{"id":"cmtl42tla7zkhad093cgxq1uy","owner":"techtideohio","name":"techtide-harness-kit","url":"https://github.com/techtideohio/techtide-harness-kit","lastScannedAt":"2026-10-09T17:23:42.191Z","freshness":{"status":"changed","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:30:41.296Z","lastVerifiedAt":"2026-09-03T05:55:45.800Z","lastChangeDetectedAt":"2026-10-21T18:30:41.296Z","scannedHash":null,"latestUpstreamHash":"49e15c9dc04ac63a84a828c4778fc77ec4061439","nextCheckDueAt":"2026-10-22T18:41:44.433Z"},"skills":[{"id":"cmuxm3cm325tead07dlh4zt90","slug":"techtide-gcp-cost-anomaly-watch-coordinator","publicId":"50c82045-0d8a-442d-9ee6-a505463df64e","name":"techtide-gcp-cost-anomaly-watch-coordinator","description":"Detect and coordinate response to GCP cost anomalies - BigQuery on-demand query cost spikes ($5/TB scanned), Cloud Run scaling runaway, unattached Persistent Disks, idle GCE instances, budget alert → notification channel → remediation playbook.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:07.464Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-cost-anomaly-watch-coordinator","findings":[{"id":"cmuxm3cm325tfad07pgwvuqnk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3cm325tgad07y8rz5ojr","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:08:39.484Z","lastVerifiedAt":"2026-10-22T02:08:39.484Z","lastChangeDetectedAt":null,"scannedHash":"1d22c59c1e75e4764da6031601b41698e2361f07","latestUpstreamHash":"1d22c59c1e75e4764da6031601b41698e2361f07","nextCheckDueAt":"2026-10-23T02:54:12.390Z"}},{"id":"cmuxoau4d33a8ad0739xxqy2a","slug":"techtide-gcp-cloud-run-functions-operator","publicId":"d2800bdb-2c1d-4c08-91fe-af43e4c3547a","name":"techtide-gcp-cloud-run-functions-operator","description":"Deploy and operate Cloud Run services, Cloud Functions gen2, Eventarc triggers, traffic splitting for progressive delivery, and cold-start optimization strategies.","author":"github: TechTide","version":"0.2.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:07.449Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-cloud-run-functions-operator","findings":[{"id":"cmuxoau4d33a9ad07sl0pa8q8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoau4d33aaad07vndrj8oq","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:43:39.038Z","lastVerifiedAt":"2026-10-21T09:43:39.038Z","lastChangeDetectedAt":null,"scannedHash":"d18e7eabf8b37332ba38ae20dd14232424344ac8","latestUpstreamHash":"d18e7eabf8b37332ba38ae20dd14232424344ac8","nextCheckDueAt":"2026-10-22T07:22:43.377Z"}},{"id":"cmuxm64u22ba5ad0706rxcymg","slug":"techtide-alibaba-security-center-hardening","publicId":"d9b0c938-15a0-4827-bf4c-c4aa5d6f07b2","name":"techtide-alibaba-security-center-hardening","description":"Harden Alibaba Cloud security posture via Security Center (threat detection, vulnerability scanning, baseline checks), WAF, Anti-DDoS Pro, Cloud Firewall, and Network Traffic Analysis (NTA).","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:07.448Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-security-center-hardening","findings":[{"id":"cmuxm64u22ba7ad07hd9qz4uo","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm64u22ba8ad07ba13w7gn","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:19:39.016Z","lastVerifiedAt":"2026-10-21T09:19:39.016Z","lastChangeDetectedAt":null,"scannedHash":"9f5533ce48b847f4d7830ffef92e4c86942f51ca","latestUpstreamHash":"9f5533ce48b847f4d7830ffef92e4c86942f51ca","nextCheckDueAt":"2026-10-22T09:08:19.823Z"}},{"id":"cmuxmc0vr2mohad07bckx394s","slug":"techtide-huawei-serverless-production-readiness","publicId":"f4d9d098-4e1d-4e65-be19-e83a225fe1b8","name":"techtide-huawei-serverless-production-readiness","description":"Review FunctionGraph production readiness on Huawei Cloud - VPC access configuration, concurrency limits and reserved instances, cold-start optimization, observability via LTS and AOM, timeout configuration, dependency package size, custom vs managed runtimes, and ServiceStage application lifecycle.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:07.447Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-serverless-production-readiness","findings":[{"id":"cmuxmc0vr2moiad07zniu0278","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmc0vr2mojad07hzonuva3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:27:15.855Z","lastVerifiedAt":"2026-10-21T08:27:15.855Z","lastChangeDetectedAt":null,"scannedHash":"0c04fa3af0fcb52c9e5edbaef70865ede48b906e","latestUpstreamHash":"0c04fa3af0fcb52c9e5edbaef70865ede48b906e","nextCheckDueAt":"2026-10-22T08:49:59.141Z"}},{"id":"cmuxm8q4w2fonad07twonk6cg","slug":"techtide-scaleway-live-kapsule-rollout-guard","publicId":"81b9b481-bae7-4aad-88f8-c35942d7a290","name":"techtide-scaleway-live-kapsule-rollout-guard","description":"Gate and execute Scaleway Kapsule live mutations - Kubernetes version upgrades, node pool creation/deletion/scaling, and cluster configuration changes - with mandatory PDB audit, cluster health verification, explicit approval, and a documented rollback plan. Use when a live Kapsule cluster or node pool mutation is requested. Hard-stops when target cluster ID, region/zone, approval, or rollback plan is absent or ambiguous.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:07.446Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/scaleway/techtide-scaleway-live-kapsule-rollout-guard","findings":[{"id":"cmuxm8q4x2fooad07bj089c27","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8q4x2fopad07q2ki7vhg","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:12:13.581Z","lastVerifiedAt":"2026-10-21T06:12:13.581Z","lastChangeDetectedAt":null,"scannedHash":"6ad8cba4c2181697b67bfe96b2c421e77b94cd99","latestUpstreamHash":"6ad8cba4c2181697b67bfe96b2c421e77b94cd99","nextCheckDueAt":"2026-10-22T06:09:12.636Z"}},{"id":"cmuxm5fm328rhad07fypg740d","slug":"techtide-marketing-conversion-flow-dark-pattern-review","publicId":"dbf20395-d531-4e3d-a5df-e82451d698cc","name":"techtide-marketing-conversion-flow-dark-pattern-review","description":"Use this skill when reviewing marketing conversion flow specifications - subscription sign-up, upsell interstitial, free-trial enrollment, and cancellation path - for dark-pattern practices that invalidate consent or constitute unfair or deceptive acts under FTC Section 5 and state privacy laws. Trigger when a user provides a UX flow specification including step-by-step page descriptions, annotated wireframes, CTA labels, pre-checked options, visual weight of accept vs decline paths, countdown timer specs, or cancellation flow step counts. Scope is limited to marketing conversion flows; consent banner review is handled by a separate skill.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:58:07.148Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-marketing-conversion-flow-dark-pattern-review","findings":[{"id":"cmuxm5fm328riad07nj218gfl","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:23:06.856Z","lastVerifiedAt":"2026-10-21T23:23:06.856Z","lastChangeDetectedAt":null,"scannedHash":"6109080f588f508ce5b2932c469094017f858041","latestUpstreamHash":"6109080f588f508ce5b2932c469094017f858041","nextCheckDueAt":"2026-10-22T23:43:25.751Z"}},{"id":"cmuxm5em728ioad07obpe0zmo","slug":"techtide-fetch-foundation-model-pricing","publicId":"b82da308-4236-4ac6-9046-473085b0eadf","name":"techtide-fetch-foundation-model-pricing","description":"Fetch live per-token, per-image, and per-GPU-hour prices for foundation models across Anthropic, OpenAI, Google, AWS Bedrock, Azure OpenAI, OCI Generative AI, and Vertex AI. Supports single-model lookup and comparative multi-provider tables. Every price is labeled with source URL and ISO 8601 fetch timestamp. No credentials accepted.","author":"github: TechTide","version":"0.1.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:07.141Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/finops/techtide-fetch-foundation-model-pricing","findings":[{"id":"cmuxm5em728ipad077o4a1bw6","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/providers.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5em728iqad0730tiy50e","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:36:01.875Z","lastVerifiedAt":"2026-10-21T22:36:01.875Z","lastChangeDetectedAt":null,"scannedHash":"1adf9ed8ba7d688986764952401c8bf1ad3e8080","latestUpstreamHash":"1adf9ed8ba7d688986764952401c8bf1ad3e8080","nextCheckDueAt":"2026-10-22T23:20:01.819Z"}},{"id":"cmuxm4lob26sfad07s9mkpugl","slug":"techtide-finops-cloud-price-advisor","publicId":"ef15f1e0-5cb5-49be-9f92-a78a0dbc80a5","name":"techtide-finops-cloud-price-advisor","description":"Fetch live public prices and build cost estimates for AWS, Azure, OCI, Scaleway, Gandi, Alibaba Cloud, and Tencent Cloud using each provider's public pricing API or official documentation. Supports live-environment cost analysis and prototype cost planning. Currency defaults to USD; EUR and CNY supported natively.","author":"github: TechTide","version":"0.2.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:07.139Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/finops/techtide-finops-cloud-price-advisor","findings":[{"id":"cmuxm4lob26sgad07kezmq8f3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/currency-handling.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm4loc26shad07fa2xim1e","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:52:07.025Z","lastVerifiedAt":"2026-10-22T00:52:07.025Z","lastChangeDetectedAt":null,"scannedHash":"4be3fb308af094fe5a139e87c24bdb1aa2534690","latestUpstreamHash":"4be3fb308af094fe5a139e87c24bdb1aa2534690","nextCheckDueAt":"2026-10-23T02:07:41.837Z"}},{"id":"cmuxoa5a63125ad07kvmsps2p","slug":"techtide-alibaba-certificate-manager-issuer-review","publicId":"d7b3cf26-5eee-4362-96e8-04223b16e70f","name":"techtide-alibaba-certificate-manager-issuer-review","description":"Review Alibaba Cloud SSL Certificate Service - DV/OV/EV certificate lifecycle, auto-renewal configuration, certificate deployment to SLB/ALB/CDN/OSS, domain validation status, CAA record compliance, and expiry monitoring.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:06.934Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-certificate-manager-issuer-review","findings":[{"id":"cmuxoa5a63126ad07ptwhics5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa5a63127ad07yr9g5edp","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:23:39.018Z","lastVerifiedAt":"2026-10-21T09:23:39.018Z","lastChangeDetectedAt":null,"scannedHash":"431ab45a554d9d70605630622d3829366612e43a","latestUpstreamHash":"431ab45a554d9d70605630622d3829366612e43a","nextCheckDueAt":"2026-10-22T11:44:54.323Z"}},{"id":"cmuxmbiid2kgmad07ejztecgl","slug":"techtide-huawei-cost-anomaly-watch-coordinator","publicId":"bfff000a-75fe-41ed-9033-96205ac58e8d","name":"techtide-huawei-cost-anomaly-watch-coordinator","description":"Coordinate Huawei Cloud cost anomaly detection - CBC Cost Center delta analysis (>15% day-over-day threshold), budget alert configuration via Budget Management, ECS/GaussDB Yearly/Monthly vs On-Demand mode cost anomalies, OBS request cost spikes, unattached EVS volume waste, DWS idle cluster detection, and reserved instance coverage gaps.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:06.933Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-cost-anomaly-watch-coordinator","findings":[{"id":"cmuxmbiie2kgnad07iagxjkwx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbiie2kgoad07fqwphrbd","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:54:39.303Z","lastVerifiedAt":"2026-10-21T10:54:39.303Z","lastChangeDetectedAt":null,"scannedHash":"8a088c9a444a828e6f14aeb61478bfbcb8b73c97","latestUpstreamHash":"8a088c9a444a828e6f14aeb61478bfbcb8b73c97","nextCheckDueAt":"2026-10-22T10:06:45.393Z"}},{"id":"cmuxmbjad2knpad07ppiltpt8","slug":"techtide-huawei-secmaster-security-operations","publicId":"3e41d0fc-7beb-430a-846e-996de10967f1","name":"techtide-huawei-secmaster-security-operations","description":"Operate Huawei SecMaster (integrated SIEM/SOAR/threat intelligence), HSS (Host Security Service) host intrusion detection, CFW (Cloud Firewall), WAF (Web Application Firewall), Anti-DDoS, and VSS (Vulnerability Scan Service) for comprehensive cloud security operations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:06.932Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-secmaster-security-operations","findings":[{"id":"cmuxmbjad2knqad07qydurxk4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbjad2knrad07irg8r93g","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T03:35:13.265Z","lastVerifiedAt":"2026-10-21T03:35:13.265Z","lastChangeDetectedAt":null,"scannedHash":"a646a6b3cbb093e8038639effcc05f0df36e3182","latestUpstreamHash":"a646a6b3cbb093e8038639effcc05f0df36e3182","nextCheckDueAt":"2026-10-22T05:56:49.815Z"}},{"id":"cmuxmbyev2mgzad07ic12qzgd","slug":"techtide-programmatic-supply-chain-integrity-review","publicId":"59b32f57-27f6-432a-b307-0c59530b5784","name":"techtide-programmatic-supply-chain-integrity-review","description":"Use this skill when reviewing ads.txt, app-ads.txt, and sellers.json files for a publisher or advertiser's programmatic supply chain to detect unauthorized resellers, domain-spoofing exposure, and SupplyChain Object gaps. Trigger when a user provides an ads.txt file, an app-ads.txt file, a sellers.json endpoint response, or asks whether their programmatic supply chain has unauthorized intermediaries, IVT exposure, domain-spoofing risk, or whether their supply chain declaration satisfies IAB Tech Lab, MRC, or DSP procurement requirements.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:58:06.405Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-programmatic-supply-chain-integrity-review","findings":[{"id":"cmuxmbyew2mh0ad079bbfc2lx","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:59:15.819Z","lastVerifiedAt":"2026-10-21T07:59:15.819Z","lastChangeDetectedAt":null,"scannedHash":"570040e999def77fe43e48f37049489f807120e7","latestUpstreamHash":"570040e999def77fe43e48f37049489f807120e7","nextCheckDueAt":"2026-10-22T09:29:19.609Z"}},{"id":"cmuxo6v272yaqad070tiyl17n","slug":"techtide-gcp-gemini-api-developer","publicId":"143d6c52-f602-4ffa-8adc-178815cba464","name":"techtide-gcp-gemini-api-developer","description":"Build, integrate, and debug Gemini API applications on Google Cloud Agent Platform (formerly Vertex AI) using the unified google-genai SDK. Covers text generation, multimodal inputs, function calling, structured output, embeddings, context caching, batch prediction, streaming, Live API (bidirectional voice/video), and model tuning across Python, TypeScript/JavaScript, Go, Java, and C#. Use when building Gemini-powered applications, migrating from deprecated Vertex AI or google-generativeai SDKs, or integrating Gemini capabilities into a GCP-hosted service.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:06.404Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-gemini-api-developer","findings":[{"id":"cmuxo6v272yarad07gpybzwz8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6v272yasad072l5bdk32","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:00:39.532Z","lastVerifiedAt":"2026-10-22T03:00:39.532Z","lastChangeDetectedAt":null,"scannedHash":"f571bfbac5b9c1ffdb96f00e10e41d9e90894f68","latestUpstreamHash":"f571bfbac5b9c1ffdb96f00e10e41d9e90894f68","nextCheckDueAt":"2026-10-23T03:31:19.884Z"}},{"id":"cmuxm64be2b66ad073cgcorr0","slug":"techtide-alibaba-ram-iam-review","publicId":"64fb5950-aa84-4d94-a0ab-4be71face452","name":"techtide-alibaba-ram-iam-review","description":"Audit Alibaba Cloud RAM users, groups, roles, and policies; review STS token lifecycle and scope; assess Resource Directory permission boundaries; review Control Policy statements for org-wide gaps or over-privilege.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:05.280Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-ram-iam-review","findings":[{"id":"cmuxm64bf2b67ad07zqx62wk8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm64bf2b68ad07x9ef1ez7","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:09:06.844Z","lastVerifiedAt":"2026-10-21T23:09:06.844Z","lastChangeDetectedAt":null,"scannedHash":"b6498d1ff1623a7f91a9b68008586b3d14e26f1b","latestUpstreamHash":"b6498d1ff1623a7f91a9b68008586b3d14e26f1b","nextCheckDueAt":"2026-10-23T00:07:33.871Z"}},{"id":"cmuxoat6g331wad07cfqm6ou8","slug":"techtide-gcp-alloydb-ai-developer","publicId":"d3240a74-92f6-4c35-b973-0580e67c44ea","name":"techtide-gcp-alloydb-ai-developer","description":"Design and build AI-powered applications on AlloyDB for PostgreSQL using AlloyDB AI - covering vector search, hybrid search (vector + full-text), AI SQL functions (ai_generate, ai_classify, ai_score, ai_embed), model endpoint management, and the AlloyDB Omni edge runtime. Prefer techtide-gcp-alloydb-cloudsql-dba for cluster operations, backup, HA, and DBA tasks; use this skill when the request is primarily about AlloyDB AI search, SQL AI functions, or embedding pipelines.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:05.280Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-alloydb-ai-developer","findings":[{"id":"cmuxoat6h331xad07iao0btg7","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoat6h331zad07vy6l068r","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:08:39.058Z","lastVerifiedAt":"2026-10-21T10:08:39.058Z","lastChangeDetectedAt":null,"scannedHash":"ce1f7818317f5a5c9265dc5fb7c9059c88520d14","latestUpstreamHash":"ce1f7818317f5a5c9265dc5fb7c9059c88520d14","nextCheckDueAt":"2026-10-22T10:07:35.057Z"}},{"id":"cmuxo6g5x2w7pad07eeusa17l","slug":"techtide-azure-waf-security-review","publicId":"1ca803c6-4542-4080-96dc-ba9170aaf907","name":"techtide-azure-waf-security-review","description":"Review Azure workload security posture against the Well-Architected Framework Security pillar: identity and access, network boundaries, data protection, threat detection, DevSecOps maturity, and policy compliance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:05.279Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-waf-security-review","findings":[{"id":"cmuxo6g5y2w7qad07ey7u6bkh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6g5y2w7rad07a2bktwn4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:08:01.578Z","lastVerifiedAt":"2026-10-21T22:08:01.578Z","lastChangeDetectedAt":null,"scannedHash":"b45a94595a17ad5f37b313392bdd7bdcf1945275","latestUpstreamHash":"b45a94595a17ad5f37b313392bdd7bdcf1945275","nextCheckDueAt":"2026-10-22T23:54:40.618Z"}},{"id":"cmuxoau9u33biad076jumkzi3","slug":"techtide-marketing-gpc-signal-honoring-review","publicId":"55e0f300-c743-4c56-b492-618cb7e04780","name":"techtide-marketing-gpc-signal-honoring-review","description":"Use this skill when reviewing the technical path by which a Global Privacy Control opt-out signal travels through the tag stack and CMP to determine whether ad tags, server-side forwarding, and conversion APIs actually cease firing. Trigger when a user provides a tag-manager container export, a CMP opt-out configuration, a server-side tag configuration, or asks whether their GPC implementation actually stops ad tags from firing, whether CPRA opt-out obligations are met technically, or whether the CMP acknowledges GPC but fails to suppress downstream tag execution.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:58:05.278Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-marketing-gpc-signal-honoring-review","findings":[{"id":"cmuxoau9u33bkad0783yfelmv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:00:13.437Z","lastVerifiedAt":"2026-10-21T05:00:13.437Z","lastChangeDetectedAt":null,"scannedHash":"11d56de8eb56cc4f9e998d01b9b17f50a68c4283","latestUpstreamHash":"11d56de8eb56cc4f9e998d01b9b17f50a68c4283","nextCheckDueAt":"2026-10-22T07:06:15.779Z"}},{"id":"cmuxm64dm2b6gad07vb3lnx71","slug":"techtide-gcp-iam-least-privilege-review","publicId":"f2bddd90-3073-4c61-8d99-cc9a5f4110f1","name":"techtide-gcp-iam-least-privilege-review","description":"Audit GCP IAM bindings across the resource hierarchy (org/folder/project), identify overprivileged Service Accounts, review Workload Identity Federation configurations, evaluate org policy conditions, and recommend least-privilege remediation. Prefer techtide-gcp-secret-kms-lifecycle-steward for KMS/Secret Manager lifecycle design and techtide-gcp-vpc-service-controls-architect for perimeter access policy posture unless the request is primarily IAM binding surgery.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:05.162Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-iam-least-privilege-review","findings":[{"id":"cmuxm64dm2b6iad07zjr2ytab","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm64dm2b6jad07rfhs4pkk","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:41:39.454Z","lastVerifiedAt":"2026-10-22T01:41:39.454Z","lastChangeDetectedAt":null,"scannedHash":"12d6908d0fbb667ccf092065636140c83f2ecf84","latestUpstreamHash":"12d6908d0fbb667ccf092065636140c83f2ecf84","nextCheckDueAt":"2026-10-23T02:44:58.227Z"}},{"id":"cmuxm5gud291nad07likok98n","slug":"techtide-alibaba-serverless-production-readiness","publicId":"abc31e78-381d-463f-a384-8622a3dc8aca","name":"techtide-alibaba-serverless-production-readiness","description":"Review Function Compute 3.0 (FC3), SAE (Serverless App Engine), and EDAS for production readiness - cold start optimization, VPC binding, RAM role injection, ARMS distributed tracing, security group rules, concurrency limits, and SLA-readiness.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:04.972Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-serverless-production-readiness","findings":[{"id":"cmuxm5gue291oad07ndp55gz5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5gue291pad07dnq04tpm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:07:39.483Z","lastVerifiedAt":"2026-10-22T02:07:39.483Z","lastChangeDetectedAt":null,"scannedHash":"83cbd2df849ad0d2fecfb30a5b27bae06fccd6c2","latestUpstreamHash":"83cbd2df849ad0d2fecfb30a5b27bae06fccd6c2","nextCheckDueAt":"2026-10-23T00:45:49.057Z"}},{"id":"cmuxm3cgj25s7ad07yzsjeaec","slug":"techtide-marketing-email-list-retention-review","publicId":"baf5141a-b793-431a-a7c5-5649d989b04d","name":"techtide-marketing-email-list-retention-review","description":"Use this skill when reviewing marketing email list segment metadata, consent-record completeness, suppression-list coverage, and documented data-retention schedules for GDPR storage-limitation, CASL record-keeping, and CCPA deletion-right compliance. Trigger when a user provides a CRM or ESP export of list segment metadata fields - consent source, consent timestamp, last-engagement date, subscription status, suppression-list entries - plus the organization's documented email data-retention policy, and asks whether the stored list inventory and retention posture meets regulatory obligations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:58:04.876Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-marketing-email-list-retention-review","findings":[{"id":"cmuxm3cgj25s8ad07gp6xxdzv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:50:39.295Z","lastVerifiedAt":"2026-10-21T10:50:39.295Z","lastChangeDetectedAt":null,"scannedHash":"ef4ea71b3b7dc4fbb6096742c8c8baef8e43994f","latestUpstreamHash":"ef4ea71b3b7dc4fbb6096742c8c8baef8e43994f","nextCheckDueAt":"2026-10-22T10:41:08.322Z"}},{"id":"cmuxm4lsk26tgad07shkcpwj8","slug":"techtide-email-sender-authentication-review","publicId":"e6697fac-0e8c-4768-9c89-5d0bb8291636","name":"techtide-email-sender-authentication-review","description":"Use this skill when reviewing DNS sender-authentication records for a marketing domain to identify policy gaps exposing campaigns to rejection, spoofing, or inbox displacement. Trigger when a user provides DNS TXT record exports for SPF, DKIM, DMARC, or BIMI, or asks whether their email authentication posture meets Google/Yahoo bulk-sender requirements, DMARC enforcement standards, CISA BOD 18-01 obligations, PCI DSS v4.0 Req 5.3.3, or whether their transactional or marketing emails are at risk of spoofing or bulk-sender quarantine.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:58:04.872Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-email-sender-authentication-review","findings":[{"id":"cmuxm4lsk26thad07zej53kn5","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:40:13.517Z","lastVerifiedAt":"2026-10-21T05:40:13.517Z","lastChangeDetectedAt":null,"scannedHash":"a399d4fc7eb0c195b34f020793b96e75be828072","latestUpstreamHash":"a399d4fc7eb0c195b34f020793b96e75be828072","nextCheckDueAt":"2026-10-22T07:20:25.484Z"}},{"id":"cmuxk5ch11q7aad07h751jlga","slug":"techtide-azure-entra-id-specialist","publicId":"b33e4976-4e39-4b81-8121-5bf05b468910","name":"techtide-azure-entra-id-specialist","description":"Use this skill for Microsoft Entra ID specialist work, especially Conditional Access, authentication methods, MFA and SSPR registration, identity protection, workload identities, app registrations, external identities, agent identities, break-glass posture, and tenant identity control reviews.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:04.577Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-entra-id-specialist","findings":[{"id":"cmuxk5ch11q7bad07iek7gye3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5ch11q7cad07oipm8gf3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:16:39.494Z","lastVerifiedAt":"2026-10-22T02:16:39.494Z","lastChangeDetectedAt":"2026-09-08T20:45:20.376Z","scannedHash":"40f2d44b53436f3ec9eb5141b7d2c4407bc864ef","latestUpstreamHash":"40f2d44b53436f3ec9eb5141b7d2c4407bc864ef","nextCheckDueAt":"2026-10-23T04:35:51.030Z"}},{"id":"cmuxoa58n3114ad07ckb1ger2","slug":"techtide-alibaba-china-compliance","publicId":"502596b2-9426-4cf2-92c5-7ce2809b9424","name":"techtide-alibaba-china-compliance","description":"Advise on MLPS 2.0 grading and technical controls, DSL Article 31 cross-border data transfer, CSL network operator obligations, PIPL personal data requirements, and ICP Beian filing for mainland China CN-* region workloads.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:04.568Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-china-compliance","findings":[{"id":"cmuxoa58n3115ad076j44zgyq","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa58n3116ad079pmnpky8","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:34:58.164Z","lastVerifiedAt":"2026-10-21T12:34:58.164Z","lastChangeDetectedAt":null,"scannedHash":"830818aad8f244fc850999f3d3a8baa8e1ac4a1d","latestUpstreamHash":"830818aad8f244fc850999f3d3a8baa8e1ac4a1d","nextCheckDueAt":"2026-10-22T14:21:01.246Z"}},{"id":"cmuxm4ls526t8ad07oqambzeq","slug":"techtide-alibaba-cost-anomaly-watch-coordinator","publicId":"3c90d0c9-07ca-4d00-98af-65699e0e860a","name":"techtide-alibaba-cost-anomaly-watch-coordinator","description":"Detect and coordinate response to Alibaba Cloud cost anomalies - MaxCompute CU vs on-demand billing mismatch, ECS spot instance interruption cascades, CDN traffic spike billing, OSS API request cost explosions, budget alert → DingTalk notification → remediation playbook.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:04.495Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-cost-anomaly-watch-coordinator","findings":[{"id":"cmuxm4ls626t9ad072rcpoijb","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm4ls626taad0795gynmjo","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:02:39.535Z","lastVerifiedAt":"2026-10-22T03:02:39.535Z","lastChangeDetectedAt":null,"scannedHash":"1e1eaf3a289269005c9087f65dbc13c86d9226af","latestUpstreamHash":"1e1eaf3a289269005c9087f65dbc13c86d9226af","nextCheckDueAt":"2026-10-23T02:17:47.840Z"}},{"id":"cmuxm63vz2b2tad07dzd4kb2g","slug":"techtide-huawei-live-cost-budget-action-guard","publicId":"dce5bb35-d2a1-4f45-9c4f-b9a2d064353a","name":"techtide-huawei-live-cost-budget-action-guard","description":"Gate Huawei Cloud CBC budget threshold changes, Reserved Instance purchases, and CUD commitments - budget threshold reduction can trigger service suspension and RI/CUD are non-refundable committed spend.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:04.494Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-live-cost-budget-action-guard","findings":[{"id":"cmuxm63vz2b2uad07eiamobs4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm63vz2b2vad07uqyqo9bf","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:20:39.425Z","lastVerifiedAt":"2026-10-22T01:20:39.425Z","lastChangeDetectedAt":null,"scannedHash":"82f186bf5405a4e64322c18ff99d911de68a0dee","latestUpstreamHash":"82f186bf5405a4e64322c18ff99d911de68a0dee","nextCheckDueAt":"2026-10-23T03:43:57.853Z"}},{"id":"cmuxo6to52y19ad072zssavd8","slug":"techtide-huawei-certificate-manager-issuer-review","publicId":"52f59cc9-cc10-4233-8e20-038ec10fbf5c","name":"techtide-huawei-certificate-manager-issuer-review","description":"Review Huawei Cloud SSL certificate management - SCM certificate lifecycle, ELB SSL certificate binding, DEW-managed certificate storage, renewal automation, wildcard vs SAN cert selection, certificate expiry alerting via CES, and HTTPS enforcement on ELB listeners.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:04.489Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-certificate-manager-issuer-review","findings":[{"id":"cmuxo6to52y1bad07imbptgya","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6to62y1cad07m09afgv4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:36:12.229Z","lastVerifiedAt":"2026-10-21T22:36:12.229Z","lastChangeDetectedAt":null,"scannedHash":"d483bac3e06f8c4134d778edb9c7d4aec849cbf8","latestUpstreamHash":"d483bac3e06f8c4134d778edb9c7d4aec849cbf8","nextCheckDueAt":"2026-10-22T20:29:14.045Z"}},{"id":"cmuxm1x8t22qhad071al1c8ou","slug":"techtide-gcp-security-posture-hardening","publicId":"daca9529-e420-43e6-8b08-7d845d086a72","name":"techtide-gcp-security-posture-hardening","description":"Review GCP security posture via Security Command Center findings, CIS GCP Benchmark gaps, org policy enforcement baseline, Assured Workloads controls, Binary Authorization, and CSPM recommendations. Prefer techtide-gcp-iam-least-privilege-review for IAM binding surgery and techtide-gcp-vpc-service-controls-architect for VPC-SC perimeter design unless the request is primarily broad posture hardening.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:03.261Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-security-posture-hardening","findings":[{"id":"cmuxm1x8t22qiad076d4jqe6m","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm1x8t22qjad070dsydbb4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:52:39.466Z","lastVerifiedAt":"2026-10-22T01:52:39.466Z","lastChangeDetectedAt":null,"scannedHash":"fa02e8521313cf36197709dd6ee5678d297caa37","latestUpstreamHash":"fa02e8521313cf36197709dd6ee5678d297caa37","nextCheckDueAt":"2026-10-23T00:46:10.509Z"}},{"id":"cmuxm68gw2c2ead078e5d9r2r","slug":"techtide-focus-spec-normalizer","publicId":"30404394-b9d2-40a5-b494-8e8ee8777b5c","name":"techtide-focus-spec-normalizer","description":"Normalize vendor-specific billing rows (AWS CUR, Azure Cost Management, GCP Billing Export, OCI) into FOCUS v1.2 columns from user-pasted CSV or JSON input. Refuses to invent column values not derivable from the input. No credentials accepted; operates on user-supplied data only.","author":"github: TechTide","version":"0.1.1","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:03.254Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/finops/techtide-focus-spec-normalizer","findings":[{"id":"cmuxm68gw2c2fad07g0mu45p8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/focus-columns.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68gw2c2gad07j39yasfl","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:48:06.907Z","lastVerifiedAt":"2026-10-21T23:48:06.907Z","lastChangeDetectedAt":null,"scannedHash":"5c5c023d9c0baef4b79f4e334d453da3e0b8d658","latestUpstreamHash":"5c5c023d9c0baef4b79f4e334d453da3e0b8d658","nextCheckDueAt":"2026-10-22T22:02:00.160Z"}},{"id":"cmuxoa563310iad07j3lip1oj","slug":"techtide-contabo-live-instance-lifecycle-guard","publicId":"26c3a05f-45aa-4d7a-9693-0ddf62b91d35","name":"techtide-contabo-live-instance-lifecycle-guard","description":"Live-guard skill for Contabo VPS and VDS lifecycle operations including instance creation with product selection and region, reinstallation with image and Cloud-Init userData, and cancellation. Requires mandatory contract period acknowledgment (1, 3, 6, or 12 months), billing impact confirmation, and a rollback plan before any mutation. Hard-stops any lifecycle action that lacks explicit period acknowledgment or rollback documentation.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:03.182Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/contabo/techtide-contabo-live-instance-lifecycle-guard","findings":[{"id":"cmuxoa563310jad070uwh2atw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa563310lad07uptyb6xv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:18:39.424Z","lastVerifiedAt":"2026-10-22T01:18:39.424Z","lastChangeDetectedAt":null,"scannedHash":"41d49eab5d12c71520fb433fe892c174efa81842","latestUpstreamHash":"41d49eab5d12c71520fb433fe892c174efa81842","nextCheckDueAt":"2026-10-22T23:08:03.007Z"}},{"id":"cmuxmbklg2kyxad07bt33ujks","slug":"techtide-contabo-live-storage-operations-guard","publicId":"ba5cf263-0914-4f61-946f-8637e7d2b18b","name":"techtide-contabo-live-storage-operations-guard","description":"Live-guard skill for Contabo Object Storage (S3-compatible) bucket operations including inventory audit, access policy review, retention policy enforcement, and deletion workflows. Hard-stops any bucket deletion requested without verified backup evidence and a documented rollback plan. Use when the user needs to manage, audit, or delete Contabo Object Storage buckets or objects.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:03.180Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/contabo/techtide-contabo-live-storage-operations-guard","findings":[{"id":"cmuxmbklg2kyyad07yyw9e9xm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbklg2kyzad07j0ofltij","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T03:48:13.290Z","lastVerifiedAt":"2026-10-21T03:48:13.290Z","lastChangeDetectedAt":null,"scannedHash":"c31c4a217bf721551d5cbc5c2bc61962e85598e9","latestUpstreamHash":"c31c4a217bf721551d5cbc5c2bc61962e85598e9","nextCheckDueAt":"2026-10-22T05:25:05.795Z"}},{"id":"cmuxm5c4q281xad07rkibkm3z","slug":"techtide-marketing-consent-data-collection-review","publicId":"a77fdaf6-a574-4b50-a581-87f73a848930","name":"techtide-marketing-consent-data-collection-review","description":"Use this skill when reviewing a marketing site's consent and data-collection posture - cookie/consent banner (CMP) configuration, tag-manager container exports, Google Consent Mode wiring, or a cookie policy. Trigger when a user provides a CMP configuration, a tag manager container JSON, a consent-banner screenshot description, or asks whether their marketing tracking is GDPR/CCPA/ePrivacy compliant, whether tags fire before consent, or whether their opt-out path is valid.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:58:02.796Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-marketing-consent-data-collection-review","findings":[{"id":"cmuxm5c4q281yad07d9corz04","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:16:15.757Z","lastVerifiedAt":"2026-10-21T07:16:15.757Z","lastChangeDetectedAt":null,"scannedHash":"0b34b959c929edb805ee0156aef04bdc5d63f09c","latestUpstreamHash":"0b34b959c929edb805ee0156aef04bdc5d63f09c","nextCheckDueAt":"2026-10-22T04:54:54.805Z"}},{"id":"cmuxm64iy2b7tad07fu2dp21c","slug":"techtide-martech-access-governance-review","publicId":"4234a53f-6778-471c-acbc-9f947e28f78d","name":"techtide-martech-access-governance-review","description":"Use this skill when reviewing access governance across a marketing technology stack - OAuth grants and connected apps, API keys and tokens, CRM and marketing-automation role assignments, and integration scopes. Trigger when a user provides an OAuth connected-app inventory, an integration scope list, a CRM/MAP role matrix, an API-key inventory, or asks whether their martech integrations are over-permissioned, whether stale connectors still hold live tokens, or how to apply least privilege to their marketing stack.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:58:02.783Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-martech-access-governance-review","findings":[{"id":"cmuxm64iy2b7uad07ljvm2juk","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:05:39.413Z","lastVerifiedAt":"2026-10-22T01:05:39.413Z","lastChangeDetectedAt":null,"scannedHash":"20450bf388caa9b741dca4e523b248205a61a993","latestUpstreamHash":"20450bf388caa9b741dca4e523b248205a61a993","nextCheckDueAt":"2026-10-23T00:09:57.054Z"}},{"id":"cmuxo6emr2w0wad07u6t3jbnr","slug":"techtide-gcp-load-balancer-traffic-engineer","publicId":"a3caa110-9162-47c4-9b31-87dc1714906e","name":"techtide-gcp-load-balancer-traffic-engineer","description":"Traffic engineering for GCP load balancers - Global HTTPS LB, Regional HTTPS LB, TCP/SSL Proxy LB, Network LB (passthrough), Internal TCP/UDP LB - type selection, health check configuration, Cloud Armor integration, and traffic distribution.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:02.775Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-load-balancer-traffic-engineer","findings":[{"id":"cmuxo6emr2w0xad071ey7dd4h","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6emr2w0yad07h31fzonf","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:16:39.494Z","lastVerifiedAt":"2026-10-22T02:16:39.494Z","lastChangeDetectedAt":null,"scannedHash":"80837496edad9a23a00451e06259cbc771aa419d","latestUpstreamHash":"80837496edad9a23a00451e06259cbc771aa419d","nextCheckDueAt":"2026-10-23T02:09:34.731Z"}},{"id":"cmuxm5ejq28i2ad077cvhl4jd","slug":"techtide-alibaba-oss-storage-steward","publicId":"c5b7332b-87ff-48ba-a779-de4fbb8a04aa","name":"techtide-alibaba-oss-storage-steward","description":"Manage OSS lifecycle policies, bucket policy and ACL governance, NAS/CPFS shared file storage, cross-region replication, and access control hardening for Alibaba Cloud object and file storage.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:02.660Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-oss-storage-steward","findings":[{"id":"cmuxm5ejq28i3ad07ybp9kaa3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5ejq28i4ad07oupbbwgs","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:42:39.577Z","lastVerifiedAt":"2026-10-22T03:42:39.577Z","lastChangeDetectedAt":null,"scannedHash":"7d228c3673408d07d5388cba0220a5c29110b03a","latestUpstreamHash":"7d228c3673408d07d5388cba0220a5c29110b03a","nextCheckDueAt":"2026-10-23T03:14:08.788Z"}},{"id":"cmuxm63tl2b2cad076ns4wo1z","slug":"techtide-gcp-serverless-production-readiness","publicId":"cc3bb3a2-0ed0-4421-87d0-927a89a44434","name":"techtide-gcp-serverless-production-readiness","description":"Review Cloud Run and Cloud Functions gen2 for production readiness - min-instances cold start, memory and CPU allocation, VPC connector configuration, Secret Manager injection, CMEK encryption, concurrency limits, and traffic splitting safety.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:02.659Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-serverless-production-readiness","findings":[{"id":"cmuxm63tl2b2dad07as0cbkn1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm63tl2b2ead07p4xhv136","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:15:41.045Z","lastVerifiedAt":"2026-10-21T16:15:41.045Z","lastChangeDetectedAt":null,"scannedHash":"d53032e409bfa1d29f154a9ef59640168d66dd89","latestUpstreamHash":"d53032e409bfa1d29f154a9ef59640168d66dd89","nextCheckDueAt":"2026-10-22T17:00:30.074Z"}},{"id":"cmuxo6tr32y20ad07ryxnp00s","slug":"techtide-alibaba-daily-operations-briefing-coordinator","publicId":"f34b19cc-59de-4a4d-a25d-8735827d017b","name":"techtide-alibaba-daily-operations-briefing-coordinator","description":"Coordinate the daily Alibaba Cloud operations standup - cost delta from Cost Manager, ActionTrail anomaly review, ACK pod failure triage, quota utilization warnings, Security Center finding review, and action item assignment.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:02.658Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-daily-operations-briefing-coordinator","findings":[{"id":"cmuxo6tr32y21ad0726b5gfxz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6tr32y22ad07wlle70tc","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:22:39.018Z","lastVerifiedAt":"2026-10-21T09:22:39.018Z","lastChangeDetectedAt":null,"scannedHash":"ee3f0be2513c5a2a2cd5cd6c8557737c24c2f517","latestUpstreamHash":"ee3f0be2513c5a2a2cd5cd6c8557737c24c2f517","nextCheckDueAt":"2026-10-22T07:34:37.313Z"}},{"id":"cmuxmbkg42kwrad076h27kr2o","slug":"techtide-alibaba-event-driven-architecture-review","publicId":"03a733ab-1022-4dba-a7a3-5fe7825486eb","name":"techtide-alibaba-event-driven-architecture-review","description":"Review Alibaba Cloud EventBridge, MNS (Message Notification Service), RocketMQ, and MSE event-driven designs - dead-letter queues, message ordering, idempotency, retry storm prevention, schema registry, and consumer group lag monitoring.