◌ Vettd does not install assets; this record describes a copy you obtain yourself.
Custody chainSource ↗○ linked, not verified by Vettd
aws◐→aws/agent-toolkit-for-aws○→version = 65dce74◐→sha256:b090…2d14◐→signature △ not assessed|Apache-2.0○record c3d67727-790a-4ec9-87c2-991be8d04e9a · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
▲References external URL — review for indirect prompt injection riskflaggedExternal URL(s) detected in SKILL.md — referenced content can change after auditvettd · scan · 2wMedium
▲Skill does not specify a licenseflaggedSKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.cisco · scan · 2wInfo
◌Secrets scan passednothing foundNo secrets or unsafe code patterns were detected.vettd · scan · 2wnothing found
◌behavioral scan passednothing foundNo prompt-injection or jailbreak signals were detected.vettd · scan · 2wnothing found
◌Name validation passednothing foundThe declared skill name follows the supported naming rules.vettd · scan · 2wnothing found
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
assessed2w ago · Cisco AI Defense · Vettd core● current
source stateThe source matches what was scanned. No changes detected.Up to date
re-check policyre-checked against the upstream source on the scheduler's cadencenext check in 20h
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisedauto-scheduled
Limitations & open conflicts
limitationCost is not assessed: behaviour there is unmeasured, not clean△ gap
limitationReliability & Quality carries rows but no severity-bearing one: nothing has been graded there△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record c3d67727-790a-4ec9-87c2-991be8d04e9a covers
scannerv11● current
validityassessed 2w ago · Up to date
$vettd scan folder <path>
this record was taken at digest sha256:b09094fc5e41… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
Weigh aws-sdk-swift-usage against other published skills: the safety grade, its finding counts and each category’s verdict, one row apiece. The full comparison page carries every signal and framework coverage.