▲References external URL — review for indirect prompt injection riskflaggedExternal URL(s) detected in SKILL.md — referenced content can change after auditvettd · scan · 6dMedium
▲Skill does not specify a licenseflaggedSKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.cisco · scan · 6dInfo
◌Secrets scan passednothing foundNo secrets or unsafe code patterns were detected.vettd · scan · 6dnothing found
◌behavioral scan passednothing foundNo prompt-injection or jailbreak signals were detected.vettd · scan · 6dnothing found
◌Name validation passednothing foundThe declared skill name follows the supported naming rules.vettd · scan · 6dnothing found
◌Internal reference resolution completednothing foundAll body-referenced paths under references/, scripts/, and assets/ resolved in the bundle.vettd · scan · 6dnothing found
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
assessed6d ago · Cisco AI Defense · Vettd core● current
source stateThe source matches what was scanned. No changes detected.Up to date
re-check policyre-checked against the upstream source on the scheduler's cadencenext check in 3h
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisedauto-scheduled
Limitations & open conflicts
limitationCost is not assessed: behaviour there is unmeasured, not clean△ gap
limitationReliability & Quality carries rows but no severity-bearing one: nothing has been graded there△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record 632ad5f8-9b70-44bf-966e-8418fa5ab301 covers
scannerv11● current
validityassessed 6d ago · Up to date
$vettd scan folder <path>
this record was taken at digest sha256:d5b46cfb37b2… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
Weigh redshift-guide against other published skills: the safety grade, its finding counts and each category’s verdict, one row apiece. The full comparison page carries every signal and framework coverage.