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:02.657Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-event-driven-architecture-review","findings":[{"id":"cmuxmbkg42kwsad07w7r0s5ez","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbkg42kwtad07rqixm29s","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:34:06.995Z","lastVerifiedAt":"2026-10-22T00:34:06.995Z","lastChangeDetectedAt":null,"scannedHash":"9438296808569eb890a10794b0963a236b65f212","latestUpstreamHash":"9438296808569eb890a10794b0963a236b65f212","nextCheckDueAt":"2026-10-23T02:14:13.407Z"}},{"id":"cmuxo6u7r2y5yad07qc5ghht5","slug":"techtide-huawei-functiongraph-serverless-operator","publicId":"61e4d8ed-f11d-4731-807a-4a83c4f840a5","name":"techtide-huawei-functiongraph-serverless-operator","description":"Deploy and operate Huawei FunctionGraph functions (event triggers, cold start optimization, concurrency), ServiceStage application lifecycle management, and CSE (Cloud Service Engine) Spring Cloud/ServiceComb microservice governance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:02.655Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-functiongraph-serverless-operator","findings":[{"id":"cmuxo6u7s2y5zad07tzf29tfc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6u7s2y60ad07kelrdq7t","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:43:39.038Z","lastVerifiedAt":"2026-10-21T09:43:39.038Z","lastChangeDetectedAt":null,"scannedHash":"8e4c9cf89a72581be5f4a2f714833d8df7505a41","latestUpstreamHash":"8e4c9cf89a72581be5f4a2f714833d8df7505a41","nextCheckDueAt":"2026-10-22T09:29:53.534Z"}},{"id":"cmuxmc1ho2mshad071vix7yy1","slug":"techtide-gcp-certificate-manager-issuer-review","publicId":"b3df26ee-537d-4edf-a2b0-4774dfe23ac0","name":"techtide-gcp-certificate-manager-issuer-review","description":"Review GCP Certificate Manager and classic Google-managed TLS certificates - certificate map configuration, DNS authorization, CAA record validation, certificate rotation automation, wildcard vs SAN design, and expiry monitoring.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:02.654Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-certificate-manager-issuer-review","findings":[{"id":"cmuxmc1ho2msiad07od6cjvy7","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmc1ho2msjad075tfeh8g3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:37:39.278Z","lastVerifiedAt":"2026-10-21T10:37:39.278Z","lastChangeDetectedAt":null,"scannedHash":"26729ce47a30c4797aab32eb2bb85467b724994b","latestUpstreamHash":"26729ce47a30c4797aab32eb2bb85467b724994b","nextCheckDueAt":"2026-10-22T11:06:41.374Z"}},{"id":"cmuxm58a527wmad0786gg1xwq","slug":"techtide-gcp-cloud-auth-advisor","publicId":"e3fa6803-7838-4a41-8eaa-60539c16f328","name":"techtide-gcp-cloud-auth-advisor","description":"Advise on Google Cloud authentication and authorization patterns - covering Application Default Credentials (ADC), service account best practices, Workload Identity Federation (for GKE pods and external workloads), human user auth (gcloud, IAP, Identity Platform), service-to-service auth (OIDC ID tokens, short-lived credentials), and anti-patterns like service account key downloads. Use when designing auth flows, debugging GCP auth failures, implementing least-privilege SA setup, or migrating from SA keys to keyless authentication.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.784Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-cloud-auth-advisor","findings":[{"id":"cmuxm58a527wnad0737es1sv3","source":"vettd","category":"security","label":"Unrestricted operation framing","detail":"Detected in SKILL.md:48 — `- api keys with no restrictions → add api + application restrictions`","severity":"medium","ruleId":"VTD-0070"},{"id":"cmuxm58a527woad0765a79yyx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm58a527wpad07k9nl61br","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:09:39.379Z","lastVerifiedAt":"2026-10-21T12:09:39.379Z","lastChangeDetectedAt":null,"scannedHash":"36e4e54b1a91d2ab85d1ab26a11bf969d89edd25","latestUpstreamHash":"36e4e54b1a91d2ab85d1ab26a11bf969d89edd25","nextCheckDueAt":"2026-10-22T13:46:10.545Z"}},{"id":"cmuxk5d0d1qb6ad0700ouletp","slug":"techtide-azure-app-service-production-readiness","publicId":"6cf0ae7d-0552-4d8b-b185-bab45dcfa45f","name":"techtide-azure-app-service-production-readiness","description":"Review Azure App Service and Web Apps for production readiness across plan tier fit, slots, networking, private ingress, identities, secrets, scaling, diagnostics, resilience, backup, rollback, and operator readiness. Use when a team wants a real go/no-go decision instead of shallow reassurance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.778Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-app-service-production-readiness","findings":[{"id":"cmuxk5d0e1qb7ad07kx83hnmu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d0e1qb8ad076og4ztjc","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:23:06.975Z","lastVerifiedAt":"2026-10-22T00:23:06.975Z","lastChangeDetectedAt":"2026-09-08T21:59:20.500Z","scannedHash":"3b81743f8ee0a0e3f3dc1c98d49ff931424498c3","latestUpstreamHash":"3b81743f8ee0a0e3f3dc1c98d49ff931424498c3","nextCheckDueAt":"2026-10-23T01:54:21.090Z"}},{"id":"cmuxm5h2r294mad07ccuiiusp","slug":"techtide-alibaba-support-incident-coordinator","publicId":"6d929cbe-1d0c-489b-937d-b438d6d70aff","name":"techtide-alibaba-support-incident-coordinator","description":"Coordinate Alibaba Cloud support incidents - case creation with correct severity (紧急/高/中/低), Enterprise Support SLA enforcement, account manager escalation path, status page monitoring for CN-* and international, internal stakeholder communication, and post-incident evidence packaging.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.776Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-support-incident-coordinator","findings":[{"id":"cmuxm5h2r294nad07uo3xadar","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5h2r294oad077ic3xv03","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:48:13.531Z","lastVerifiedAt":"2026-10-21T05:48:13.531Z","lastChangeDetectedAt":null,"scannedHash":"3519eee52f55f2f8550d3bd3fd10b6769aedbc8f","latestUpstreamHash":"3519eee52f55f2f8550d3bd3fd10b6769aedbc8f","nextCheckDueAt":"2026-10-22T07:13:50.728Z"}},{"id":"cmuxo63ws2vkvad07yu079ell","slug":"techtide-huawei-modelarts-mlops-engineer","publicId":"9a9cf7f8-2545-48aa-a0f0-71145b1e952e","name":"techtide-huawei-modelarts-mlops-engineer","description":"Manage Huawei ModelArts training jobs (GPU and Ascend NPU cost governance), Pangu foundation model deployment, AI Gallery model management, and MLOps pipeline automation for AI/ML workloads.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.774Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-modelarts-mlops-engineer","findings":[{"id":"cmuxo63ws2vkwad0725fvkmgd","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo63ws2vkxad07jeaowhra","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:39:01.885Z","lastVerifiedAt":"2026-10-21T22:39:01.885Z","lastChangeDetectedAt":null,"scannedHash":"7955fd89f297f57700a2fbe835c70909e29509de","latestUpstreamHash":"7955fd89f297f57700a2fbe835c70909e29509de","nextCheckDueAt":"2026-10-22T22:12:06.908Z"}},{"id":"cmuxm8or12fcbad07651puk9z","slug":"techtide-alibaba-oss-data-perimeter-governor","publicId":"91ef7db7-d873-4265-b202-051bb103d5df","name":"techtide-alibaba-oss-data-perimeter-governor","description":"Govern Alibaba Cloud OSS data perimeters - bucket ACL and policy conflict resolution, Block Public Access configuration, cross-account access via RAM role, VPC endpoint binding for private access, WORM (Object Lock), and MLPS 2.0 data residency compliance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.580Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-oss-data-perimeter-governor","findings":[{"id":"cmuxm8or12fccad07j9p90xpn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8or12fcdad07w6tbvuzx","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:59:13.555Z","lastVerifiedAt":"2026-10-21T05:59:13.555Z","lastChangeDetectedAt":null,"scannedHash":"cf7730db68630dd0619ba2011fc2e145fba51642","latestUpstreamHash":"cf7730db68630dd0619ba2011fc2e145fba51642","nextCheckDueAt":"2026-10-22T07:25:34.647Z"}},{"id":"cmuxoa47430t0ad078j9v3zal","slug":"techtide-huawei-gaussdb-rds-dba","publicId":"f2d67cf8-3e4d-40b9-abc5-57792bd2dbc6","name":"techtide-huawei-gaussdb-rds-dba","description":"Manage Huawei GaussDB (MySQL, PostgreSQL, Oracle-compatible), RDS instances, DDS (Document Database Service, MongoDB-compatible), database proxy connection pooling, and HA/backup architecture with CBR integration.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.577Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-gaussdb-rds-dba","findings":[{"id":"cmuxoa47430t1ad07wevmtgju","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa47530t2ad07jh7by6y8","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:19:39.556Z","lastVerifiedAt":"2026-10-22T03:19:39.556Z","lastChangeDetectedAt":null,"scannedHash":"efc025012eb9da3e4665e427e45bc9af77b2a290","latestUpstreamHash":"efc025012eb9da3e4665e427e45bc9af77b2a290","nextCheckDueAt":"2026-10-23T03:43:27.277Z"}},{"id":"cmuxm5ews28lyad079ypj5n1f","slug":"techtide-marketing-pixel-data-leakage-review","publicId":"b48b2d25-7f73-4900-9e4a-6e906da0c7d2","name":"techtide-marketing-pixel-data-leakage-review","description":"Use this skill when reviewing advertising pixels and event-tracking for personal-data leakage to third-party ad networks. Trigger when a user provides a tag-manager container, a Meta/TikTok/Google/LinkedIn pixel snippet, a conversion-event payload, a dataLayer specification, or asks whether their tracking pixels leak email, phone numbers, health, or financial data to ad platforms, or whether pixels on sensitive pages create a breach or HIPAA exposure.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.576Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-marketing-pixel-data-leakage-review","findings":[{"id":"cmuxm5ews28lzad07n60usueg","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/workflow-and-output.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5ews28m0ad07f4911jch","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:13:06.958Z","lastVerifiedAt":"2026-10-22T00:13:06.958Z","lastChangeDetectedAt":null,"scannedHash":"e8470b578533ef5e7f827a1b0f2b60bbe0d0ed6a","latestUpstreamHash":"e8470b578533ef5e7f827a1b0f2b60bbe0d0ed6a","nextCheckDueAt":"2026-10-22T22:35:36.225Z"}},{"id":"cmuxmabjv2hvlad07thm4nxtj","slug":"techtide-alibaba-mse-microservice-engine","publicId":"f22bed21-bec3-44a4-8414-d6b355b57f3e","name":"techtide-alibaba-mse-microservice-engine","description":"Configure and operate Alibaba MSE (Microservice Engine) - Nacos service discovery and configuration management, Sentinel rate limiting and circuit breaking, Seata distributed transactions, and ARMS APM for microservices observability.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:58:00.575Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-mse-microservice-engine","findings":[{"id":"cmuxmabjv2hvmad07zcsasvg2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmabjv2hvnad07ci7wvlxb","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:24:39.619Z","lastVerifiedAt":"2026-10-22T04:24:39.619Z","lastChangeDetectedAt":"2026-10-07T04:38:17.253Z","scannedHash":"ea3f0fdf15be43756133a35c3edb2b9819a1f23f","latestUpstreamHash":"ea3f0fdf15be43756133a35c3edb2b9819a1f23f","nextCheckDueAt":"2026-10-23T03:49:47.603Z"}},{"id":"cmtl45uwx869sad09lgio77z4","slug":"techtide-alibaba-cost-finops-analyst","publicId":"99d4fac3-a6cc-471d-a835-70dc1a34f97c","name":"techtide-alibaba-cost-finops-analyst","description":"Analyze Alibaba Cloud spend via Cost Manager, optimize Savings Plans and Reserved Instance coverage, design resource tagging strategy, investigate budget drift, and right-size over-provisioned ECS, RDS, and MaxCompute resources.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:59.259Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-cost-finops-analyst","findings":[{"id":"cmtl45uwy869uad092jrd2sz7","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl45uwy86a3ad09yt3lmg6f","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl45uwy86a5ad09ntozy43o","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl45uwz86a9ad09hx2l2mv3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl45uwy869tad0937tcdqtk","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl45uwy869vad097xfjds6e","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl45uwy869xad09ay77rwr0","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-alibaba-cost-finops-analyst\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl45uwy86a6ad09ph14ybkz","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl45uwy86a4ad09nnw9xqbn","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmtl45uwy86a2ad09bax34nhh","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl45uwz86a7ad095vam9342","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl45uwy869wad09q46w8anc","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl45uwy86a0ad0978vkxeiz","source":"vettd","category":"description","label":"Description lacks usage context","detail":"Add context like \"Use this skill when...\" to help agents know when to activate it","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl45uwy86a1ad091oq1f663","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"55 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl45uwy869yad09y2cqycc0","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl45uwy869zad098c3oitzv","source":"vettd","category":"description","label":"Description within character limit","detail":"228/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl45uwz86a8ad09e95igyh2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxoa46q30siad07fsz8k80k","slug":"techtide-huawei-obs-storage-steward","publicId":"baf6d351-36c2-4764-9e88-5a9ad2632c41","name":"techtide-huawei-obs-storage-steward","description":"Manage Huawei OBS lifecycle policies, bucket ACL and policy governance, SFS (Scalable File Service) NFS shares, EVS (Elastic Volume Service) block storage, and CBR (Cloud Backup and Recovery) backup strategy for data protection compliance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:59.194Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-obs-storage-steward","findings":[{"id":"cmuxoa46q30sjad075ioc0msm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa46q30skad07mgifh86s","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:34:39.440Z","lastVerifiedAt":"2026-10-22T01:34:39.440Z","lastChangeDetectedAt":null,"scannedHash":"53cb0173b97079d2a75f644a57663c4499559a38","latestUpstreamHash":"53cb0173b97079d2a75f644a57663c4499559a38","nextCheckDueAt":"2026-10-23T01:10:41.406Z"}},{"id":"cmuxo6l672wmead07eqccisg4","slug":"techtide-ionos-live-database-lifecycle-guard","publicId":"5ae53cb1-5c02-477c-b38a-b3c7d764327b","name":"techtide-ionos-live-database-lifecycle-guard","description":"Execute and advise on IONOS DBaaS lifecycle operations for PostgreSQL, MariaDB, and MongoDB managed databases. Covers failover initiation, replica promotion, horizontal and vertical scaling, backup schedule review, point-in-time recovery, cluster deletion protection, and regional endpoint validation. Requires current backup verification, explicit RPO and RTO targets, and human approval before any mutation. Hard-stop when target, approval, or rollback plan is ambiguous.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:59.193Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ionos/techtide-ionos-live-database-lifecycle-guard","findings":[{"id":"cmuxo6l682wmgad07cjh48ym4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6l682wmhad07rpq3lmrh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:57:15.727Z","lastVerifiedAt":"2026-10-21T06:57:15.727Z","lastChangeDetectedAt":null,"scannedHash":"cf33da97d3295baa735e34246719afccb6822513","latestUpstreamHash":"cf33da97d3295baa735e34246719afccb6822513","nextCheckDueAt":"2026-10-22T07:36:07.861Z"}},{"id":"cmuxm5gxv2937ad07mdwlu2wq","slug":"techtide-huawei-load-balancer-traffic-engineer","publicId":"a0ba25f0-b904-4ab4-806c-b217af1f2676","name":"techtide-huawei-load-balancer-traffic-engineer","description":"Engineer and review Huawei Cloud ELB traffic configurations - dedicated vs shared ELB type selection, HTTP/HTTPS/TCP/UDP protocol listener setup, health check configuration, WAF integration on ELB, backend server group routing, connection draining, and TLS policy enforcement on Dedicated ELB.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:59.191Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-load-balancer-traffic-engineer","findings":[{"id":"cmuxm5gxv2938ad07oa8karoo","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5gxv2939ad07d5byft0e","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:17:39.615Z","lastVerifiedAt":"2026-10-22T04:17:39.615Z","lastChangeDetectedAt":null,"scannedHash":"52aa8e069ce46bc056f1d65cf06599629072738e","latestUpstreamHash":"52aa8e069ce46bc056f1d65cf06599629072738e","nextCheckDueAt":"2026-10-23T03:09:08.059Z"}},{"id":"cmuxm63252b19ad072y3ktzhf","slug":"techtide-huawei-event-driven-architecture-review","publicId":"400196e2-bfcf-4455-85e0-dbad4c0db6f6","name":"techtide-huawei-event-driven-architecture-review","description":"Review Huawei Cloud event-driven architecture designs - DMS Kafka dead-letter configuration, ROMA Connect integration flow capacity, FunctionGraph event trigger idempotency, SMN delivery retry policy, consumer group lag monitoring, cross-region event replication, and retry storm prevention.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:59.190Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-event-driven-architecture-review","findings":[{"id":"cmuxm63252b1aad07e5uh0rzn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm63252b1bad0756icwnuo","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:35:13.619Z","lastVerifiedAt":"2026-10-21T06:35:13.619Z","lastChangeDetectedAt":null,"scannedHash":"8e50ff00f39294ccb2d0d5b3922ec3dc36e9adbb","latestUpstreamHash":"8e50ff00f39294ccb2d0d5b3922ec3dc36e9adbb","nextCheckDueAt":"2026-10-22T05:15:47.833Z"}},{"id":"cmtl45us8866vad093snny53v","slug":"techtide-gcp-vertex-ai-mlops-engineer","publicId":"d7548ab5-b367-4472-a707-8720a4053033","name":"techtide-gcp-vertex-ai-mlops-engineer","description":"Manage Vertex AI Training jobs (GPU/TPU cost governance), Vertex AI Pipelines, Model Registry, Feature Store, Endpoints, and Gemini API integration for production MLOps.","author":"github: TechTide","version":"0.2.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:59.189Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-vertex-ai-mlops-engineer","findings":[{"id":"cmtl45usb866wad09cq9vo2si","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl45usb866yad097u53tj2e","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl45usb8675ad093fjpi5ek","source":"vettd","category":"best-practices","label":"Examples included","detail":"Found code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectively","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl45usb867cad097jy7q1bv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl45usb8670ad099hmgqmbx","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-gcp-vertex-ai-mlops-engineer\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl45usb867aad095euie73d","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl45usb8674ad09uersbf7y","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"71 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl45usb8677ad09tveg65wn","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmtl45usb8673ad09y1zd2dtx","source":"vettd","category":"description","label":"Description lacks usage context","detail":"Add context like \"Use this skill when...\" to help agents know when to activate it","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl45usb8672ad09u3k7y9bh","source":"vettd","category":"description","label":"Description within character limit","detail":"169/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl45usb866xad094lv1t4fy","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl45usb8671ad09bexf1kj5","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl45usb8678ad096scricjq","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl45usb866zad098i2g95mf","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl45usb867bad09ti51kq8e","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl45usb8679ad099g0w3a1a","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl45usb8676ad096yy17110","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxoa51a30z8ad074djcrtq0","slug":"techtide-alibaba-observability-incident-responder","publicId":"7a8c338b-7870-4f13-9129-062dc4d60ac1","name":"techtide-alibaba-observability-incident-responder","description":"Respond to Alibaba Cloud incidents using CloudMonitor alarms, SLS log analytics, ARMS APM distributed tracing, and alert governance for ECS, RDS, ACK, and network services.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:58.379Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-observability-incident-responder","findings":[{"id":"cmuxoa51a30z9ad07y1be0azs","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa51a30zaad070oziwtj6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:28:21.890Z","lastVerifiedAt":"2026-10-21T20:28:21.890Z","lastChangeDetectedAt":null,"scannedHash":"bafba5e7149746f1bba3c2baca6d796d8c022eb7","latestUpstreamHash":"bafba5e7149746f1bba3c2baca6d796d8c022eb7","nextCheckDueAt":"2026-10-22T20:43:17.393Z"}},{"id":"cmuxm68jx2c3qad07e93mg96g","slug":"techtide-huawei-observability-incident-responder","publicId":"d6c2915b-cee2-40de-aaff-79ba6e03bcdb","name":"techtide-huawei-observability-incident-responder","description":"Respond to Huawei Cloud incidents via CES (Cloud Eye) metric alarms, LTS (Log Tank Service) log analytics, AOM (Application Operations Management) service topology, APM distributed tracing, and SMN notification governance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:58.377Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-observability-incident-responder","findings":[{"id":"cmuxm68jx2c3rad07pkmhbgwu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68jx2c3sad074cn9vvs1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:55:39.049Z","lastVerifiedAt":"2026-10-21T09:55:39.049Z","lastChangeDetectedAt":null,"scannedHash":"696664ea67885f67031080df272feb8cfebbbf2a","latestUpstreamHash":"696664ea67885f67031080df272feb8cfebbbf2a","nextCheckDueAt":"2026-10-22T07:37:33.713Z"}},{"id":"cmuxm5isl29itad07axvc6y6w","slug":"techtide-opentelemetry-collector-config-review","publicId":"a09e686b-f73d-4e61-ab63-140e38f47eec","name":"techtide-opentelemetry-collector-config-review","description":"Use this skill for OpenTelemetry Operator review covering OpenTelemetryCollector deployment modes (Deployment, StatefulSet, DaemonSet, Sidecar), Instrumentation CR auto-instrumentation across Java/Node/Python/.NET/Go, Target Allocator for distributed Prometheus scraping, and pipeline correctness across receivers, processors, and exporters. Trigger when the user asks whether a collector configuration will lose telemetry, whether the right deployment mode is used, whether memory_limiter and batch are present, whether tail_sampling is safe to change, or whether auto-instrumentation will cover a workload after restart.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:57.808Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/opentelemetry/techtide-opentelemetry-collector-config-review","findings":[{"id":"cmuxm5isl29iuad07iulniz6l","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/mcp-and-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5isl29ivad07mrfi9sh0","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:06:15.737Z","lastVerifiedAt":"2026-10-21T07:06:15.737Z","lastChangeDetectedAt":null,"scannedHash":"72279bf3b28a6d669b7b651c6226954582311e3c","latestUpstreamHash":"72279bf3b28a6d669b7b651c6226954582311e3c","nextCheckDueAt":"2026-10-22T05:20:24.449Z"}},{"id":"cmuxm3bo325njad07kkvia0cw","slug":"techtide-alibaba-iac-change-safety-review","publicId":"c25d1e5c-e9c9-493d-bc18-be93ca4e66ca","name":"techtide-alibaba-iac-change-safety-review","description":"Review Terraform and ROS (Resource Orchestration Service) changes targeting Alibaba Cloud - blast radius analysis, resource deletion detection, cross-stack dependency impact, Resource Directory scope, and rollback plan completeness.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:57.757Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-iac-change-safety-review","findings":[{"id":"cmuxm3bo425nkad07mgz84irx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3bo425nlad071wx34wv7","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:13:15.753Z","lastVerifiedAt":"2026-10-21T07:13:15.753Z","lastChangeDetectedAt":null,"scannedHash":"4d9e2042765c8ed9c136fdbdfea35c8f73d108bb","latestUpstreamHash":"4d9e2042765c8ed9c136fdbdfea35c8f73d108bb","nextCheckDueAt":"2026-10-22T07:09:59.867Z"}},{"id":"cmuxo6hbj2wfgad0767ga0cyr","slug":"techtide-kubernetes-live-rbac-mutation-guard","publicId":"51a6de86-e032-42b0-80da-68af39cdc0a1","name":"techtide-kubernetes-live-rbac-mutation-guard","description":"Guard live kubectl apply, create, or delete operations on Kubernetes RBAC objects - Roles, ClusterRoles, RoleBindings, ClusterRoleBindings - with privilege-escalation verb detection, scope assessment, current-state diff, and explicit approval before any write. Use only when an intentional RBAC mutation is requested against a confirmed cluster target.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:57.670Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/kubernetes/techtide-kubernetes-live-rbac-mutation-guard","findings":[{"id":"cmuxo6hbj2wfiad07o7v5bmqf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6hbj2wfjad07ywlfefe6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:10:39.545Z","lastVerifiedAt":"2026-10-22T03:10:39.545Z","lastChangeDetectedAt":null,"scannedHash":"db384dbc7b2ef6cfc9fadf25e36319fbb22716e3","latestUpstreamHash":"db384dbc7b2ef6cfc9fadf25e36319fbb22716e3","nextCheckDueAt":"2026-10-23T01:33:55.377Z"}},{"id":"cmuxm1xag22qrad075mnedaaa","slug":"techtide-gcp-event-driven-architecture-review","publicId":"3f46c4a8-166e-4cbd-9864-438ca8d0c197","name":"techtide-gcp-event-driven-architecture-review","description":"Review GCP Pub/Sub, Eventarc, Cloud Tasks, Cloud Scheduler, and Workflows designs - dead-letter topics, message ordering, idempotency, fan-out blast radius, schema registry, and retry storm risk.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:57.573Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-event-driven-architecture-review","findings":[{"id":"cmuxm1xag22qsad072g2evopq","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm1xag22qtad07erf2baj1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:59:39.051Z","lastVerifiedAt":"2026-10-21T09:59:39.051Z","lastChangeDetectedAt":null,"scannedHash":"e13a33337ec0b170e5d3dc2ae2db09bed05a55fe","latestUpstreamHash":"e13a33337ec0b170e5d3dc2ae2db09bed05a55fe","nextCheckDueAt":"2026-10-22T09:09:36.748Z"}},{"id":"cmuxk5emz1qqead07a8njoztj","slug":"techtide-scaleway-network-architect","publicId":"54d97654-8034-4510-a168-85abafbde4f1","name":"techtide-scaleway-network-architect","description":"Review and design Scaleway network topology for security and high availability: VPC layout, Private Network attachment across zones, security group rules, Load Balancer configuration, placement group policy selection (max_availability vs enforced), and multi-zone resilience patterns. Use when the user asks to design a Scaleway VPC, audit security group rules, configure a Load Balancer, or plan HA across zones fr-par-1/2/3, nl-ams-1, or pl-waw-1/2/3.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:57.572Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/scaleway/techtide-scaleway-network-architect","findings":[{"id":"cmuxk5en01qqfad0742f7l7r6","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5en01qqgad07xu96i5nv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:16:39.326Z","lastVerifiedAt":"2026-10-21T11:16:39.326Z","lastChangeDetectedAt":"2026-09-22T00:01:51.090Z","scannedHash":"949dc3f6e5f549d613cab9e06b0cd688dba8dbd7","latestUpstreamHash":"949dc3f6e5f549d613cab9e06b0cd688dba8dbd7","nextCheckDueAt":"2026-10-22T11:44:22.092Z"}},{"id":"cmuxmavcw2idxad0796l3o2gj","slug":"techtide-huawei-migration-architect","publicId":"3bfaf90c-91d3-4c5c-ba62-3ae93cc144b4","name":"techtide-huawei-migration-architect","description":"Plan migrations to Huawei Cloud via MgC (Migration Center), SMS (Server Migration Service) for P2V/V2V, DRS for database replication, and OMS (Object Migration Service) for object storage, with cutover sequencing and rollback design.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:55.179Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-migration-architect","findings":[{"id":"cmuxmavcw2idyad07ai2esyjb","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmavcw2idzad078rqxvlus","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:56:13.548Z","lastVerifiedAt":"2026-10-21T05:56:13.548Z","lastChangeDetectedAt":null,"scannedHash":"c115483c7ad0cd9bce9bd4bb3aae0398ee06d775","latestUpstreamHash":"c115483c7ad0cd9bce9bd4bb3aae0398ee06d775","nextCheckDueAt":"2026-10-22T06:26:55.791Z"}},{"id":"cmuxm5h08293uad072mp3inzt","slug":"techtide-huawei-compliance-sovereignty","publicId":"28430e13-650c-4abc-9e7a-d5de231dda5d","name":"techtide-huawei-compliance-sovereignty","description":"Advise on Huawei Cloud MLPS 2.0 Level 3 technical controls mapping, China data localization requirements, Trusted Cloud (CAICT) certification controls, and government cloud configuration requirements for sovereignty-aware workloads.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:55.162Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-compliance-sovereignty","findings":[{"id":"cmuxm5h09293wad07k0rjje5a","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5h09293xad07fw4g2naa","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:08:39.606Z","lastVerifiedAt":"2026-10-22T04:08:39.606Z","lastChangeDetectedAt":null,"scannedHash":"d132a2de658bdda8b0f80cca167ff8662a21d916","latestUpstreamHash":"d132a2de658bdda8b0f80cca167ff8662a21d916","nextCheckDueAt":"2026-10-23T04:04:03.610Z"}},{"id":"cmuxoat97332wad07d2sez173","slug":"techtide-alibaba-ticket-triage-escalation-coordinator","publicId":"0070e6a5-9344-4967-8dc6-d7d5790ddcb0","name":"techtide-alibaba-ticket-triage-escalation-coordinator","description":"Triage Alibaba Cloud operational alerts, incidents, and support tickets - P0/P1/P2/P3 classification, Alibaba Cloud Support SLA enforcement, account manager escalation, DingTalk war room coordination, evidence collection from CloudMonitor and SLS, and safe escalation paths.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:55.103Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-ticket-triage-escalation-coordinator","findings":[{"id":"cmuxoat97332xad07gwi55rjg","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoat97332yad0703r67xn3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:27:39.266Z","lastVerifiedAt":"2026-10-21T10:27:39.266Z","lastChangeDetectedAt":null,"scannedHash":"7c138ab8b7e5dfe2085a26d4e31332352c5753f1","latestUpstreamHash":"7c138ab8b7e5dfe2085a26d4e31332352c5753f1","nextCheckDueAt":"2026-10-22T08:56:05.805Z"}},{"id":"cmuxoa4er30uuad07avqmv5ew","slug":"techtide-alibaba-registry-artifact-governor","publicId":"5d7d81a6-7d3c-40c0-a490-9602436875b7","name":"techtide-alibaba-registry-artifact-governor","description":"Govern Alibaba Cloud Container Registry (ACR) - Enterprise Edition vs Personal Edition selection, image vulnerability scanning, namespace IAM least privilege, image retention policies, cross-region replication, and supply chain security posture.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:55.098Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-registry-artifact-governor","findings":[{"id":"cmuxoa4er30uvad074nsqrwmy","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa4er30uwad0754rfmisk","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:24:01.665Z","lastVerifiedAt":"2026-10-21T22:24:01.665Z","lastChangeDetectedAt":null,"scannedHash":"01fbc1095b276dc97a1dc7b1208dbcee96348265","latestUpstreamHash":"01fbc1095b276dc97a1dc7b1208dbcee96348265","nextCheckDueAt":"2026-10-23T00:35:33.036Z"}},{"id":"cmuxo6v4h2yb6ad07gnehmbmb","slug":"techtide-alibaba-load-balancer-traffic-engineer","publicId":"729d6ef2-96f0-4cd1-851b-c94fc3836aa7","name":"techtide-alibaba-load-balancer-traffic-engineer","description":"Traffic engineering for Alibaba Cloud load balancers - CLB (Classic, legacy), ALB (Application Load Balancer, Layer 7 advanced routing), NLB (Network Load Balancer, Layer 4 high throughput), and GA (Global Accelerator) - type selection, health check design, WAF integration, and traffic distribution.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:55.093Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-load-balancer-traffic-engineer","findings":[{"id":"cmuxo6v4i2yb7ad07r8o36al4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6v4i2yb8ad070ue7v9e4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:06:41.028Z","lastVerifiedAt":"2026-10-21T16:06:41.028Z","lastChangeDetectedAt":null,"scannedHash":"3199b0ace26c2a16096f9bb8d3d0a23b122fd979","latestUpstreamHash":"3199b0ace26c2a16096f9bb8d3d0a23b122fd979","nextCheckDueAt":"2026-10-22T14:02:20.713Z"}},{"id":"cmuxoa55k310aad0731szo7kr","slug":"techtide-alibaba-devops-cicd-operator","publicId":"3897894e-3715-4aef-b90d-b5a5d6686778","name":"techtide-alibaba-devops-cicd-operator","description":"Build CI/CD pipelines with RDC (Research and Development Collaboration), Cloud Build, Flow pipeline automation, ACR (Container Registry) image lifecycle, and environment promotion strategies.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:55.066Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-devops-cicd-operator","findings":[{"id":"cmuxoa55k310bad0732bhg0dt","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa55k310cad072p903xfc","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:40:15.879Z","lastVerifiedAt":"2026-10-21T08:40:15.879Z","lastChangeDetectedAt":null,"scannedHash":"e6ea170369e53b7af4788d38166243dbfe0e6ecd","latestUpstreamHash":"e6ea170369e53b7af4788d38166243dbfe0e6ecd","nextCheckDueAt":"2026-10-22T06:38:00.493Z"}},{"id":"cmuxm58a727wtad07qjmhilbu","slug":"techtide-alibaba-migration-architect","publicId":"5df74aa2-f399-4d4d-8a03-7256218dae7c","name":"techtide-alibaba-migration-architect","description":"Plan Alibaba Cloud migrations using SMC (Server Migration Center), DTS (Data Transmission Service) for data sync, OSSImport for object storage migration, and design cutover sequencing with rollback paths.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:55.061Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-migration-architect","findings":[{"id":"cmuxm58a727wuad07hcnodqym","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm58a727wvad07ev4i79nq","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:16:39.613Z","lastVerifiedAt":"2026-10-22T04:16:39.613Z","lastChangeDetectedAt":null,"scannedHash":"a8a9578d25c97cce7c859567adb87a3b23c8141f","latestUpstreamHash":"a8a9578d25c97cce7c859567adb87a3b23c8141f","nextCheckDueAt":"2026-10-23T02:31:09.478Z"}},{"id":"cmuxoasye32zyad07ebkjlaqt","slug":"techtide-huawei-landing-zone-architect","publicId":"d93ae681-8b6e-4da4-af59-eca5b2cb8fc1","name":"techtide-huawei-landing-zone-architect","description":"Set up Huawei Cloud Organizations with SCP baseline, IAM fine-grained permission structure, Enterprise Projects governance model, and master account structure for multi-account/multi-project governance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:54.506Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-landing-zone-architect","findings":[{"id":"cmuxoasyf32zzad07adv3unpr","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoasyf3300ad07pkpr5wi6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:46:15.885Z","lastVerifiedAt":"2026-10-21T08:46:15.885Z","lastChangeDetectedAt":null,"scannedHash":"01a1cf631df1cf6f0317fbdd60ec81387346953b","latestUpstreamHash":"01a1cf631df1cf6f0317fbdd60ec81387346953b","nextCheckDueAt":"2026-10-22T07:15:19.473Z"}},{"id":"cmuxoa52030zzad0794dxx6et","slug":"techtide-huawei-dew-kms-lifecycle-steward","publicId":"bf59acd2-e52e-451f-a0ea-3647e77fc9c5","name":"techtide-huawei-dew-kms-lifecycle-steward","description":"Manage Huawei DEW (Data Encryption Workshop) - KMS key lifecycle and rotation, CSMS secret rotation automation, CBH (Cloud Bastion Host) privileged access session management, and DBSS database encryption and SQL audit.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:53.384Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-dew-kms-lifecycle-steward","findings":[{"id":"cmuxoa5203100ad07ogn84rpu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa5203101ad07te5w4ep0","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:38:39.035Z","lastVerifiedAt":"2026-10-21T09:38:39.035Z","lastChangeDetectedAt":null,"scannedHash":"f9eb04fa6046a03fdf241de79ba4a24590e13fc0","latestUpstreamHash":"f9eb04fa6046a03fdf241de79ba4a24590e13fc0","nextCheckDueAt":"2026-10-22T08:23:55.311Z"}},{"id":"cmuxm5fs528tdad07puz6ge3m","slug":"techtide-huawei-ecs-compute-operator","publicId":"efc0ea3c-e17d-4705-ad83-a0171c062be4","name":"techtide-huawei-ecs-compute-operator","description":"Manage Huawei ECS (Elastic Cloud Server) instance lifecycle, AS (Auto Scaling) group configuration and health, IMS (Image Management Service) golden image management, DeH (Dedicated Host) tenancy, and CSBS backup snapshot governance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:53.374Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-ecs-compute-operator","findings":[{"id":"cmuxm5fs528tead0729xjka5h","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5fs528tfad07fkm57mbp","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:44:07.010Z","lastVerifiedAt":"2026-10-22T00:44:07.010Z","lastChangeDetectedAt":null,"scannedHash":"39d4bf3c19f617f2e49411eea2581c646b4e8169","latestUpstreamHash":"39d4bf3c19f617f2e49411eea2581c646b4e8169","nextCheckDueAt":"2026-10-23T01:09:40.503Z"}},{"id":"cmuxm68e72c1vad078tqrlb0o","slug":"provider-skill-name","publicId":"0db81793-37d7-4c35-a2ef-4c2b30be4d3b","name":"provider-skill-name","description":"Use this skill for a specific cloud workflow. Mention provider, trigger phrases, expected inputs, and when not to use it.","author":"","version":"","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:53.284Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/templates/skill-template","findings":[{"id":"cmuxm68e72c1wad07dodqraof","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:53:15.815Z","lastVerifiedAt":"2026-10-21T07:53:15.815Z","lastChangeDetectedAt":null,"scannedHash":"7a6dd2b4d9bccbc6cab698015e73538918aeae50","latestUpstreamHash":"7a6dd2b4d9bccbc6cab698015e73538918aeae50","nextCheckDueAt":"2026-10-22T07:12:07.813Z"}},{"id":"cmuxo6u7q2y5sad072qznhyqq","slug":"techtide-scaleway-cost-optimizer","publicId":"7d18a632-055a-44dc-ac57-ede454d5fd3a","name":"techtide-scaleway-cost-optimizer","description":"Review and optimize Scaleway cost posture across Instance type rightsizing, reserved instance utilization, idle Object Storage buckets and SBS block volumes, Serverless function invocation cost, RDB instance sizing, and Cockpit observability spend. Use when the user asks to reduce Scaleway spend, audit bill composition, identify idle resources, or evaluate reserved instance commitments.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:53.283Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/scaleway/techtide-scaleway-cost-optimizer","findings":[{"id":"cmuxo6u7q2y5tad07l5iz54ke","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6u7q2y5uad07gtwvj71s","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:22:15.768Z","lastVerifiedAt":"2026-10-21T07:22:15.768Z","lastChangeDetectedAt":null,"scannedHash":"4e09daa222cdbef8d7755cf70332126f2f4e024a","latestUpstreamHash":"4e09daa222cdbef8d7755cf70332126f2f4e024a","nextCheckDueAt":"2026-10-22T08:24:12.504Z"}},{"id":"cmuxm8o492f6jad07mwzu3a2f","slug":"techtide-alibaba-resilience-bcdr-review","publicId":"214953e9-3a6f-4b3d-b9d4-f8184a9c3d32","name":"techtide-alibaba-resilience-bcdr-review","description":"Review Alibaba Cloud workload HA and BCDR designs - RDS High-Availability Edition failover, PolarDB Global Database Network, ACK multi-zone, ECS disaster recovery cross-region, RTO/RPO target analysis, and HBR (Hybrid Backup Recovery) coverage.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:53.272Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-resilience-bcdr-review","findings":[{"id":"cmuxm8o492f6kad07t8ubipo5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8o492f6lad077h7cx3cc","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:55:15.816Z","lastVerifiedAt":"2026-10-21T07:55:15.816Z","lastChangeDetectedAt":null,"scannedHash":"eef43bff1f4e9ba888aca7638d894871e5e7216b","latestUpstreamHash":"eef43bff1f4e9ba888aca7638d894871e5e7216b","nextCheckDueAt":"2026-10-22T06:51:44.332Z"}},{"id":"cmuxmbiia2kgfad07jwhiotvu","slug":"techtide-hetzner-live-server-lifecycle-guard","publicId":"1dd9ed5f-2c2d-43ee-81c7-d55554a6473e","name":"techtide-hetzner-live-server-lifecycle-guard","description":"Guard Hetzner Cloud server creation, destruction, type changes (rescale), and power operations with mandatory server ID, region, explicit human approval, target confirmation, account, and rollback plan. Server deletion is irreversible without a prior snapshot. Use only when live server lifecycle operations are required and all pre-flight checks are confirmed.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:53.269Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/hetzner/techtide-hetzner-live-server-lifecycle-guard","findings":[{"id":"cmuxmbiia2kggad075nmkldo1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbiia2kghad071phsob2b","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:05:39.481Z","lastVerifiedAt":"2026-10-22T02:05:39.481Z","lastChangeDetectedAt":null,"scannedHash":"459fd6614a8f4b10e6d46473df62a9c3aa5b1d40","latestUpstreamHash":"459fd6614a8f4b10e6d46473df62a9c3aa5b1d40","nextCheckDueAt":"2026-10-23T01:36:13.509Z"}},{"id":"cmuxoa4kg30wead071u5f0l1e","slug":"techtide-istio-ambient-mesh-review","publicId":"daa144d3-eedc-4220-b2e1-d0394dedea62","name":"techtide-istio-ambient-mesh-review","description":"Use this skill for Istio service mesh review across both sidecar mode and ambient mode (ztunnel L4 + optional waypoint L7). Covers PeerAuthentication, AuthorizationPolicy, RequestAuthentication, Gateway, VirtualService, DestinationRule, Sidecar, and waypoint placement. Trigger when the user asks whether an Istio policy is correct, whether mTLS is strict, whether L7 AuthorizationPolicy will actually be enforced in ambient mode, or whether a mesh-wide PeerAuthentication change is safe.