","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/skills/skill-creator","findings":[{"id":"cmuxhyew50ipgad07rlkvyv2j","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxhyew50iphad076wiyjsjo","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:59:41.015Z","lastVerifiedAt":"2026-10-21T15:59:41.015Z","lastChangeDetectedAt":"2026-08-25T20:05:24.063Z","scannedHash":"f9dc3aaf9210af8eb06ba11bf4883e6ace705673","latestUpstreamHash":"f9dc3aaf9210af8eb06ba11bf4883e6ace705673","nextCheckDueAt":"2026-10-22T16:53:30.051Z"}}],"publisherSupplied":["skills[].name","skills[].description","skills[].author","skills[].version","skills[].license"]}