◌ Vettd does not install assets; this record describes a copy you obtain yourself.
Custody chain○ no source link recorded
Unknown author◐→repo △ not assessed→version = △ no commit pinned→sha256:cmro…3umd◐→signature △ not assessed|license △ none declaredrecord 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2 · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
▲References external URL — review for indirect prompt injection riskflaggedExternal URL(s) detected in SKILL.md — referenced content can change after auditvettd · scan · 3moMedium
▲No evaluation test casesflaggedAdd an evals/ directory with test prompts and expected outputs to measure skill qualityvettd · scan · 3moInfo
▲Progressive disclosure usedflaggedSKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfrontvettd · scan · 3moInfo
▲SKILL.md body length is reasonableflagged69 lines (recommended: under 500)vettd · scan · 3moInfo
▲No clear workflow structureflaggedConsider adding numbered steps or a structured procedure for the agent to followvettd · scan · 3moInfo
▲No secrets or unsafe code patterns detectedflaggedScanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)vettd · scan · 3moInfo
▲No prompt injection or jailbreak signals detectedflaggedScanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markersvettd · scan · 3moInfo
▲No repository linkflaggedNo repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.vettd · scan · 3moInfo
▲references/ directory presentflaggedAdditional documentation files available for progressive disclosurevettd · scan · 3moInfo
▲Description lacks usage contextflaggedAdd context like "Use this skill when..." to help agents know when to activate itvettd · scan · 3moInfo
+Reliability & Quality◌ not assessednot assessed0 signalsrecord 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into reliability & quality for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Performance◌ not assessednot assessed0 signalsrecord 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into performance for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Cost◌ not assessednot assessed0 signalsrecord 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Compatibility◌ not assessednot assessed0 signalsrecord 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into compatibility for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Popularity◌ not assessednot assessed0 signalsrecord 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into popularity for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Characteristics◌ not assessednot assessed0 signalsrecord 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into characteristics for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
dive-into-langgraph/SKILL assessed 3mo ago /
16 signals · 1 category
Safety
▲References external URL — review for indirect prompt injection riskMedium
▲No evaluation test casesInfo
▲Progressive disclosure usedInfo
▲SKILL.md body length is reasonableInfo
▲No clear workflow structureInfo
▲No secrets or unsafe code patterns detectedInfo
▲No prompt injection or jailbreak signals detectedInfo
▲scripts/ directory presentInfo
▲Examples includedInfo
▲SKILL.md presentInfo
▲CLI help supportedInfo
▲Description within character limitInfo
▲Valid name fieldInfo
▲No repository linkInfo
▲references/ directory presentInfo
▲Description lacks usage contextInfo
‹ › or arrow keys move through 16
Coverage1 of 7 categories assessed · shown
Safety
✓ assessed
assessed as findings and a letter grade, not as signals
Reliability & Quality
△ not assessed
no producer has emitted for this category
Performance
△ not assessed
no producer has emitted for this category
Cost
△ not assessed
no producer has emitted for this category
Compatibility
△ not assessed
no producer has emitted for this category
Popularity
△ not assessed
no producer has emitted for this category
Characteristics
△ not assessed
no producer has emitted for this category
Freshness & re-evaluation
assessed3mo ago · Vettd core○ untracked
source stateThis asset is not yet covered by scheduled change detection.
re-check policyno re-check is scheduled for this assetnot scheduled
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisednot scheduled
Limitations & open conflicts
limitationReliability & Quality, Performance, Cost, Compatibility, Popularity, Characteristics are not assessed: behaviour there is unmeasured, not clean△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record 6a55c7fc-8b6c-460e-afe2-4cb4f4f70dd2 covers
scannerv1△ superseded by v11
validityassessed 3mo ago · Staleness unknown
$vettd scan folder <path>
this record was taken at digest sha256:cmrodmlmt1jd… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
Weigh dive-into-langgraph/SKILL against other published skills: the safety grade, its finding counts and each category’s verdict, one row apiece. The full comparison page carries every signal and framework coverage.