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.809Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/istio/techtide-istio-ambient-mesh-review","findings":[{"id":"cmuxoa4kg30wfad07xynbkgzw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa4kg30wgad07oitg9zfy","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:46:39.290Z","lastVerifiedAt":"2026-10-21T10:46:39.290Z","lastChangeDetectedAt":null,"scannedHash":"eb83a39f245ca51daf38062a57c4a54fc2b928fe","latestUpstreamHash":"eb83a39f245ca51daf38062a57c4a54fc2b928fe","nextCheckDueAt":"2026-10-22T11:50:26.849Z"}},{"id":"cmuxm8o1r2f66ad07fkw7ihgd","slug":"techtide-alibaba-actiontrail-audit-analyst","publicId":"f3c1f82b-befa-4e35-9961-476bd1df5c9f","name":"techtide-alibaba-actiontrail-audit-analyst","description":"Query Alibaba Cloud ActionTrail management API call history, build governance audit reports, create SLS-based compliance evidence trails, and detect anomalous admin activity patterns.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.773Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-actiontrail-audit-analyst","findings":[{"id":"cmuxm8o1r2f67ad076gdoa6u7","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8o1r2f68ad07q3mqxtbv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:26:21.995Z","lastVerifiedAt":"2026-10-21T21:26:21.995Z","lastChangeDetectedAt":null,"scannedHash":"198cb4f1ef6a7627e7213700250c2756c1124476","latestUpstreamHash":"198cb4f1ef6a7627e7213700250c2756c1124476","nextCheckDueAt":"2026-10-22T19:23:57.477Z"}},{"id":"cmuxmbgfb2k48ad07xu9upr8n","slug":"techtide-argocd-gitops-review","publicId":"eb6c6f90-1f99-4bc3-858f-2649e0d307e9","name":"techtide-argocd-gitops-review","description":"Use this skill for Argo CD GitOps review across Application, AppProject, ApplicationSet, sync windows, RBAC, sync impersonation, and Argo CD Agent multi-cluster topologies. Trigger when the user asks whether an Argo CD configuration is safe for production, whether automated sync should be enabled, whether prune+selfHeal is appropriate, whether AppProject scope is too wide, or how to enforce least-privilege sync identity.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.768Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/argocd/techtide-argocd-gitops-review","findings":[{"id":"cmuxmbgfb2k49ad07uzafpblw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbgfb2k4aad07kgwhmzau","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:52:39.587Z","lastVerifiedAt":"2026-10-22T03:52:39.587Z","lastChangeDetectedAt":null,"scannedHash":"4575187dedea6e1827ec4dae1fcbd9823d60c0d8","latestUpstreamHash":"4575187dedea6e1827ec4dae1fcbd9823d60c0d8","nextCheckDueAt":"2026-10-23T05:53:24.159Z"}},{"id":"cmuxoa47330suad07cmkrl2jw","slug":"techtide-gcp-networking-observability","publicId":"efa17664-67d9-4fe3-aae1-a3f29bafbf0f","name":"techtide-gcp-networking-observability","description":"Investigate GCP network issues by analyzing VPC Flow Logs, firewall logs, Cloud NAT logs, threat logs, and networking metrics. Diagnose connectivity, packet loss, top talkers, and firewall block events using BigQuery-first methodology and Cloud Monitoring fallback. Use when investigating VPC traffic anomalies, firewall DENY events, NAT port exhaustion, latency spikes, or running Connectivity Tests for path diagnostics.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.765Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-networking-observability","findings":[{"id":"cmuxoa47330svad07y54igsv0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa47330swad07nxnfp3ce","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:10:58.259Z","lastVerifiedAt":"2026-10-21T13:10:58.259Z","lastChangeDetectedAt":null,"scannedHash":"5bc09b5f4b72fcc869ff53375147260ef90c9cef","latestUpstreamHash":"5bc09b5f4b72fcc869ff53375147260ef90c9cef","nextCheckDueAt":"2026-10-22T15:08:17.695Z"}},{"id":"cmuxm8pqu2fl1ad077qnztocb","slug":"techtide-huawei-support-incident-coordinator","publicId":"13165e25-dcf3-4c6c-b58c-c7a56a0530db","name":"techtide-huawei-support-incident-coordinator","description":"Coordinate Huawei Cloud support incidents - case creation with correct severity (紧急/高/中/低), Premium Support SLA enforcement, Account Manager and TAM escalation path, status page monitoring, internal stakeholder communication, and post-incident evidence packaging.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.755Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-support-incident-coordinator","findings":[{"id":"cmuxm8pqv2fl2ad071boeoviz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8pqv2fl3ad076rlpcv51","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:26:39.021Z","lastVerifiedAt":"2026-10-21T09:26:39.021Z","lastChangeDetectedAt":null,"scannedHash":"602b026be04cde8713a4bc11f67f9640026f0d59","latestUpstreamHash":"602b026be04cde8713a4bc11f67f9640026f0d59","nextCheckDueAt":"2026-10-22T10:24:50.154Z"}},{"id":"cmuxm632c2b1jad07bgjzjjij","slug":"techtide-huawei-dws-dli-data-analyst","publicId":"9b9acbae-c07a-4b65-90eb-874219213f39","name":"techtide-huawei-dws-dli-data-analyst","description":"Operate Huawei DWS (GaussDB DWS data warehouse), DLI (Data Lake Insight serverless Spark/Flink), MRS (MapReduce Service), and DataArts Studio for data governance and pipeline orchestration.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.754Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-dws-dli-data-analyst","findings":[{"id":"cmuxm632d2b1kad07hoq7yvvu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm632d2b1lad07cmbzpuiq","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:55:41.120Z","lastVerifiedAt":"2026-10-21T16:55:41.120Z","lastChangeDetectedAt":null,"scannedHash":"a4d1d37245a33604875e90b4a2bfa12bceac1f65","latestUpstreamHash":"a4d1d37245a33604875e90b4a2bfa12bceac1f65","nextCheckDueAt":"2026-10-22T18:09:12.272Z"}},{"id":"cmuxmc21p2mwiad07uit6rzqr","slug":"techtide-gcp-firebase-developer","publicId":"3ff2e644-d357-4472-945d-8630b74f9090","name":"techtide-gcp-firebase-developer","description":"Build, configure, and operate Firebase-powered web and mobile applications - covering Firestore, Firebase Auth, Firebase Hosting, Cloud Functions for Firebase, Firebase Storage, App Check, Firebase Remote Config, and Firebase Analytics. Use when building mobile/web apps with Firebase, setting up authentication flows, designing Firestore data models, deploying Firebase Hosting, or configuring Firebase security rules.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.753Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-firebase-developer","findings":[{"id":"cmuxmc21p2mwjad07i57wke5n","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmc21p2mwkad07tp1lfdlv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:39:39.035Z","lastVerifiedAt":"2026-10-21T09:39:39.035Z","lastChangeDetectedAt":null,"scannedHash":"7b0c24dace3f2733547ef5cd0c43a3b4f2a4227b","latestUpstreamHash":"7b0c24dace3f2733547ef5cd0c43a3b4f2a4227b","nextCheckDueAt":"2026-10-22T08:32:47.085Z"}},{"id":"cmuxm3cgg25rzad07sujcdylg","slug":"techtide-huawei-daily-operations-briefing-coordinator","publicId":"49f87812-8470-4470-a6f8-ef7b5f56285f","name":"techtide-huawei-daily-operations-briefing-coordinator","description":"Coordinate the daily Huawei Cloud operations standup - CBC cost delta by Enterprise Project, AOM anomaly alert review, CCE pod failure triage, CES quota utilization warnings, LTS log error spike detection, SecMaster security finding triage, and action item assignment.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.696Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-daily-operations-briefing-coordinator","findings":[{"id":"cmuxm3cgg25s0ad0742rwo9ov","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3cgg25s1ad07t2pgbpge","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T03:40:13.274Z","lastVerifiedAt":"2026-10-21T03:40:13.274Z","lastChangeDetectedAt":null,"scannedHash":"3c720a82cc2ca646df6eb0fabf7e6403d529d103","latestUpstreamHash":"3c720a82cc2ca646df6eb0fabf7e6403d529d103","nextCheckDueAt":"2026-10-22T04:55:02.001Z"}},{"id":"cmuxm8niv2f1fad074olfn5my","slug":"techtide-aws-agentcore","publicId":"a46fb06f-8c63-4d07-aeb9-1003c3013333","name":"techtide-aws-agentcore","description":"Build, test, migrate, integrate, and deploy Amazon Bedrock AgentCore agents. Use for AgentCore runtime, local development, import/migration, deployment, Memory, Gateway/MCP tools, Identity, Observability, Browser, Code Interpreter, policy, and harness-vs-code-path decisions. Load references only when that component is needed.","author":"github: TechTide","version":"0.1.6","license":"Apache-2.0","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.695Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-agentcore","findings":[{"id":"cmuxm8niv2f1gad07yhwp4mzw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8niv2f1had0701zlrfl4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxm8nkp2f1kad07pltd8lz1","source":"cisco","category":"security","label":"Attempts to conceal actions from the user","detail":"references/safety-checklist.md:9 — Pattern detected: Do not tell user","severity":"high","ruleId":"PROMPT_INJECTION_CONCEALMENT"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:15:01.615Z","lastVerifiedAt":"2026-10-21T22:15:01.615Z","lastChangeDetectedAt":null,"scannedHash":"bfa8a3480666300abf0dc7999e6f13b681569a18","latestUpstreamHash":"bfa8a3480666300abf0dc7999e6f13b681569a18","nextCheckDueAt":"2026-10-23T00:18:12.412Z"}},{"id":"cmuxm57i127saad07y1dkk3u1","slug":"techtide-oci-live-network-security-rule-guard","publicId":"db0c772c-a1be-4f5e-b699-76a5a2b969ca","name":"techtide-oci-live-network-security-rule-guard","description":"Guard live OCI Security List and Network Security Group (NSG) rule changes with current-state capture, open-internet and sensitive-port detection, stateful/stateless assessment, and explicit approval before ingress or egress rule mutation. Use only when an intentional network rule change targets a confirmed VCN component.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.688Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-live-network-security-rule-guard","findings":[{"id":"cmuxm57i127sbad07qajulx72","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm57i127scad07zz9gzzbb","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:48:41.218Z","lastVerifiedAt":"2026-10-21T17:48:41.218Z","lastChangeDetectedAt":null,"scannedHash":"adc9f6c2dc5e7f54fbcb887160f26c6beaaf0fdb","latestUpstreamHash":"adc9f6c2dc5e7f54fbcb887160f26c6beaaf0fdb","nextCheckDueAt":"2026-10-22T16:39:28.913Z"}},{"id":"cmuxoa51r30zoad07aw21l6m3","slug":"techtide-huawei-cost-finops-analyst","publicId":"0479849b-f1c6-4741-97b5-ccaf8ef669f7","name":"techtide-huawei-cost-finops-analyst","description":"Analyze Huawei Cloud CBC (Customer Business Console) spend, optimize Reserved Instance and CUD (Committed Use Discount) coverage, manage Cost Center allocation tags, and govern budget alert thresholds.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:52.370Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-cost-finops-analyst","findings":[{"id":"cmuxoa51s30zpad079x3qex5x","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa51s30zqad07fvlv05sc","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:52:39.299Z","lastVerifiedAt":"2026-10-21T10:52:39.299Z","lastChangeDetectedAt":null,"scannedHash":"1cc5ae3aed372b25396f2f2f7865e70145fb9406","latestUpstreamHash":"1cc5ae3aed372b25396f2f2f7865e70145fb9406","nextCheckDueAt":"2026-10-22T13:00:44.565Z"}},{"id":"cmuxm8o1o2f60ad07dxx89jpv","slug":"techtide-alibaba-analyticdb-realtime","publicId":"5dc0b429-9bd6-4c32-b2de-9844f14f7601","name":"techtide-alibaba-analyticdb-realtime","description":"Operate AnalyticDB for MySQL and PostgreSQL, Hologres real-time OLAP analytics, and DAS real-time diagnostics for sub-second interactive analytics workloads.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:51.758Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-analyticdb-realtime","findings":[{"id":"cmuxm8o1o2f61ad076qz0wd8c","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8o1o2f62ad07kxtxm0gu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:59:39.597Z","lastVerifiedAt":"2026-10-22T03:59:39.597Z","lastChangeDetectedAt":null,"scannedHash":"5fbeea8a59391719a0aea34bb3c4b0ab8562ad0a","latestUpstreamHash":"5fbeea8a59391719a0aea34bb3c4b0ab8562ad0a","nextCheckDueAt":"2026-10-23T03:12:35.846Z"}},{"id":"cmuxk5d8k1qdsad07ny36nams","slug":"techtide-contabo-capacity-planner","publicId":"ce7a096a-7eab-417c-8b18-8f6bbd73d7f6","name":"techtide-contabo-capacity-planner","description":"Advisory skill for Contabo resource planning across regions (EU, US-central, US-east, US-west, SIN, UK, AUS, JPN, IND), instance tiers (VPS, VDS, Storage VPS), and add-ons (Private Networking, Additional IPs, Extra Storage, Custom Images). Includes Cloud-Init userData strategy and SSH key management via secret IDs. Use when the user needs to plan new deployments, evaluate region coverage, or compare instance tiers.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:51.269Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/contabo/techtide-contabo-capacity-planner","findings":[{"id":"cmuxk5d8k1qdtad0705b9unrh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d8k1qduad07hrqcnkzh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:08:06.951Z","lastVerifiedAt":"2026-10-22T00:08:06.951Z","lastChangeDetectedAt":"2026-09-06T21:57:38.620Z","scannedHash":"6c7b7f29fde9492bbe2a958479747eb451bc5c49","latestUpstreamHash":"6c7b7f29fde9492bbe2a958479747eb451bc5c49","nextCheckDueAt":"2026-10-22T21:46:23.347Z"}},{"id":"cmuxoa4fm30vead07cf43yw1b","slug":"techtide-gcp-compliance-assured-workloads","publicId":"d8addf71-0fa6-4193-898b-f88db1396335","name":"techtide-gcp-compliance-assured-workloads","description":"Configure Assured Workloads for regulated workloads (FedRAMP High/Moderate, HIPAA, PCI-DSS, ITAR, IL4/IL5), audit controls implementation, and gather compliance evidence using Security Command Center and Asset Inventory.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:50.373Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-compliance-assured-workloads","findings":[{"id":"cmuxoa4fm30vfad07aacjm14h","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa4fm30vgad07193yi6wm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:06:13.318Z","lastVerifiedAt":"2026-10-21T04:06:13.318Z","lastChangeDetectedAt":null,"scannedHash":"d78a534b87eebb53d1b1a0b59ca822c675f4f680","latestUpstreamHash":"d78a534b87eebb53d1b1a0b59ca822c675f4f680","nextCheckDueAt":"2026-10-22T05:33:21.846Z"}},{"id":"cmuxm64b12b5wad077ijmvn6x","slug":"techtide-huawei-iam-least-privilege-review","publicId":"0100875f-3f11-484b-893d-a365681af9b9","name":"techtide-huawei-iam-least-privilege-review","description":"Audit Huawei Cloud IAM fine-grained policies, SCP (Service Control Policy) at Organizations level, agency trust relationships (cross-account delegation), and enterprise project permission boundaries.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:50.372Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-iam-least-privilege-review","findings":[{"id":"cmuxm64b12b5xad07bxd4apnb","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm64b12b5yad07x8bcxjpi","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:56:39.527Z","lastVerifiedAt":"2026-10-22T02:56:39.527Z","lastChangeDetectedAt":null,"scannedHash":"1abff4b1bcbd0220ddee0ab61dd718e9bcc38be2","latestUpstreamHash":"1abff4b1bcbd0220ddee0ab61dd718e9bcc38be2","nextCheckDueAt":"2026-10-23T01:31:39.918Z"}},{"id":"cmuxoau3w33a1ad07vfgwrrsm","slug":"techtide-gcp-gcs-data-perimeter-governor","publicId":"bfb7c6a2-f45e-4edd-af97-f956e10d9411","name":"techtide-gcp-gcs-data-perimeter-governor","description":"Govern Google Cloud Storage data perimeters - uniform bucket-level access enforcement, public access prevention, VPC Service Controls perimeter coverage, IAM Conditions for time-bounded access, Object Lifecycle policies, and data residency compliance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:50.069Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-gcs-data-perimeter-governor","findings":[{"id":"cmuxoau3w33a2ad07zp0i1bh0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoau3w33a3ad0736k3jw2u","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:35:06.879Z","lastVerifiedAt":"2026-10-21T23:35:06.879Z","lastChangeDetectedAt":null,"scannedHash":"ff666a90dd5787597dde94d60abcbfce825e9539","latestUpstreamHash":"ff666a90dd5787597dde94d60abcbfce825e9539","nextCheckDueAt":"2026-10-22T22:31:33.571Z"}},{"id":"cmuxm8q7r2fpiad07f6zi1x90","slug":"techtide-huawei-registry-artifact-governor","publicId":"586e9630-bcb6-45e0-877b-ec7c99736ea0","name":"techtide-huawei-registry-artifact-governor","description":"Govern Huawei Cloud SWR (Software Repository for Container) - image retention policy, vulnerability scanning via VSS (Vulnerability Scan Service) integration, namespace permission least privilege, cross-region image replication, and supply chain security posture.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:49.863Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-registry-artifact-governor","findings":[{"id":"cmuxm8q7r2fpjad07118rgl8k","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8q7r2fpkad07ceh7iiw9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:13:39.610Z","lastVerifiedAt":"2026-10-22T04:13:39.610Z","lastChangeDetectedAt":null,"scannedHash":"03488df1a8a4bb3c936a5f64f2a8bdcfe2ddbec4","latestUpstreamHash":"03488df1a8a4bb3c936a5f64f2a8bdcfe2ddbec4","nextCheckDueAt":"2026-10-23T05:52:08.331Z"}},{"id":"cmuxoa4eo30uoad071mgjh4ow","slug":"techtide-huawei-drs-data-replication-operator","publicId":"4f055207-b15c-4ee5-a475-0cc37114859f","name":"techtide-huawei-drs-data-replication-operator","description":"Plan and execute Huawei DRS (Data Replication Service) migration and real-time sync tasks, CDM (Cloud Data Migration) batch ETL jobs, and DMS (Distributed Message Service) Kafka cluster operations with safe cutover sequencing.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:49.785Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-drs-data-replication-operator","findings":[{"id":"cmuxoa4ep30upad07bilob8om","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa4ep30uqad07ocwpp6j6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:35:06.999Z","lastVerifiedAt":"2026-10-22T00:35:06.999Z","lastChangeDetectedAt":null,"scannedHash":"aa377b55d6810cded386a42170e527c587ed3177","latestUpstreamHash":"aa377b55d6810cded386a42170e527c587ed3177","nextCheckDueAt":"2026-10-23T02:46:31.095Z"}},{"id":"cmuxoa46k30s9ad07bb4g0nd3","slug":"techtide-huawei-obs-data-perimeter-governor","publicId":"33e37956-82a6-4497-8e9c-58de7b2d6785","name":"techtide-huawei-obs-data-perimeter-governor","description":"Govern Huawei Cloud OBS (Object Storage Service) data perimeters - bucket policy and ACL public exposure, Block Public Access configuration, VPC endpoint binding for private access, WORM (Object Lock), cross-region replication compliance, and MLPS 2.0 data residency enforcement.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:49.783Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-obs-data-perimeter-governor","findings":[{"id":"cmuxoa46k30saad074j3ptl0j","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa46k30sbad07nzg6b9fu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:50:39.463Z","lastVerifiedAt":"2026-10-22T01:50:39.463Z","lastChangeDetectedAt":null,"scannedHash":"6781637fef586f47991bfcef06599dbd6e1f097d","latestUpstreamHash":"6781637fef586f47991bfcef06599dbd6e1f097d","nextCheckDueAt":"2026-10-23T03:02:29.895Z"}},{"id":"cmuxo6uak2y6tad07tijhtkvq","slug":"techtide-alibaba-change-impact-advisor","publicId":"dc843e48-3a5c-4ff6-ba41-e88dbf3856d6","name":"techtide-alibaba-change-impact-advisor","description":"Pre-change blast radius analysis for Alibaba Cloud - Resource Directory OU scope mapping, RAM policy cascade effects, VPC peering and CEN impact, SLB backend pool changes, RDS connection pool disruption, and safe change sequencing.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:49.778Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-change-impact-advisor","findings":[{"id":"cmuxo6uak2y6uad070ecbyw2t","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6uak2y6vad071ecx96ou","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:38:41.697Z","lastVerifiedAt":"2026-10-21T21:38:41.697Z","lastChangeDetectedAt":null,"scannedHash":"7b920b240bc31d7c038afd0e5d20b1606de91d18","latestUpstreamHash":"7b920b240bc31d7c038afd0e5d20b1606de91d18","nextCheckDueAt":"2026-10-22T21:34:29.099Z"}},{"id":"cmuxo6u4w2y4uad0771bebnpw","slug":"techtide-external-secrets-operator-review","publicId":"68eb1b27-8f5a-43eb-9abc-5c47a540f4fa","name":"techtide-external-secrets-operator-review","description":"Use this skill when reviewing External Secrets Operator (ESO) configuration, including SecretStore, ClusterSecretStore, ExternalSecret, and PushSecret resources. Trigger when a user provides ESO YAML manifests, asks about secret rotation interval compliance, questions whether ClusterSecretStore scope is too broad, or wants to audit the auth method used to reach an external secret store (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault, 1Password).","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:48.557Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/kubernetes/techtide-external-secrets-operator-review","findings":[{"id":"cmuxo6u4w2y4vad0732ejtqtz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:46:07.015Z","lastVerifiedAt":"2026-10-22T00:46:07.015Z","lastChangeDetectedAt":null,"scannedHash":"6c50411c8ac2fea10cdcd5102a0137af7df53d09","latestUpstreamHash":"6c50411c8ac2fea10cdcd5102a0137af7df53d09","nextCheckDueAt":"2026-10-23T02:53:27.066Z"}},{"id":"cmuxk5dyp1qj5ad07zgz5lpju","slug":"techtide-kyverno-policy-review","publicId":"58d895c5-af5c-4575-8db6-68ea9497a6ec","name":"techtide-kyverno-policy-review","description":"Use this skill for Kyverno policy review across the stable policies.kyverno.io/v1 API surface - ValidatingPolicy, MutatingPolicy, GeneratingPolicy, DeletingPolicy, and ImageValidatingPolicy. Trigger when the user asks whether an admission policy is safe, whether a PolicyException is justified, whether a policy should be enforced or audited, whether a Kyverno policy should be replaced by a native ValidatingAdmissionPolicy (CEL), or whether image signature verification is correctly configured.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:48.353Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/kyverno/techtide-kyverno-policy-review","findings":[{"id":"cmuxk5dyp1qj6ad07g3168879","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dyp1qj7ad07earfu5x2","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T03:45:13.285Z","lastVerifiedAt":"2026-10-21T03:45:13.285Z","lastChangeDetectedAt":"2026-09-07T22:55:58.910Z","scannedHash":"ed1e28f028b392b77cb92415d072bc95643346a5","latestUpstreamHash":"ed1e28f028b392b77cb92415d072bc95643346a5","nextCheckDueAt":"2026-10-22T06:04:37.287Z"}},{"id":"cmuxoauev33daad07bisvi83e","slug":"techtide-huawei-ief-edge-computing-operator","publicId":"39fb9b16-b43a-4881-a8ed-576681f20995","name":"techtide-huawei-ief-edge-computing-operator","description":"Manage IEF (Intelligent Edge Fabric) edge node lifecycle, edge application deployment as container workloads, IoT device twin management, and cloud-edge-device unified control plane with offline operation support.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:48.261Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-ief-edge-computing-operator","findings":[{"id":"cmuxoauev33dbad07xl24cj2g","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoauev33dcad07kdcrwsg0","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:22:06.971Z","lastVerifiedAt":"2026-10-22T00:22:06.971Z","lastChangeDetectedAt":null,"scannedHash":"933810ff0c5f3a45941454b34751261a15b5ab20","latestUpstreamHash":"933810ff0c5f3a45941454b34751261a15b5ab20","nextCheckDueAt":"2026-10-23T00:43:56.448Z"}},{"id":"cmuxm8qqo2fu1ad07zii741tz","slug":"techtide-kubernetes-pod-security-admission-review","publicId":"8f4fa53a-7871-494b-a82c-dca3511d0ba0","name":"techtide-kubernetes-pod-security-admission-review","description":"Use this skill for Kubernetes Pod Security Admission (PSA) review covering namespace labels for the three profiles (privileged, baseline, restricted), enforce/audit/warn modes, version pinning, and the migration path from deprecated PodSecurityPolicy. Trigger when the user asks whether a namespace label flip is safe, whether a workload meets a stricter profile, whether the audit/warn modes should be promoted to enforce, or whether an exemption is justified.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:48.258Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/kubernetes/techtide-kubernetes-pod-security-admission-review","findings":[{"id":"cmuxm8qqo2fu2ad07yzx3dpv1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qqo2fu3ad07kzgugb1x","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:20:39.556Z","lastVerifiedAt":"2026-10-22T03:20:39.556Z","lastChangeDetectedAt":null,"scannedHash":"5285d300e6c7b247e84e42ca5038a78d34dc1d6a","latestUpstreamHash":"5285d300e6c7b247e84e42ca5038a78d34dc1d6a","nextCheckDueAt":"2026-10-23T03:57:11.641Z"}},{"id":"cmuxm5fs028swad07gnw5boj6","slug":"techtide-huawei-cce-container-platform-operator","publicId":"fc813c38-24ad-4f44-a06e-16ad51a8d374","name":"techtide-huawei-cce-container-platform-operator","description":"Operate Huawei CCE (Cloud Container Engine) Kubernetes clusters, SWR container image registry lifecycle, ASM service mesh traffic policies, and IEF edge node management for cloud-native and hybrid workloads.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:48.253Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-cce-container-platform-operator","findings":[{"id":"cmuxm5fs028sxad07h9a0zw29","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5fs028syad074e4t5mz7","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:26:39.432Z","lastVerifiedAt":"2026-10-22T01:26:39.432Z","lastChangeDetectedAt":null,"scannedHash":"37a8b5896684fd200461916aba04917822837b93","latestUpstreamHash":"37a8b5896684fd200461916aba04917822837b93","nextCheckDueAt":"2026-10-23T02:13:58.477Z"}},{"id":"cmuxoa4ci30ufad07samfhzj2","slug":"techtide-huawei-ticket-triage-escalation-coordinator","publicId":"c11ff6a9-2a17-48ab-8c8f-6528ec1ace9b","name":"techtide-huawei-ticket-triage-escalation-coordinator","description":"Triage Huawei Cloud operational alerts, incidents, and support tickets - P0/P1/P2/P3 classification, Huawei Cloud Premium Support SLA enforcement, Account Manager escalation, AOM alert routing, war room coordination, evidence collection from CES and LTS, and safe escalation paths.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:48.171Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-ticket-triage-escalation-coordinator","findings":[{"id":"cmuxoa4ci30ugad076bchvsbi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa4ci30uhad0798sfwbzs","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:49:13.418Z","lastVerifiedAt":"2026-10-21T04:49:13.418Z","lastChangeDetectedAt":null,"scannedHash":"b8922cd1b4392aff9acc2e322e80cfde2caa0062","latestUpstreamHash":"b8922cd1b4392aff9acc2e322e80cfde2caa0062","nextCheckDueAt":"2026-10-22T06:27:04.432Z"}},{"id":"cmuxm5em928iuad07yof0e8zx","slug":"techtide-azure-live-entra-role-assignment-guard","publicId":"b02f3d47-c694-4b9c-b62c-5285dcbcc929","name":"techtide-azure-live-entra-role-assignment-guard","description":"Guard live permanent Microsoft Entra ID and Azure RBAC role assignments with scope audit, principal-type risk classification, dangerous-role detection, and explicit approval gates before write. Use only when a direct (non-PIM) role assignment is intentionally requested against a confirmed target.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:48.169Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-live-entra-role-assignment-guard","findings":[{"id":"cmuxm5em928iwad07ynfikaw8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5em928ixad07hd6h1lzp","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:09:13.576Z","lastVerifiedAt":"2026-10-21T06:09:13.576Z","lastChangeDetectedAt":null,"scannedHash":"6b8a813714fd1e7066918350afd9c40be57145b6","latestUpstreamHash":"6b8a813714fd1e7066918350afd9c40be57145b6","nextCheckDueAt":"2026-10-22T05:28:39.537Z"}},{"id":"cmuxk5dxt1qilad07dpu3cf22","slug":"techtide-azure-platform-automation-devops","publicId":"5fc67d3c-0208-4192-9ca3-0978efb91213","name":"techtide-azure-platform-automation-devops","description":"Design and review Azure platform automation and DevOps delivery for landing zones, shared platform services, and safe infrastructure rollout flows. Use for IaC approach selection, Bicep versus Terraform positioning, bootstrap/run phase separation, pipeline control design, secret-handling posture, and rollout validation gates.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:48.156Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-platform-automation-devops","findings":[{"id":"cmuxk5dxt1qimad077i30g3ro","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dxt1qinad07rvcqvs2q","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:48:07.020Z","lastVerifiedAt":"2026-10-22T00:48:07.020Z","lastChangeDetectedAt":"2026-09-22T00:01:51.090Z","scannedHash":"92fcd41ad5d6d6e83ecbfc619fadb0df75ff87ac","latestUpstreamHash":"92fcd41ad5d6d6e83ecbfc619fadb0df75ff87ac","nextCheckDueAt":"2026-10-23T00:07:40.441Z"}},{"id":"cmuxk5dy31qiuad078fu4p44k","slug":"techtide-azure-resource-health-incident-triage","publicId":"75114fc0-2b9e-4698-84bb-aada71285ac7","name":"techtide-azure-resource-health-incident-triage","description":"Use this skill for Azure Resource Health, Service Health, activity-log alert, and first-pass incident triage when the question is whether Azure platform health is part of the problem.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:47.673Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-resource-health-incident-triage","findings":[{"id":"cmuxk5dy31qivad07wkxtle9t","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dy31qiwad07b5ok034j","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:22:15.768Z","lastVerifiedAt":"2026-10-21T07:22:15.768Z","lastChangeDetectedAt":"2026-09-22T00:01:51.090Z","scannedHash":"6af19c9cc71799dea4884002c249b7704998af89","latestUpstreamHash":"6af19c9cc71799dea4884002c249b7704998af89","nextCheckDueAt":"2026-10-22T05:02:02.528Z"}},{"id":"cmuxk5e6b1qljad072gtsm9l4","slug":"techtide-contabo-security-hardening","publicId":"35c9bde8-b1ab-4838-b55c-a48b6651d774","name":"techtide-contabo-security-hardening","description":"Advisory skill for hardening Contabo infrastructure security: SSH key management via secret IDs, default root and admin user policy, firewall posture review, OAuth2 credential hygiene including token short TTL and environment variable storage, and x-request-id UUIDv4 traceability for audit compliance. Use when the user needs to assess or improve Contabo instance or API security posture.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:47.567Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/contabo/techtide-contabo-security-hardening","findings":[{"id":"cmuxk5e6b1qlkad07u4hbmtmz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e6b1qllad07ae4zhl1c","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:56:07.031Z","lastVerifiedAt":"2026-10-22T00:56:07.031Z","lastChangeDetectedAt":"2026-09-22T22:05:27.488Z","scannedHash":"9f7bbbab62ce5560f810941aacb27fac649ef5ff","latestUpstreamHash":"9f7bbbab62ce5560f810941aacb27fac649ef5ff","nextCheckDueAt":"2026-10-22T23:08:04.545Z"}},{"id":"cmuxma9p32hhoad07pcm6futz","slug":"techtide-alibaba-function-serverless-operator","publicId":"220fa112-8678-466f-ac17-23ec444600c5","name":"techtide-alibaba-function-serverless-operator","description":"Deploy and operate Function Compute 3.0, SAE (Serverless App Engine) applications, and EDAS microservice apps. Guide the serverless vs. PaaS vs. container platform choice for each workload type.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:47.565Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-function-serverless-operator","findings":[{"id":"cmuxma9p42hhpad074li2fmfs","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxma9p42hhqad0740zxrzvv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:39:15.796Z","lastVerifiedAt":"2026-10-21T07:39:15.796Z","lastChangeDetectedAt":"2026-10-07T04:38:17.253Z","scannedHash":"02d6410c1ec9098d691601e220cc3b53eeea4267","latestUpstreamHash":"02d6410c1ec9098d691601e220cc3b53eeea4267","nextCheckDueAt":"2026-10-22T09:25:29.436Z"}},{"id":"cmuxmav8u2idqad07tggvbebf","slug":"techtide-gcp-support-incident-coordinator","publicId":"e47869f4-a9d4-4b2a-9f78-53d635982262","name":"techtide-gcp-support-incident-coordinator","description":"Coordinate GCP support incidents - case creation with correct severity, Premium/Enhanced Support SLA enforcement, TAM escalation path, status page monitoring, internal stakeholder communication, and post-incident evidence packaging.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:47.563Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-support-incident-coordinator","findings":[{"id":"cmuxmav8u2idrad073dv8c2uk","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmav8u2idsad074wrnta03","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:42:39.515Z","lastVerifiedAt":"2026-10-22T02:42:39.515Z","lastChangeDetectedAt":null,"scannedHash":"ababa2930977f03968456ebe2a9770ce76ac860e","latestUpstreamHash":"ababa2930977f03968456ebe2a9770ce76ac860e","nextCheckDueAt":"2026-10-23T03:50:40.220Z"}},{"id":"cmuxoasvz32zdad07y0jqdap6","slug":"techtide-nvidia-maestro","publicId":"469d30fb-2e83-4ded-9b98-e1e83ae3edaa","name":"techtide-nvidia-maestro","description":"Route NVIDIA tasks to the narrowest specialist or team of specialists from the NVIDIA agent catalog. Use when you do not already know the specialist. Not for direct NVIDIA answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches the live-runtime promotion gatekeeper - requires explicit human confirmation with blast-radius and rollback before routing to any runtime-evidence specialist.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:47.507Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-maestro","findings":[{"id":"cmuxoasvz32zead077gk6ab32","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoasvz32zfad07ofl3qcrr","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:48:41.325Z","lastVerifiedAt":"2026-10-21T18:48:41.325Z","lastChangeDetectedAt":null,"scannedHash":"3d8c011d44202e8f6a5644fb29ba63e12c2995a2","latestUpstreamHash":"3d8c011d44202e8f6a5644fb29ba63e12c2995a2","nextCheckDueAt":"2026-10-22T20:31:00.917Z"}},{"id":"cmuxm3jv226fdad07i4q1pnii","slug":"techtide-gcp-iac-change-safety-review","publicId":"c1f30d79-0aa6-4f8b-b2ba-5fcd780778ff","name":"techtide-gcp-iac-change-safety-review","description":"Review Terraform and Deployment Manager changes targeting GCP - blast radius analysis, destroy-operation detection, cross-project impact, state file conflicts, org policy drift, and rollback plan completeness.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:47.504Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-iac-change-safety-review","findings":[{"id":"cmuxm3jv326fead07remg0uq0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3jv326ffad072pis41ac","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:41:39.576Z","lastVerifiedAt":"2026-10-22T03:41:39.576Z","lastChangeDetectedAt":null,"scannedHash":"17f7aef47864f89b1b9d8592d60b763ca316c008","latestUpstreamHash":"17f7aef47864f89b1b9d8592d60b763ca316c008","nextCheckDueAt":"2026-10-23T05:38:38.885Z"}},{"id":"cmuxoau9c33azad071vz0rnqk","slug":"techtide-hetzner-live-firewall-rule-guard","publicId":"51abe742-cc9a-4f87-aba1-82529c93609c","name":"techtide-hetzner-live-firewall-rule-guard","description":"Guard Hetzner Cloud Firewall rule mutations and server attachment changes with mandatory pre-mutation snapshot of current rules, blast-radius review, explicit human approval, target confirmation, account, region, and rollback plan. Use only when live Firewall rule changes are required and all pre-flight checks are confirmed.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:47.498Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/hetzner/techtide-hetzner-live-firewall-rule-guard","findings":[{"id":"cmuxoau9c33b0ad07csxl605n","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoau9c33b1ad07f6da1pat","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:56:39.368Z","lastVerifiedAt":"2026-10-21T11:56:39.368Z","lastChangeDetectedAt":null,"scannedHash":"27d16ab924d3172fa86f383312d893353bd9e4b9","latestUpstreamHash":"27d16ab924d3172fa86f383312d893353bd9e4b9","nextCheckDueAt":"2026-10-22T09:49:42.313Z"}},{"id":"cmuxk5ehc1qokad073n2ncpcb","slug":"techtide-scaleway-kapsule-platform-operator","publicId":"169529ce-2d6b-4804-98d4-31889c26d8b2","name":"techtide-scaleway-kapsule-platform-operator","description":"Review and advise on Scaleway Kapsule managed Kubernetes cluster readiness: node pool sizing and autoscaling, CNI plugin selection (Cilium, Calico, Kilo), placement group policy (max_availability vs enforced), Kubernetes version currency, PodDisruptionBudget coverage, and workload scheduling posture. Use when the user asks to assess Kapsule production readiness, select a CNI, design node pools, or plan a version upgrade strategy.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:46.667Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/scaleway/techtide-scaleway-kapsule-platform-operator","findings":[{"id":"cmuxk5ehd1qolad075o0sfskw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5ehd1qomad07mpvz5r7i","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:19:41.554Z","lastVerifiedAt":"2026-10-21T20:19:41.554Z","lastChangeDetectedAt":"2026-10-07T23:38:35.356Z","scannedHash":"eb091e885f108b879d44d987bdb2a5159dbde0ff","latestUpstreamHash":"eb091e885f108b879d44d987bdb2a5159dbde0ff","nextCheckDueAt":"2026-10-22T19:38:51.044Z"}},{"id":"cmuxmbnlm2ldnad07cdga5i16","slug":"techtide-huawei-change-impact-advisor","publicId":"2d12bb26-7046-4777-b684-37bdc71ccd2c","name":"techtide-huawei-change-impact-advisor","description":"Pre-change blast radius analysis for Huawei Cloud - Organizations SCP cascade scope, IAM agency dependency chain, VPC route table and VPC Peering impact, GaussDB instance class change disruption, CCE node pool resize safety, and Enterprise Project boundary clarity.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:46.453Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-change-impact-advisor","findings":[{"id":"cmuxmbnlm2ldoad0771uwedg6","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbnlm2ldpad07l9jbiha3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:28:12.223Z","lastVerifiedAt":"2026-10-21T22:28:12.223Z","lastChangeDetectedAt":null,"scannedHash":"0041b758ff3448b4bb8f62c72b15cf0e079ccf18","latestUpstreamHash":"0041b758ff3448b4bb8f62c72b15cf0e079ccf18","nextCheckDueAt":"2026-10-22T23:07:32.479Z"}},{"id":"cmuxoat6i3323ad071sa7irsw","slug":"techtide-alibaba-kms-secret-lifecycle-steward","publicId":"5ba8129c-cb21-464c-b5c8-dc80ecf22ecd","name":"techtide-alibaba-kms-secret-lifecycle-steward","description":"Audit and govern Alibaba Cloud KMS key lifecycles, Certificate Manager, SSM (Secrets Manager), and HSM key operations. Ensure encryption-at-rest coverage and rotation compliance across CMKs, envelope encryption, and certificate lifecycle.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:46.081Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-kms-secret-lifecycle-steward","findings":[{"id":"cmuxoat6j3324ad075ab844h5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoat6j3325ad07cf5qfgpz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:55:39.304Z","lastVerifiedAt":"2026-10-21T10:55:39.304Z","lastChangeDetectedAt":null,"scannedHash":"bdab61c315154ebde5984ac05398ab19ffbdd0e6","latestUpstreamHash":"bdab61c315154ebde5984ac05398ab19ffbdd0e6","nextCheckDueAt":"2026-10-22T12:08:35.339Z"}},{"id":"cmuxoaucm33cgad072bqibtlq","slug":"techtide-gcp-daily-operations-briefing-coordinator","publicId":"5ed813d3-ce9a-4985-b4d6-af033b0cae49","name":"techtide-gcp-daily-operations-briefing-coordinator","description":"Coordinate the daily GCP operations standup - cost delta from previous day, quota warning review, failed deployment detection, Security Command Center finding triage, SLO burn rate alert review, and action item assignment.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:46.077Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-daily-operations-briefing-coordinator","findings":[{"id":"cmuxoaucm33chad0759ks86ix","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoaucn33ciad07v69x6wgm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:15:06.961Z","lastVerifiedAt":"2026-10-22T00:15:06.961Z","lastChangeDetectedAt":null,"scannedHash":"d55475a53b7ad0c79ec704f1813edabe0577139a","latestUpstreamHash":"d55475a53b7ad0c79ec704f1813edabe0577139a","nextCheckDueAt":"2026-10-23T02:23:41.997Z"}},{"id":"cmuxm68hc2c2vad07zxf0yllm","slug":"techtide-gcp-registry-artifact-governor","publicId":"d3480e39-d44f-4c27-8651-5f3d38cae1d0","name":"techtide-gcp-registry-artifact-governor","description":"Govern GCP Artifact Registry - container image signing via Binary Authorization, vulnerability scanning via Container Analysis, repository IAM least privilege, artifact retention policies, and supply chain security posture.