# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 1 · high: 0 · medium: 3 · low: 1 · info: 0 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-22T02:36:39.510Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] PROMPT INJECTION detected by YARA
- **medium** [security] Embedded prompt-template marker
- **medium** [security] Embedded prompt-template marker
- **medium** [security] References external URL — review for indirect prompt injection risk
- **low** [security] Dangerous data flow in command pipeline

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/k-dense-ai/scientific-agent-skills/tree/main/skills/pi-agent |
| Assessed at | 2026-10-07T03:00:58.287Z |
| Published at | 2026-09-10T21:05:09.506Z |
| Public ID | beb58857-6f06-4098-b0ad-21ef68cc9ee0 |
| Canonical page | https://vettd.agentichighway.ai/skill/beb58857-6f06-4098-b0ad-21ef68cc9ee0 |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> pi-agent

Description:

> Builds with and operates Pi, the minimal terminal coding harness. Use for installing Pi, configuring providers/models/settings/environment variables, creating Pi skills/extensions/packages/themes/prompt templates, embedding Pi through the SDK, integrating over RPC or JSON event streams, parsing sessions, running local models through the llama.cpp router, developing custom Pi providers and TUI components, or using ecosystem packages such as pi-subagents (delegation/orchestration), pi-mcp-adapter (MCP servers), pi-interview (interactive forms), and pi-web-access (web search, fetching, video understanding).

Author:

> k-dense-ai

Version:

> 1.6

License:

> MIT