# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | conditional |
| Overall grade | B |
| Finding counts | critical: 0 · high: 0 · medium: 1 · low: 0 · info: 1 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-21T13:23:58.264Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **medium** [security] References external URL — review for indirect prompt injection risk
- **info** [security] Skill does not specify a license

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/ovhcloud/techtide-ovhcloud-iam-policy-review |
| Assessed at | 2026-10-07T04:34:24.453Z |
| Published at | 2026-09-03T05:57:15.977Z |
| Public ID | a93b8623-cf46-4fed-8cdf-651e55c8bc10 |
| Canonical page | https://vettd.agentichighway.ai/skill/a93b8623-cf46-4fed-8cdf-651e55c8bc10 |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> techtide-ovhcloud-iam-policy-review

Description:

> Review OVHcloud IAM policies for overly permissive allow rules, missing deny blocks, unscoped URNs, absent condition blocks (IP CIDR, resource tag, expiration), and identity-group hygiene. Use when the user needs to audit access control, review `ovh_iam_policy` Terraform resources, assess OAuth2 service account scopes, or validate conditional access configuration against the principle of least privilege.

Author:

> github: TechTide

Version:

> 0.1.0

License:

> Apache-2.0