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:46.072Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-registry-artifact-governor","findings":[{"id":"cmuxm68hc2c2wad07kk1soo9g","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68hc2c2xad0717mmlk66","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:50:39.523Z","lastVerifiedAt":"2026-10-22T02:50:39.523Z","lastChangeDetectedAt":null,"scannedHash":"14de3a6282004bc34f9dacfdb800ed646ee37bab","latestUpstreamHash":"14de3a6282004bc34f9dacfdb800ed646ee37bab","nextCheckDueAt":"2026-10-23T05:01:20.139Z"}},{"id":"cmuxm8qr62fumad07d08mgcxh","slug":"techtide-gcp-change-impact-advisor","publicId":"0bfbee6c-6bc2-4565-b8c7-830b4b239504","name":"techtide-gcp-change-impact-advisor","description":"Pre-change blast radius analysis for GCP - cross-project resource dependency mapping, org policy cascade effects, Shared VPC peering impact, Service Account impersonation chain analysis, and safe change sequencing.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:45.956Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-change-impact-advisor","findings":[{"id":"cmuxm8qr62funad07ku73fhr4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qr62fuoad07wzc8hcrg","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:48:58.430Z","lastVerifiedAt":"2026-10-21T14:48:58.430Z","lastChangeDetectedAt":null,"scannedHash":"8f52831942e5e16bd00d6dae0044820d02ec4ec8","latestUpstreamHash":"8f52831942e5e16bd00d6dae0044820d02ec4ec8","nextCheckDueAt":"2026-10-22T16:31:39.753Z"}},{"id":"cmuxmavd32ie5ad075tdtpdo2","slug":"techtide-huawei-resilience-bcdr-review","publicId":"409798eb-291e-4eaa-8b18-501db9143a33","name":"techtide-huawei-resilience-bcdr-review","description":"Review Huawei Cloud workload HA and BCDR designs - GaussDB High Availability (HA) instance failover, CBR (Cloud Backup and Recovery) cross-region vault, CCE multi-AZ deployment, DRS (Data Replication Service) for DR, RTO/RPO target analysis, and runbook completeness.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:45.955Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-resilience-bcdr-review","findings":[{"id":"cmuxmavd32ie6ad07d8eixwc9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmavd32ie7ad07zz5lwhv0","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:33:41.193Z","lastVerifiedAt":"2026-10-21T17:33:41.193Z","lastChangeDetectedAt":null,"scannedHash":"d1b85d1914bcf40ac4c6c9f443febdfad5a12102","latestUpstreamHash":"d1b85d1914bcf40ac4c6c9f443febdfad5a12102","nextCheckDueAt":"2026-10-22T17:40:20.599Z"}},{"id":"cmuxk5cn21q96ad07a5sv6qpm","slug":"techtide-azure-private-endpoint-adoption-planner","publicId":"f3a3ccca-46e5-435d-8ae1-6c8c1418ec52","name":"techtide-azure-private-endpoint-adoption-planner","description":"Use this skill for Azure Private Link and private endpoint adoption planning, including hub-versus-spoke placement, private DNS zone linkage, route implications, centralized versus workload-local endpoint trade-offs, and safe rollout validation.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:45.157Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-private-endpoint-adoption-planner","findings":[{"id":"cmuxk5cn31q97ad07fakqnuz8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5cn31q98ad07ejnh25rj","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:25:39.498Z","lastVerifiedAt":"2026-10-22T02:25:39.498Z","lastChangeDetectedAt":"2026-09-08T22:26:20.547Z","scannedHash":"4159eaf299b7960d8a79d9bde2fa6e1c64910d73","latestUpstreamHash":"4159eaf299b7960d8a79d9bde2fa6e1c64910d73","nextCheckDueAt":"2026-10-23T01:14:20.201Z"}},{"id":"cmuxm8qqn2ftvad0705d9lfr3","slug":"techtide-aws-live-deployment-guarded-operator","publicId":"6d3dc3f4-014d-4168-b4f3-e0676b03b455","name":"techtide-aws-live-deployment-guarded-operator","description":"Operate guarded live AWS deployment changes with explicit account, region, profile, approval, dry-run, rollback, and verification gates. Use only when the target environment is confirmed and a live deployment action is intentionally requested.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:44.981Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-live-deployment-guarded-operator","findings":[{"id":"cmuxm8qqn2ftwad07fv2qlts3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qqn2ftxad076e86wiml","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:05:39.481Z","lastVerifiedAt":"2026-10-22T02:05:39.481Z","lastChangeDetectedAt":null,"scannedHash":"fa396479a8e8c20c37c177c585b6fee56c50c1c6","latestUpstreamHash":"fa396479a8e8c20c37c177c585b6fee56c50c1c6","nextCheckDueAt":"2026-10-22T23:52:28.412Z"}},{"id":"cmuxk5e5y1ql9ad07vlm09zhn","slug":"techtide-azure-subscription-resource-organization","publicId":"54966752-0438-4fc7-a03c-b5c7b15e1035","name":"techtide-azure-subscription-resource-organization","description":"Use this skill for Azure management-group hierarchy, subscription placement, resource-group boundary, and platform-versus-workload ownership decisions that affect governance, operations, and landing-zone scale.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:44.070Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-subscription-resource-organization","findings":[{"id":"cmuxk5e5y1qlaad07580zltsg","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e5y1qlbad07afko483w","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:48:07.020Z","lastVerifiedAt":"2026-10-22T00:48:07.020Z","lastChangeDetectedAt":"2026-09-08T22:00:20.501Z","scannedHash":"278a8fbd10d2869642358a6f4a642e031758c4eb","latestUpstreamHash":"278a8fbd10d2869642358a6f4a642e031758c4eb","nextCheckDueAt":"2026-10-22T22:29:11.210Z"}},{"id":"cmuxk5ehg1qotad07x0jl7znf","slug":"techtide-azure-identity-governance-review","publicId":"20b7eb67-54ce-41cf-9038-fb28e858d194","name":"techtide-azure-identity-governance-review","description":"Review Microsoft Entra identity governance posture for Azure operators, with focus on standing versus eligible access, Privileged Identity Management, access reviews, entitlement management, ownership gaps, and least-privilege control patterns.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:44.069Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-identity-governance-review","findings":[{"id":"cmuxk5ehg1qouad07k6y8rd2w","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5ehg1qovad07e8x1v3m0","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:04:06.831Z","lastVerifiedAt":"2026-10-21T23:04:06.831Z","lastChangeDetectedAt":"2026-09-08T21:29:20.438Z","scannedHash":"007046d3c64d09e92658d6e2942431f40b9553f8","latestUpstreamHash":"007046d3c64d09e92658d6e2942431f40b9553f8","nextCheckDueAt":"2026-10-22T23:06:54.380Z"}},{"id":"cmuxm3j1l268qad073hgf36r0","slug":"techtide-nvidia-ngc-nim-supply-chain-governor","publicId":"037010ab-da6b-4d28-9ac2-0bac4292a0e8","name":"techtide-nvidia-ngc-nim-supply-chain-governor","description":"Use this skill when reviewing NVIDIA NGC and NIM supply chain posture - NGC org and team boundaries, API key scope and rotation, NIM container cosign verification against NVIDIA's published identity, model card and weights provenance, AI Enterprise entitlement posture, and air-gap mirror integrity. Trigger when the user asks whether NIM images are verified before deployment, whether NGC keys are scoped per environment, or whether the deployment is procurement-defensible for a regulated tenant.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:43.876Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-ngc-nim-supply-chain-governor","findings":[{"id":"cmuxm3j1l268rad072repihy9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:05:39.413Z","lastVerifiedAt":"2026-10-22T01:05:39.413Z","lastChangeDetectedAt":null,"scannedHash":"ffc74bf8fd2a25fcc25b4b8bd2acc0ba5764fee8","latestUpstreamHash":"ffc74bf8fd2a25fcc25b4b8bd2acc0ba5764fee8","nextCheckDueAt":"2026-10-23T00:04:32.009Z"}},{"id":"cmuxmbgfr2k4ead07bxcw6svi","slug":"techtide-alibaba-maxcompute-dataworks-analyst","publicId":"cfb6ed0c-92af-47eb-af6e-758499006216","name":"techtide-alibaba-maxcompute-dataworks-analyst","description":"Manage MaxCompute CU package governance, DataWorks scheduling, Quick BI reporting, and PAI ML platform. Optimize query cost and job scheduling efficiency for big data workloads.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:43.775Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-maxcompute-dataworks-analyst","findings":[{"id":"cmuxmbgfr2k4fad07je2kk8ef","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbgfr2k4gad070fvm2v4l","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:19:39.493Z","lastVerifiedAt":"2026-10-22T02:19:39.493Z","lastChangeDetectedAt":null,"scannedHash":"41451ca07cbffc18dee848b9639dfbbfa2cc9b81","latestUpstreamHash":"41451ca07cbffc18dee848b9639dfbbfa2cc9b81","nextCheckDueAt":"2026-10-23T01:42:11.870Z"}},{"id":"cmuxm8o1d2f5nad072pa1l6ok","slug":"techtide-huawei-iac-change-safety-review","publicId":"eac134e3-d35e-4435-84a6-0319d96dd1dd","name":"techtide-huawei-iac-change-safety-review","description":"Review Terraform and RFS (Resource Formation Service) changes targeting Huawei Cloud - blast radius analysis, resource deletion detection, Organizations SCP cascade scope, cross-stack dependency impact, state file security, and rollback plan completeness.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:43.772Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-iac-change-safety-review","findings":[{"id":"cmuxm8o1e2f5oad071xme0a4a","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8o1e2f5pad078uy0h0aw","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:23:39.018Z","lastVerifiedAt":"2026-10-21T09:23:39.018Z","lastChangeDetectedAt":null,"scannedHash":"7085f53a35ab92b43f9fe80832c9f56423b25575","latestUpstreamHash":"7085f53a35ab92b43f9fe80832c9f56423b25575","nextCheckDueAt":"2026-10-22T10:33:22.093Z"}},{"id":"cmuxk5e0z1qjzad07a4yozt8v","slug":"techtide-azure-cost-optimization-governor","publicId":"7b9b83ab-47a2-480a-a75f-6e9a6d536630","name":"techtide-azure-cost-optimization-governor","description":"Review Azure spend governance, budgets, alerts, cost analysis visibility, reservation and savings-plan awareness, tagging for cost allocation, exports, and FinOps ownership with official Microsoft documentation and Azure MCP evidence where available.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:43.771Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-cost-optimization-governor","findings":[{"id":"cmuxk5e0z1qk0ad070ynraf4s","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e0z1qk1ad07ofaoy3bu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:47:39.583Z","lastVerifiedAt":"2026-10-22T03:47:39.583Z","lastChangeDetectedAt":"2026-09-22T00:01:51.090Z","scannedHash":"9c02eabecdd043f8a58085d333f367037b6127b0","latestUpstreamHash":"9c02eabecdd043f8a58085d333f367037b6127b0","nextCheckDueAt":"2026-10-23T01:36:18.304Z"}},{"id":"cmuxm5guh2920ad07g9cob4bb","slug":"techtide-cert-manager-issuer-trust-review","publicId":"caef9754-d093-40cf-b782-9363c2fb325b","name":"techtide-cert-manager-issuer-trust-review","description":"Use this skill when reviewing cert-manager PKI configuration for Kubernetes clusters. Trigger when the user asks about Issuer or ClusterIssuer scope, CertificateRequestPolicy coverage, certificate SAN or duration risks, trust-manager bundle distribution, SPIFFE mesh CA integration, cert-manager webhook health, or cloud CA authentication method.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:43.054Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/cert-manager/techtide-cert-manager-issuer-trust-review","findings":[{"id":"cmuxm5guh2921ad07fe750bur","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:35:39.571Z","lastVerifiedAt":"2026-10-22T03:35:39.571Z","lastChangeDetectedAt":null,"scannedHash":"83d0362d14f4b6597cf7fed92cfe0e3889f6cebd","latestUpstreamHash":"83d0362d14f4b6597cf7fed92cfe0e3889f6cebd","nextCheckDueAt":"2026-10-23T05:49:23.592Z"}},{"id":"cmuxmc1hm2msbad07pl6jqo23","slug":"techtide-gcp-resilience-bcdr-review","publicId":"b0716ff2-45ea-4eb2-a9e5-d38307b5f5d6","name":"techtide-gcp-resilience-bcdr-review","description":"Review GCP workload HA and BCDR designs - multi-region architectures, Cloud SQL HA failover, Spanner global instances, GKE multi-cluster, RTO/RPO target analysis, and runbook completeness.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:42.970Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-resilience-bcdr-review","findings":[{"id":"cmuxmc1hm2mscad07gd74ou2t","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmc1hm2msdad0767ch6qx2","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:28:58.419Z","lastVerifiedAt":"2026-10-21T14:28:58.419Z","lastChangeDetectedAt":null,"scannedHash":"497f3b2a64e93d6b4d75a3b854931c45d3ae58d1","latestUpstreamHash":"497f3b2a64e93d6b4d75a3b854931c45d3ae58d1","nextCheckDueAt":"2026-10-22T14:00:57.007Z"}},{"id":"cmuxo6h3d2wd8ad07ykkp98o0","slug":"techtide-falco-runtime-threat-rules-review","publicId":"96ac25aa-6ade-4dfa-828f-e5d1113aa58c","name":"techtide-falco-runtime-threat-rules-review","description":"Use this skill when reviewing Falco rules files, falco.yaml configuration, or runtime security posture for a Kubernetes workload. Trigger when a user provides Falco rules YAML, asks whether their Falco setup covers a specific threat, questions rule exception scope, or wants to validate that Falco alert output reaches their SIEM or incident response pipeline.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:42.966Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/falco/techtide-falco-runtime-threat-rules-review","findings":[{"id":"cmuxo6h3d2wd9ad07il5fyxkm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:24:01.665Z","lastVerifiedAt":"2026-10-21T22:24:01.665Z","lastChangeDetectedAt":null,"scannedHash":"0930ea5bb4efa03a805db784905410bcef489555","latestUpstreamHash":"0930ea5bb4efa03a805db784905410bcef489555","nextCheckDueAt":"2026-10-22T21:28:14.742Z"}},{"id":"cmuxo6u4l2y4mad073daxascs","slug":"techtide-fluxcd-kustomization-helmrelease-review","publicId":"a0fb29e3-fe7f-4b06-87d4-b17dbb8d6a26","name":"techtide-fluxcd-kustomization-helmrelease-review","description":"Use this skill when reviewing FluxCD Kustomization, HelmRelease, GitRepository, HelmRepository, or OCIRepository resources. Trigger when the user asks whether a Flux configuration is safe for production, whether SOPS encryption is required, whether prune is safe on a given workload, whether commit signature verification is enabled, or whether a Flux multi-tenant setup uses least-privilege ServiceAccounts.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:42.865Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/fluxcd/techtide-fluxcd-kustomization-helmrelease-review","findings":[{"id":"cmuxo6u4l2y4nad07gdbl0h1i","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/workflow-and-output.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6u4l2y4oad07djsbjhw6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:28:39.503Z","lastVerifiedAt":"2026-10-22T02:28:39.503Z","lastChangeDetectedAt":null,"scannedHash":"020ce9451ba9ca62edd1de73a31f1059c36dd5b8","latestUpstreamHash":"020ce9451ba9ca62edd1de73a31f1059c36dd5b8","nextCheckDueAt":"2026-10-23T00:45:24.916Z"}},{"id":"cmuxm63592b1wad07wqj0u4wj","slug":"techtide-gcp-resource-inventory-analyst","publicId":"91a01cde-6b3c-4040-bd0c-7d1556e72318","name":"techtide-gcp-resource-inventory-analyst","description":"Query Asset Inventory API for resource discovery, audit resource label/tag coverage, detect stale or orphaned resources, review change history, and build inventory reports across projects and folders.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:42.780Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-resource-inventory-analyst","findings":[{"id":"cmuxm63592b1xad07jjg1sint","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm63592b1yad07p39gxuhl","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:34:22.011Z","lastVerifiedAt":"2026-10-21T21:34:22.011Z","lastChangeDetectedAt":null,"scannedHash":"e8cce2c9829c16af5ae218b472a78865e306e8c2","latestUpstreamHash":"e8cce2c9829c16af5ae218b472a78865e306e8c2","nextCheckDueAt":"2026-10-22T20:43:33.982Z"}},{"id":"cmuxo6l752wmwad07trbxb76e","slug":"techtide-aws-generative-ai-developer","publicId":"5738c0bc-14c3-4e16-8efd-b95420c4161f","name":"techtide-aws-generative-ai-developer","description":"Build Amazon Bedrock and serverless generative AI applications using Lambda, API Gateway, Step Functions, EventBridge, S3, DynamoDB, SQS, Guardrails, and IAM. Prefer this for serverless GenAI app design and implementation; prefer techtide-aws-agentcore for AgentCore runtime, techtide-aws-bedrock-agent-security-governor for deep Bedrock security, and techtide-aws-serverless-production-readiness for final operational hardening.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:42.773Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-generative-ai-developer","findings":[{"id":"cmuxo6l752wmxad071pemrjhs","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6l752wmyad07gvtzzlzr","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:24:13.487Z","lastVerifiedAt":"2026-10-21T05:24:13.487Z","lastChangeDetectedAt":null,"scannedHash":"c7b2d39f3a1d3634dd7640d67a89a11543ec5329","latestUpstreamHash":"c7b2d39f3a1d3634dd7640d67a89a11543ec5329","nextCheckDueAt":"2026-10-22T07:37:25.444Z"}},{"id":"cmuxm5ipn29hiad07l9jxy5ei","slug":"techtide-gcp-alloydb-cloudsql-dba","publicId":"602c9635-0732-46ff-80e2-3f634c6a6b87","name":"techtide-gcp-alloydb-cloudsql-dba","description":"Operate AlloyDB clusters and Cloud SQL instances - HA configuration, read replicas, connection pooling, maintenance windows, backup strategy, and performance diagnostics.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:42.691Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-alloydb-cloudsql-dba","findings":[{"id":"cmuxm5ipn29hjad07ha1tgjx3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5ipn29hlad072dsrf8br","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:33:39.029Z","lastVerifiedAt":"2026-10-21T09:33:39.029Z","lastChangeDetectedAt":null,"scannedHash":"c1e08cb9e01cd5b0b6044827778e17df604e4593","latestUpstreamHash":"c1e08cb9e01cd5b0b6044827778e17df604e4593","nextCheckDueAt":"2026-10-22T09:05:01.061Z"}},{"id":"cmuxmbnga2ld4ad07c7opp8e8","slug":"techtide-huawei-codearts-devops-operator","publicId":"257e3efa-830d-4d08-aa95-81ca03fc205d","name":"techtide-huawei-codearts-devops-operator","description":"Build and operate Huawei CodeArts CI/CD pipelines across CodeHub (Git), Build, Deploy, TestPlan, and Pipeline modules, managing SWR image lifecycle, deployment automation, and environment promotion with rollback gates.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:42.688Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-codearts-devops-operator","findings":[{"id":"cmuxmbnga2ld5ad07wn6jrp03","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbnga2ld6ad07qxu47r59","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:54:15.724Z","lastVerifiedAt":"2026-10-21T06:54:15.724Z","lastChangeDetectedAt":null,"scannedHash":"eba327bec814fa14c9055ff6ce120df64d8c9437","latestUpstreamHash":"eba327bec814fa14c9055ff6ce120df64d8c9437","nextCheckDueAt":"2026-10-22T05:03:20.133Z"}},{"id":"cmuxmaxv02j24ad07k74t6ndi","slug":"techtide-alibaba-ack-container-platform-operator","publicId":"54b63194-1740-4e44-8ffd-ca5ea9b946f6","name":"techtide-alibaba-ack-container-platform-operator","description":"Operate ACK clusters (managed/dedicated/serverless), ACR container registries, ASM service mesh, and container workload placement. Guide ACK type selection, OIDC workload identity, and image vulnerability posture.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:41.095Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-ack-container-platform-operator","findings":[{"id":"cmuxmaxv02j25ad077j6l0zql","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmaxv02j26ad076pglca0n","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:24:39.429Z","lastVerifiedAt":"2026-10-22T01:24:39.429Z","lastChangeDetectedAt":"2026-10-07T04:40:51.195Z","scannedHash":"4c3626d762917e6d3a8e6c8bb4ffdc7e1744e1bb","latestUpstreamHash":"4c3626d762917e6d3a8e6c8bb4ffdc7e1744e1bb","nextCheckDueAt":"2026-10-23T03:32:31.827Z"}},{"id":"cmuxmbybz2mfuad071nksrf1d","slug":"techtide-gcp-cloudbuild-deploy-cicd-operator","publicId":"ec24f6c7-45f9-4ba7-b0c0-3474c62d5758","name":"techtide-gcp-cloudbuild-deploy-cicd-operator","description":"Build and operate CI/CD pipelines using Cloud Build, Cloud Deploy delivery pipelines, Artifact Registry, SLSA provenance generation, and release gating with approval workflows.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.858Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-cloudbuild-deploy-cicd-operator","findings":[{"id":"cmuxmbybz2mfvad07o6yxy0xl","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbybz2mfwad07p949tili","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:17:15.759Z","lastVerifiedAt":"2026-10-21T07:17:15.759Z","lastChangeDetectedAt":null,"scannedHash":"2b309065eabd3f83d40926491e04c45ec109e8d4","latestUpstreamHash":"2b309065eabd3f83d40926491e04c45ec109e8d4","nextCheckDueAt":"2026-10-22T07:52:32.364Z"}},{"id":"cmuxmabap2htnad07vimm9pwq","slug":"techtide-huawei-solution-architect","publicId":"f4f3836f-4fd3-4c7c-9dcf-69c7f3504b48","name":"techtide-huawei-solution-architect","description":"Design Huawei Cloud solutions - product selection, enterprise-project model design, region selection for MLPS/sovereignty requirements, architecture patterns, multi-zone and multi-region HA. Covers region mapping (China and international), GaussDB vs RDS selection, ModelArts/Ascend NPU considerations, and the six-pillar Huawei Cloud Architecture Framework including the Trusted pillar.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.687Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-solution-architect","findings":[{"id":"cmuxmabap2htoad07a3wyt9dd","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmabap2htpad07b7u7vtlb","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:27:39.340Z","lastVerifiedAt":"2026-10-21T11:27:39.340Z","lastChangeDetectedAt":"2026-10-07T04:38:17.253Z","scannedHash":"bab0305528e8f277255ef3f934a47333239a16ee","latestUpstreamHash":"bab0305528e8f277255ef3f934a47333239a16ee","nextCheckDueAt":"2026-10-22T10:11:06.608Z"}},{"id":"cmuxk5duq1qhnad07yr9pcdzi","slug":"techtide-azure-cosmosdb-performance-investigator","publicId":"cd9c6ca5-e667-4f4d-921a-cfba1b52f170","name":"techtide-azure-cosmosdb-performance-investigator","description":"Use this skill for Azure Cosmos DB performance investigation, especially RU spikes, query latency, throttling, hot partitions, indexing inefficiency, partition-skew analysis, request-charge profiling, diagnostic-log review, and evidence-driven remediation planning.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.474Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-cosmosdb-performance-investigator","findings":[{"id":"cmuxk5duq1qhoad07jmlzpqm0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5duq1qhpad07fznn4oqq","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:14:58.413Z","lastVerifiedAt":"2026-10-21T14:14:58.413Z","lastChangeDetectedAt":"2026-09-22T00:00:51.089Z","scannedHash":"4111e1c2637074ac4fa5880812fd327c36f08793","latestUpstreamHash":"4111e1c2637074ac4fa5880812fd327c36f08793","nextCheckDueAt":"2026-10-22T11:52:07.074Z"}},{"id":"cmuxk5d0j1qbgad07oklb5bkg","slug":"techtide-azure-network-topology-review","publicId":"98315cb2-52bd-45cc-b4bc-6d3f6feea9aa","name":"techtide-azure-network-topology-review","description":"Use this skill for Azure network architecture review, hub-spoke critique, routing and DNS dependency analysis, shared-services boundary decisions, firewall placement review, and landing-zone connectivity guidance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.366Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-network-topology-review","findings":[{"id":"cmuxk5d0j1qbhad079b24apt1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/mcp-and-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d0j1qbiad07zjok33br","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:28:39.565Z","lastVerifiedAt":"2026-10-22T03:28:39.565Z","lastChangeDetectedAt":"2026-09-22T00:01:51.090Z","scannedHash":"c0677d0458a078f77c241bdce2c3db8b78f57d39","latestUpstreamHash":"c0677d0458a078f77c241bdce2c3db8b78f57d39","nextCheckDueAt":"2026-10-23T05:29:05.713Z"}},{"id":"cmuxo6to12y11ad07kqz739bu","slug":"techtide-gcp-anthos-multicloud-architect","publicId":"21e4e005-ae38-49f8-9cc7-63b50be1ba96","name":"techtide-gcp-anthos-multicloud-architect","description":"Design and operate Anthos / GKE Enterprise fleet management, Config Management (GitOps with Policy Controller), multi-cloud Kubernetes across GCP, AWS, and Azure.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.365Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-anthos-multicloud-architect","findings":[{"id":"cmuxo6to22y12ad07wvkeg8zd","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6to22y13ad07dqxwke9y","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:44:41.321Z","lastVerifiedAt":"2026-10-21T18:44:41.321Z","lastChangeDetectedAt":null,"scannedHash":"b9125fd55704df20467e2a7696857b8f77481ed9","latestUpstreamHash":"b9125fd55704df20467e2a7696857b8f77481ed9","nextCheckDueAt":"2026-10-22T17:16:48.758Z"}},{"id":"cmuxk5e3f1qkqad07dfbstst9","slug":"techtide-azure-aks-platform-operator","publicId":"09442310-23d1-4f40-b17b-30f108bad3fa","name":"techtide-azure-aks-platform-operator","description":"Operate Azure Kubernetes Service with an adversarial production posture. Use for AKS architecture sanity checks, upgrade safety, node-pool strategy, workload identity, network policy, scaling, observability, and operator-readiness reviews.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.364Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-aks-platform-operator","findings":[{"id":"cmuxk5e3f1qksad07t3iou7wi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e3f1qktad07h4o8d9up","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:46:03.487Z","lastVerifiedAt":"2026-10-21T21:46:03.487Z","lastChangeDetectedAt":"2026-09-08T22:30:20.556Z","scannedHash":"4f1faa13f9f599fe19fbb9b9112a71477c662177","latestUpstreamHash":"4f1faa13f9f599fe19fbb9b9112a71477c662177","nextCheckDueAt":"2026-10-22T21:30:41.398Z"}},{"id":"cmuxk5d6i1qdkad07evo1yvqx","slug":"techtide-azure-resilience-bcdr-review","publicId":"24933241-e104-4fcf-af1a-2ee4259c2026","name":"techtide-azure-resilience-bcdr-review","description":"Use this skill for Azure resilience, business continuity, and disaster recovery reviews covering RTO/RPO realism, failover and failback assumptions, shared-responsibility gaps, and recovery runbook or drill quality.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.174Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-resilience-bcdr-review","findings":[{"id":"cmuxk5d6i1qdlad07k2nrrkrr","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d6i1qdmad077jjja6cy","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:13:39.490Z","lastVerifiedAt":"2026-10-22T02:13:39.490Z","lastChangeDetectedAt":"2026-09-22T22:59:27.597Z","scannedHash":"b228f2c1473ccf2086c4b61048cdcd4e5ff7ee14","latestUpstreamHash":"b228f2c1473ccf2086c4b61048cdcd4e5ff7ee14","nextCheckDueAt":"2026-10-23T02:24:41.181Z"}},{"id":"cmuxm1x8a22qbad07692i7od1","slug":"techtide-ionos-datacenter-designer-reviewer","publicId":"961117b1-ef26-4976-9e3d-0e8ec367c2e9","name":"techtide-ionos-datacenter-designer-reviewer","description":"Review IONOS Data Center Designer (DCD) topology for resource organization, multi-availability-zone placement, private LAN segmentation, volume layout, NIC configuration, and firewall posture. DCD is unique to IONOS as a graphical infrastructure orchestrator where topology changes carry datacenter-wide blast radius. Use when the user asks to review, redesign, or assess the safety of an IONOS datacenter topology or resource layout.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.173Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ionos/techtide-ionos-datacenter-designer-reviewer","findings":[{"id":"cmuxm1x8a22qcad07lkmwdyse","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm1x8a22qdad07f0mvle5s","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:17:06.847Z","lastVerifiedAt":"2026-10-21T23:17:06.847Z","lastChangeDetectedAt":null,"scannedHash":"3a934c387949f5417682902123237f6a37caddab","latestUpstreamHash":"3a934c387949f5417682902123237f6a37caddab","nextCheckDueAt":"2026-10-22T21:50:14.208Z"}},{"id":"cmuxmbyek2mgnad07eqz9zgs6","slug":"techtide-scaleway-iam-policy-review","publicId":"94443c7f-054d-4502-b3a6-ec8e4a091086","name":"techtide-scaleway-iam-policy-review","description":"Review Scaleway IAM policies, API key governance, service account bindings, and organization/project-level permission sets for least-privilege posture. Use when the user asks to audit API key scopes, review IAM policy breadth, assess service account access, or tighten Scaleway identity controls. Surfaces overly broad access, missing expiry, and key sprawl risks with actionable remediation paths.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:40.155Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/scaleway/techtide-scaleway-iam-policy-review","findings":[{"id":"cmuxmbyel2mgoad07ok09jtu1","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbyel2mgpad07v94smbi1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:52:15.813Z","lastVerifiedAt":"2026-10-21T07:52:15.813Z","lastChangeDetectedAt":null,"scannedHash":"877e2f03501da3a65d1212eb665ea7947d2d3b9d","latestUpstreamHash":"877e2f03501da3a65d1212eb665ea7947d2d3b9d","nextCheckDueAt":"2026-10-22T05:31:17.578Z"}},{"id":"cmuxmbkgp2kxgad07gjabdstl","slug":"techtide-gcp-migration-cutover-architect","publicId":"02169407-0f57-4ba4-803e-0b9a8953a11c","name":"techtide-gcp-migration-cutover-architect","description":"Plan and execute migrations to GCP using Migrate to Virtual Machines, Database Migration Service, Storage Transfer Service, and design cutover sequencing with rollback plans.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.865Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-migration-cutover-architect","findings":[{"id":"cmuxmbkgp2kxhad07suguyb4s","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbkgp2kxiad07i84fn0ac","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:37:39.447Z","lastVerifiedAt":"2026-10-22T01:37:39.447Z","lastChangeDetectedAt":null,"scannedHash":"a2d70758d68062c745f1ec28d4a85735ea0731ef","latestUpstreamHash":"a2d70758d68062c745f1ec28d4a85735ea0731ef","nextCheckDueAt":"2026-10-23T02:44:11.867Z"}},{"id":"cmuxk5e3d1qkkad07dvdu41rw","slug":"techtide-azure-ai-foundry-ops-governor","publicId":"58a90d00-3418-4117-871b-745c7e3302aa","name":"techtide-azure-ai-foundry-ops-governor","description":"Use this skill for Microsoft Foundry and Azure AI Foundry operations governance: resource-versus-project boundary design, RBAC review, quota planning, network isolation, logging, and safe MCP-backed read or write execution. Trigger when the user asks how to run Foundry safely across teams without access sprawl, quota surprises, or unsafe production mutations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.863Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-ai-foundry-ops-governor","findings":[{"id":"cmuxk5e3e1qklad07ym5fiitj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e3e1qkmad073nj3b3y5","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:41:39.636Z","lastVerifiedAt":"2026-10-22T04:41:39.636Z","lastChangeDetectedAt":"2026-09-23T01:25:27.966Z","scannedHash":"8bd3ccdedacd50fbe46acf161e7b49c85ea08e76","latestUpstreamHash":"8bd3ccdedacd50fbe46acf161e7b49c85ea08e76","nextCheckDueAt":"2026-10-23T03:47:07.543Z"}},{"id":"cmuxm8nyp2f4xad0732ueof9e","slug":"techtide-nvidia-ai-infrastructure-operations","publicId":"1ce0ab6c-7345-4223-a626-ccd8dc8b6148","name":"techtide-nvidia-ai-infrastructure-operations","description":"Use this skill when reviewing NVIDIA AI infrastructure deployments - DGX, HGX, MGX systems, GPU server install posture, BMC and out-of-band exposure, BIOS/firmware levels, vGPU host configuration, and rack-scale power/cooling/networking readiness. Trigger when the user asks whether a GPU host is provisioned per NVIDIA reference architecture, whether the BMC is segmented, whether driver/firmware versions match the AI Enterprise support matrix, or whether the deployment is in scope for NCA-AIIO or NCP-AII certification expectations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:38.781Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-ai-infrastructure-operations","findings":[{"id":"cmuxm8nyp2f4yad07jatq8w4y","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:13:06.842Z","lastVerifiedAt":"2026-10-21T23:13:06.842Z","lastChangeDetectedAt":null,"scannedHash":"ead9d9b7eae7cd327de10ed557456ef75e716517","latestUpstreamHash":"ead9d9b7eae7cd327de10ed557456ef75e716517","nextCheckDueAt":"2026-10-22T23:56:56.725Z"}},{"id":"cmuxm540l27qtad076uuc5k0d","slug":"techtide-alibaba-network-architect","publicId":"268384d7-65e1-45c1-83a8-ee67134f8b2b","name":"techtide-alibaba-network-architect","description":"Design Alibaba Cloud network topology - VPC peering, CEN for multi-VPC/multi-region connectivity, Express Connect for private circuits, SLB/ALB/NLB/CLB load balancer selection, and Smart Access Gateway for branch offices.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.779Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-network-architect","findings":[{"id":"cmuxm540l27quad07galk31bi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm540l27qvad07y9kqfait","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:20:41.055Z","lastVerifiedAt":"2026-10-21T16:20:41.055Z","lastChangeDetectedAt":null,"scannedHash":"42c49d1786b6b42607a42648e4c557333096399e","latestUpstreamHash":"42c49d1786b6b42607a42648e4c557333096399e","nextCheckDueAt":"2026-10-22T14:22:42.305Z"}},{"id":"cmuxm64u32ba9ad070r8q5psu","slug":"techtide-scaleway-maestro","publicId":"7e862e42-502e-40eb-a6af-cd01307e7df1","name":"techtide-scaleway-maestro","description":"Classify and route Scaleway tasks to the narrowest qualified specialist agent. Use when a user presents a Scaleway request that spans IAM, cost, Kapsule/Kubernetes, networking, or live-guard domains, and the correct specialist is not yet identified. Produces a domain verdict, recommended specialist, and routing rationale without answering specialist questions directly.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.777Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/scaleway/techtide-scaleway-maestro","findings":[{"id":"cmuxm64u32bacad073wk2sz2j","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm64u32badad07zoe9fecq","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:52:39.299Z","lastVerifiedAt":"2026-10-21T10:52:39.299Z","lastChangeDetectedAt":null,"scannedHash":"e53f61ec00325afd2dbb4668cd35579b20924522","latestUpstreamHash":"e53f61ec00325afd2dbb4668cd35579b20924522","nextCheckDueAt":"2026-10-22T09:13:01.753Z"}},{"id":"cmuxoa49h30tcad07yiz74ccv","slug":"techtide-hetzner-maestro","publicId":"c5b79129-bae5-44b0-8452-fb8f4c7151e2","name":"techtide-hetzner-maestro","description":"Route and classify Hetzner Cloud tasks to the narrowest qualified specialist - cost optimization, infrastructure review, capacity planning, firewall guard, or server lifecycle guard. Use when the user's Hetzner request spans multiple domains or needs triage before specialist engagement.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.365Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/hetzner/techtide-hetzner-maestro","findings":[{"id":"cmuxoa49i30tdad07cxxy0v32","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa49i30tead07e2itsgsq","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:53:39.587Z","lastVerifiedAt":"2026-10-22T03:53:39.587Z","lastChangeDetectedAt":null,"scannedHash":"582c87f80c45fd8c3e772a13155bdf81f0ed86ff","latestUpstreamHash":"582c87f80c45fd8c3e772a13155bdf81f0ed86ff","nextCheckDueAt":"2026-10-23T04:25:54.294Z"}},{"id":"cmuxm5ix629jsad07r31eqwhc","slug":"techtide-aws-maestro","publicId":"e93b0516-4dad-45ec-adf0-bfc9026be4eb","name":"techtide-aws-maestro","description":"Route AWS tasks to the narrowest specialist or team of specialists from the 42-agent catalog. Use when you do not already know the specialist. Not for direct AWS answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents - requires explicit human confirmation with blast-radius and rollback before routing to any live deployment or production-change specialist.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.364Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-maestro","findings":[{"id":"cmuxm5ix629jtad07nt1wf07f","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5ix629juad079yjdxki1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:11:15.832Z","lastVerifiedAt":"2026-10-21T08:11:15.832Z","lastChangeDetectedAt":null,"scannedHash":"41ba0699088b031a9c985fdcf86805c41501c0bf","latestUpstreamHash":"41ba0699088b031a9c985fdcf86805c41501c0bf","nextCheckDueAt":"2026-10-22T09:12:11.350Z"}},{"id":"cmuxmbyc22mg1ad07q1kbn9js","slug":"techtide-argo-rollouts-progressive-delivery-review","publicId":"aa9917cc-4bac-42a7-a69b-b3a4c205e74e","name":"techtide-argo-rollouts-progressive-delivery-review","description":"Use this skill when reviewing Argo Rollouts progressive delivery configuration. Trigger when the user asks about canary or blue-green Rollout strategy correctness, AnalysisTemplate success/failure conditions, traffic weighting provider alignment, canaryService isolation, PDB deadlock risk with Rollout maxSurge settings, automated rollback posture, or manual vs automated promotion configuration.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.363Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/argocd/techtide-argo-rollouts-progressive-delivery-review","findings":[{"id":"cmuxmbyc22mg2ad07w8hzw88t","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/workflow-and-output.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbyc22mg3ad076gufbvvf","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:48:39.520Z","lastVerifiedAt":"2026-10-22T02:48:39.520Z","lastChangeDetectedAt":null,"scannedHash":"5c129dac8cedbae56d33f8b5d865184213c8ec57","latestUpstreamHash":"5c129dac8cedbae56d33f8b5d865184213c8ec57","nextCheckDueAt":"2026-10-23T04:23:47.086Z"}},{"id":"cmuxm3cgd25rtad07vne5jiyk","slug":"techtide-ai-tool-decision-router","publicId":"4639f4ca-782f-465f-97e7-6018f85a9bc0","name":"techtide-ai-tool-decision-router","description":"Route development work to Cursor, Claude Code, Codex, Lovable, v0, Replit, or a human approval lane based on scope, blast radius, context size, and verification needs. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:38.276Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-ai-tool-decision-router","findings":[{"id":"cmuxm3cgd25ruad07z27t7mev","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:42:06.895Z","lastVerifiedAt":"2026-10-21T23:42:06.895Z","lastChangeDetectedAt":null,"scannedHash":"f23b32c62f8a26943545e8bc4363bd3bd27ed560","latestUpstreamHash":"f23b32c62f8a26943545e8bc4363bd3bd27ed560","nextCheckDueAt":"2026-10-23T00:30:48.970Z"}},{"id":"cmtl45ena8441ad09b0uxppps","slug":"techtide-alibaba-ecs-compute-operator","publicId":"4138d872-7210-4948-9c24-391c16c5d02e","name":"techtide-alibaba-ecs-compute-operator","description":"Operate ECS instances, Auto Scaling groups, ECI serverless containers, and Cloud Assistant O&M automation. Handle instance lifecycle, image management, placement groups, spot/preemptible instances, and scheduled scaling.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:38.275Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-ecs-compute-operator","findings":[{"id":"cmtl45enb844gad09pi6yfmv5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl45enb844aad0997o6tbzm","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"52 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl45enb8444ad09lemp5lcm","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl45enb8449ad09hrv5b1u4","source":"vettd","category":"description","label":"Description lacks usage context","detail":"Add context like \"Use this skill when...\" to help agents know when to activate it","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl45enb844bad09cn0qs5h2","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl45enb844ead0959depiyt","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl45enb8442ad09rvyw1btu","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl45enb8445ad09gwd0xwj7","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl45enb844cad098kqccgso","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl45enb844dad09ubvbds2w","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl45enb844had09516g5w9l","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl45enb844fad090ih9d5t0","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl45enb8446ad09cxgg7jbc","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-alibaba-ecs-compute-operator\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl45enb8448ad09rubs31go","source":"vettd","category":"description","label":"Description within character limit","detail":"220/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl45enb8443ad09m0gq17e9","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl45enb8447ad09dexw6ggt","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxm68ji2c3fad07v1vuzb0y","slug":"techtide-contabo-maestro","publicId":"d6c326fa-4380-4c11-a020-20b2bd7512fe","name":"techtide-contabo-maestro","description":"Router skill for classifying Contabo tasks and delegating to the narrowest specialist for cost analysis, capacity planning, security hardening, VPS/VDS lifecycle operations, or Object Storage management. Use when the user asks a Contabo question that spans multiple domains or needs triage before specialist engagement.