◌ Vettd does not install assets; this record describes a copy you obtain yourself.
Custody chainSource ↗○ linked, not verified by Vettd
adanaleycio○→NousResearch/hermes-agent○→v2.0.0 = d94b70f◐→sha256:6353…08bc◐→signature △ not assessed|MIT○record 7f71545b-f3f4-46d2-8e60-b3322d1fa8ff · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
▲Outbound network request primitives that can transmit data externallyflaggedscripts/generate_meme.py:42 — Pattern detected: requests.get(cisco · scan · 1wMedium
▲Outbound network request primitives that can transmit data externallyflaggedscripts/generate_meme.py:46 — Pattern detected: urllib.request.urlopen(cisco · scan · 1wMedium
▲Script contacts a destination the documentation never mentionsflaggedscripts/generate_meme.py:34 — Script contacts or configures 'api.imgflip.com' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.cisco · scan · 1wLow
◌Secrets scan passednothing foundNo secrets or unsafe code patterns were detected.vettd · scan · 1wnothing found
◌behavioral scan passednothing foundNo prompt-injection or jailbreak signals were detected.vettd · scan · 1wnothing found
◌External URL scan passednothing foundNo external URLs were found in scanned skill text.vettd · scan · 1wnothing found
◌Name validation passednothing foundThe declared skill name follows the supported naming rules.vettd · scan · 1wnothing found
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
assessed1w ago · Cisco AI Defense · Vettd core● current
source stateThe source matches what was scanned. No changes detected.Up to date
re-check policyre-checked against the upstream source on the scheduler's cadencenext check in 21h
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisedauto-scheduled
Limitations & open conflicts
limitationCost is not assessed: behaviour there is unmeasured, not clean△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record 7f71545b-f3f4-46d2-8e60-b3322d1fa8ff covers
scannerv11● current
validityassessed 1w ago · Up to date
$vettd scan folder <path>
this record was taken at digest sha256:63530ed5588d… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
Weigh meme-generation against other published skills: the safety grade, its finding counts and each category’s verdict, one row apiece. The full comparison page carries every signal and framework coverage.