Format commit messages using the Conventional Commits specification. Use when creating commits, writing commit messages, or when the user mentions commits, git commits, or commit messages. Ensures commits follow the standard format for automated tooling, changelog generation, and semantic versioning.
○ declared by the publisher, as-is
Safety
BB: 4 or more lows, or any medium1 severity-bearing · 13 informational
Safety · gateassessed 3mo ago
B1 severity-bearing · 13 informational
Graded from 1 severity-bearing finding on this release.
A gate; it passes or fails, never weighed against price or quality.
Reliability & Quality
n/anot assessed
Reliability & Qualityassessed 3mo ago
n/anot assessed
Not assessed; no producer has emitted into this category. An absence, not a zero.
Findings with severity, graded on the same letter scale as safety.
not assessed
Cost
n/anot assessed
Costassessed 3mo ago
n/anot assessed
Not assessed; no producer has emitted into this category. An absence, not a zero.
Declared external service dependencies. Never a monetary figure.
not assessed
Popularity
n/anot assessed
Popularity · not a figureassessed 3mo ago
n/anot assessed
Not assessed; no producer has emitted into this category. An absence, not a zero.
Context read off the linked repository. It enters no ranking and no grade.
◌ Vettd does not install assets; this record describes a copy you obtain yourself.
Custody chain○ no source link recorded
Unknown author◐→repo △ not assessed→version = △ no commit pinned→sha256:cmro…5a27◐→signature △ not assessed|license △ none declaredrecord 551f85d1-2cf8-488e-b0a5-e5b46cf2648e · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
▲References external URL — review for indirect prompt injection riskflaggedExternal URL(s) detected in SKILL.md — referenced content can change after auditvettd · scan · 3moMedium
▲No prompt injection or jailbreak signals detectedflaggedScanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markersvettd · scan · 3moInfo
▲Gotchas section foundflaggedDocuments environment-specific facts and common pitfallsvettd · scan · 3moInfo
▲Description within character limitflagged301/1024 characters usedvettd · scan · 3moInfo
▲No secrets or unsafe code patterns detectedflaggedScanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)vettd · scan · 3moInfo
▲No scripts/ directoryflaggedConsider bundling reusable scripts for validation and automationvettd · scan · 3moInfo
▲No repository linkflaggedNo repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.vettd · scan · 3moInfo
▲No evaluation test casesflaggedAdd an evals/ directory with test prompts and expected outputs to measure skill qualityvettd · scan · 3moInfo
▲Examples includedflaggedFound code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectivelyvettd · scan · 3moInfo
Not assessed; no producer has emitted into reliability & quality for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Performance◌ not assessednot assessed0 signalsrecord 551f85d1-2cf8-488e-b0a5-e5b46cf2648e
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into performance for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Cost◌ not assessednot assessed0 signalsrecord 551f85d1-2cf8-488e-b0a5-e5b46cf2648e
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Compatibility◌ not assessednot assessed0 signalsrecord 551f85d1-2cf8-488e-b0a5-e5b46cf2648e
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into compatibility for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Popularity◌ not assessednot assessed0 signalsrecord 551f85d1-2cf8-488e-b0a5-e5b46cf2648e
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into popularity for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Characteristics◌ not assessednot assessed0 signalsrecord 551f85d1-2cf8-488e-b0a5-e5b46cf2648e
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into characteristics for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
conventional-commits/SKILL assessed 3mo ago /
14 signals · 1 category
Safety
▲References external URL — review for indirect prompt injection riskMedium
▲No prompt injection or jailbreak signals detectedInfo
▲Gotchas section foundInfo
▲Description within character limitInfo
▲No secrets or unsafe code patterns detectedInfo
▲No scripts/ directoryInfo
▲No repository linkInfo
▲No evaluation test casesInfo
▲Examples includedInfo
▲Step-by-step workflow foundInfo
▲SKILL.md presentInfo
▲SKILL.md body length is reasonableInfo
▲Valid name fieldInfo
▲Description includes usage contextInfo
‹ › or arrow keys move through 14
Coverage1 of 7 categories assessed · shown
Safety
✓ assessed
assessed as findings and a letter grade, not as signals
Reliability & Quality
△ not assessed
no producer has emitted for this category
Performance
△ not assessed
no producer has emitted for this category
Cost
△ not assessed
no producer has emitted for this category
Compatibility
△ not assessed
no producer has emitted for this category
Popularity
△ not assessed
no producer has emitted for this category
Characteristics
△ not assessed
no producer has emitted for this category
Freshness & re-evaluation
assessed3mo ago · Vettd core○ untracked
source stateThis asset is not yet covered by scheduled change detection.
re-check policyno re-check is scheduled for this assetnot scheduled
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisednot scheduled
Limitations & open conflicts
limitationReliability & Quality, Performance, Cost, Compatibility, Popularity, Characteristics are not assessed: behaviour there is unmeasured, not clean△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record 551f85d1-2cf8-488e-b0a5-e5b46cf2648e covers
scannerv1△ superseded by v11
validityassessed 3mo ago · Staleness unknown
$vettd scan folder <path>
this record was taken at digest sha256:cmrodn6h11tz… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
Weigh conventional-commits/SKILL against other published skills: the safety grade, its finding counts and each category’s verdict, one row apiece. The full comparison page carries every signal and framework coverage.