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:37.967Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/contabo/techtide-contabo-maestro","findings":[{"id":"cmuxm68ji2c3gad07m9mz1qfm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68ji2c3had07it2va0lr","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:23:41.175Z","lastVerifiedAt":"2026-10-21T17:23:41.175Z","lastChangeDetectedAt":null,"scannedHash":"c2aad7e246c2aa87ae77add84a2c45e76ff17385","latestUpstreamHash":"c2aad7e246c2aa87ae77add84a2c45e76ff17385","nextCheckDueAt":"2026-10-22T17:16:44.423Z"}},{"id":"cmuxmbkld2kyqad07uqjd3f5r","slug":"techtide-huawei-network-architect","publicId":"14275a0f-8a04-4808-b557-7b6f56955cf8","name":"techtide-huawei-network-architect","description":"Design Huawei Cloud network architecture - VPC, ELB type selection (dedicated/shared), VPN and DC Gateway (Direct Connect), Cloud Connect for inter-VPC, CFW (Cloud Firewall), Anti-DDoS, DNS. Covers Dedicated vs Shared ELB trade-offs, DC Gateway VBC connectivity, Cloud Connect cross-region/cross-account peering, and CFW east-west firewall policy.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:37.964Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/huawei/techtide-huawei-network-architect","findings":[{"id":"cmuxmbkle2kyrad07yir1lxg4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbkle2kysad074uedc8e4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:33:01.866Z","lastVerifiedAt":"2026-10-21T22:33:01.866Z","lastChangeDetectedAt":null,"scannedHash":"6feaa420b8cd24d08a9f1c4126cac837485c3170","latestUpstreamHash":"6feaa420b8cd24d08a9f1c4126cac837485c3170","nextCheckDueAt":"2026-10-23T00:15:20.750Z"}},{"id":"cmuxk5e0v1qjrad078r6mr6bm","slug":"techtide-azure-key-vault-secret-lifecycle-auditor","publicId":"01db545c-0d95-430d-912d-7f95ac4b9c41","name":"techtide-azure-key-vault-secret-lifecycle-auditor","description":"Audit Azure Key Vault secret lifecycle posture across RBAC, soft delete, purge protection, rotation, expiration, metadata hygiene, Event Grid notifications, and recovery readiness. Use when the question is whether secret management is actually safe, not just present.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:37.853Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-key-vault-secret-lifecycle-auditor","findings":[{"id":"cmuxk5e0v1qjsad07bvn4tnhh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e0v1qjtad07107jx5k9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:23:39.561Z","lastVerifiedAt":"2026-10-22T03:23:39.561Z","lastChangeDetectedAt":"2026-09-24T19:27:54.019Z","scannedHash":"1783dee0d9c95251daed1bfe808ac0ccd7704ec6","latestUpstreamHash":"1783dee0d9c95251daed1bfe808ac0ccd7704ec6","nextCheckDueAt":"2026-10-23T03:54:30.343Z"}},{"id":"cmuxm685z2c0fad079cp1yk5e","slug":"techtide-hetzner-capacity-planner","publicId":"be29a2dc-0a7c-4c28-8892-a0a76958179a","name":"techtide-hetzner-capacity-planner","description":"Plan Hetzner Cloud capacity across resource limits (servers, Volumes, Networks, Load Balancers, Floating IPs per project), region distribution across fsn1, nbg1, and hel1, quota exhaustion risk, growth trajectory, and server type upgrade paths from shared to dedicated compute. Use when the user asks about Hetzner resource limits, quota, or growth planning.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:37.838Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/hetzner/techtide-hetzner-capacity-planner","findings":[{"id":"cmuxm68602c0gad07f96huo5j","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68602c0had07yixciczd","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:06:39.376Z","lastVerifiedAt":"2026-10-21T12:06:39.376Z","lastChangeDetectedAt":null,"scannedHash":"16987da3824dac96c766ff416fc8464f23d65efd","latestUpstreamHash":"16987da3824dac96c766ff416fc8464f23d65efd","nextCheckDueAt":"2026-10-22T13:50:50.480Z"}},{"id":"cmuxoaucg33c7ad073cyvlhhz","slug":"techtide-gcp-ticket-triage-escalation-coordinator","publicId":"c7ac8c1e-4fff-4f56-9424-77128309951d","name":"techtide-gcp-ticket-triage-escalation-coordinator","description":"Triage GCP operational alerts, incidents, and support tickets - P0/P1/P2/P3 classification, GCP Premium/Enhanced Support SLA enforcement, war room coordination, evidence collection from Cloud Monitoring and Cloud Logging, and safe escalation paths.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:37.837Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-ticket-triage-escalation-coordinator","findings":[{"id":"cmuxoaucg33c8ad07ktu946bh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoaucg33c9ad07esbknqf0","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:06:39.415Z","lastVerifiedAt":"2026-10-22T01:06:39.415Z","lastChangeDetectedAt":null,"scannedHash":"1d43634e50f6c6d96e9661dd9986e68e6ebd8397","latestUpstreamHash":"1d43634e50f6c6d96e9661dd9986e68e6ebd8397","nextCheckDueAt":"2026-10-23T03:02:17.070Z"}},{"id":"cmuxm8pl22fjjad07znk3ydel","slug":"techtide-alibaba-polardb-rds-dba","publicId":"8894fe62-ae06-4e2b-8653-ee86e3588b60","name":"techtide-alibaba-polardb-rds-dba","description":"Operate PolarDB (MySQL/PG/Oracle) clusters and RDS instances - DAS diagnostics, database proxy, Global Database Network, backup strategy, and performance tuning.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:37.123Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-polardb-rds-dba","findings":[{"id":"cmuxm8pl22fjkad07beuar2rp","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8pl22fjlad07d6vkwisv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T03:38:13.270Z","lastVerifiedAt":"2026-10-21T03:38:13.270Z","lastChangeDetectedAt":null,"scannedHash":"2a95825b4578ae34461deb7432cace7c785bd71f","latestUpstreamHash":"2a95825b4578ae34461deb7432cace7c785bd71f","nextCheckDueAt":"2026-10-22T04:59:22.655Z"}},{"id":"cmuxm68bt2c1fad079psbhb5y","slug":"techtide-lovable-self-heal-debugger","publicId":"49647605-cf2a-4583-a99f-a5c655578981","name":"techtide-lovable-self-heal-debugger","description":"Diagnose Lovable app failures with a repeatable wait, inspect, isolate, prompt, and verify loop for dependency, iframe, auth, routing, and preview-cache issues. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:36.497Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-lovable-self-heal-debugger","findings":[{"id":"cmuxm68bt2c1gad07itlpygzi","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:06:39.538Z","lastVerifiedAt":"2026-10-22T03:06:39.538Z","lastChangeDetectedAt":null,"scannedHash":"9c8c7678c5b88b97ca735fcff6190cf117046893","latestUpstreamHash":"9c8c7678c5b88b97ca735fcff6190cf117046893","nextCheckDueAt":"2026-10-23T02:32:23.280Z"}},{"id":"cmuxoauff33duad07h6vrekbv","slug":"techtide-alibaba-solution-architect","publicId":"c4b18ea7-acb4-4ffb-8730-b212f7fa6515","name":"techtide-alibaba-solution-architect","description":"Design Alibaba Cloud solutions - product selection (PolarDB vs RDS, ACK vs ASK vs SAE, MaxCompute vs AnalyticDB), architecture patterns, landing zone design, and disaster recovery strategies aligned to the Alibaba Well-Architected Framework.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:36.496Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-solution-architect","findings":[{"id":"cmuxoauff33dvad07k6iu0y8x","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoauff33dwad07o1fq57l7","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:27:41.290Z","lastVerifiedAt":"2026-10-21T18:27:41.290Z","lastChangeDetectedAt":null,"scannedHash":"51d3922eab23792c7b5571f7c56808b97eb36c91","latestUpstreamHash":"51d3922eab23792c7b5571f7c56808b97eb36c91","nextCheckDueAt":"2026-10-22T19:42:19.883Z"}},{"id":"cmuxmawwj2iufad07lepj5nos","slug":"techtide-hetzner-infrastructure-reviewer","publicId":"38f9941b-3da8-40d1-ba33-bb6f89f03da1","name":"techtide-hetzner-infrastructure-reviewer","description":"Review Hetzner Cloud infrastructure posture including Firewall inbound and outbound rules and server attachment, Load Balancer health check configuration and target pool design, private Network topology, Floating IP and Primary IP exposure, and region distribution across fsn1, nbg1, and hel1. Use when the user asks to audit or improve Hetzner Cloud network security or architecture.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:36.481Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/hetzner/techtide-hetzner-infrastructure-reviewer","findings":[{"id":"cmuxmawwk2iugad072ja9cm6w","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmawwk2iuhad07v7hzfubu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:32:15.866Z","lastVerifiedAt":"2026-10-21T08:32:15.866Z","lastChangeDetectedAt":null,"scannedHash":"1465a99a713e5bec375a4c88b8ee930bc4423b88","latestUpstreamHash":"1465a99a713e5bec375a4c88b8ee930bc4423b88","nextCheckDueAt":"2026-10-22T10:51:41.966Z"}},{"id":"cmuxk5ena1qqqad07g68v4xg3","slug":"techtide-azure-migrate-landing-zone-cutover","publicId":"68caea10-24d7-44da-93b6-4c3da7fac6ed","name":"techtide-azure-migrate-landing-zone-cutover","description":"Plan and stress-test Azure migration cutovers across landing-zone readiness, Azure Migrate assessments, dependency sequencing, permissions, rollback, and operational ownership. Use when a migration plan needs a go/no-go verdict instead of vague optimism.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.969Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-migrate-landing-zone-cutover","findings":[{"id":"cmuxk5ena1qqrad07bn70qk6q","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5ena1qqsad07z8hdq1rs","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:05:41.141Z","lastVerifiedAt":"2026-10-21T17:05:41.141Z","lastChangeDetectedAt":"2026-09-23T16:48:15.571Z","scannedHash":"29e0decd328de68e54ea5b90899dc02cba9e70bc","latestUpstreamHash":"29e0decd328de68e54ea5b90899dc02cba9e70bc","nextCheckDueAt":"2026-10-22T16:07:33.712Z"}},{"id":"cmuxmaven2ienad07ghwr5bhs","slug":"techtide-prometheus-alerting-cardinality-review","publicId":"40ea099d-ef5c-4c0d-8c85-b965e02b551e","name":"techtide-prometheus-alerting-cardinality-review","description":"Use this skill when reviewing Prometheus or AlertManager configuration for cardinality, alerting correctness, scrape security, remote_write safety, or retention adequacy. Trigger when a user provides prometheus.yml, alertmanager.yml, recording rules YAML, alerting rules YAML, or asks whether their Prometheus setup is production-ready.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.956Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/prometheus/techtide-prometheus-alerting-cardinality-review","findings":[{"id":"cmuxmaven2ieoad07lbdxl8kq","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmaven2iepad070l7tbguu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:38:15.875Z","lastVerifiedAt":"2026-10-21T08:38:15.875Z","lastChangeDetectedAt":null,"scannedHash":"82becde93f764d1938c10d88ffb936041ae44fc6","latestUpstreamHash":"82becde93f764d1938c10d88ffb936041ae44fc6","nextCheckDueAt":"2026-10-22T07:28:01.726Z"}},{"id":"cmuxoauex33dgad07vw073yb3","slug":"techtide-nvidia-triton-inference-serving-review","publicId":"f9467b74-188e-4ecd-b9e6-99f3dbf3240a","name":"techtide-nvidia-triton-inference-serving-review","description":"Use this skill when reviewing Triton Inference Server deployments statically - `model_repository/` layout and `config.pbtxt` files, dynamic batching configuration, ensemble and BLS pipelines, custom backend (Python, C++, ONNX, OpenVINO, vLLM) trust posture, gRPC and HTTP endpoint authentication, response cache configuration, rate-limit and metrics exposure. Trigger when the user asks whether a Triton model repository or `tritonserver` invocation follows NVIDIA's published guidance and security expectations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:35.882Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-triton-inference-serving-review","findings":[{"id":"cmuxoauex33dhad071kzgsx1t","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:13:39.421Z","lastVerifiedAt":"2026-10-22T01:13:39.421Z","lastChangeDetectedAt":null,"scannedHash":"24e44116a73a93ee073a551363c12ac721df9d97","latestUpstreamHash":"24e44116a73a93ee073a551363c12ac721df9d97","nextCheckDueAt":"2026-10-23T02:18:43.991Z"}},{"id":"cmuxo6v5a2yc0ad07kmfy11zt","slug":"techtide-sigstore-cosign-supply-chain-review","publicId":"fa15f242-3364-4b74-a6db-972a77af88f6","name":"techtide-sigstore-cosign-supply-chain-review","description":"Use this skill when reviewing Sigstore Cosign supply chain security for Kubernetes workloads. Trigger when the user asks whether images are properly signed, whether Kyverno imageVerify policy is correctly scoped, whether SLSA provenance attestations exist, whether SBOM attestations are present, whether keyless signing is in use, or whether Rekor transparency log posture is appropriate for private images.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.768Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/sigstore/techtide-sigstore-cosign-supply-chain-review","findings":[{"id":"cmuxo6v5a2yc1ad07uuqrcstt","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/workflow-and-output.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6v5a2yc2ad07c34kah4k","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:44:15.804Z","lastVerifiedAt":"2026-10-21T07:44:15.804Z","lastChangeDetectedAt":null,"scannedHash":"5b49ce03205562e66bfd5472e67ef835d1d900cf","latestUpstreamHash":"5b49ce03205562e66bfd5472e67ef835d1d900cf","nextCheckDueAt":"2026-10-22T09:49:37.703Z"}},{"id":"cmtl45cq083stad09ha1vjkcx","slug":"techtide-ionos-security-compliance-reviewer","publicId":"8d0e2097-7081-4d0b-b834-8b7f0c29c1f0","name":"techtide-ionos-security-compliance-reviewer","description":"Audit IONOS Cloud security and compliance posture covering GDPR data residency and data sovereignty, ISO 27001 control alignment, encryption at rest and in transit, private LAN isolation, IAM role and bearer token hygiene, regional endpoint correctness, audit trail coverage, and vulnerability posture. Use when the user asks to assess, improve, or evidence IONOS Cloud security or GDPR compliance.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.760Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ionos/techtide-ionos-security-compliance-reviewer","findings":[{"id":"cmtl45cq083t0ad09261u8jyp","source":"vettd","category":"description","label":"Description within character limit","detail":"398/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl45cq083t5ad09jdwksxjp","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmtl45cq083syad09skqtdu23","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-ionos-security-compliance-reviewer\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl45cq083t1ad090rhv2h4l","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl45cq183t8ad09azoih28i","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl45cq183t9ad090fxlh1il","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl45cq083t2ad095cloeehw","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"47 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl45cq183t7ad09koszr2uu","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl45cq083t3ad09imxbwv6z","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl45cq083t6ad09lcm91dbl","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl45cq083swad09jcafiesi","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl45cq083svad09f8evjmda","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl45cq083suad09dk6jcfb7","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl45cq183taad098b20xcib","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl45cq083szad09em4ozcqv","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl45cq083sxad09td9zbqdk","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl45cq083t4ad09k6becvd1","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxm5guf291uad07hp6r6zu4","slug":"techtide-kubecost-chargeback-allocation-review","publicId":"839a814e-ab6a-445c-8867-b2243dcc012f","name":"techtide-kubecost-chargeback-allocation-review","description":"Use this skill when reviewing a Kubecost or OpenCost installation for enterprise chargeback readiness. Trigger when the user asks whether cost allocation is accurate, whether label taxonomy is complete enough for chargeback, whether idle cost is properly attributed, whether the cost API is secured, or whether savings recommendations are being actioned.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.759Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/kubernetes/techtide-kubecost-chargeback-allocation-review","findings":[{"id":"cmuxm5guf291vad07iz9r0hpx","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/workflow-and-output.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5gug291wad07t2snm464","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:33:39.630Z","lastVerifiedAt":"2026-10-22T04:33:39.630Z","lastChangeDetectedAt":null,"scannedHash":"236ea80ff7a7e0ffbc6a8413c245706bbd69a09d","latestUpstreamHash":"236ea80ff7a7e0ffbc6a8413c245706bbd69a09d","nextCheckDueAt":"2026-10-23T03:39:45.515Z"}},{"id":"cmuxoas3h32tiad0715s81a00","slug":"techtide-ionos-cost-optimization-analyst","publicId":"a4af0c61-13d9-45b9-8355-ac1a74e2b4e5","name":"techtide-ionos-cost-optimization-analyst","description":"Analyze IONOS Cloud cost posture and identify optimization opportunities across compute, storage, and managed services. Covers idle server and volume identification, CPU and memory utilization rightsizing, snapshot and backup cost review, managed service tier evaluation, contract and pricing strategy, cross-region consolidation feasibility, and cost showback. Use when the user asks to reduce, explain, or attribute IONOS Cloud spending.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.687Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ionos/techtide-ionos-cost-optimization-analyst","findings":[{"id":"cmuxoas3h32tjad0799v6gsac","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoas3i32tkad07ju6diijc","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:13:39.490Z","lastVerifiedAt":"2026-10-22T02:13:39.490Z","lastChangeDetectedAt":null,"scannedHash":"5509b54df21d423f227f2ae03908efa3455b297f","latestUpstreamHash":"5509b54df21d423f227f2ae03908efa3455b297f","nextCheckDueAt":"2026-10-23T04:12:44.367Z"}},{"id":"cmuxk5dxn1qifad07iwmdxj8p","slug":"techtide-azure-cost-estimation-review","publicId":"423a9671-2a1a-484f-b3fc-53ce769f4656","name":"techtide-azure-cost-estimation-review","description":"Review Azure cost estimates, pricing calculator assumptions, SKU and region choices, environment sizing realism, and uncertainty handling using official Microsoft cost-management and Azure MCP pricing documentation only.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.686Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-cost-estimation-review","findings":[{"id":"cmuxk5dxn1qigad077oxxq7hh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dxn1qihad07zgkmm4qu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:49:39.584Z","lastVerifiedAt":"2026-10-22T03:49:39.584Z","lastChangeDetectedAt":"2026-09-22T00:01:51.090Z","scannedHash":"f9b530ec573a05f6f8c8493b8e3176ccd0200eba","latestUpstreamHash":"f9b530ec573a05f6f8c8493b8e3176ccd0200eba","nextCheckDueAt":"2026-10-23T01:54:18.323Z"}},{"id":"cmuxk5f0v1qtwad07th1wurjj","slug":"techtide-ovhcloud-live-kms-key-destruction-guard","publicId":"2e52a60d-a4f2-4e56-a7f7-da51128e560a","name":"techtide-ovhcloud-live-kms-key-destruction-guard","description":"Gate and audit OVHcloud KMS key version destruction requests by enforcing five mandatory checks: confirmed key ID and KMS service URN, named approving identity, usage audit confirming zero active references within the retention window, documented waiting period, and a rollback or data-recovery plan. Use when a user requests destruction or rotation of an OVHcloud KMS key version. Hard-stop if any gate is absent or ambiguous.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:35.685Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ovhcloud/techtide-ovhcloud-live-kms-key-destruction-guard","findings":[{"id":"cmuxk5f0v1qtxad075aa1f99y","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5f0v1qtyad07m79f8db8","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:48:39.644Z","lastVerifiedAt":"2026-10-22T04:48:39.644Z","lastChangeDetectedAt":"2026-09-22T21:23:27.395Z","scannedHash":"31fd089d21d8f36a439668f59892fb1f53b55591","latestUpstreamHash":"31fd089d21d8f36a439668f59892fb1f53b55591","nextCheckDueAt":"2026-10-23T04:23:05.153Z"}},{"id":"cmuxm57nc27t6ad073ttq1zog","slug":"techtide-lovable-production-handoff","publicId":"1d7276fd-ad01-402a-b4a2-9e6e785c32a4","name":"techtide-lovable-production-handoff","description":"Convert a Lovable prototype into a repo-owned production candidate by extracting code, documenting assumptions, replacing mocks, and adding tests and deployment gates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:33.963Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-lovable-production-handoff","findings":[{"id":"cmuxm57nc27t7ad07ge0k26oz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:59:15.729Z","lastVerifiedAt":"2026-10-21T06:59:15.729Z","lastChangeDetectedAt":null,"scannedHash":"e72c7abe4c58900148c8f16fce2b3b25ded6bd88","latestUpstreamHash":"e72c7abe4c58900148c8f16fce2b3b25ded6bd88","nextCheckDueAt":"2026-10-22T06:32:23.306Z"}},{"id":"cmuxm3j2o2695ad071hbztqpc","slug":"techtide-contabo-cost-optimization-analyst","publicId":"cb57d130-6272-4c97-bafd-5bab52c5b796","name":"techtide-contabo-cost-optimization-analyst","description":"Advisory skill for analyzing Contabo cost posture across contract periods, VPS/VDS product tiers, Storage VPS options, and add-ons including Private Networking, Additional IPs, Extra Storage, and Custom Images. Use when the user asks to reduce, explain, or optimize Contabo spending or when evaluating billing impact of period or sizing changes.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:33.961Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/contabo/techtide-contabo-cost-optimization-analyst","findings":[{"id":"cmuxm3j2p2696ad07526rg2s5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3j2p2697ad07br54naq5","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:55:39.304Z","lastVerifiedAt":"2026-10-21T10:55:39.304Z","lastChangeDetectedAt":null,"scannedHash":"525fc163b7c761f523a074e5e9d0ffbf400089d4","latestUpstreamHash":"525fc163b7c761f523a074e5e9d0ffbf400089d4","nextCheckDueAt":"2026-10-22T11:26:56.559Z"}},{"id":"cmuxm3c7525q1ad07genj2zbx","slug":"techtide-gcp-apigee-api-platform-operator","publicId":"39ba119f-ae50-4b43-9fef-8d44d27b02f5","name":"techtide-gcp-apigee-api-platform-operator","description":"Design and operate Apigee X API proxies - rate limiting, OAuth/JWT security policies, quota plans, developer portal setup, and API product management.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:33.875Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-apigee-api-platform-operator","findings":[{"id":"cmuxm3c7525q2ad07iai6jls5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3c7525q3ad077cmen79z","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:55:15.816Z","lastVerifiedAt":"2026-10-21T07:55:15.816Z","lastChangeDetectedAt":null,"scannedHash":"0809acbffaf818cd45f3576b6c87e7828ab74283","latestUpstreamHash":"0809acbffaf818cd45f3576b6c87e7828ab74283","nextCheckDueAt":"2026-10-22T09:08:51.117Z"}},{"id":"cmuxo6ugo2y79ad0795zjnscp","slug":"techtide-replit-fullstack-bootstrap","publicId":"2b45066d-cfe3-4e14-bfa0-2cd21c26de7d","name":"techtide-replit-fullstack-bootstrap","description":"Bootstrap Replit projects with a clear app contract, environment variable model, test loop, deployment boundary, and migration path back into a durable repository. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:33.864Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-replit-fullstack-bootstrap","findings":[{"id":"cmuxo6ugo2y7aad07zjocn2an","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:32:39.271Z","lastVerifiedAt":"2026-10-21T10:32:39.271Z","lastChangeDetectedAt":null,"scannedHash":"8dacc26b5f551539b1b91ca6facf03fcc6f15f11","latestUpstreamHash":"8dacc26b5f551539b1b91ca6facf03fcc6f15f11","nextCheckDueAt":"2026-10-22T08:16:03.400Z"}},{"id":"cmuxm65xk2bhmad07x6fd053m","slug":"techtide-nvidia-tensorrt-llm-deployment-review","publicId":"358fd32e-0b63-41e8-9a00-5f19e5eeee79","name":"techtide-nvidia-tensorrt-llm-deployment-review","description":"Use this skill when reviewing TensorRT or TensorRT-LLM deployment artifacts statically - ONNX/PyTorch export pipelines, precision selection (FP16/BF16/INT8/FP8/INT4), calibration cache integrity, dynamic shape profiles, custom plugin loading, engine cache and serialized engine provenance, runtime memory pool sizing. Trigger when the user asks whether a TensorRT build script, calibration pipeline, or trtexec invocation follows NVIDIA's published guidance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:33.759Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-tensorrt-llm-deployment-review","findings":[{"id":"cmuxm65xk2bhnad07e9ycnx6n","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:49:39.584Z","lastVerifiedAt":"2026-10-22T03:49:39.584Z","lastChangeDetectedAt":null,"scannedHash":"432f1e8737331b8911d700270da223431cc15c0f","latestUpstreamHash":"432f1e8737331b8911d700270da223431cc15c0f","nextCheckDueAt":"2026-10-23T05:37:41.625Z"}},{"id":"cmuxm8qri2fuxad076balndm6","slug":"techtide-aws-live-serverless-release-guard","publicId":"207f01e4-aa54-4808-b9bd-ada8f498d0d9","name":"techtide-aws-live-serverless-release-guard","description":"Guard live Lambda and serverless release actions with lambda alias, codedeploy, canary, linear, alarms, rollback, and approval gates. Use only for intentional live serverless rollout actions against confirmed targets.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:33.755Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-live-serverless-release-guard","findings":[{"id":"cmuxm8qri2fuzad07vzgqpzzo","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qri2fv0ad07jp4xc7a3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:52:15.813Z","lastVerifiedAt":"2026-10-21T07:52:15.813Z","lastChangeDetectedAt":null,"scannedHash":"5f7b98ed2c92ee8eaccfe3b5c6aa5cce9e325e0e","latestUpstreamHash":"5f7b98ed2c92ee8eaccfe3b5c6aa5cce9e325e0e","nextCheckDueAt":"2026-10-22T08:51:20.172Z"}},{"id":"cmuxmawr92it9ad071qy5bllh","slug":"techtide-alibaba-landing-zone-architect","publicId":"43bdf40c-278a-42f3-b9ac-c3ec7e8bec33","name":"techtide-alibaba-landing-zone-architect","description":"Design Alibaba Cloud landing zone - Resource Management org tree, Cloud SSO, Control Policy (SCP equivalent), multi-account governance baseline, billing account structure, and ActionTrail centralization.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:33.683Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/alibaba/techtide-alibaba-landing-zone-architect","findings":[{"id":"cmuxmawr92itaad079jft0k6i","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmawr92itbad0776pcixne","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:09:15.969Z","lastVerifiedAt":"2026-10-21T09:09:15.969Z","lastChangeDetectedAt":null,"scannedHash":"d90df92873e846dd29520499ea653f82546aa13b","latestUpstreamHash":"d90df92873e846dd29520499ea653f82546aa13b","nextCheckDueAt":"2026-10-22T08:14:16.287Z"}},{"id":"cmuxoasby32vmad07pianarw5","slug":"techtide-context-packaging-onboarding","publicId":"1ab36064-ffe2-4899-a574-f4ba720103c8","name":"techtide-context-packaging-onboarding","description":"Package a project for agent harnesses by preparing concise context files, command maps, architecture summaries, guardrails, and local override boundaries. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:33.477Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-context-packaging-onboarding","findings":[{"id":"cmuxoasby32vnad0742iekmzv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:28:15.777Z","lastVerifiedAt":"2026-10-21T07:28:15.777Z","lastChangeDetectedAt":null,"scannedHash":"a3c696800900281b832e80018aa937f5bb96d970","latestUpstreamHash":"a3c696800900281b832e80018aa937f5bb96d970","nextCheckDueAt":"2026-10-22T08:12:19.864Z"}},{"id":"cmuxmbyhe2mhgad07mb4rycxd","slug":"techtide-windows-local-automation-guard","publicId":"d3d1ed00-a9ff-4d4d-b4dc-aac5500a579b","name":"techtide-windows-local-automation-guard","description":"Run local Windows automation safely by checking resolved paths, shell boundaries, destructive command risk, background process visibility, and approval needs. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:33.476Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-windows-local-automation-guard","findings":[{"id":"cmuxmbyhe2mhhad07ainuu289","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:40:54.877Z","lastVerifiedAt":"2026-10-21T13:40:54.877Z","lastChangeDetectedAt":null,"scannedHash":"26aafaa48bd2403fbbcdc7fa18f3178d9af26146","latestUpstreamHash":"26aafaa48bd2403fbbcdc7fa18f3178d9af26146","nextCheckDueAt":"2026-10-22T12:42:29.785Z"}},{"id":"cmuxo63o42vimad07oj0udtrw","slug":"techtide-knowledge-ingestion-guardrail-review","publicId":"1cfd2e74-7248-4bfd-8651-2591ea21bed4","name":"techtide-knowledge-ingestion-guardrail-review","description":"Review knowledge ingestion pipelines for source provenance, chunking, embedding, search behavior, redaction, access control, and evidence traceability. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:33.474Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-knowledge-ingestion-guardrail-review","findings":[{"id":"cmuxo63o42vinad07shsneq9m","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:59:39.369Z","lastVerifiedAt":"2026-10-21T11:59:39.369Z","lastChangeDetectedAt":null,"scannedHash":"094bb2c4792ea76a2aaf2f8d962a0be78893dda9","latestUpstreamHash":"094bb2c4792ea76a2aaf2f8d962a0be78893dda9","nextCheckDueAt":"2026-10-22T12:28:44.240Z"}},{"id":"cmuxm68gy2c2lad075cy8mvb4","slug":"techtide-gcp-data-pipeline-engineer","publicId":"176de0cd-71e9-47ec-9326-9e612c747685","name":"techtide-gcp-data-pipeline-engineer","description":"Design and troubleshoot data pipelines using Dataflow (Apache Beam), Pub/Sub messaging, Dataproc (Spark/Hadoop), Cloud Composer (Apache Airflow), and Dataplex data governance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:33.473Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-data-pipeline-engineer","findings":[{"id":"cmuxm68gy2c2mad074gzvj5xc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68gy2c2nad07h1zda66c","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:25:39.635Z","lastVerifiedAt":"2026-10-22T04:25:39.635Z","lastChangeDetectedAt":null,"scannedHash":"cd4ee4886fb428561fff8cbf6d8afcfabc0e0959","latestUpstreamHash":"cd4ee4886fb428561fff8cbf6d8afcfabc0e0959","nextCheckDueAt":"2026-10-23T05:00:13.852Z"}},{"id":"cmuxo6v212yafad07xcfrg6nn","slug":"techtide-lovable-build-loop-operator","publicId":"b74f3f3f-c0a6-41cd-8cf9-bc0e9fc324ac","name":"techtide-lovable-build-loop-operator","description":"Operate the Lovable build loop from prompt setup through scaffold, iteration, preview verification, export, and repo handoff while keeping app output inspectable. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:32.574Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-lovable-build-loop-operator","findings":[{"id":"cmuxo6v212yagad07zl942z3j","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:06:39.316Z","lastVerifiedAt":"2026-10-21T11:06:39.316Z","lastChangeDetectedAt":null,"scannedHash":"58d12d53d3f55a5da67ddf23d97bb0258f65bff3","latestUpstreamHash":"58d12d53d3f55a5da67ddf23d97bb0258f65bff3","nextCheckDueAt":"2026-10-22T10:21:58.493Z"}},{"id":"cmuxoasyb32ztad070pmqz36f","slug":"techtide-nvidia-cuda-kernel-performance-review","publicId":"c470ef5a-9692-445c-9726-e1e0246b08c2","name":"techtide-nvidia-cuda-kernel-performance-review","description":"Use this skill when reviewing CUDA C/C++ kernel sources statically against NVIDIA's published performance guidance - global-memory coalescing, shared-memory bank conflicts, warp divergence, occupancy and register pressure, stream/event concurrency, kernel launch parameter selection. Trigger when the user asks whether a `.cu` or `.cuh` file follows NVIDIA's published performance and correctness guidance, or asks for the exact `nsight-compute` or `nsight-systems` invocation to run themselves.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:31.869Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-cuda-kernel-performance-review","findings":[{"id":"cmuxoasyb32zuad0711ylyv2f","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:00:15.820Z","lastVerifiedAt":"2026-10-21T08:00:15.820Z","lastChangeDetectedAt":null,"scannedHash":"2a0c5838afd406a946e507ad52e2de2840021fa0","latestUpstreamHash":"2a0c5838afd406a946e507ad52e2de2840021fa0","nextCheckDueAt":"2026-10-22T06:27:37.308Z"}},{"id":"cmuxo6h952wewad07lp9yc5pi","slug":"techtide-ai-generated-code-security-hardener","publicId":"7e7801e8-aa1f-43ae-b2c4-6b303d780fa8","name":"techtide-ai-generated-code-security-hardener","description":"Harden untrusted code by reviewing authentication, authorization, injection surfaces, dependency risk, secret exposure, unsafe defaults, and data handling. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:31.862Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-ai-generated-code-security-hardener","findings":[{"id":"cmuxo6h952wexad07supef1nh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:01:39.598Z","lastVerifiedAt":"2026-10-22T04:01:39.598Z","lastChangeDetectedAt":null,"scannedHash":"63d42bb69d8e5fe37c72271eeb478e5dec69baa1","latestUpstreamHash":"63d42bb69d8e5fe37c72271eeb478e5dec69baa1","nextCheckDueAt":"2026-10-23T04:07:32.357Z"}},{"id":"cmuxm8o8g2f7gad07uf4lap1m","slug":"techtide-human-approval-gate-designer","publicId":"1153e018-1f4f-4b6d-8425-4b351dbd1ac6","name":"techtide-human-approval-gate-designer","description":"Design explicit human approval gates for agent workflows that can mutate production, spend money, contact external recipients, delete data, or change security posture. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:31.861Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-human-approval-gate-designer","findings":[{"id":"cmuxm8o8g2f7had07ps3qtajr","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:08:39.058Z","lastVerifiedAt":"2026-10-21T10:08:39.058Z","lastChangeDetectedAt":null,"scannedHash":"5083d3e0d485f43231f996adc709c426c1dfbdcc","latestUpstreamHash":"5083d3e0d485f43231f996adc709c426c1dfbdcc","nextCheckDueAt":"2026-10-22T12:09:20.872Z"}},{"id":"cmuxmatz62icrad07pdpruzaf","slug":"techtide-aws-live-iac-change-guard","publicId":"5cbdb9f2-2b7b-4309-9c2c-ead21e607347","name":"techtide-aws-live-iac-change-guard","description":"Guard live CloudFormation, SAM, CDK, and Terraform-backed AWS infrastructure changes with change set, drift, stack policy, rollback trigger, approval, and execute gates. Use only for intentional live IaC execution with confirmed targets.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:31.855Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-live-iac-change-guard","findings":[{"id":"cmuxmatz72icsad072iz50pgd","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmatz72ictad078sywl3jk","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:21:19.096Z","lastVerifiedAt":"2026-10-21T15:21:19.096Z","lastChangeDetectedAt":null,"scannedHash":"1b736daea77dd619d3cfe7e5d550a3b49f2148ac","latestUpstreamHash":"1b736daea77dd619d3cfe7e5d550a3b49f2148ac","nextCheckDueAt":"2026-10-22T13:36:51.301Z"}},{"id":"cmuxo6e2r2vzsad07ecfiatf5","slug":"techtide-cost-aware-model-routing","publicId":"5dd41071-8bb4-4851-b3fd-a796b9c2f91b","name":"techtide-cost-aware-model-routing","description":"Choose models and coding tools with cost, latency, quota, context size, and task risk in mind while preserving verification and quality requirements. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:31.854Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-cost-aware-model-routing","findings":[{"id":"cmuxo6e2s2vztad07d8qdzg4o","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:16:13.464Z","lastVerifiedAt":"2026-10-21T05:16:13.464Z","lastChangeDetectedAt":null,"scannedHash":"79fed759c3084e3d213b68557648e211cebdfb05","latestUpstreamHash":"79fed759c3084e3d213b68557648e211cebdfb05","nextCheckDueAt":"2026-10-22T05:14:40.105Z"}},{"id":"cmtl459p0837uad09tmnelg10","slug":"techtide-ionos-kubernetes-platform-operator","publicId":"7d7cc0ba-bceb-45cb-9b2c-4d91bf523cda","name":"techtide-ionos-kubernetes-platform-operator","description":"Review IONOS managed Kubernetes cluster and node pool configuration covering cluster readiness, node pool sizing and autoscaling, workload placement strategies, PodDisruptionBudget coverage, control-plane upgrade safety, kubeconfig management, LAN attachment, and GDPR-compliant cluster region selection. Use when the user asks to assess, configure, or troubleshoot IONOS managed Kubernetes clusters or node pools.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:31.819Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ionos/techtide-ionos-kubernetes-platform-operator","findings":[{"id":"cmtl459p08389ad09qdutophl","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl459p0838bad096qddmu1p","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl459p0837vad09z8t6zz93","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl459p0837xad09opb9mkqf","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl459p0837yad097ma8wrzy","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl459p0838cad09s2z2zz8x","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl459p08384ad09yx0m18hg","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl459p08383ad09lhgdnnry","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"47 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl459p0838aad098xv7vi5l","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl459p08382ad09mamgsd1f","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl459p0837zad09ca5kmful","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-ionos-kubernetes-platform-operator\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl459p0837wad09fjom81jx","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl459p08381ad09shho31h9","source":"vettd","category":"description","label":"Description within character limit","detail":"414/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl459p08386ad091in2f7t4","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl459p08380ad09pnjhwq5j","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl459p08387ad09jyao78sd","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxk5e6k1qltad0715m71tad","slug":"techtide-azure-observability-investigator","publicId":"37a57976-be68-45e4-afd3-6c3d4df31a4b","name":"techtide-azure-observability-investigator","description":"Use this skill for Azure Monitor, Log Analytics, Application Insights, alerting, KQL triage, telemetry-gap analysis, workbooks, or operator-grade incident and posture investigations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:31.815Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-observability-investigator","findings":[{"id":"cmuxk5e6k1qluad0734bqvw6q","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/mcp-and-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e6k1qlvad07nosz7be8","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:56:41.338Z","lastVerifiedAt":"2026-10-21T18:56:41.338Z","lastChangeDetectedAt":"2026-09-23T01:25:27.966Z","scannedHash":"fb548313f3fb39f6f485ff704ec2b84d5cb967df","latestUpstreamHash":"fb548313f3fb39f6f485ff704ec2b84d5cb967df","nextCheckDueAt":"2026-10-22T21:14:43.625Z"}},{"id":"cmuxoa59f311pad07ogejvqx3","slug":"techtide-production-readiness-audit","publicId":"0213ee2b-d0f3-4100-b63b-e2383816bb92","name":"techtide-production-readiness-audit","description":"Audit rapidly built applications for production readiness across auth, secrets, data, tests, observability, rollback, deployment, and operational ownership. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:31.814Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-production-readiness-audit","findings":[{"id":"cmuxoa59f311qad07rwdczpm3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:07:39.415Z","lastVerifiedAt":"2026-10-22T01:07:39.415Z","lastChangeDetectedAt":null,"scannedHash":"2affb336c859da8348d8795a4810a48d6c663a7f","latestUpstreamHash":"2affb336c859da8348d8795a4810a48d6c663a7f","nextCheckDueAt":"2026-10-23T01:18:13.229Z"}},{"id":"cmuxm8otb2fcqad07z94318qq","slug":"techtide-gcp-spanner-architect","publicId":"e32fbd54-f2ab-4caa-8b21-cc9a9f0a642a","name":"techtide-gcp-spanner-architect","description":"Design Cloud Spanner schemas with hotspot avoidance, interleaving strategies, optimal indexing, processing-unit sizing, and global write patterns for distributed OLTP at scale.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:31.056Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-spanner-architect","findings":[{"id":"cmuxm8otb2fcrad07ba3qm9gg","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8otb2fcsad07ewgo3u68","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:29:01.849Z","lastVerifiedAt":"2026-10-21T22:29:01.849Z","lastChangeDetectedAt":null,"scannedHash":"f4aae63b86b792b0a3d222020d981c42998baf77","latestUpstreamHash":"f4aae63b86b792b0a3d222020d981c42998baf77","nextCheckDueAt":"2026-10-22T20:30:04.983Z"}},{"id":"cmuxoa3vf30pkad0751lmz784","slug":"techtide-skill-extraction-promotion","publicId":"73fc0963-fbfc-4ad0-a70c-7ad8b0a66f81","name":"techtide-skill-extraction-promotion","description":"Extract new TechTide skills from local work safely by inventorying curated sources, scoring privacy and quality risk, generating candidates, and promoting only validated assets. