# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 1 · high: 0 · medium: 1 · low: 0 · info: 1 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-28T14:28:59.161Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] Safety system bypass instruction (rule `VTD-0069` from vettd)
  - Why it matters: The skill tells the model to turn off its safety, ethical or content filters.
  - How to fix: Remove the instruction to disable safety or content filters.
- **medium** [security] References external URL — review for indirect prompt injection risk (rule `VTD-0088` from vettd)
  - Why it matters: SKILL.md or references/ links to an external web page. That page can change after review and could carry instructions aimed at the model.
  - How to fix: Link to content you control, or to a specific commit or release where the host offers one. Tell the agent to treat fetched pages as reference, not as instructions.
- **info** [security] Skill does not specify a license (rule `MANIFEST_MISSING_LICENSE` from cisco)

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/zeroclaw-labs/zeroclaw/tree/master/.claude/skills/github-issue-triage |
| Assessed at | 2026-10-28T14:28:58.756Z |
| Published at | 2026-10-28T14:28:58.757Z |
| Public ID | dc27e2b9-b5af-4b5c-b46e-e0de1d29323e |
| Canonical page | https://vettd.agentichighway.ai/skill/dc27e2b9-b5af-4b5c-b46e-e0de1d29323e |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> github-issue-triage

Description:

> Issue triage and lifecycle management agent for ZeroClaw. Use this skill whenever the user wants to: triage open issues, close stale/duplicate/fixed issues, apply labels, run a backlog sweep, enforce the current issue stale policy, or handle a specific issue. Trigger on: 'triage issues', 'issue triage', 'sweep issues', 'close stale issues', 'handle issue #N', 'backlog sweep', 'label issues', 'stale pass', 'wont-fix pass', 'issue accounting', 'how many issues', 'backlog health', or any request involving issue lifecycle management for the ZeroClaw project.

Author:

> zeroclaw-labs

Version:

> _not provided_

License:

> Apache-2.0