# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | conditional |
| Overall grade | C |
| Finding counts | critical: 0 · high: 0 · medium: 6 · low: 0 · info: 0 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-22T02:10:39.487Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **medium** [security] Code makes network requests
- **medium** [security] Outbound network request primitives that can transmit data externally
- **medium** [security] Outbound network request primitives that can transmit data externally
- **medium** [security] References external URL — review for indirect prompt injection risk
- **medium** [security] Skill declares no Write tool but bundled scripts write files
- **medium** [security] Undeclared network usage

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/k-dense-ai/scientific-agent-skills/tree/main/skills/ncats-arax |
| Assessed at | 2026-10-07T03:01:07.805Z |
| Published at | 2026-09-10T21:05:02.095Z |
| Public ID | d8945cc7-f552-462f-9a5b-893b4e17ef92 |
| Canonical page | https://vettd.agentichighway.ai/skill/d8945cc7-f552-462f-9a5b-893b4e17ef92 |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> ncats-arax

Description:

> Queries the NCATS Translator ARAX production API for bounded, typed, provenance-rich one-hop and endpoint-pinned two-hop biomedical knowledge-graph relationships. Use for Biolink-constrained RTX-KG2 lookup, explicit selected-provider ARAX federation, separate entity normalization, qualifier-aware graph traversal, and inspection of TRAPI edge bindings, publications, and knowledge-source provenance. Do not use for inference, ranking, open-ended pathfinding, clinical guidance, or sensitive queries.

Author:

> k-dense-ai

Version:

> 1.2

License:

> MIT