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:31.055Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-skill-extraction-promotion","findings":[{"id":"cmuxoa3vf30plad07jb8xs2ze","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:59:39.473Z","lastVerifiedAt":"2026-10-22T01:59:39.473Z","lastChangeDetectedAt":null,"scannedHash":"872610da3ab9a8185c86aafc14525b71fe8d09f2","latestUpstreamHash":"872610da3ab9a8185c86aafc14525b71fe8d09f2","nextCheckDueAt":"2026-10-23T03:49:19.346Z"}},{"id":"cmuxm64dr2b6oad07e7rfxigp","slug":"techtide-agent-autopsy-report","publicId":"338a9c3a-931e-4170-8e01-399ca3f1249e","name":"techtide-agent-autopsy-report","description":"Perform post-run analysis of failed or risky agent work by reconstructing goal, context, tool calls, failure mode, missing guardrails, and preventive skill updates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:30.872Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-agent-autopsy-report","findings":[{"id":"cmuxm64dr2b6pad07n2gas7ex","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:52:39.651Z","lastVerifiedAt":"2026-10-22T04:52:39.651Z","lastChangeDetectedAt":null,"scannedHash":"26ecb70a42727add7e64f04bc9a4d76fb212b5fa","latestUpstreamHash":"26ecb70a42727add7e64f04bc9a4d76fb212b5fa","nextCheckDueAt":"2026-10-23T03:45:57.965Z"}},{"id":"cmuxoat6e331rad07ap0dk3tf","slug":"techtide-v0-ui-prompt-hardener","publicId":"9f3b2bf2-ae04-4390-8c37-69e3febe6e61","name":"techtide-v0-ui-prompt-hardener","description":"Shape v0 UI prompts into implementable, accessible, responsive interface specifications with explicit data states, constraints, and handoff checks. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:30.554Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-v0-ui-prompt-hardener","findings":[{"id":"cmuxoat6e331sad07db8n7vof","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:59:39.369Z","lastVerifiedAt":"2026-10-21T11:59:39.369Z","lastChangeDetectedAt":null,"scannedHash":"b8ffd8c23ae13be49968933d6cf253fb020d46ff","latestUpstreamHash":"b8ffd8c23ae13be49968933d6cf253fb020d46ff","nextCheckDueAt":"2026-10-22T09:54:54.847Z"}},{"id":"cmuxm5fs828tjad07k5fp7agw","slug":"techtide-aws-non-destructive-task-automation-advisor","publicId":"ffeb3ead-0fb2-415d-9a76-2afff186d002","name":"techtide-aws-non-destructive-task-automation-advisor","description":"Design AWS non-destructive task automation using EventBridge, Step Functions, Lambda, Systems Manager Automation, SNS, SQS, approvals, notifications, reporting, and evidence gathering. Use only for read-only or coordination-safe automation; do not use for destructive remediation or mutation-heavy runbooks.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:30.460Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-non-destructive-task-automation-advisor","findings":[{"id":"cmuxm5fs828tkad07bplfu8as","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5fs928tlad07n9851wd2","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:14:06.845Z","lastVerifiedAt":"2026-10-21T23:14:06.845Z","lastChangeDetectedAt":null,"scannedHash":"1c488f91cc4a0aee503d2dc31ea93eaa89508e2f","latestUpstreamHash":"1c488f91cc4a0aee503d2dc31ea93eaa89508e2f","nextCheckDueAt":"2026-10-23T01:37:37.613Z"}},{"id":"cmuxm1xm622t6ad07c4xj8hkn","slug":"techtide-backstage-scaffolder-template-review","publicId":"325bcaa4-d6fb-4cb9-8928-bd8c7eadc175","name":"techtide-backstage-scaffolder-template-review","description":"Use this skill when reviewing Backstage Scaffolder software templates. Trigger when the user asks whether a template is safe for developer self-service, whether template RBAC gates are in place, whether input parameters are validated, whether a step action has excessive blast radius, or whether template outputs expose secrets.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:30.378Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/backstage/techtide-backstage-scaffolder-template-review","findings":[{"id":"cmuxm1xm622t7ad07sad62n6d","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:03:15.823Z","lastVerifiedAt":"2026-10-21T08:03:15.823Z","lastChangeDetectedAt":null,"scannedHash":"bb0f71b33daa4e1bc18711f205c40a7e21dd11ab","latestUpstreamHash":"bb0f71b33daa4e1bc18711f205c40a7e21dd11ab","nextCheckDueAt":"2026-10-22T10:02:58.927Z"}},{"id":"cmuxoa591311fad07ndj3beyx","slug":"techtide-marketing-automation-skill-distiller","publicId":"7077ef83-5a69-4f27-9363-9a7e7d34913f","name":"techtide-marketing-automation-skill-distiller","description":"Extract reusable marketing automation and site-governance workflows into guarded skills without importing private lead lists, campaign exports, or customer data. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:29.965Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-marketing-automation-skill-distiller","findings":[{"id":"cmuxoa591311gad070e7hjjrj","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:54:58.402Z","lastVerifiedAt":"2026-10-21T13:54:58.402Z","lastChangeDetectedAt":null,"scannedHash":"4e49de76dfdc57226bb612f30db46a6720918aa3","latestUpstreamHash":"4e49de76dfdc57226bb612f30db46a6720918aa3","nextCheckDueAt":"2026-10-22T14:02:11.014Z"}},{"id":"cmuxm632n2b1rad071eegcz1u","slug":"techtide-cursor-claude-codex-workflow-router","publicId":"5e1d9b80-0cdf-4fa6-9b04-8179fa03cf6c","name":"techtide-cursor-claude-codex-workflow-router","description":"Coordinate Cursor, Claude Code, and Codex across a coding task so inline edits, repo reasoning, tests, and final review happen in the right lane. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:29.961Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-cursor-claude-codex-workflow-router","findings":[{"id":"cmuxm632n2b1sad07avewh2ci","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:40:13.625Z","lastVerifiedAt":"2026-10-21T06:40:13.625Z","lastChangeDetectedAt":null,"scannedHash":"20171e9d614c477d641989f6025c5a2fdf22b2b0","latestUpstreamHash":"20171e9d614c477d641989f6025c5a2fdf22b2b0","nextCheckDueAt":"2026-10-22T08:50:25.208Z"}},{"id":"cmuxoa46f30s2ad07iuh3ofok","slug":"techtide-design-stack-research-synthesizer","publicId":"6537feec-7881-4ede-98cf-74672117ae59","name":"techtide-design-stack-research-synthesizer","description":"Synthesize design-tool research into practical app-building guidance across Stitch, Figma, Claude Code, v0, Lovable, and repo-native frontend implementation. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:29.886Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-design-stack-research-synthesizer","findings":[{"id":"cmuxoa46f30s3ad07aj02srmj","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:49:39.044Z","lastVerifiedAt":"2026-10-21T09:49:39.044Z","lastChangeDetectedAt":null,"scannedHash":"75af5de7aab493c96ef3de678b049fea5a303206","latestUpstreamHash":"75af5de7aab493c96ef3de678b049fea5a303206","nextCheckDueAt":"2026-10-22T11:22:02.247Z"}},{"id":"cmuxoasve32z2ad07ye2newdp","slug":"techtide-gcp-observability-incident-responder","publicId":"6b9c3674-89e2-4ea0-bcc5-c25f73197a48","name":"techtide-gcp-observability-incident-responder","description":"Respond to incidents and set up observability using Cloud Monitoring, Cloud Logging, Error Reporting, Cloud Trace, and SLO burn rate alerting.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:29.881Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-observability-incident-responder","findings":[{"id":"cmuxoasvf32z3ad07640csnl7","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoasvf32z4ad0708bajyi6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:05:39.481Z","lastVerifiedAt":"2026-10-22T02:05:39.481Z","lastChangeDetectedAt":null,"scannedHash":"95d59741f5e3c3f20aeeff23e8287e240217b02e","latestUpstreamHash":"95d59741f5e3c3f20aeeff23e8287e240217b02e","nextCheckDueAt":"2026-10-22T23:49:25.444Z"}},{"id":"cmuxmbkis2ky1ad07ad6bnqdt","slug":"techtide-azure-keyvault-certificate-issuer-review","publicId":"183c2400-219c-4e95-bef1-ae36def200fd","name":"techtide-azure-keyvault-certificate-issuer-review","description":"Use this skill when reviewing Azure Key Vault certificate issuer configurations for cert-manager on AKS. Trigger on any request to audit Key Vault certificate policies, Managed Identity role assignments, exportability settings, private endpoint connectivity, integrated CA credentials, or rotation policy alignment.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:29.169Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-keyvault-certificate-issuer-review","findings":[{"id":"cmuxmbkit2ky2ad07yv0hta8i","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:55:06.918Z","lastVerifiedAt":"2026-10-21T23:55:06.918Z","lastChangeDetectedAt":null,"scannedHash":"c67044a7b8c693c692f049112b2b2e0cf13b445f","latestUpstreamHash":"c67044a7b8c693c692f049112b2b2e0cf13b445f","nextCheckDueAt":"2026-10-22T22:50:40.609Z"}},{"id":"cmuxmc1i52msxad078z6t32kk","slug":"techtide-mcp-tool-trust-review","publicId":"a32b3bea-4ea7-4e3e-8949-353df0300538","name":"techtide-mcp-tool-trust-review","description":"Review MCP servers, tool connectors, and agent tool surfaces for trust boundaries, credential scope, network egress, mutation risk, logging, and approval gates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:29.165Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-mcp-tool-trust-review","findings":[{"id":"cmuxmc1i62msyad07lzc4ns68","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:17:13.468Z","lastVerifiedAt":"2026-10-21T05:17:13.468Z","lastChangeDetectedAt":null,"scannedHash":"1b48dcd72a975febb6763a23c3cb88ffe30ac7ca","latestUpstreamHash":"1b48dcd72a975febb6763a23c3cb88ffe30ac7ca","nextCheckDueAt":"2026-10-22T07:00:29.935Z"}},{"id":"cmuxm64hg2b7ead07egw8kapq","slug":"techtide-aws-live-pipeline-approval-operator","publicId":"1fa84e25-a0b3-4581-9955-85f7c6cc95de","name":"techtide-aws-live-pipeline-approval-operator","description":"Handle live CodePipeline approval and gated resume decisions with pipeline, stage, approver, SNS, approval, blast radius, and rollback checks. Use only when a real pipeline execution is paused or about to be approved.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:29.164Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-live-pipeline-approval-operator","findings":[{"id":"cmuxm64hg2b7fad07vgjbzyyn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm64hg2b7gad0769p1xlz6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:12:06.955Z","lastVerifiedAt":"2026-10-22T00:12:06.955Z","lastChangeDetectedAt":null,"scannedHash":"37e55213f5fa46059c4721220109f3cc8da455ae","latestUpstreamHash":"37e55213f5fa46059c4721220109f3cc8da455ae","nextCheckDueAt":"2026-10-23T01:54:22.478Z"}},{"id":"cmuxm5is829iaad07loi9b20k","slug":"techtide-ionos-maestro","publicId":"066e5abb-1e88-4e65-b157-4f1301e6fa91","name":"techtide-ionos-maestro","description":"Classify incoming IONOS Cloud requests and route them to the narrowest applicable specialist agent. Covers DCD topology review, security and GDPR compliance, managed Kubernetes, cost optimization, and DBaaS lifecycle operations. Use this skill when the task domain is not yet identified or spans multiple IONOS Cloud areas.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:29.157Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ionos/techtide-ionos-maestro","findings":[{"id":"cmuxm5is829ibad07es9w26t2","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5is929icad07nqi0xur9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:02:39.599Z","lastVerifiedAt":"2026-10-22T04:02:39.599Z","lastChangeDetectedAt":null,"scannedHash":"ef419aa6dea7f84253cc0be4e0733b0cddd78872","latestUpstreamHash":"ef419aa6dea7f84253cc0be4e0733b0cddd78872","nextCheckDueAt":"2026-10-23T05:41:18.001Z"}},{"id":"cmuxm584e27w2ad07afm7s76h","slug":"techtide-aws-change-impact-advisor","publicId":"64e7637e-e1e8-4c28-aa3f-1f04f9e09c57","name":"techtide-aws-change-impact-advisor","description":"Assess AWS change impact using change sets, deployment blast radius, rollback readiness, dependency mapping, risk, go/no-go context, approval context, and stakeholder communication. Prefer this for non-destructive pre-change advisory work; prefer IaC or platform-specific skills for deep implementation review.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:28.972Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-change-impact-advisor","findings":[{"id":"cmuxm584e27w3ad07mukp043s","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm584e27w4ad07ex2fn16l","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:58:13.555Z","lastVerifiedAt":"2026-10-21T05:58:13.555Z","lastChangeDetectedAt":null,"scannedHash":"615e984d245e4a70a6aedcec2695211174969171","latestUpstreamHash":"615e984d245e4a70a6aedcec2695211174969171","nextCheckDueAt":"2026-10-22T05:27:08.933Z"}},{"id":"cmuxm3bao25mdad070e2jk8lj","slug":"techtide-test-generation-validation-debt","publicId":"c3d65093-5b34-4aca-8117-fc00cd808852","name":"techtide-test-generation-validation-debt","description":"Turn implementation work into durable test coverage by mapping claims to unit, integration, smoke, visual, and residual-risk checks. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:28.874Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-test-generation-validation-debt","findings":[{"id":"cmuxm3bap25mead07omzhrxxm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:20:15.847Z","lastVerifiedAt":"2026-10-21T08:20:15.847Z","lastChangeDetectedAt":null,"scannedHash":"1ad7b2cebf6e78d6cecc44faa9cd2dcc51fd8124","latestUpstreamHash":"1ad7b2cebf6e78d6cecc44faa9cd2dcc51fd8124","nextCheckDueAt":"2026-10-22T07:07:52.998Z"}},{"id":"cmuxm68je2c36ad0792a58nih","slug":"techtide-aws-s3-data-perimeter-governor","publicId":"a9d94164-7c11-4929-8b30-7972739b7452","name":"techtide-aws-s3-data-perimeter-governor","description":"Review Amazon S3 data perimeter and exposure posture across Block Public Access, Object Ownership, ACL removal, bucket/access point policies, TLS-only access, encryption, replication, lifecycle, logging, cross-account access, and prefix boundaries. Prefer this for S3 data exposure; prefer IAM skill for generic policy surgery.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:28.873Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-s3-data-perimeter-governor","findings":[{"id":"cmuxm68je2c37ad07vdw2jjsm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68je2c38ad07czk32tex","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:07:06.835Z","lastVerifiedAt":"2026-10-21T23:07:06.835Z","lastChangeDetectedAt":null,"scannedHash":"a56ef82a50dbf7e10ba508869494e0ce8eac6bf8","latestUpstreamHash":"a56ef82a50dbf7e10ba508869494e0ce8eac6bf8","nextCheckDueAt":"2026-10-22T21:17:33.942Z"}},{"id":"cmuxm5h0o2949ad07ygci4i5w","slug":"techtide-aws-deployment-hotfix-operator","publicId":"1ac4c9ab-57e9-4914-8bdc-f1d725467a6a","name":"techtide-aws-deployment-hotfix-operator","description":"Patch AWS deployment hotfix config, release parameters, manifest mistakes, environment drift, rollback blockers, and rollout blockers in-repo. Use for rapid non-destructive deployment corrections; do not use for live deploy/apply/destroy actions.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:26.354Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-deployment-hotfix-operator","findings":[{"id":"cmuxm5h0o294aad07bbbcttgy","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5h0o294bad077glr9o9a","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:17:39.493Z","lastVerifiedAt":"2026-10-22T02:17:39.493Z","lastChangeDetectedAt":null,"scannedHash":"d64087ffa3bc3a47864bb76d2d25474ff048c57e","latestUpstreamHash":"d64087ffa3bc3a47864bb76d2d25474ff048c57e","nextCheckDueAt":"2026-10-23T01:39:53.273Z"}},{"id":"cmuxmaylu2j7vad07v2pdtx75","slug":"techtide-aws-daily-operations-briefing-coordinator","publicId":"c66d4314-f25a-40ce-a5df-c09f77e1b623","name":"techtide-aws-daily-operations-briefing-coordinator","description":"Prepare AWS daily operations briefings using CloudWatch, Personal Health Dashboard, Trusted Advisor, cost signals, deployment timelines, incidents, risks, and action backlog. Prefer this for non-destructive business and engineering status coordination; prefer observability, cost, or incident skills for deeper domain investigation.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:26.284Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-daily-operations-briefing-coordinator","findings":[{"id":"cmuxmaylu2j7wad07d4ccpl60","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmaylu2j7xad074rjcwwl4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:47:39.042Z","lastVerifiedAt":"2026-10-21T09:47:39.042Z","lastChangeDetectedAt":null,"scannedHash":"42e2c777e097c6eb56c885ed294e2ee168956449","latestUpstreamHash":"42e2c777e097c6eb56c885ed294e2ee168956449","nextCheckDueAt":"2026-10-22T09:32:03.455Z"}},{"id":"cmuxo6l9z2wnhad07p29h6t5i","slug":"techtide-gcp-landing-zone-architect","publicId":"40526c62-53ea-4f09-b127-a5371a5f480f","name":"techtide-gcp-landing-zone-architect","description":"Design and review GCP landing zone foundations including organization setup, folder hierarchy, org policy baseline, Shared VPC, billing account structure, Security Command Center, and audit logging.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:26.178Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-landing-zone-architect","findings":[{"id":"cmuxo6l9z2wniad071l4st0rc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6l9z2wnjad07ivw57ejo","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:23:15.852Z","lastVerifiedAt":"2026-10-21T08:23:15.852Z","lastChangeDetectedAt":null,"scannedHash":"955d2aab752820e9e6fc88c33b9adb63c8647af1","latestUpstreamHash":"955d2aab752820e9e6fc88c33b9adb63c8647af1","nextCheckDueAt":"2026-10-22T06:38:27.576Z"}},{"id":"cmuxmay002j2wad074qsagx4z","slug":"techtide-aws-ecs-service-remediation-operator","publicId":"40430ee7-ce55-4828-a48d-2aab7d5547ac","name":"techtide-aws-ecs-service-remediation-operator","description":"Correct AWS ECS and Fargate service definitions, task definition config, deployment parameters, health checks, environment settings, and rollout wiring in-repo. Use for non-destructive repo fixes only; do not force deployments or mutate live services from this role.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:26.177Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-ecs-service-remediation-operator","findings":[{"id":"cmuxmay002j2xad0753i8lycq","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmay002j2yad07su55cxhe","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:25:13.601Z","lastVerifiedAt":"2026-10-21T06:25:13.601Z","lastChangeDetectedAt":null,"scannedHash":"74162ca6005e6c4b46dcda020cb1cdc02c5f557d","latestUpstreamHash":"74162ca6005e6c4b46dcda020cb1cdc02c5f557d","nextCheckDueAt":"2026-10-22T06:14:38.453Z"}},{"id":"cmuxmc24p2mx9ad07lt4kae1h","slug":"techtide-aws-live-ecs-rollout-guard","publicId":"1f805d9f-bdaf-4141-9494-096ed195860a","name":"techtide-aws-live-ecs-rollout-guard","description":"Guard live Amazon ECS and Fargate rollout actions with ecs service, task definition, deployment circuit breaker, alarms, rollback, health check, and approval gates. Use only for intentional live ECS rollout actions against confirmed targets.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:26.082Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-live-ecs-rollout-guard","findings":[{"id":"cmuxmc24p2mxaad07r4r4k4yi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmc24p2mxbad07jbxllhcx","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:19:39.069Z","lastVerifiedAt":"2026-10-21T10:19:39.069Z","lastChangeDetectedAt":null,"scannedHash":"29e882a1ad966861c7d06c4169b460225a5f6558","latestUpstreamHash":"29e882a1ad966861c7d06c4169b460225a5f6558","nextCheckDueAt":"2026-10-22T11:29:18.210Z"}},{"id":"cmuxk5ejt1qp3ad077n1dkfec","slug":"techtide-azure-landing-zone-architect","publicId":"29507a91-1c85-4971-b854-b80d890de113","name":"techtide-azure-landing-zone-architect","description":"Use this skill for Azure landing-zone design, management-group and subscription hierarchy reviews, platform-versus-application boundary decisions, or multi-subscription Azure platform architecture critiques that span governance, identity, networking, security, and operations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:26.081Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-landing-zone-architect","findings":[{"id":"cmuxk5ejt1qp4ad071ivcqp54","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5ejt1qp5ad07mbt4ibiv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:31:58.267Z","lastVerifiedAt":"2026-10-21T13:31:58.267Z","lastChangeDetectedAt":"2026-10-09T05:14:28.837Z","scannedHash":"312deedba96b8cf5c4bf9c64a5d581d105e50b4c","latestUpstreamHash":"312deedba96b8cf5c4bf9c64a5d581d105e50b4c","nextCheckDueAt":"2026-10-22T12:03:29.401Z"}},{"id":"cmuxo6e322w06ad07ey8tk7q5","slug":"techtide-multi-agent-worktree-dispatch","publicId":"0743830a-d455-4383-a8f9-fe2c03397d0d","name":"techtide-multi-agent-worktree-dispatch","description":"Split substantial engineering work across agents or worktrees with disjoint ownership, clear contracts, validation checkpoints, and integration review. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:26.075Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-multi-agent-worktree-dispatch","findings":[{"id":"cmuxo6e332w07ad07zkf75yqz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:10:39.487Z","lastVerifiedAt":"2026-10-22T02:10:39.487Z","lastChangeDetectedAt":null,"scannedHash":"296281445e86474852a60c348e3f9a4f753491c1","latestUpstreamHash":"296281445e86474852a60c348e3f9a4f753491c1","nextCheckDueAt":"2026-10-23T00:48:32.138Z"}},{"id":"cmuxmay2j2j3dad070yxf7ea4","slug":"techtide-ovhcloud-network-architect","publicId":"fe3964e1-6ae8-4cab-8b6d-06b6b1b29090","name":"techtide-ovhcloud-network-architect","description":"Design and review OVHcloud network topology including vRack private network segmentation, VLAN configuration, Public Cloud private network attachment, dedicated server connectivity, load balancer placement, DNS zone design, security group rules, and blast-radius scoping for topology changes. Use when the user needs vRack design guidance, network isolation review, or Terraform IaC review for `ovh_vrack` and related resources.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:26.066Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ovhcloud/techtide-ovhcloud-network-architect","findings":[{"id":"cmuxmay2j2j3ead07hpoleefe","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmay2j2j3fad0729yqxnbx","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:19:12.210Z","lastVerifiedAt":"2026-10-21T22:19:12.210Z","lastChangeDetectedAt":"2026-10-07T04:40:51.195Z","scannedHash":"9e86fccd63dd01f7975bbb523ee4c71f12c2c530","latestUpstreamHash":"9e86fccd63dd01f7975bbb523ee4c71f12c2c530","nextCheckDueAt":"2026-10-22T20:53:08.075Z"}},{"id":"cmuxm8qad2fqdad07ebx3x7pq","slug":"techtide-aws-api-edge-delivery-review","publicId":"894d4426-b68e-4f2d-aa3c-b63384163354","name":"techtide-aws-api-edge-delivery-review","description":"Review AWS API and edge delivery posture across API Gateway, CloudFront, AWS WAF, Shield, ALB, custom domains, TLS policies, authentication, authorization, throttling, quotas, caching, origin protection, logging, and abuse controls. Use when public APIs, web entry points, or edge delivery can affect security and availability.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:25.778Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-api-edge-delivery-review","findings":[{"id":"cmuxm8qad2fqead07sz4wpllh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qae2fqfad07tftcrsxw","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:25:06.861Z","lastVerifiedAt":"2026-10-21T23:25:06.861Z","lastChangeDetectedAt":null,"scannedHash":"90b6bc7c600800c5c971c152745b6785197424d1","latestUpstreamHash":"90b6bc7c600800c5c971c152745b6785197424d1","nextCheckDueAt":"2026-10-22T22:17:18.523Z"}},{"id":"cmuxo6l6t2wmlad07edy7qo3f","slug":"techtide-aws-ecs-fargate-platform-operator","publicId":"5619f6d7-cba6-4f45-ba55-d8dc029f2afd","name":"techtide-aws-ecs-fargate-platform-operator","description":"Review Amazon ECS and Fargate platform operations across services, task definitions, task roles, execution roles, capacity providers, load balancers, deployment circuit breakers, blue/green, autoscaling, health checks, logs, secrets, networking, and rollback. Use only for ECS/Fargate; prefer EKS operator for Kubernetes.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:25.766Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-ecs-fargate-platform-operator","findings":[{"id":"cmuxo6l6t2wmmad07ch898tzt","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6l6t2wmnad07sfob88v6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:00:39.051Z","lastVerifiedAt":"2026-10-21T10:00:39.051Z","lastChangeDetectedAt":null,"scannedHash":"99f2547339e3affcb1eebab92788f5e16aeaf6e0","latestUpstreamHash":"99f2547339e3affcb1eebab92788f5e16aeaf6e0","nextCheckDueAt":"2026-10-22T10:25:46.475Z"}},{"id":"cmuxm5ixe29k2ad07zi9sdjmi","slug":"techtide-cross-harness-export-hygiene","publicId":"46ec7de2-f4b3-4850-93a7-425a7e449d7c","name":"techtide-cross-harness-export-hygiene","description":"Prepare skills and agents for cross-harness export by separating canonical SKILL.md assets from Cursor rules, Kiro steering, and prompt-kit adapters. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:25.673Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-cross-harness-export-hygiene","findings":[{"id":"cmuxm5ixe29k3ad07tv5v77wy","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:31:39.567Z","lastVerifiedAt":"2026-10-22T03:31:39.567Z","lastChangeDetectedAt":null,"scannedHash":"94199abf6dbf46e2f470db588c16d4ad4f2d7103","latestUpstreamHash":"94199abf6dbf46e2f470db588c16d4ad4f2d7103","nextCheckDueAt":"2026-10-23T04:14:34.026Z"}},{"id":"cmuxm5eu628l6ad07ypfemxm6","slug":"techtide-ovhcloud-kubernetes-platform-operator","publicId":"a9b78fef-e2c7-4afd-9ee9-dc35f9b00caf","name":"techtide-ovhcloud-kubernetes-platform-operator","description":"Review and advise on OVHcloud Managed Kubernetes (MCK) cluster lifecycle, node pool sizing, autoscaling configuration, version upgrade planning, workload placement via taints and tolerations, network policies, RBAC hardening, and cluster security posture. Use when the user needs MCK operational guidance, Terraform IaC review for `ovh_cloud_project_kube` resources, or upgrade risk assessment.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:25.256Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ovhcloud/techtide-ovhcloud-kubernetes-platform-operator","findings":[{"id":"cmuxm5eu628l7ad07znefzs9a","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5eu628l8ad078pl9hkx3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:28:39.435Z","lastVerifiedAt":"2026-10-22T01:28:39.435Z","lastChangeDetectedAt":null,"scannedHash":"db98710c22b40dd34640d10a4f9d865634fa9c08","latestUpstreamHash":"db98710c22b40dd34640d10a4f9d865634fa9c08","nextCheckDueAt":"2026-10-23T00:29:38.902Z"}},{"id":"cmuxm8nyu2f53ad07rzofa52q","slug":"techtide-gcp-solution-architect","publicId":"714e8154-86f1-4c96-a77f-4e15f2dfa9b7","name":"techtide-gcp-solution-architect","description":"Design GCP solutions aligned with the Google Cloud Architecture Framework when the request spans resource hierarchy, product selection, or multi-service architecture decisions. Prefer narrower GCP skills for single-domain network, GKE, Cloud Run, data pipeline, database, or landing zone asks.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:24.656Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-solution-architect","findings":[{"id":"cmuxm8nyu2f54ad076op14iut","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8nyu2f56ad070zposef9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:51:41.328Z","lastVerifiedAt":"2026-10-21T18:51:41.328Z","lastChangeDetectedAt":null,"scannedHash":"e579e7d7d1c7c9b0223dcd08caaa5c4fd3ab51d6","latestUpstreamHash":"e579e7d7d1c7c9b0223dcd08caaa5c4fd3ab51d6","nextCheckDueAt":"2026-10-22T17:40:53.098Z"}},{"id":"cmuxm3js226enad07l229pa4p","slug":"techtide-aws-rds-aurora-performance-investigator","publicId":"74b1297a-c5fd-4943-beb2-5d998d73868b","name":"techtide-aws-rds-aurora-performance-investigator","description":"Investigate Amazon RDS and Aurora-specific incidents involving latency, connection exhaustion, slow queries, lock waits, storage pressure, CPU/I/O saturation, replica lag, failover behavior, Performance Insights, and database capacity. Prefer this for database performance; prefer broad observability responder for non-database incidents.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:24.575Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-rds-aurora-performance-investigator","findings":[{"id":"cmuxm3js226eoad070g36n4gw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3js226epad07qkur7e0t","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:31:15.781Z","lastVerifiedAt":"2026-10-21T07:31:15.781Z","lastChangeDetectedAt":null,"scannedHash":"7dcefa1d296432b4ce85cc8e15db46ee11b5cab6","latestUpstreamHash":"7dcefa1d296432b4ce85cc8e15db46ee11b5cab6","nextCheckDueAt":"2026-10-22T09:38:38.754Z"}},{"id":"cmtl4542882e8ad09qh3zf1fe","slug":"techtide-aws-iam-least-privilege-review","publicId":"704180b2-c98e-4864-a6ac-bd2aaed7fe8f","name":"techtide-aws-iam-least-privilege-review","description":"Review AWS IAM identity policies, trust policies, resource policies, permission boundaries, SCPs, session policies, role design, pass-role, federation, and Access Analyzer findings for least-privilege risk. Prefer KMS/secrets steward for key/secret lifecycle design and S3 perimeter governor for S3 exposure/data-perimeter posture unless the request is primarily policy surgery.","author":"github: TechTide","version":"0.1.2","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:24.473Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-iam-least-privilege-review","findings":[{"id":"cmtl4542982ejad09zm38ie8z","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl4542982e9ad096jbrj09a","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl4542982eaad09fgkg7wcv","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl4542982elad09adpq9rxp","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl4542982emad091y9r0owv","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl4542982egad09qp7wro9h","source":"vettd","category":"description","label":"Description lacks usage context","detail":"Add context like \"Use this skill when...\" to help agents know when to activate it","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl4542982ebad09jydd8kct","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl4542982ecad099d21xdgk","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl4542982epad09cwnnzmzh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl4542982eead09urdv5las","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl4542982ehad09yv5hs8a6","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"41 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl4542982ekad09f2his3dz","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmtl4542982enad09me3kmyhb","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl4542982efad0910oidl6g","source":"vettd","category":"description","label":"Description within character limit","detail":"378/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl4542982eoad09ea3tlhce","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl4542982edad09t1u0ow53","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-aws-iam-least-privilege-review\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl4542982eiad09qwrz3pmg","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxoat70332ead07hrxlrp4g","slug":"techtide-aws-security-posture-hardening","publicId":"36b38922-6702-4163-b9c5-55502a929889","name":"techtide-aws-security-posture-hardening","description":"Review broad AWS security posture across Security Hub CSPM, GuardDuty, Inspector, Macie, Config, CloudTrail, IAM, public exposure, vulnerability findings, and remediation governance. Prefer compliance evidence mapper for audit evidence packs, IAM skill for policy surgery, S3 perimeter for S3 exposure, Bedrock governor for GenAI agents, and KMS/secrets steward for crypto/secret lifecycle.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:24.472Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-security-posture-hardening","findings":[{"id":"cmuxoat70332gad07vk9myqdh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoat70332had07ie6q47hy","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T02:42:13.158Z","lastVerifiedAt":"2026-10-21T02:42:13.158Z","lastChangeDetectedAt":null,"scannedHash":"c93d463b41c6352cc517a4f6be26d93c23c84273","latestUpstreamHash":"c93d463b41c6352cc517a4f6be26d93c23c84273","nextCheckDueAt":"2026-10-22T05:00:46.338Z"}},{"id":"cmuxoa4kk30wmad07pf0q8xwi","slug":"techtide-prompt-to-architecture-extractor","publicId":"682300f5-2cbc-4941-ac43-f6150631cf23","name":"techtide-prompt-to-architecture-extractor","description":"Convert rough prompts, transcripts, and prototype notes into architecture decisions, constraints, interfaces, data flows, and implementation-ready work packages. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:24.270Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-prompt-to-architecture-extractor","findings":[{"id":"cmuxoa4kk30wnad07ou63reuu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:07:06.948Z","lastVerifiedAt":"2026-10-22T00:07:06.948Z","lastChangeDetectedAt":null,"scannedHash":"b2052f203c97ea6334c2e5e8cf87f8a40fdfa256","latestUpstreamHash":"b2052f203c97ea6334c2e5e8cf87f8a40fdfa256","nextCheckDueAt":"2026-10-22T23:28:35.913Z"}},{"id":"cmuxmatz82icxad07jsr4kf2e","slug":"techtide-aws-iac-change-safety-review","publicId":"79e76aed-132a-4108-99c6-da63e3607809","name":"techtide-aws-iac-change-safety-review","description":"Review AWS infrastructure-as-code changes across CDK, CloudFormation, SAM, Terraform, Serverless Framework, generated templates, plans, stack updates, change sets, and drift. Use when the user asks whether an AWS IaC deployment is safe, what a change set will do, why a resource replacement will happen, or how to validate before production.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:24.196Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-iac-change-safety-review","findings":[{"id":"cmuxmatz82icyad079ofcc9z6","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmatz82iczad07boktm6l4","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T16:08:41.031Z","lastVerifiedAt":"2026-10-21T16:08:41.031Z","lastChangeDetectedAt":null,"scannedHash":"cb4f9499a1ff46571f01cd5d226ce1a74dca7356","latestUpstreamHash":"cb4f9499a1ff46571f01cd5d226ce1a74dca7356","nextCheckDueAt":"2026-10-22T15:18:12.279Z"}},{"id":"cmuxmbig62kg8ad07y10pb7vz","slug":"techtide-nvidia-gpu-operator-kubernetes-hardening","publicId":"b0bb504c-e0d4-436f-bab7-d680606258db","name":"techtide-nvidia-gpu-operator-kubernetes-hardening","description":"Use this skill when reviewing NVIDIA GPU Operator deployments on Kubernetes - device plugin, MIG manager, NFD labels, time-sliced GPU configuration, container toolkit, securityContext posture, namespace tenancy, and admission policy coverage. Trigger when the user asks whether GPUs are being shared safely across tenants, whether MIG profiles are enforced, or whether the GPU Operator is deployed per NVIDIA hardening guidance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:24.194Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-gpu-operator-kubernetes-hardening","findings":[{"id":"cmuxmbig62kg9ad07r8fatc8v","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:07:15.741Z","lastVerifiedAt":"2026-10-21T07:07:15.741Z","lastChangeDetectedAt":null,"scannedHash":"aeb0f0c04fc5941f51a4fa96782a748d35b909c5","latestUpstreamHash":"aeb0f0c04fc5941f51a4fa96782a748d35b909c5","nextCheckDueAt":"2026-10-22T05:12:51.744Z"}},{"id":"cmuxoat44331cad07ri59rehx","slug":"techtide-aws-pipeline-fix-operator","publicId":"384e5cbd-d6bc-4021-b745-f7e4a8d3848b","name":"techtide-aws-pipeline-fix-operator","description":"Repair AWS pipeline configuration, buildspecs, workflow files, deployment steps, artifact wiring, release guardrails, and CodeDeploy integration in-repo. Use for non-destructive CI/CD corrections; do not trigger live pipeline runs or mutate cloud state.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:24.183Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-pipeline-fix-operator","findings":[{"id":"cmuxoat44331dad07ektcrnlf","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoat44331ead07sb13vspk","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:41:06.891Z","lastVerifiedAt":"2026-10-21T23:41:06.891Z","lastChangeDetectedAt":null,"scannedHash":"66780b173ba52b386b09f249d534b2184f50d5db","latestUpstreamHash":"66780b173ba52b386b09f249d534b2184f50d5db","nextCheckDueAt":"2026-10-23T01:08:14.158Z"}},{"id":"cmuxm3j2j268zad077bhpfw2p","slug":"techtide-gcp-network-architect","publicId":"0cbf0694-4518-471d-b345-0a4ea088965e","name":"techtide-gcp-network-architect","description":"Design and review GCP network architecture including global VPC topology, Shared VPC patterns, Cloud Interconnect/VPN hybrid connectivity, Cloud NAT, DNS, Cloud Armor, and Traffic Director service mesh.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:24.175Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-network-architect","findings":[{"id":"cmuxm3j2j2690ad07euranbnc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3j2j2691ad07zo89m4b3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:28:06.865Z","lastVerifiedAt":"2026-10-21T23:28:06.865Z","lastChangeDetectedAt":null,"scannedHash":"541e9369d3b794288babcc14a9411bb5ec36bf62","latestUpstreamHash":"541e9369d3b794288babcc14a9411bb5ec36bf62","nextCheckDueAt":"2026-10-23T00:07:44.962Z"}},{"id":"cmuxm64ao2b5jad07fdlf4owt","slug":"techtide-gcp-compute-engine-operator","publicId":"b82654f8-cf71-4a4b-8673-d7ddaceb780b","name":"techtide-gcp-compute-engine-operator","description":"Operate GCE instances, manage Managed Instance Groups (MIGs), configure OS patch management via VM Manager, design preemptible/spot VM strategies, and manage startup/shutdown scripts.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:23.961Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gcp/techtide-gcp-compute-engine-operator","findings":[{"id":"cmuxm64ao2b5lad070u3050ns","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm64ao2b5mad07g6pfrqcu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:19:39.556Z","lastVerifiedAt":"2026-10-22T03:19:39.556Z","lastChangeDetectedAt":null,"scannedHash":"de47934d3f9bda19154f3d2df932624255aee501","latestUpstreamHash":"de47934d3f9bda19154f3d2df932624255aee501","nextCheckDueAt":"2026-10-23T04:36:40.404Z"}},{"id":"cmuxmbkfv2kwead0752o426cg","slug":"techtide-aws-ec2-compute-operations-steward","publicId":"ffbf4472-8ba5-4979-b58e-03280f630c8e","name":"techtide-aws-ec2-compute-operations-steward","description":"Review Amazon EC2 compute operations across instances, Auto Scaling groups, Launch Templates, AMIs, Systems Manager, Patch Manager, Session Manager, EBS volumes, snapshots, health checks, instance refresh, lifecycle hooks, patch compliance, and fleet reliability. Use for EC2 day-2 operations and legacy workload stewardship.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:23.454Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-ec2-compute-operations-steward","findings":[{"id":"cmuxmbkfw2kwgad07tadnnsoj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbkfw2kwhad07ytqfg2cp","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:14:39.612Z","lastVerifiedAt":"2026-10-22T04:14:39.612Z","lastChangeDetectedAt":null,"scannedHash":"6820b3108bdbe87a520694c10b9ed01295c6409d","latestUpstreamHash":"6820b3108bdbe87a520694c10b9ed01295c6409d","nextCheckDueAt":"2026-10-23T02:33:13.588Z"}},{"id":"cmuxm3jss26f5ad07emlsbtya","slug":"techtide-hetzner-cost-optimization-analyst","publicId":"acc0a646-4796-48c7-a9d5-b8dc1bbbdbc3","name":"techtide-hetzner-cost-optimization-analyst","description":"Review Hetzner Cloud cost posture across server type selection, idle Volumes, unattached Floating IPs and Primary IPs, underutilized Load Balancers, Storage Box consumption, and snapshot accumulation. Use when the user asks to reduce or explain Hetzner Cloud spend.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:23.372Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/hetzner/techtide-hetzner-cost-optimization-analyst","findings":[{"id":"cmuxm3jst26f6ad07k7tyd2uj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm3jst26f8ad07g6xr3ekt","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:00:41.525Z","lastVerifiedAt":"2026-10-21T20:00:41.525Z","lastChangeDetectedAt":null,"scannedHash":"47a889b0c32c538db878c376ef81055dcc358cbe","latestUpstreamHash":"47a889b0c32c538db878c376ef81055dcc358cbe","nextCheckDueAt":"2026-10-22T18:24:52.943Z"}},{"id":"cmuxm8qlm2fsuad07d8ttw8wq","slug":"techtide-aws-ci-cd-release-engineer","publicId":"a73894d3-b2b9-4c54-910d-e9061860425a","name":"techtide-aws-ci-cd-release-engineer","description":"Review AWS CI/CD and release safety across CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab, artifact provenance, deployment gates, approvals, tests, progressive delivery, rollback, change correlation, and incident-prevention recommendations. Use when AWS releases or pipelines can affect production reliability or security.