◌ Vettd does not install assets; this record describes a copy you obtain yourself.
Custody chainSource ↗○ linked, not verified by Vettd
Shubham Saboo○→Shubhamsaboo/awesome-llm-apps○→v1.0.0 = 4bf51ab◐→sha256:387d…1c5d◐→signature △ not assessed|Apache-2.0○record 9e28b6f3-f9d3-407d-ba0a-55e0c04122e8 · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
◌Internal reference resolution completednothing foundAll body-referenced paths under references/, scripts/, and assets/ resolved in the bundle.vettd · scan · 2wnothing found
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
▪Declared environment assumptionsreadvettd · scan · 2wMakes network calls: workers via the Antigravity CLI (agy), falling back to the Gemini API (GEMINI_API_KEY or GOOGLE_API_KEY); advisor via the claude CLI, falling back to the Anthropic API (ANTHROPIC_API_KEY). Needs jq. All snippets are bash. Runs in any harness that can execute shell commands.
advisor-orchestrator-worker v1.0.0 · = 4bf51ab · assessed 2w ago /
22 signals · 6 categories
Safety
▲References external URL — review for indirect prompt injection riskMedium
◌Secrets scan passednothing found
◌behavioral scan passednothing found
◌Name validation passednothing found
Reliability & Quality
◌Internal reference resolution completednothing found
▪Checklist patternabsent
▪Description usage contextpresent
▪Examplespresent
▪Gotchas sectionabsent
▪Step-by-step workflowpresent
▪Validation loopabsent
Performance
▪Progressive disclosurepresent
●Static context tokens1603
Compatibility
▪Declared environment assumptionsMakes network calls: workers via the Antigravity CLI (agy), falling back to the Gemini API (GEMINI_API_KEY or GOOGLE_API_KEY); advisor via the claude CLI, falling back to the Anthropic API (ANTHROPIC_API_KEY). Needs jq. All snippets are bash. Runs in any harness that can execute shell commands.
assessed2w ago · Cisco AI Defense · Vettd core● current
source stateThe source matches what was scanned. No changes detected.Up to date
re-check policyre-checked against the upstream source on the scheduler's cadencenext check in 15h
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisedauto-scheduled
Limitations & open conflicts
limitationCost is not assessed: behaviour there is unmeasured, not clean△ gap
limitationReliability & Quality carries rows but no severity-bearing one: nothing has been graded there△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record 9e28b6f3-f9d3-407d-ba0a-55e0c04122e8 covers
scannerv11● current
validityassessed 2w ago · Up to date
$vettd scan folder <path>
this record was taken at digest sha256:387d537dca0d… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
Weigh advisor-orchestrator-worker against other published skills: the safety grade, its finding counts and each category’s verdict, one row apiece. The full comparison page carries every signal and framework coverage.