# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | conditional |
| Overall grade | B |
| Finding counts | critical: 0 · high: 0 · medium: 1 · low: 0 · info: 44 |
| Scanner runs | 1 |
| Freshness | unknown (last verified unknown) |
| Verdict policy version | unknown |

### Findings

- **medium** [security] References external URL — review for indirect prompt injection risk
- **info** [security] No prompt injection or jailbreak signals detected
- **info** [security] No repository link
- **info** [security] No secrets or unsafe code patterns detected
- **info** [structure] references/ directory present
- **info** [structure] scripts/ directory present
- **info** [structure] SKILL.md present
- **info** [structure] Valid name field
- **info** [description] Description lacks usage context
- **info** [description] Description within character limit
- **info** [best-practices] Examples included
- **info** [best-practices] Progressive disclosure used
- **info** [best-practices] SKILL.md body length is reasonable
- **info** [best-practices] Step-by-step workflow found
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] No --help support
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [evals] No evaluation test cases

## Provenance

| Field | Value |
| --- | --- |
| Source URL | unknown |
| Assessed at | 2026-07-17T03:22:15.787Z |
| Published at | 2026-07-28T14:40:44.659Z |
| Public ID | 957c38b9-8781-4d40-9a10-d6f9c1b2e7c8 |
| Canonical page | https://vettd.agentichighway.ai/skill/957c38b9-8781-4d40-9a10-d6f9c1b2e7c8 |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> cms-cwork-workflow/SKILL

Description:

> 提供【工作协同】全流程执行能力。用户一旦表达“写汇报/发汇报/发周报/提交汇报/查看收件箱/查待办/任务协作/业务单元”等执行意图，必须进入本 Skill 的脚本调用流程；仅当用户明确是纯咨询（如问规则、问怎么做）时，才允许先文字说明并二次确认是否执行。本 Skill 通过依赖 `cms-auth-skills` 获取 `AppKey` 并完成鉴权后，才允许进入脚本调用链路。

Author:

> _not provided_

Version:

> _not provided_

License:

> _not provided_