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:23.067Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-ci-cd-release-engineer","findings":[{"id":"cmuxm8qln2fsvad071bvje296","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qln2fswad07o8hnb9tm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T12:35:58.164Z","lastVerifiedAt":"2026-10-21T12:35:58.164Z","lastChangeDetectedAt":null,"scannedHash":"3f3a04c152dc22a86f282c52e0301f12b4b42bd3","latestUpstreamHash":"3f3a04c152dc22a86f282c52e0301f12b4b42bd3","nextCheckDueAt":"2026-10-22T13:51:58.289Z"}},{"id":"cmuxm5erh28kaad07q8i95a31","slug":"techtide-aws-kms-secrets-lifecycle-steward","publicId":"cf6ca908-6349-48bf-9030-e9a3a795e3cb","name":"techtide-aws-kms-secrets-lifecycle-steward","description":"Review AWS KMS and Secrets Manager lifecycle posture across key policies, grants, rotation, multi-Region keys, imported key material, aliases, secret rotation, replication, caching, endpoint conditions, recovery, and break-glass access. Prefer this for cryptography/secret lifecycle; prefer IAM skill for general permissions review.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:22.101Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-kms-secrets-lifecycle-steward","findings":[{"id":"cmuxm5erh28kcad07htjw53jv","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5erh28kdad07xa0gu2ga","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:59:39.597Z","lastVerifiedAt":"2026-10-22T03:59:39.597Z","lastChangeDetectedAt":null,"scannedHash":"960d919daebf94fbeaad71f1179913f9c02288a7","latestUpstreamHash":"960d919daebf94fbeaad71f1179913f9c02288a7","nextCheckDueAt":"2026-10-23T04:00:41.385Z"}},{"id":"cmuxo6h8t2wepad07doajzrke","slug":"techtide-live-coding-session-retro","publicId":"02f5a365-19e6-4c6c-855f-31f9b61349d6","name":"techtide-live-coding-session-retro","description":"Turn a live coding session into reusable engineering memory by extracting decisions, failed paths, tool choices, verification evidence, and skill candidates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.","author":"Alex Cinovoj / TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:21.962Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/techtide/techtide-live-coding-session-retro","findings":[{"id":"cmuxo6h8u2weqad07s9cjcwvw","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:12:21.975Z","lastVerifiedAt":"2026-10-21T21:12:21.975Z","lastChangeDetectedAt":null,"scannedHash":"02b1fbd953fbb23bc8a1d18c6bea302fc0c517ab","latestUpstreamHash":"02b1fbd953fbb23bc8a1d18c6bea302fc0c517ab","nextCheckDueAt":"2026-10-22T21:35:13.976Z"}},{"id":"cmuxoa569310pad0794kt69dy","slug":"techtide-aws-ticket-triage-escalation-coordinator","publicId":"f26ad885-56b7-493e-a301-178c8326b45a","name":"techtide-aws-ticket-triage-escalation-coordinator","description":"Triage AWS tickets and alerts using priority, owner, evidence, incident context, escalation path, OpsCenter, health signals, and safe next steps. Prefer this for non-destructive request coordination and escalation; prefer deep domain skills for implementation or root-cause investigation.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.954Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-ticket-triage-escalation-coordinator","findings":[{"id":"cmuxoa569310qad07cuwlzfsh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa569310rad078vl64j7n","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:55:39.304Z","lastVerifiedAt":"2026-10-21T10:55:39.304Z","lastChangeDetectedAt":null,"scannedHash":"f37696eaf2c9bc5b758a7927b72630a0489d123f","latestUpstreamHash":"f37696eaf2c9bc5b758a7927b72630a0489d123f","nextCheckDueAt":"2026-10-22T12:25:56.373Z"}},{"id":"cmuxmaa592hl5ad07z6hizbqb","slug":"techtide-aws-event-driven-architecture-review","publicId":"75409978-f3d1-4120-bce0-33e02047e901","name":"techtide-aws-event-driven-architecture-review","description":"Review AWS event-driven system design across EventBridge, event buses, Pipes, SQS, SNS, Step Functions, event schemas, filtering, cross-account routing, retries, DLQs, replay, idempotency, monitoring, and event-loop risk. Prefer serverless production readiness for Lambda runtime/deployment readiness.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.475Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-event-driven-architecture-review","findings":[{"id":"cmuxmaa5a2hl6ad07gn6hpeho","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmaa5a2hl7ad07p5jrnvli","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:25:13.358Z","lastVerifiedAt":"2026-10-21T04:25:13.358Z","lastChangeDetectedAt":"2026-10-07T04:38:17.253Z","scannedHash":"77363c05654ac949a6f6f148bf83b1ead78c5a22","latestUpstreamHash":"77363c05654ac949a6f6f148bf83b1ead78c5a22","nextCheckDueAt":"2026-10-22T05:45:40.848Z"}},{"id":"cmuxm6a0g2cckad072jl1q3x0","slug":"techtide-aws-network-architect","publicId":"e5d06c48-d091-450e-917f-4da886c58231","name":"techtide-aws-network-architect","description":"Design, review, and troubleshoot AWS network, hybrid, and multi-cloud connectivity across VPCs, Transit Gateway, Direct Connect, VPN, Cloud WAN, Route 53 Resolver, private DNS, CIDRs, route tables, endpoints, segmentation, ingress, egress, inspection, and failover. Prefer this for connectivity and routing; prefer API/edge, S3, or security skills for those specialized surfaces.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.369Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-network-architect","findings":[{"id":"cmuxm6a0g2cclad07482dec0y","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm6a0g2ccmad07t4oe5hn2","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:33:39.630Z","lastVerifiedAt":"2026-10-22T04:33:39.630Z","lastChangeDetectedAt":null,"scannedHash":"690282a1237b6b8506f55a1250d70cf08ed2f3fc","latestUpstreamHash":"690282a1237b6b8506f55a1250d70cf08ed2f3fc","nextCheckDueAt":"2026-10-23T04:58:11.392Z"}},{"id":"cmuxm8q9y2fptad07s71a2yu5","slug":"techtide-aws-serverless-production-readiness","publicId":"23a17ea2-8681-4ded-b43a-cdf6caa846db","name":"techtide-aws-serverless-production-readiness","description":"Review AWS Lambda-centered serverless workloads for production readiness across execution roles, event sources, retries, DLQs/destinations, concurrency, idempotency, observability, deployment safety, performance, cost, and rollback. Prefer event-driven architecture for EventBridge/SNS/SQS/Step Functions system design, and DynamoDB/RDS skills for data-store performance.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.254Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-serverless-production-readiness","findings":[{"id":"cmuxm8q9y2fpuad07u9l7md89","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8q9y2fpvad079595m6te","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:47:13.635Z","lastVerifiedAt":"2026-10-21T06:47:13.635Z","lastChangeDetectedAt":null,"scannedHash":"9b43bf02f8b1733e08e1186d2d0959195894f893","latestUpstreamHash":"9b43bf02f8b1733e08e1186d2d0959195894f893","nextCheckDueAt":"2026-10-22T05:05:21.630Z"}},{"id":"cmuxm63ww2b2zad070pxwcbl4","slug":"techtide-oci-certificates-issuer-review","publicId":"a51d5805-48b0-4f85-9d52-f4e9773cb105","name":"techtide-oci-certificates-issuer-review","description":"Use this skill when reviewing OCI Certificates Service issuer configurations for cert-manager on OKE. Trigger on any request to audit OCI CA hierarchy, issuance rules, OKE Workload Identity vs Instance Principal auth, IAM policy scope, OCSP reachability, or certificate version management.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.170Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-certificates-issuer-review","findings":[{"id":"cmuxm63ww2b30ad07c623nxug","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/workflow-and-output.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm63ww2b31ad07zo29kr4i","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:52:39.587Z","lastVerifiedAt":"2026-10-22T03:52:39.587Z","lastChangeDetectedAt":null,"scannedHash":"5600b94fbf15d059348601392b68efa31eed9500","latestUpstreamHash":"5600b94fbf15d059348601392b68efa31eed9500","nextCheckDueAt":"2026-10-23T04:21:48.572Z"}},{"id":"cmuxo6tqu2y1sad077fxfj9f3","slug":"techtide-aws-serverless-rollout-corrector","publicId":"7e2206b1-24bc-432f-93b6-9133329da1a3","name":"techtide-aws-serverless-rollout-corrector","description":"Patch AWS serverless rollout definitions across Lambda, API Gateway, EventBridge, SQS, SNS, event source wiring, aliases, versions, and deployment config. Prefer this for repo-side rollout corrections; do not perform live rollout actions or destructive operations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.166Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-serverless-rollout-corrector","findings":[{"id":"cmuxo6tqu2y1tad077hqsjnex","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6tqu2y1uad07p3sx9r47","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:55:39.368Z","lastVerifiedAt":"2026-10-21T11:55:39.368Z","lastChangeDetectedAt":null,"scannedHash":"aebbd25487510b0038a76fceec583bd6c884c60e","latestUpstreamHash":"aebbd25487510b0038a76fceec583bd6c884c60e","nextCheckDueAt":"2026-10-22T12:53:42.128Z"}},{"id":"cmuxm58l227x4ad07walk7m6w","slug":"techtide-aws-data-protection-backup-steward","publicId":"99252bec-d71a-4d42-bdab-30f00e849f94","name":"techtide-aws-data-protection-backup-steward","description":"Review AWS backup and data protection implementation across AWS Backup, EBS/RDS/EFS/S3 recovery patterns, vaults, vault lock, retention, encryption, cross-account/cross-Region copy, restore testing, lifecycle, and recovery evidence. Prefer resilience BCDR review for broader RTO/RPO, failover, and business continuity design.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.067Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-data-protection-backup-steward","findings":[{"id":"cmuxm58l227x5ad07fhfkmzxi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm58l227x6ad07dqb9go5b","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:59:13.555Z","lastVerifiedAt":"2026-10-21T05:59:13.555Z","lastChangeDetectedAt":null,"scannedHash":"89eeb5356cccd016ec7d418d3219f7d7f1c30331","latestUpstreamHash":"89eeb5356cccd016ec7d418d3219f7d7f1c30331","nextCheckDueAt":"2026-10-22T05:12:46.292Z"}},{"id":"cmuxk5d6d1qdcad07aavmqbcp","slug":"techtide-azure-cosmosdb-application-developer","publicId":"6b466a10-4b7a-4f32-af72-25320252b1b2","name":"techtide-azure-cosmosdb-application-developer","description":"Use this skill for Azure Cosmos DB application development work, especially NoSQL data modeling, document structure, partition-aware access patterns, point reads, query design, SDK usage, transactional batch scope, consistency-aware reads, change feed integration, and Cosmos DB development guidance.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:21.056Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-cosmosdb-application-developer","findings":[{"id":"cmuxk5d6d1qddad0796bl74d0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d6d1qdead07ypd7aovr","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:18:13.593Z","lastVerifiedAt":"2026-10-21T06:18:13.593Z","lastChangeDetectedAt":"2026-10-08T05:51:35.508Z","scannedHash":"dd19c669c1642bf0af505c86f9c56a83f02d13c0","latestUpstreamHash":"dd19c669c1642bf0af505c86f9c56a83f02d13c0","nextCheckDueAt":"2026-10-22T07:54:12.071Z"}},{"id":"cmuxmbkir2kxwad070q5o9bla","slug":"techtide-velero-backup-restore-guard","publicId":"7d8fc327-a669-44a3-a0ce-d02afcb6afce","name":"techtide-velero-backup-restore-guard","description":"Use this skill when guarding Velero backup schedule changes, restore operations, BackupStorageLocation mutations, or volume snapshot configuration. Trigger on any request to run a velero restore, delete a Schedule, change a BSL default, or modify backup retention.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:20.859Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/velero/techtide-velero-backup-restore-guard","findings":[{"id":"cmuxmbkir2kxxad07ymofyhvd","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:17:06.847Z","lastVerifiedAt":"2026-10-21T23:17:06.847Z","lastChangeDetectedAt":null,"scannedHash":"5dd3b63435d9e558ac3b7e93ff75d701e0f4d9f7","latestUpstreamHash":"5dd3b63435d9e558ac3b7e93ff75d701e0f4d9f7","nextCheckDueAt":"2026-10-23T00:25:20.774Z"}},{"id":"cmtl4517981ycad099462kllp","slug":"techtide-nvidia-generative-ai-platform-review","publicId":"a5497307-dddf-4c3f-af60-83df516221d9","name":"techtide-nvidia-generative-ai-platform-review","description":"Use this skill when reviewing NVIDIA generative-AI platforms - NeMo training and customization pipelines, NIM inference microservices, NeMo Guardrails, model card and weights provenance, evaluation/eval-harness posture, and tenant data isolation. Trigger when the user asks whether NIM containers are correctly verified before deployment, whether NeMo Guardrails are configured, or whether the deployment meets NCA-GENL, NCA-GENM, or NCP-GENL expectations.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:20.762Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-generative-ai-platform-review","findings":[{"id":"cmtl4517b81yhad09fv9sqgpg","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-nvidia-generative-ai-platform-review\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl4517b81ykad09s3j829vf","source":"vettd","category":"description","label":"Description within character limit","detail":"456/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl4517c81ywad09wi6tddg7","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl4517b81ypad09v9trxt32","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"28 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl4517c81yyad098hg2p9lq","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl4517c81yrad09bry2148u","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl4517c81ytad09nmbohftc","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl4517c81z0ad09ia7ssg5w","source":"vettd","category":"security","label":"No external URLs in skill definition","detail":"SKILL.md and references/ files do not reference external URLs","severity":"info","ruleId":"VTD-0093"},{"id":"cmtl4517b81yfad0996usfxb8","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl4517c81z3ad09ta69btcz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl4517b81yiad098a8rlv8c","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl4517b81ygad09f69dua3a","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl4517b81ymad09e9e4qm2i","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl4517b81yead095jwlexck","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxm5ej628hqad072mxoli6c","slug":"techtide-aws-observability-incident-responder","publicId":"830a661d-05ab-4d7f-83be-3426ff1f4617","name":"techtide-aws-observability-incident-responder","description":"Investigate broad AWS incidents and observability gaps using CloudWatch metrics, logs, alarms, traces, EventBridge events, service health, runbooks, timelines, blast radius, root-cause discipline, and post-incident actions. Prefer RDS/Aurora investigator for database-specific performance incidents.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:20.761Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-observability-incident-responder","findings":[{"id":"cmuxm5ej628hrad07s4q3xm0c","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5ej728hsad072cvyowzf","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T14:55:58.433Z","lastVerifiedAt":"2026-10-21T14:55:58.433Z","lastChangeDetectedAt":null,"scannedHash":"bc95dde9b3da639298dbe2d2080aa076f942c34e","latestUpstreamHash":"bc95dde9b3da639298dbe2d2080aa076f942c34e","nextCheckDueAt":"2026-10-22T13:01:04.280Z"}},{"id":"cmuxmc1hy2mspad07hl4gok98","slug":"techtide-aws-compliance-evidence-mapper","publicId":"937ede16-145f-43aa-a5ae-5a458cf80117","name":"techtide-aws-compliance-evidence-mapper","description":"Map AWS compliance evidence for audits across Security Hub controls, AWS Config rules/conformance packs, Audit Manager assessments, evidence folders, manual evidence, AWS Artifact reports, CloudTrail, and control narratives. Use for evidence packaging and audit readiness, not general security hardening.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:20.760Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-compliance-evidence-mapper","findings":[{"id":"cmuxmc1hy2msqad07nmnifgwh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmc1hy2msrad07ixti2kkz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:18:06.847Z","lastVerifiedAt":"2026-10-21T23:18:06.847Z","lastChangeDetectedAt":null,"scannedHash":"6902ea624863dd1bb1e9c23ea3bb0e89d674d62b","latestUpstreamHash":"6902ea624863dd1bb1e9c23ea3bb0e89d674d62b","nextCheckDueAt":"2026-10-22T23:45:44.573Z"}},{"id":"cmuxo6h602wduad07csww3aok","slug":"techtide-aws-cost-anomaly-watch-coordinator","publicId":"94466a1f-190b-4b67-b93f-89a47b69e44f","name":"techtide-aws-cost-anomaly-watch-coordinator","description":"Review AWS cost anomalies using Cost Explorer, Cost Anomaly Detection, Budgets, usage spikes, commitments, and tagging gaps. Prefer this for proactive FinOps watch and non-destructive escalation; prefer techtide-aws-cost-optimization-governor for broader optimization strategy.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:20.759Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-cost-anomaly-watch-coordinator","findings":[{"id":"cmuxo6h602wdvad07azgz20h4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6h602wdwad07vlzst1ir","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:08:06.951Z","lastVerifiedAt":"2026-10-22T00:08:06.951Z","lastChangeDetectedAt":null,"scannedHash":"0c2640ffd5d005eaaf1cf95d986f32dee4f9fd2a","latestUpstreamHash":"0c2640ffd5d005eaaf1cf95d986f32dee4f9fd2a","nextCheckDueAt":"2026-10-23T00:24:19.533Z"}},{"id":"cmtl44zie81stad09g2cagyel","slug":"techtide-aws-devops-agent-skill-designer","publicId":"565995d9-e877-4264-b8c0-1476592153a3","name":"techtide-aws-devops-agent-skill-designer","description":"Design, review, and improve AWS DevOps Agent-compatible skills, investigation workflows, learned skills, tool-use best practices, agent type targeting, frontmatter descriptions, reference materials, and operational output contracts. Use when creating or adapting skills for AWS DevOps Agent or AWS-style incident agents.","author":"github: TechTide","version":"0.1.2","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:18.654Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-devops-agent-skill-designer","findings":[{"id":"cmtl44zie81t3ad09mr9w98bo","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl44zie81syad09iwvnalaf","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"techtide-aws-devops-agent-skill-designer\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl44zie81taad09acizj6fi","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl44zie81t0ad09ghrs6k6q","source":"vettd","category":"description","label":"Description within character limit","detail":"320/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl44zie81t1ad09cfuhwxs2","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl44zie81t2ad09cwm173mu","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"41 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl44zie81t7ad09b7e299iw","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl44zie81svad09s9enmecq","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl44zie81swad09ksgw7ipz","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl44zie81t4ad096qs91or1","source":"vettd","category":"best-practices","label":"No clear workflow structure","detail":"Consider adding numbered steps or a structured procedure for the agent to follow","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl44zie81t5ad09fqgbh58m","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmtl44zie81sxad09nkrun2id","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl44zie81t6ad09iyzhblvp","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl44zie81t9ad09uxudjcz5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl44zie81suad09pmdf402g","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl44zie81szad09zd2y3ma1","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl44zie81t8ad09sb0kzf3v","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":null},{"id":"cmuxoau1e339nad0747jw0pmx","slug":"techtide-aws-eks-platform-operator","publicId":"79528f42-f2a9-4a89-8a1b-327bae1c1724","name":"techtide-aws-eks-platform-operator","description":"Review Amazon EKS Kubernetes platform operations across cluster access, IRSA, IAM roles for service accounts, pod identity, node groups, Karpenter, autoscaling, CNI/network policy, upgrades, reliability, observability, and cost. Use only for EKS/Kubernetes; prefer ECS/Fargate operator for ECS services.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:18.577Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-eks-platform-operator","findings":[{"id":"cmuxoau1e339oad07c0ovab1q","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoau1e339pad076bvfb05c","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:38:39.448Z","lastVerifiedAt":"2026-10-22T01:38:39.448Z","lastChangeDetectedAt":null,"scannedHash":"492cbd44a12b0d48a8c7e2249e013caa679ee3fa","latestUpstreamHash":"492cbd44a12b0d48a8c7e2249e013caa679ee3fa","nextCheckDueAt":"2026-10-23T02:32:09.077Z"}},{"id":"cmuxm68bd2c10ad071pcogpnv","slug":"techtide-aws-iac-patch-executor","publicId":"b8e87ce4-bd67-404c-8cd7-71c0ead745d5","name":"techtide-aws-iac-patch-executor","description":"Edit AWS IaC files including CloudFormation, SAM, CDK config, and Terraform to patch defects, prepare change set review, or unblock rollout work. Prefer this for bounded repo changes only; do not use for apply, deploy, or destructive infrastructure execution.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:18.562Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-iac-patch-executor","findings":[{"id":"cmuxm68bd2c11ad07ahaiuhlr","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm68bd2c12ad073mkav6to","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:15:39.325Z","lastVerifiedAt":"2026-10-21T11:15:39.325Z","lastChangeDetectedAt":null,"scannedHash":"eeab65fe4fb4b82e20c0390d7c36164b2321c269","latestUpstreamHash":"eeab65fe4fb4b82e20c0390d7c36164b2321c269","nextCheckDueAt":"2026-10-22T09:22:07.439Z"}},{"id":"cmuxm1xot22tzad07d4jqrxx9","slug":"techtide-aws-migration-cutover-architect","publicId":"8b2eeaee-82c1-41ff-a96c-8f947f2db645","name":"techtide-aws-migration-cutover-architect","description":"Plan, review, and de-risk AWS migrations and cutovers across discovery, dependency mapping, wave planning, AWS Application Migration Service, Migration Hub, test launches, acceptance tests, downtime windows, rollback, DNS, data consistency, and post-cutover validation. Use for migration planning and cutover readiness.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:18.478Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-migration-cutover-architect","findings":[{"id":"cmuxm1xot22u0ad07dbtcc6vc","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm1xot22u1ad07ulmzq469","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:48:39.463Z","lastVerifiedAt":"2026-10-22T01:48:39.463Z","lastChangeDetectedAt":null,"scannedHash":"ce41d71dd375f10d13d0cdb2290cfdcc22ceabda","latestUpstreamHash":"ce41d71dd375f10d13d0cdb2290cfdcc22ceabda","nextCheckDueAt":"2026-10-23T01:23:16.905Z"}},{"id":"cmuxm8qac2fq8ad07129cgv9h","slug":"techtide-marketing-maestro","publicId":"b11522e1-dd30-4f19-842c-20c8ba33c363","name":"techtide-marketing-maestro","description":"Route marketing-governance review tasks to the narrowest specialist or team of specialists from the catalog. Use when you do not already know which marketing-governance specialist you need. Not for direct answers; Maestro classifies, dispatches, and synthesizes only. Dispatches a single agent for focused tasks or a parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard or mutating agents - requires explicit human confirmation with blast-radius and rollback before any live mutation.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:18.473Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/marketing/techtide-marketing-maestro","findings":[{"id":"cmuxm8qac2fq9ad07ezmaq0ft","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:34:06.995Z","lastVerifiedAt":"2026-10-22T00:34:06.995Z","lastChangeDetectedAt":null,"scannedHash":"1600f4db54536010bdb44a42bafd1514effabc71","latestUpstreamHash":"1600f4db54536010bdb44a42bafd1514effabc71","nextCheckDueAt":"2026-10-23T00:12:21.252Z"}},{"id":"cmuxoa4cb30u5ad072vmytec8","slug":"techtide-finops-maestro","publicId":"2b83b359-c51c-4cf6-b5a0-469f3664e933","name":"techtide-finops-maestro","description":"Route FinOps tasks to the narrowest specialist or team of specialists from the catalog. Use when you do not already know the specialist. Not for direct FinOps answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents - requires explicit human confirmation with blast-radius and rollback before routing to any live mutation specialist.","author":"github: TechTide","version":"0.1.1","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:18.468Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/finops/techtide-finops-maestro","findings":[{"id":"cmuxoa4cb30u7ad07bc4hlrpz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:58:58.403Z","lastVerifiedAt":"2026-10-21T13:58:58.403Z","lastChangeDetectedAt":null,"scannedHash":"f47d17c144c5ace48bbccb7b4b2665f8c2306f6e","latestUpstreamHash":"f47d17c144c5ace48bbccb7b4b2665f8c2306f6e","nextCheckDueAt":"2026-10-22T11:58:39.338Z"}},{"id":"cmuxk5e6m1qlzad07glw3wci6","slug":"techtide-azure-security-posture-hardening","publicId":"8dc9653e-50c3-4381-9d05-ab5f004c6513","name":"techtide-azure-security-posture-hardening","description":"Use this skill for Azure security posture review, baseline hardening, managed identity adoption, Key Vault posture, private access decisions, Azure Policy guardrails, and logging or audit gap analysis. Trigger when the user asks how to harden an Azure workload or platform without defaulting to broad access or public exposure.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:18.268Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-security-posture-hardening","findings":[{"id":"cmuxk5e6m1qm0ad07ibb6p9c9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e6m1qm1ad07qbsqc897","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:05:41.245Z","lastVerifiedAt":"2026-10-21T18:05:41.245Z","lastChangeDetectedAt":"2026-09-22T00:00:51.089Z","scannedHash":"e9654ca57622c64c1834616560623f5cb7f6fe09","latestUpstreamHash":"e9654ca57622c64c1834616560623f5cb7f6fe09","nextCheckDueAt":"2026-10-22T19:38:00.700Z"}},{"id":"cmuxk5e391qkdad07r376hvn1","slug":"core-handoff-readiness-review","publicId":"29b067fd-fa33-4fe6-ad18-74d611df42ff","name":"core-handoff-readiness-review","description":"Review agent session output before it enters the durable TechTide repo by checking provenance, tests, security, deployment boundaries, and rollback expectations. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:18.178Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-handoff-readiness-review","findings":[{"id":"cmuxk5e391qkead07jvvjz02e","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e391qkfad07le72meca","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:27:39.502Z","lastVerifiedAt":"2026-10-22T02:27:39.502Z","lastChangeDetectedAt":"2026-09-22T00:00:51.089Z","scannedHash":"a9d83a657701a4817bda15b2f57a41c43b749664","latestUpstreamHash":"a9d83a657701a4817bda15b2f57a41c43b749664","nextCheckDueAt":"2026-10-23T01:43:14.975Z"}},{"id":"cmuxmc19m2mqead07vefphh1b","slug":"techtide-kubernetes-pod-spec-review","publicId":"254e8449-c1a5-4caa-b288-e48eb1e8dbce","name":"techtide-kubernetes-pod-spec-review","description":"Use this skill when reviewing a Kubernetes Pod spec, Deployment spec, or StatefulSet spec for correctness, security posture, and production-readiness. Trigger on any request to audit, validate, or score a workload manifest.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:18.173Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/kubernetes/techtide-kubernetes-pod-spec-review","findings":[{"id":"cmuxmc19m2mqfad07tkhy2piv","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:14:39.492Z","lastVerifiedAt":"2026-10-22T02:14:39.492Z","lastChangeDetectedAt":null,"scannedHash":"7f9eee6129e824cd2e36e019dd895fc93452a8f2","latestUpstreamHash":"7f9eee6129e824cd2e36e019dd895fc93452a8f2","nextCheckDueAt":"2026-10-23T03:22:07.871Z"}},{"id":"cmuxoau9u33bmad071ptjc9y5","slug":"techtide-oci-live-autonomous-db-lifecycle-guard","publicId":"a3db8bce-a519-4a74-9714-87f81de7714d","name":"techtide-oci-live-autonomous-db-lifecycle-guard","description":"Guard Autonomous Database lifecycle changes - scale, start, stop, clone, terminate - with protection-tag enforcement, backup verification, and connection-string impact analysis before any mutation.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:18.172Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-live-autonomous-db-lifecycle-guard","findings":[{"id":"cmuxoau9u33boad076miqb1c5","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoau9u33bpad07adsesytw","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:40:39.513Z","lastVerifiedAt":"2026-10-22T02:40:39.513Z","lastChangeDetectedAt":null,"scannedHash":"dfbb8888b4ffacdef5860e5a7dac10e9ebf8cdef","latestUpstreamHash":"dfbb8888b4ffacdef5860e5a7dac10e9ebf8cdef","nextCheckDueAt":"2026-10-23T04:18:47.724Z"}},{"id":"cmuxm5btx280had075iccfoha","slug":"techtide-aws-dynamodb-data-modeling-performance-review","publicId":"abe23ed3-8553-4c36-a462-1ee37edca2ef","name":"techtide-aws-dynamodb-data-modeling-performance-review","description":"Review Amazon DynamoDB data modeling and performance across access patterns, partition keys, sort keys, secondary indexes, GSI/LSI design, hot partitions, query versus scan behavior, capacity mode, adaptive capacity, global tables, TTL, DAX, item size, transactions, and cost. Use when DynamoDB correctness, latency, scaling, or cost depends on table design.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:17.979Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-dynamodb-data-modeling-performance-review","findings":[{"id":"cmuxm5btx280iad07ymj57gb7","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5bty280jad07iqop77yt","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:19:15.847Z","lastVerifiedAt":"2026-10-21T08:19:15.847Z","lastChangeDetectedAt":null,"scannedHash":"e87d938ca722f62c0ebda5d7709d66e5208b242f","latestUpstreamHash":"e87d938ca722f62c0ebda5d7709d66e5208b242f","nextCheckDueAt":"2026-10-22T09:32:12.980Z"}},{"id":"cmuxk5evv1qspad073xjf5oz6","slug":"techtide-azure-cosmosdb-platform-operator","publicId":"e9c36617-44c2-4173-9d8e-8971b682f096","name":"techtide-azure-cosmosdb-platform-operator","description":"Use this skill for Azure Cosmos DB platform operations and design review, especially accounts, databases, containers, partition-key design, throughput and RU posture, consistency choices, indexing, throttling, multi-region replication, private connectivity, and Cosmos DB MCP-guided discovery.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:17.701Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-cosmosdb-platform-operator","findings":[{"id":"cmuxk5evv1qsqad07ogus864z","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5evv1qsrad07bk4acz8l","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T10:07:39.057Z","lastVerifiedAt":"2026-10-21T10:07:39.057Z","lastChangeDetectedAt":"2026-10-08T06:28:35.518Z","scannedHash":"fdb2ebc1ac8fe975ee3cff1f0f85143913a7ba4a","latestUpstreamHash":"fdb2ebc1ac8fe975ee3cff1f0f85143913a7ba4a","nextCheckDueAt":"2026-10-22T08:17:40.390Z"}},{"id":"cmuxo6fuj2w55ad07u52xjdx2","slug":"techtide-oci-live-iam-policy-compartment-guard","publicId":"3863a639-e9e5-4922-a23c-1e6355010f80","name":"techtide-oci-live-iam-policy-compartment-guard","description":"Guard OCI IAM policy writes and dynamic group changes with verb-hierarchy audit, compartment scope enforcement, anti-pattern detection (any-user/any-group), and rollback via statement restore.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.581Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-live-iam-policy-compartment-guard","findings":[{"id":"cmuxo6fuk2w56ad07dbveiqp4","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6fuk2w57ad07xza3j3rw","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:06:21.959Z","lastVerifiedAt":"2026-10-21T21:06:21.959Z","lastChangeDetectedAt":null,"scannedHash":"e445f485c09cdfeaaef4a8f068f3dfb27030381a","latestUpstreamHash":"e445f485c09cdfeaaef4a8f068f3dfb27030381a","nextCheckDueAt":"2026-10-22T22:55:57.249Z"}},{"id":"cmuxoarv532s8ad07zcm7slne","slug":"techtide-nvidia-ai-operations-day2","publicId":"a7205346-2a3b-448b-82a3-d4f49ffddddd","name":"techtide-nvidia-ai-operations-day2","description":"Use this skill when reviewing day-2 operations of NVIDIA GPU fleets - DCGM exporter and DCGM-Diag posture, GPU telemetry into Prometheus/Grafana, MIG partitioning lifecycle, GPU health and Xid error response, fleet upgrade paths, and incident response for GPU-failure modes. Trigger when the user asks how a GPU fleet is monitored, whether DCGM is wired, whether Xid signatures map to runbooks, or whether the deployment meets NCP-AIO certification expectations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:16.579Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-ai-operations-day2","findings":[{"id":"cmuxoarv532s9ad07nrbasus1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:25:13.601Z","lastVerifiedAt":"2026-10-21T06:25:13.601Z","lastChangeDetectedAt":null,"scannedHash":"5a28cbc5ae511fdec3a5898a7f1f6f8e08d68692","latestUpstreamHash":"5a28cbc5ae511fdec3a5898a7f1f6f8e08d68692","nextCheckDueAt":"2026-10-22T05:56:20.352Z"}},{"id":"cmuxk5epd1qqyad07b0q5totw","slug":"techtide-ovhcloud-cost-finops-analyst","publicId":"1747fdb6-f5b5-4268-9ffd-03163073f627","name":"techtide-ovhcloud-cost-finops-analyst","description":"Analyze OVHcloud Public Cloud cost posture across projects and regions: identify idle instances and unattached volumes, review Savings Plans and commitment coverage, recommend rightsizing and tagging improvements, and surface forecast risks. Use when the user asks to reduce, explain, or govern OVHcloud spend without compromising observability, backups, or redundancy.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.566Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ovhcloud/techtide-ovhcloud-cost-finops-analyst","findings":[{"id":"cmuxk5epd1qqzad07jmtqzhqd","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5epd1qr0ad07bp9w0dou","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:51:39.524Z","lastVerifiedAt":"2026-10-22T02:51:39.524Z","lastChangeDetectedAt":"2026-09-23T21:11:15.987Z","scannedHash":"2d9e23990c2af03206d750d276a5e0110e2c29b4","latestUpstreamHash":"2d9e23990c2af03206d750d276a5e0110e2c29b4","nextCheckDueAt":"2026-10-23T03:53:39.025Z"}},{"id":"cmuxk5dsq1qhhad07agfjjzcp","slug":"techtide-azure-governance-policy-guardrails","publicId":"1863b977-7699-4874-ba64-4817a24c3b8e","name":"techtide-azure-governance-policy-guardrails","description":"Use this skill for Azure Policy guardrails, initiatives, assignment scope, management-group inheritance, exclusions, remediation risk, tag governance, allowed regions or SKUs, and staged governance rollout reviews.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.554Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-governance-policy-guardrails","findings":[{"id":"cmuxk5dsq1qhiad077b9rxbct","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/mcp-and-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dsr1qhjad07mmijlz3x","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:29:41.681Z","lastVerifiedAt":"2026-10-21T21:29:41.681Z","lastChangeDetectedAt":"2026-09-22T00:00:51.089Z","scannedHash":"27bc9e33790036321d8dd91dc63da7fe85f00490","latestUpstreamHash":"27bc9e33790036321d8dd91dc63da7fe85f00490","nextCheckDueAt":"2026-10-22T21:13:55.392Z"}},{"id":"cmuxmaxx22j2fad07n6hbqlsm","slug":"techtide-azure-live-app-service-slot-swap-guard","publicId":"ef1d91d9-9797-4488-b478-9cbdb4ebbdb0","name":"techtide-azure-live-app-service-slot-swap-guard","description":"Guard live App Service slot swaps with sticky-settings audit, warmup probe verification, swap-with-preview staging, and instant rollback posture.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.474Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-live-app-service-slot-swap-guard","findings":[{"id":"cmuxmaxx32j2gad07alrmizxj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmaxx32j2had0788wwg3pu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:25:39.020Z","lastVerifiedAt":"2026-10-21T09:25:39.020Z","lastChangeDetectedAt":null,"scannedHash":"b22938fc3357e229fe6c6754adc45db0501ae876","latestUpstreamHash":"b22938fc3357e229fe6c6754adc45db0501ae876","nextCheckDueAt":"2026-10-22T09:32:56.033Z"}},{"id":"cmuxo6g012w6aad07gaklc2in","slug":"techtide-nvidia-agentic-ai-platform-review","publicId":"132a7dcc-398e-4964-94a2-6fde94645dde","name":"techtide-nvidia-agentic-ai-platform-review","description":"Use this skill when reviewing agentic-AI platforms built on the NVIDIA stack - NeMo Agent Toolkit, NIM-as-tool patterns, retrieval-augmented generation pipelines, tool-call safety, agent memory boundaries, and per-tenant audit logging. Trigger when the user asks whether agent tool calls are sandboxed, whether agent memory is tenant-scoped, whether tool definitions are signed, or whether the deployment meets NCP-AAI expectations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:16.371Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-agentic-ai-platform-review","findings":[{"id":"cmuxo6g012w6bad078vkgyxm8","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:26:15.855Z","lastVerifiedAt":"2026-10-21T08:26:15.855Z","lastChangeDetectedAt":null,"scannedHash":"6ee032fc0772337b84a547b3c6c463e3a95edc0c","latestUpstreamHash":"6ee032fc0772337b84a547b3c6c463e3a95edc0c","nextCheckDueAt":"2026-10-22T08:56:11.044Z"}},{"id":"cmuxmatzb2id3ad07ggzyk9bt","slug":"techtide-aws-private-ca-issuer-review","publicId":"534e0b29-d9a8-4386-af33-1c75fe830846","name":"techtide-aws-private-ca-issuer-review","description":"Use this skill when reviewing AWS ACM Private CA (Private Certificate Authority) issuer configurations for cert-manager. Trigger on any request to audit AWSPCAIssuer, AWSPCAClusterIssuer, IRSA policy for cert-manager, certificate template ARNs, CRL configuration, or cross-account PCA usage.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.359Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-private-ca-issuer-review","findings":[{"id":"cmuxmatzc2id4ad07mn3jkk9k","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmatzc2id5ad07jy1adca7","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:45:39.579Z","lastVerifiedAt":"2026-10-22T03:45:39.579Z","lastChangeDetectedAt":null,"scannedHash":"d35c199c445bf76b45902963da8fd75469a6b533","latestUpstreamHash":"d35c199c445bf76b45902963da8fd75469a6b533","nextCheckDueAt":"2026-10-23T04:37:53.547Z"}},{"id":"cmuxm5c4v2823ad07o284pwzq","slug":"techtide-aws-solution-architect","publicId":"1e583ee8-0b57-499e-a51d-6fb0e600a579","name":"techtide-aws-solution-architect","description":"Design and stress-test AWS cross-domain solution architectures when the request spans multiple AWS domains or needs an architecture decision record. Prefer narrower AWS skills for single-domain IAM, network, EKS, ECS, serverless, RDS, DynamoDB, S3, Bedrock, IaC, cost, security, migration, compliance, or incident asks.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.266Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-solution-architect","findings":[{"id":"cmuxm5c4v2824ad074w6lggo9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5c4v2825ad07c6jnqm00","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:12:58.438Z","lastVerifiedAt":"2026-10-21T15:12:58.438Z","lastChangeDetectedAt":null,"scannedHash":"49c64ad7d6fc6c468e04179baa3532591d253293","latestUpstreamHash":"49c64ad7d6fc6c468e04179baa3532591d253293","nextCheckDueAt":"2026-10-22T16:38:45.596Z"}},{"id":"cmuxk5emx1qq7ad07w5mig6g6","slug":"core-source-trust-gate","publicId":"dedb6b97-1403-4838-91e4-c8a68f8e0d3f","name":"core-source-trust-gate","description":"Verify skill, rule, and agent sources before installation or reuse by checking primary docs, repository identity, license, native surface, and privacy risk. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.163Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-source-trust-gate","findings":[{"id":"cmuxk5emx1qq8ad073tfklwub","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5emx1qq9ad07wd7ikxtz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:17:41.659Z","lastVerifiedAt":"2026-10-21T21:17:41.659Z","lastChangeDetectedAt":"2026-09-08T21:38:20.455Z","scannedHash":"e1108be603985b7219491ee33c82890b83a7e8a1","latestUpstreamHash":"e1108be603985b7219491ee33c82890b83a7e8a1","nextCheckDueAt":"2026-10-22T21:29:42.897Z"}},{"id":"cmuxo6h972wf1ad072b6vqn69","slug":"techtide-azure-live-keyvault-rotation-purge-guard","publicId":"e912b7e2-bfda-4970-a202-0c7a5c5482ee","name":"techtide-azure-live-keyvault-rotation-purge-guard","description":"Guard Key Vault key rotation, rotation policy changes, soft-delete enforcement, and purge-protection enablement with irreversibility warnings and rollback evidence.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:16.162Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-live-keyvault-rotation-purge-guard","findings":[{"id":"cmuxo6h982wf2ad07ak3pvdwp","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxo6h982wf3ad07pfzeeuo0","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:50:39.463Z","lastVerifiedAt":"2026-10-22T01:50:39.463Z","lastChangeDetectedAt":null,"scannedHash":"bfa079134e06024cb9c5f406b441a80c9d88dc1c","latestUpstreamHash":"bfa079134e06024cb9c5f406b441a80c9d88dc1c","nextCheckDueAt":"2026-10-23T01:51:25.460Z"}},{"id":"cmuxm5c57282bad07wapoaggy","slug":"techtide-ovhcloud-iam-policy-review","publicId":"a93b8623-cf46-4fed-8cdf-651e55c8bc10","name":"techtide-ovhcloud-iam-policy-review","description":"Review OVHcloud IAM policies for overly permissive allow rules, missing deny blocks, unscoped URNs, absent condition blocks (IP CIDR, resource tag, expiration), and identity-group hygiene. Use when the user needs to audit access control, review `ovh_iam_policy` Terraform resources, assess OAuth2 service account scopes, or validate conditional access configuration against the principle of least privilege.