# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | conditional |
| Overall grade | B |
| Finding counts | critical: 0 · high: 0 · medium: 1 · low: 0 · info: 63 |
| Scanner runs | 1 |
| Freshness | unknown (last verified unknown) |
| Verdict policy version | unknown |

### Findings

- **medium** [security] References external URL — review for indirect prompt injection risk
- **info** [security] No prompt injection or jailbreak signals detected
- **info** [security] No repository link
- **info** [security] No secrets or unsafe code patterns detected
- **info** [structure] scripts/ directory present
- **info** [structure] SKILL.md present
- **info** [structure] Valid name field
- **info** [description] Description lacks usage context
- **info** [description] Description within character limit
- **info** [best-practices] Examples included
- **info** [best-practices] Progressive disclosure used
- **info** [best-practices] SKILL.md body length is reasonable
- **info** [best-practices] Step-by-step workflow found
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] CLI help supported
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [scripts] Structured output format
- **info** [evals] No evaluation test cases

## Provenance

| Field | Value |
| --- | --- |
| Source URL | unknown |
| Assessed at | 2026-07-17T03:22:15.787Z |
| Published at | 2026-07-28T14:40:42.721Z |
| Public ID | a099c067-f8c3-4560-a469-010d5227e3fa |
| Canonical page | https://vettd.agentichighway.ai/skill/a099c067-f8c3-4560-a469-010d5227e3fa |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> cms-cwork-skils/SKILL

Description:

> CWork 工作协同原子能力集，覆盖员工搜索、文件上传下载、发送/回复汇报、收发件箱、汇报详情、任务、待办、事项、插件聚合、新消息、已读状态与 AI 问答；适用于“汇报、待办、任务、附件、消息、已读、员工查询”等场景；仅支持 appKey 鉴权并按需加载接口执行组合调用。

Author:

> _not provided_

Version:

> _not provided_

License:

> _not provided_