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:15.977Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ovhcloud/techtide-ovhcloud-iam-policy-review","findings":[{"id":"cmuxm5c57282cad071aa9p8u0","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5c57282dad07vqenonnu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:23:58.264Z","lastVerifiedAt":"2026-10-21T13:23:58.264Z","lastChangeDetectedAt":null,"scannedHash":"9aeab3dd5d7ecf7c2d8a933cc4bedd12e3c3b9bc","latestUpstreamHash":"9aeab3dd5d7ecf7c2d8a933cc4bedd12e3c3b9bc","nextCheckDueAt":"2026-10-22T11:44:01.889Z"}},{"id":"cmuxoarbo32r0ad07ivtsuemy","slug":"techtide-oci-live-vault-key-destruction-guard","publicId":"c8697ab9-ff45-424c-9ba8-b39e62cb8d10","name":"techtide-oci-live-vault-key-destruction-guard","description":"Guard Vault master encryption key scheduled-deletion and HSM rotation with data-association audits, key-usage reference checks, deletion-window enforcement, and cancellation playbooks.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:15.971Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-live-vault-key-destruction-guard","findings":[{"id":"cmuxoarbp32r1ad070wuzilk9","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoarbp32r2ad07dc309sar","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:01:15.732Z","lastVerifiedAt":"2026-10-21T07:01:15.732Z","lastChangeDetectedAt":null,"scannedHash":"8e8a947c427066d2fc86099c649f955b1d4899f8","latestUpstreamHash":"8e8a947c427066d2fc86099c649f955b1d4899f8","nextCheckDueAt":"2026-10-22T08:42:27.342Z"}},{"id":"cmuxmbng52lcyad070bwqjbfn","slug":"techtide-ovhcloud-maestro","publicId":"0c789a87-5e6e-4ced-80a3-a0cee79a245d","name":"techtide-ovhcloud-maestro","description":"Classify incoming OVHcloud requests by domain and route to the narrowest qualified specialist agent. Use when the user's task spans or is unclear across IAM, FinOps, Kubernetes, networking, or live-guard KMS domains. Does not answer specialist questions directly; produces a routing verdict with evidence and hands off with a clear scope statement.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:14.789Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ovhcloud/techtide-ovhcloud-maestro","findings":[{"id":"cmuxmbng62lczad07c7fw39uw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmbng62ld0ad071cw7l55s","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:57:39.595Z","lastVerifiedAt":"2026-10-22T03:57:39.595Z","lastChangeDetectedAt":null,"scannedHash":"c3dd5997a48af4052d251b1b9934ebc9a7e81f2a","latestUpstreamHash":"c3dd5997a48af4052d251b1b9934ebc9a7e81f2a","nextCheckDueAt":"2026-10-23T05:26:44.911Z"}},{"id":"cmuxoat9l333bad07055v44j9","slug":"techtide-aws-resilience-bcdr-review","publicId":"9068bc7c-75db-4f94-bc83-4bdf05c47f42","name":"techtide-aws-resilience-bcdr-review","description":"Review AWS resilience and business continuity strategy across RTO/RPO, dependency maps, multi-AZ, multi-Region, failover/failback, game days, runbooks, drift, and recovery validation. Prefer data protection backup steward for backup-plan/vault/restore implementation details.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:14.656Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-resilience-bcdr-review","findings":[{"id":"cmuxoat9l333cad07d08qb6ns","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoat9l333dad07honr2l97","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:39:39.450Z","lastVerifiedAt":"2026-10-22T01:39:39.450Z","lastChangeDetectedAt":null,"scannedHash":"0a25852b7221d41f79331574d51953ec3038a5e2","latestUpstreamHash":"0a25852b7221d41f79331574d51953ec3038a5e2","nextCheckDueAt":"2026-10-23T00:22:52.608Z"}},{"id":"cmuxm5elv28icad07zm11g4nb","slug":"techtide-nvidia-ai-networking-fabric-review","publicId":"433df9b3-0c25-4499-b504-b514731f74be","name":"techtide-nvidia-ai-networking-fabric-review","description":"Use this skill when reviewing NVIDIA AI networking fabrics - Spectrum-X Ethernet or InfiniBand topology, NCCL collective tuning, RoCEv2 lossless DCQCN/PFC config, adaptive routing, congestion control, and east-west isolation between training jobs. Trigger when the user asks whether the fabric is non-blocking, whether NCCL chooses the right transport, whether PFC/ECN is configured correctly, or whether the deployment meets NCP-AIN expectations.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:14.486Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/nvidia/techtide-nvidia-ai-networking-fabric-review","findings":[{"id":"cmuxm5elw28idad07zkkmx2z6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T04:14:13.339Z","lastVerifiedAt":"2026-10-21T04:14:13.339Z","lastChangeDetectedAt":null,"scannedHash":"a96c57514ac5085fea4cdaecb42eabae1f63420a","latestUpstreamHash":"a96c57514ac5085fea4cdaecb42eabae1f63420a","nextCheckDueAt":"2026-10-22T04:58:49.535Z"}},{"id":"cmuxoa44530road072u8vdbyh","slug":"techtide-aws-landing-zone-governor","publicId":"05d26b95-8611-4aa4-9c17-603dd6299d81","name":"techtide-aws-landing-zone-governor","description":"Review and design AWS landing zones, AWS Control Tower environments, Organizations structures, OUs, account vending patterns, guardrails, central logging, security/audit accounts, and multi-account governance. Use when the user asks how to structure AWS accounts or govern a cloud estate.","author":"github: TechTide","version":"0.1.2","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:14.485Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-landing-zone-governor","findings":[{"id":"cmuxoa44630rpad07zgr4zryi","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa44630rqad07i5qoc6gf","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:01:39.598Z","lastVerifiedAt":"2026-10-22T04:01:39.598Z","lastChangeDetectedAt":null,"scannedHash":"4ba7d276215317a7c598c7b170d4ece31c25faa2","latestUpstreamHash":"4ba7d276215317a7c598c7b170d4ece31c25faa2","nextCheckDueAt":"2026-10-23T01:45:13.773Z"}},{"id":"cmtl44v9u8156ad09i41sfcu8","slug":"vercel-frontend-review","publicId":"283ff567-9f52-4505-8297-3b9ad7a61792","name":"vercel-frontend-review","description":"Review Vercel Agent Skills frontend output for accessibility, responsiveness, state coverage, design-token discipline, and production handoff quality. Use when expanding, reviewing, or operating Vercel Agent Skills skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:13.165Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/vercel/vercel-frontend-review","findings":[{"id":"cmtl44v9w815kad09h6td6ip1","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl44v9v815fad094azz3r68","source":"vettd","category":"description","label":"Description within character limit","detail":"316/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl44v9w815jad09mmdzzdtb","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl44v9v815gad092bkxjk8b","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl44v9w815oad09yuikbi63","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl44v9v815ead09ce6u1gst","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl44v9w815had09b3gmgrf7","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"38 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl44v9v815cad09fmwmxwe8","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl44v9w815nad09gm7ef6ta","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl44v9v815aad09f08765kl","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl44v9v815bad09flooqr7p","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl44v9w815mad09fpvo9t5i","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl44v9v8159ad092a94ppfm","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl44v9w815lad098daopaoq","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl44v9v815dad09cox6san4","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"vercel-frontend-review\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl44v9w815iad09rxn5pndh","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:26:39.339Z","lastVerifiedAt":"2026-09-03T05:57:13.190Z","lastChangeDetectedAt":null,"scannedHash":"cacbf7a29e0a45b27d99308407b587d32b4ce008","latestUpstreamHash":"cacbf7a29e0a45b27d99308407b587d32b4ce008","nextCheckDueAt":"2026-10-28T11:26:39.339Z"}},{"id":"cmuxm5gzw293gad07irv2zk1f","slug":"techtide-oci-live-resource-manager-stack-guard","publicId":"872eae17-3b5c-49d3-9719-fdb0f201a674","name":"techtide-oci-live-resource-manager-stack-guard","description":"Guard OCI Resource Manager stack plan, apply, and destroy jobs with drift detection, state-version rollback, stack auto-lock awareness, and approval gates.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:13.164Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-live-resource-manager-stack-guard","findings":[{"id":"cmuxm5gzw293had071vzojfnw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm5gzw293iad072rfxjmdd","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:01:15.732Z","lastVerifiedAt":"2026-10-21T07:01:15.732Z","lastChangeDetectedAt":null,"scannedHash":"8bc15e4c8e4f08a4c31d0487594a7d223852e0a7","latestUpstreamHash":"8bc15e4c8e4f08a4c31d0487594a7d223852e0a7","nextCheckDueAt":"2026-10-22T08:45:44.946Z"}},{"id":"cmuxk5ek01qpdad0704y9otb6","slug":"techtide-azure-role-selector","publicId":"36976ec9-e537-419b-9840-17b415722620","name":"techtide-azure-role-selector","description":"Use this skill when the user asks which Azure role to assign, how to grant minimum access, whether a built-in role is sufficient, or when a custom role may be required.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:10.292Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-role-selector","findings":[{"id":"cmuxk5ek01qpead075or8w2yg","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5ek11qpfad070ogws658","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:08:58.437Z","lastVerifiedAt":"2026-10-21T15:08:58.437Z","lastChangeDetectedAt":"2026-09-23T00:52:27.883Z","scannedHash":"ea2936b9e9f9c8c6f3bc89f3fde786b2977a6d10","latestUpstreamHash":"ea2936b9e9f9c8c6f3bc89f3fde786b2977a6d10","nextCheckDueAt":"2026-10-22T17:09:07.782Z"}},{"id":"cmuxk5d0l1qbmad07a70f0izi","slug":"core-context-management","publicId":"d58af325-21cf-49e5-bdf1-1858dd547999","name":"core-context-management","description":"Keep agent sessions from drifting by packaging concise project context, current state, decisions, and verification results. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:10.291Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-context-management","findings":[{"id":"cmuxk5d0m1qbnad071uwoi9og","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d0m1qboad07669lpdbt","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T07:31:15.781Z","lastVerifiedAt":"2026-10-21T07:31:15.781Z","lastChangeDetectedAt":"2026-09-23T00:49:27.873Z","scannedHash":"82e814c2d1ff3100b0ca2950896bd43c663cfb26","latestUpstreamHash":"82e814c2d1ff3100b0ca2950896bd43c663cfb26","nextCheckDueAt":"2026-10-22T06:00:26.429Z"}},{"id":"cmuxm8qu32fviad070v9xb0xj","slug":"techtide-azure-live-aks-rollout-guard","publicId":"3617c3ba-b89e-421f-a1bb-f160efab2bc9","name":"techtide-azure-live-aks-rollout-guard","description":"Guard live AKS deployment rollouts with PDB audit, maxUnavailable/surge validation, rollout pause/undo gates, and post-rollout health verification.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:09.280Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-live-aks-rollout-guard","findings":[{"id":"cmuxm8qu42fvjad07yl5i9t2k","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qu42fvkad07fztdbhsr","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:00:39.475Z","lastVerifiedAt":"2026-10-22T02:00:39.475Z","lastChangeDetectedAt":null,"scannedHash":"10f44432b437c53e7616d84a084ca416f62e2b29","latestUpstreamHash":"10f44432b437c53e7616d84a084ca416f62e2b29","nextCheckDueAt":"2026-10-22T23:46:36.666Z"}},{"id":"cmtl44s6w80ynad09zw5r5zhz","slug":"gemini-gemini-api-dev","publicId":"ac289f06-5bdc-4fb7-9ffb-698fa1c53afc","name":"gemini-gemini-api-dev","description":"Build Gemini API integrations with verified source evidence, environment separation, request/response validation, safety settings, and testable examples. Use when expanding, reviewing, or operating Gemini CLI skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:09.174Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gemini/gemini-gemini-api-dev","findings":[{"id":"cmtl44s6w80ywad091rduqhz1","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"38 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl44s6w80yvad09plhooy5p","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl44s6w80yqad09j0q5cvun","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl44s6w80z1ad09uar6pxzq","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl44s6w80yyad09nqmv1hn1","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl44s6w80ypad09tgkzjuef","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl44s6w80yrad09bfnfhd74","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl44s6w80z2ad09v5dbwt7s","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl44s6w80yzad09j2dkcy40","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmtl44s6w80z4ad09v9b999cw","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl44s6w80ysad09x6e7qhp1","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"gemini-gemini-api-dev\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl44s6w80yoad09nxkbkj3j","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl44s6w80ytad0927pzmewc","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl44s6w80yuad09a2opv9ss","source":"vettd","category":"description","label":"Description within character limit","detail":"310/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl44s6w80yxad096193as4h","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl44s6w80z0ad09qb33an47","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl44s6w80z3ad0923s4i9ja","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:26:39.339Z","lastVerifiedAt":"2026-09-03T05:57:09.202Z","lastChangeDetectedAt":null,"scannedHash":"c5a4abb9ee4eaeb563ada8e45b33a5adc13918c1","latestUpstreamHash":"c5a4abb9ee4eaeb563ada8e45b33a5adc13918c1","nextCheckDueAt":"2026-10-28T11:26:39.339Z"}},{"id":"cmuxk5dpl1qgyad07h2ks5fex","slug":"core-native-packaging-bridge","publicId":"c1a907d9-53e5-437b-a45e-08f719c3f991","name":"core-native-packaging-bridge","description":"Translate TechTide-authored workflows into the documented packaging surface without pretending every agent uses the same activation model. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:09.168Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-native-packaging-bridge","findings":[{"id":"cmuxk5dpl1qgzad07unygerdm","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dpl1qh0ad079l2rbies","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:57:39.529Z","lastVerifiedAt":"2026-10-22T02:57:39.529Z","lastChangeDetectedAt":"2026-09-24T02:22:16.494Z","scannedHash":"a8cb6f5789c00e0afc7248ed8cb285d79eeb782b","latestUpstreamHash":"a8cb6f5789c00e0afc7248ed8cb285d79eeb782b","nextCheckDueAt":"2026-10-23T05:01:29.738Z"}},{"id":"cmtl44s6q80xiad09bjjz5f9z","slug":"vercel-test-generation","publicId":"5b0894d7-62a4-486f-936f-bb2d944d9b22","name":"vercel-test-generation","description":"Use Vercel Agent Skills to convert implementation claims into focused unit, integration, smoke, and regression tests without padding the suite. Use when expanding, reviewing, or operating Vercel Agent Skills skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:09.167Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/vercel/vercel-test-generation","findings":[{"id":"cmtl44s6r80xnad09rygnf3m7","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"vercel-test-generation\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl44s6r80xwad095bug2uxl","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl44s6r80xuad09ne81vo7u","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl44s6r80xkad09ucoh90tk","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl44s6r80xjad096noslt9x","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl44s6r80xmad09xl2in73p","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl44s6r80xxad095g3xf11o","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl44s6r80xrad0983zwii71","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl44s6r80xlad0939l81urq","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl44s6r80xsad09zoy0tewf","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"38 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl44s6r80xtad099mwv6l4x","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl44s6r80xqad096xbuf1em","source":"vettd","category":"description","label":"Description within character limit","detail":"309/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl44s6r80xvad094vbvd86k","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl44s6r80y0ad09o2tksbxy","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl44s6r80xyad09rhgb0q2h","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl44s6r80xoad09b93ntenx","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:27:39.340Z","lastVerifiedAt":"2026-09-03T05:57:09.261Z","lastChangeDetectedAt":null,"scannedHash":"4ec965903bf6afee1d9f780abb5f099064012fa9","latestUpstreamHash":"4ec965903bf6afee1d9f780abb5f099064012fa9","nextCheckDueAt":"2026-10-28T11:27:39.340Z"}},{"id":"cmuxk5eel1qnqad07cpq76y0y","slug":"core-multi-agent-orchestration","publicId":"5699d03c-a707-4565-9435-de31292b11f8","name":"core-multi-agent-orchestration","description":"Coordinate agents with each other by splitting work into bounded scopes, clear contracts, integration checks, and review gates. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:08.755Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-multi-agent-orchestration","findings":[{"id":"cmuxk5eel1qnrad0707mnugyu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5eel1qnsad07qv02os41","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:44:13.521Z","lastVerifiedAt":"2026-10-21T05:44:13.521Z","lastChangeDetectedAt":"2026-10-08T03:09:35.450Z","scannedHash":"f110ea80b44f23ec5d64188dc9626c8cbf49bf2f","latestUpstreamHash":"f110ea80b44f23ec5d64188dc9626c8cbf49bf2f","nextCheckDueAt":"2026-10-22T06:58:11.180Z"}},{"id":"cmuxk5e3y1ql3ad07k7vadrqp","slug":"core-prompt-hardening","publicId":"3af76a67-1594-4b6e-9d21-b8f359a212bd","name":"core-prompt-hardening","description":"Harden agent prompts so the work has explicit scope, constraints, data states, guardrails, and validation evidence. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:08.754Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-prompt-hardening","findings":[{"id":"cmuxk5e3y1ql4ad07sjlx1j6b","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e3y1ql5ad0760wt2my5","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:05:58.259Z","lastVerifiedAt":"2026-10-21T13:05:58.259Z","lastChangeDetectedAt":"2026-09-08T22:40:20.573Z","scannedHash":"1314d7b4447a534662c9327cef1c1c9819aa14a4","latestUpstreamHash":"1314d7b4447a534662c9327cef1c1c9819aa14a4","nextCheckDueAt":"2026-10-22T12:26:05.826Z"}},{"id":"cmuxk5e0c1qjcad074xvbj68v","slug":"core-debugging-strategy","publicId":"96e9c68b-aaa1-42cd-96a9-242a8bd5d850","name":"core-debugging-strategy","description":"Run a disciplined agent debugging loop that captures symptoms, isolates reproduction, tests hypotheses, patches narrowly, and verifies the fix. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:08.696Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-debugging-strategy","findings":[{"id":"cmuxk5e0c1qjdad07m3hauh3r","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e0c1qjead07q6zvptc5","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:50:39.523Z","lastVerifiedAt":"2026-10-22T02:50:39.523Z","lastChangeDetectedAt":"2026-09-23T01:25:27.966Z","scannedHash":"d413128df8ce2dbcdf78865715d9efb4eeae6291","latestUpstreamHash":"d413128df8ce2dbcdf78865715d9efb4eeae6291","nextCheckDueAt":"2026-10-23T01:30:38.682Z"}},{"id":"cmtl44rv880utad09t5ozu8dm","slug":"gemini-interactions-api","publicId":"b4b60515-2078-4707-992b-5daeb9f516dd","name":"gemini-interactions-api","description":"Design Gemini interaction flows with explicit conversation state, tool boundaries, safety review, and reproducible request traces. Use when expanding, reviewing, or operating Gemini CLI skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:08.695Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gemini/gemini-interactions-api","findings":[{"id":"cmtl44rv980uzad09ualtzfb3","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl44rv980v4ad09k2gxy5u1","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl44rv980v6ad09tta0l90p","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl44rv980v7ad0913gr35pa","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl44rv980v8ad091iaex804","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl44rv980uwad095qp33jhz","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl44rv980v5ad09v15onucx","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl44rv980v1ad09meadvoy9","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl44rv980v2ad09s1nssr8p","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"38 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl44rv980uyad09zgvraq9r","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"gemini-interactions-api\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl44rv980uvad09cbrpp0ko","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl44rv980uuad0947a63sm5","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl44rv980v3ad09nfdie2a8","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl44rv980v9ad09exrdtsik","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl44rv980uxad09vwjgwgnz","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl44rv980v0ad09kvrqjrma","source":"vettd","category":"description","label":"Description within character limit","detail":"287/1024 characters used","severity":"info","ruleId":"VTD-0110"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:26:39.339Z","lastVerifiedAt":"2026-09-03T05:57:08.965Z","lastChangeDetectedAt":null,"scannedHash":"f83aac631794e6d0ab1cec4cf87e2e0252506a6d","latestUpstreamHash":"f83aac631794e6d0ab1cec4cf87e2e0252506a6d","nextCheckDueAt":"2026-10-28T11:26:39.339Z"}},{"id":"cmuxmabox2hwgad079jqddx5x","slug":"techtide-oci-live-oke-rollout-guard","publicId":"45cdbead-1e36-4fcd-b1e1-f9e67cdd8c8c","name":"techtide-oci-live-oke-rollout-guard","description":"Guard OKE deployment rollouts via DevOps Service approval stages with canary and blue-green evidence, rollout health verification, and kubectl rollout undo gates.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:08.681Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-live-oke-rollout-guard","findings":[{"id":"cmuxmabox2hwhad0797u9j9i9","source":"vettd","category":"security","label":"Kubernetes credential file access","detail":"Detected in references/preflight-commands.md:19 — `--file ~/.kube/config \\`","severity":"medium","ruleId":"VTD-0010"},{"id":"cmuxmabox2hwiad07ujkka8vu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxmabox2hwjad07gz5frts9","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T22:03:01.563Z","lastVerifiedAt":"2026-10-21T22:03:01.563Z","lastChangeDetectedAt":"2026-10-07T04:38:17.253Z","scannedHash":"bbda23b037c2311b08b7e6d245e9473f542e8a2d","latestUpstreamHash":"bbda23b037c2311b08b7e6d245e9473f542e8a2d","nextCheckDueAt":"2026-10-22T23:03:04.183Z"}},{"id":"cmuxm8qr02fudad07acj6w0cu","slug":"techtide-azure-live-arm-deployment-stack-guard","publicId":"4d9964d4-61b9-4e8e-8f03-89cef698fb51","name":"techtide-azure-live-arm-deployment-stack-guard","description":"Guard live ARM, Bicep, and Deployment Stack changes with what-if evidence, denySettings review, changeset diff, rollback posture, and approval gates.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:08.679Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-live-arm-deployment-stack-guard","findings":[{"id":"cmuxm8qr02fufad077ghx5zed","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8qr02fugad07o163nkg5","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:42:39.353Z","lastVerifiedAt":"2026-10-21T11:42:39.353Z","lastChangeDetectedAt":null,"scannedHash":"fb6e76770dd9139fa4be320180e7a4fb4e1bccc1","latestUpstreamHash":"fb6e76770dd9139fa4be320180e7a4fb4e1bccc1","nextCheckDueAt":"2026-10-22T13:33:45.110Z"}},{"id":"cmuxk5d5z1qcyad0711jhm32d","slug":"techtide-kubernetes-rbac-review","publicId":"3bd80f0e-31a8-4f2e-a707-1747ebe04f93","name":"techtide-kubernetes-rbac-review","description":"Use this skill for Kubernetes RBAC, Role, ClusterRole, RoleBinding, ClusterRoleBinding, ServiceAccount, workload identity, or least-privilege review tasks. Trigger when the user asks whether cluster access is too broad, how to grant workload permissions safely, or how to audit RBAC state.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:08.678Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/kubernetes/techtide-kubernetes-rbac-review","findings":[{"id":"cmuxk5d5z1qczad0786rlakjw","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d5z1qd0ad07mx1wnng5","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:23:39.561Z","lastVerifiedAt":"2026-10-22T03:23:39.561Z","lastChangeDetectedAt":"2026-09-22T19:42:27.208Z","scannedHash":"b6666bda1aac98ad9a23b9d0a6d3b2a63463426a","latestUpstreamHash":"b6666bda1aac98ad9a23b9d0a6d3b2a63463426a","nextCheckDueAt":"2026-10-23T04:32:53.496Z"}},{"id":"cmuxk5dvb1qhzad07cnmunnh0","slug":"core-repo-reconnaissance","publicId":"bc87c46f-7fa5-4a7a-b133-dbf7c26a9215","name":"core-repo-reconnaissance","description":"Use the agent to map an unfamiliar repository before implementation by finding entrypoints, commands, ownership boundaries, risks, and tests. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.682Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-repo-reconnaissance","findings":[{"id":"cmuxk5dvb1qi0ad07369s1x6z","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dvb1qi1ad07h6zjmhi6","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:40:13.625Z","lastVerifiedAt":"2026-10-21T06:40:13.625Z","lastChangeDetectedAt":"2026-09-24T02:21:16.492Z","scannedHash":"6ac0ceceeb06b041f713fba72c2125578e3130db","latestUpstreamHash":"6ac0ceceeb06b041f713fba72c2125578e3130db","nextCheckDueAt":"2026-10-22T06:40:08.728Z"}},{"id":"cmuxm8pr32flead079tqbs5i4","slug":"techtide-oci-live-cost-budget-runaway-guard","publicId":"e69136e6-fdce-4c16-883b-70b92ae197af","name":"techtide-oci-live-cost-budget-runaway-guard","description":"Gate OCI budget mutations and GPU/HPC shape provisioning against compartment spend limits, with inventory searches, quota audits, and emergency spend-stop playbooks.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.672Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oci-live-cost-budget-runaway-guard","findings":[{"id":"cmuxm8pr32flfad071bfgvl6n","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm8pr32flgad07shdgd3kt","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:31:39.343Z","lastVerifiedAt":"2026-10-21T11:31:39.343Z","lastChangeDetectedAt":null,"scannedHash":"01c151ae83e7fcd16707a87f7553bf2aa5a6942b","latestUpstreamHash":"01c151ae83e7fcd16707a87f7553bf2aa5a6942b","nextCheckDueAt":"2026-10-22T09:42:46.643Z"}},{"id":"cmuxk5dpr1qh5ad07uwxin0ub","slug":"core-mcp-tool-safety","publicId":"3fed62bd-5295-4a79-b3fc-276fb464b336","name":"core-mcp-tool-safety","description":"Review agent tool and MCP usage for credential scope, network egress, mutation risk, logging, and human approval gates. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.664Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-mcp-tool-safety","findings":[{"id":"cmuxk5dpr1qh6ad0723l3dv6f","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dpr1qh7ad07mfwx6ga1","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T01:13:39.421Z","lastVerifiedAt":"2026-10-22T01:13:39.421Z","lastChangeDetectedAt":"2026-09-25T02:46:54.255Z","scannedHash":"3148407e244420f11d69b793398a7f6cc59f70d7","latestUpstreamHash":"3148407e244420f11d69b793398a7f6cc59f70d7","nextCheckDueAt":"2026-10-22T23:38:56.502Z"}},{"id":"cmuxk5dvc1qi5ad077qd4a0od","slug":"core-deployment-readiness","publicId":"280d245e-9334-440e-bd1a-a60df46bac99","name":"core-deployment-readiness","description":"Use the agent to decide whether an app, feature, or prototype is ready for deployment, rollback, and operational ownership. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.660Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-deployment-readiness","findings":[{"id":"cmuxk5dvc1qi6ad07lyvpovwn","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5dvc1qi7ad074yb75nfu","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:05:06.833Z","lastVerifiedAt":"2026-10-21T23:05:06.833Z","lastChangeDetectedAt":"2026-09-22T00:01:51.090Z","scannedHash":"a82adec7a2f56ced13c373d7e7969749e29362f0","latestUpstreamHash":"a82adec7a2f56ced13c373d7e7969749e29362f0","nextCheckDueAt":"2026-10-22T22:00:19.685Z"}},{"id":"cmuxk5cmt1q90ad07qi8sl41u","slug":"core-cost-aware-routing","publicId":"07bbfeb0-1bfb-4ad4-965e-cd88edf7107d","name":"core-cost-aware-routing","description":"Route agent and companion tool work by task risk, context size, model cost, latency, and verification needs. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.653Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-cost-aware-routing","findings":[{"id":"cmuxk5cmt1q91ad07jt7nctj3","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5cmt1q92ad072tg13e7w","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:38:39.511Z","lastVerifiedAt":"2026-10-22T02:38:39.511Z","lastChangeDetectedAt":"2026-09-22T00:00:51.089Z","scannedHash":"da840f478e6431b8c0db737b303c5f4d297417b0","latestUpstreamHash":"da840f478e6431b8c0db737b303c5f4d297417b0","nextCheckDueAt":"2026-10-23T01:11:28.296Z"}},{"id":"cmtl44r0u80nuad090bd6877i","slug":"vercel-tdd-red-green-refactor","publicId":"0cc2ec7e-b498-44c3-8226-1a190a3ecedc","name":"vercel-tdd-red-green-refactor","description":"Guide Vercel Agent Skills through red, green, and refactor cycles for risky changes where tests need to drive the implementation. Use when expanding, reviewing, or operating Vercel Agent Skills skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.651Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/vercel/vercel-tdd-red-green-refactor","findings":[{"id":"cmtl44r0v80nwad0969gh7fkw","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl44r0v80o6ad09lev3auvo","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl44r0v80o8ad09as3505kj","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl44r0v80nzad0900r352kh","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"vercel-tdd-red-green-refactor\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl44r0v80o4ad096c3goh08","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl44r0v80nvad09gkfbh9dc","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl44r0v80o1ad09311xzmsx","source":"vettd","category":"description","label":"Description within character limit","detail":"295/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl44r0v80o9ad09vacqrmws","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl44r0v80o3ad0962xsr679","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"38 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl44r0v80o0ad09is1cf9ok","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"},{"id":"cmtl44r0v80o5ad09qyamiid8","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl44r0v80o7ad09mv06hgm4","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl44r0v80nxad09c6l0ea3d","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl44r0v80o2ad09yibl790u","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl44r0v80nyad094wat6bcr","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl44r0v80oaad091a5hws17","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:26:39.339Z","lastVerifiedAt":"2026-09-03T05:57:07.708Z","lastChangeDetectedAt":null,"scannedHash":"a3bf9417841498b1d6fd82629d6ffad9fd11ac11","latestUpstreamHash":"a3bf9417841498b1d6fd82629d6ffad9fd11ac11","nextCheckDueAt":"2026-10-28T11:26:39.339Z"}},{"id":"cmuxk5e8x1qm9ad07p18vmko2","slug":"techtide-azure-rbac-review","publicId":"0060b1aa-31b2-492f-a72d-b689e1b85034","name":"techtide-azure-rbac-review","description":"Use this skill for Azure RBAC, Entra-backed access, role assignment, custom role, scope, subscription, management group, or least-privilege review tasks. Trigger when the user asks whether Azure access is too broad or how to grant access safely.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.650Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-rbac-review","findings":[{"id":"cmuxk5e8x1qmaad0754uuge5y","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5e8x1qmbad07240al6px","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T00:05:06.946Z","lastVerifiedAt":"2026-10-22T00:05:06.946Z","lastChangeDetectedAt":"2026-09-08T22:50:20.594Z","scannedHash":"67842a2e0392baaa251779ed35ae39f60fe13164","latestUpstreamHash":"67842a2e0392baaa251779ed35ae39f60fe13164","nextCheckDueAt":"2026-10-22T23:49:27.914Z"}},{"id":"cmtl44r0m80mnad096kvkz5wl","slug":"gemini-live-api-dev","publicId":"0706b189-eb89-4218-bc86-bd4837d347f7","name":"gemini-live-api-dev","description":"Build Gemini Live API experiences with streaming-state checks, connection recovery, media boundary review, and safe logging. Use when expanding, reviewing, or operating Gemini CLI skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:07.648Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/gemini/gemini-live-api-dev","findings":[{"id":"cmtl44r0m80mqad09r321mqet","source":"vettd","category":"structure","label":"references/ directory present","detail":"Additional documentation files available for progressive disclosure","severity":"info","ruleId":"VTD-0097"},{"id":"cmtl44r0m80msad09cnqnhwfz","source":"vettd","category":"structure","label":"Valid name field","detail":"Name \"gemini-live-api-dev\" follows spec (lowercase, hyphens, ≤64 chars)","severity":"info","ruleId":"VTD-0099"},{"id":"cmtl44r0n80mzad09ukakws0h","source":"vettd","category":"best-practices","label":"Validation loop referenced","detail":"Instructions for the agent to validate its own work before proceeding","severity":"info","ruleId":"VTD-0105"},{"id":"cmtl44r0n80n1ad0999urnwrl","source":"vettd","category":"security","label":"No secrets or unsafe code patterns detected","detail":"Scanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)","severity":"info","ruleId":"VTD-0091"},{"id":"cmtl44r0n80mwad09ywrokf9j","source":"vettd","category":"best-practices","label":"SKILL.md body length is reasonable","detail":"38 lines (recommended: under 500)","severity":"info","ruleId":"VTD-0101"},{"id":"cmtl44r0n80n2ad098pkl84ak","source":"vettd","category":"security","label":"No prompt injection or jailbreak signals detected","detail":"Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers","severity":"info","ruleId":"VTD-0092"},{"id":"cmtl44r0n80n3ad09jhr5ztlj","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmtl44r0n80myad09m0lwfxc4","source":"vettd","category":"best-practices","label":"Step-by-step workflow found","detail":"Structured procedures improve reliability for complex tasks","severity":"info","ruleId":"VTD-0106"},{"id":"cmtl44r0n80n4ad092bt7rzmh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmtl44r0m80mrad094ndqflar","source":"vettd","category":"evals","label":"No evaluation test cases","detail":"Add an evals/ directory with test prompts and expected outputs to measure skill quality","severity":"info","ruleId":"VTD-0118"},{"id":"cmtl44r0m80moad09vl0j3z0m","source":"vettd","category":"structure","label":"SKILL.md present","detail":"Required skill definition file found","severity":"info","ruleId":"VTD-0095"},{"id":"cmtl44r0m80muad09ew7gmj73","source":"vettd","category":"description","label":"Description within character limit","detail":"281/1024 characters used","severity":"info","ruleId":"VTD-0110"},{"id":"cmtl44r0m80mpad09gpd5rnh8","source":"vettd","category":"structure","label":"No scripts/ directory","detail":"Consider bundling reusable scripts for validation and automation","severity":"info","ruleId":"VTD-0096"},{"id":"cmtl44r0m80mvad09fui5rvzx","source":"vettd","category":"description","label":"Description includes usage context","detail":"Good: description explains when to activate the skill","severity":"info","ruleId":"VTD-0111"},{"id":"cmtl44r0n80mxad090j8nry0d","source":"vettd","category":"best-practices","label":"No examples found","detail":"Add code blocks, input/output samples, or before/after examples to improve agent accuracy","severity":"info","ruleId":"VTD-0103"},{"id":"cmtl44r0n80n0ad0953a4001q","source":"vettd","category":"best-practices","label":"Progressive disclosure used","detail":"SKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfront","severity":"info","ruleId":"VTD-0107"},{"id":"cmtl44r0m80mtad09o5ynb7bj","source":"vettd","category":"security","label":"No repository link","detail":"No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.","severity":"info","ruleId":"VTD-0083"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T11:27:39.340Z","lastVerifiedAt":"2026-09-03T05:57:07.714Z","lastChangeDetectedAt":null,"scannedHash":"dafc20b94fa944019a9b05ec63a10d9b527bc50a","latestUpstreamHash":"dafc20b94fa944019a9b05ec63a10d9b527bc50a","nextCheckDueAt":"2026-10-28T11:27:39.340Z"}},{"id":"cmuxk5d5p1qcmad07gsjoeral","slug":"core-security-review","publicId":"1bdfa78c-9244-4e67-a76f-b111d5e02cb3","name":"core-security-review","description":"Review agent code changes for auth, authorization, injection, secrets, dependency risk, and unsafe defaults. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:06.881Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/core/core-security-review","findings":[{"id":"cmuxk5d5p1qcnad07a90n28vl","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/source-evidence.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxk5d5p1qcoad07f457nk6y","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T04:03:39.599Z","lastVerifiedAt":"2026-10-22T04:03:39.599Z","lastChangeDetectedAt":"2026-09-08T22:58:20.613Z","scannedHash":"745bbe39da9e8d1b6db789bd7b234b5cbad9e5bc","latestUpstreamHash":"745bbe39da9e8d1b6db789bd7b234b5cbad9e5bc","nextCheckDueAt":"2026-10-23T04:58:55.270Z"}},{"id":"cmuxoaqjv32q1ad07e537y6xv","slug":"techtide-azure-live-pim-jit-activation-guard","publicId":"ab529946-6602-4ef1-890d-d5d93c9f279d","name":"techtide-azure-live-pim-jit-activation-guard","description":"Gate Entra ID PIM eligible role activations with justification, MFA, ticket binding, time-bound scope, and approval workflow gates before any privileged Azure role becomes active.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:06.879Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-live-pim-jit-activation-guard","findings":[{"id":"cmuxoaqjv32q2ad07uw14tki8","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoaqjv32q3ad07i6816gb3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:58:21.947Z","lastVerifiedAt":"2026-10-21T20:58:21.947Z","lastChangeDetectedAt":null,"scannedHash":"dc3f6ce7ea4251781d2320c3826f44eed34b3f98","latestUpstreamHash":"dc3f6ce7ea4251781d2320c3826f44eed34b3f98","nextCheckDueAt":"2026-10-22T19:59:37.388Z"}},{"id":"cmuxm56nd27qzad07w8ee6627","slug":"techtide-azure-live-cost-budget-action-guard","publicId":"08ce83b4-e493-42df-84bb-b40da86f46c5","name":"techtide-azure-live-cost-budget-action-guard","description":"Gate Azure budget action changes and GPU/HPC SKU provisioning against approved spend limits, with quota audits and emergency spend-stop playbooks.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"B","badgeStatus":"conditional","publishedAt":"2026-09-03T05:57:06.878Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/azure/techtide-azure-live-cost-budget-action-guard","findings":[{"id":"cmuxm56nd27r0ad07ovmk4prt","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm56nd27r1ad07oe520msh","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmuxm56nd27r2ad07w10z1yir","source":"cisco","category":"security","label":"SKILL DISCOVERY ABUSE detected by YARA","detail":"references/rollback-playbook.md:40 — Capability inflation patterns: approved by Microsoft","severity":"medium","ruleId":"YARA_capability_inflation_generic"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:51:15.894Z","lastVerifiedAt":"2026-10-21T08:51:15.894Z","lastChangeDetectedAt":null,"scannedHash":"c8456620d01ca69f5ac86de599890eccb5e866a7","latestUpstreamHash":"c8456620d01ca69f5ac86de599890eccb5e866a7","nextCheckDueAt":"2026-10-22T09:55:54.740Z"}},{"id":"cmuxk5ees1qnzad074p7051v2","slug":"techtide-oracle-oci-mcp-grounded-advisor","publicId":"5f5fdd70-a889-42d8-b458-251ce1c0b207","name":"techtide-oracle-oci-mcp-grounded-advisor","description":"Use this skill when the user asks about Oracle MCP servers, SQLcl MCP, OCI MCP, Oracle Database agent access, OCI automation, or cloud/database advice that must be grounded in official Oracle sources.","author":"github: TechTide","version":"0.1.0","license":"Apache-2.0","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-09-03T05:57:06.876Z","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/oci/techtide-oracle-oci-mcp-grounded-advisor","findings":[{"id":"cmuxk5ees1qo0ad07nnwh8ikx","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:14:39.492Z","lastVerifiedAt":"2026-10-22T02:14:39.492Z","lastChangeDetectedAt":"2026-09-22T00:00:51.089Z","scannedHash":"8df838dac049fe18ede0213fbb828d8bcb875feb","latestUpstreamHash":"8df838dac049fe18ede0213fbb828d8bcb875feb","nextCheckDueAt":"2026-10-23T00:26:40.325Z"}}],"publisherSupplied":["skills[].name","skills[].description","skills[].author","skills[].version","skills[].license"]}