Skill

matter-workspace

>

○ declared by the publisher, as-is
Safety
AA: low-severity findings onlynone severity-bearing · 15 informational
Reliability & Quality
n/anot assessed
Cost
n/anot assessed
Popularity
1875Forks
Performance tested for◌ not assessed
no controlled task evaluation on this release
Repo★ 9.6k ○1.9k forks117 watchers80 open issueslast commit 8d old when scanned
· context signals ↓
Vettd Note

No Vettd note yet for this asset.

Best for

Not for

Re-assessed 2mo ago · 3 of 7 categories assessed
Record lookup
$ vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c

◌ Vettd does not install assets; this record describes a copy you obtain yourself.

Custody chainSource ↗○ linked, not verified by Vettd
anthropics ◐anthropics/claude-for-legal ○version = △ no commit pinnedsha256:4a6c…9c2b ◐ signature △ not assessedlicense △ none declaredrecord de1395c3-2e3a-4017-842b-1feccfd1af2c · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
Evidence · 3 of 7 categories · 21 signals
Safety● gradedAmost recent 2mo ago15 signalsrecord de1395c3-2e3a-4017-842b-1feccfd1af2c
how it was established15 signals · 2 sources · scan
vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --json
show
SKILL.md presentflaggedRequired skill definition file foundvettd · scan · 2moInfo
No secrets or unsafe code patterns detectedflaggedScanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)vettd · scan · 2moInfo
No prompt injection or jailbreak signals detectedflaggedScanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markersvettd · scan · 2moInfo
No external URLs in skill definitionflaggedSKILL.md and references/ files do not reference external URLsvettd · scan · 2moInfo
No scripts/ directoryflaggedConsider bundling reusable scripts for validation and automationvettd · scan · 2moInfo
Description within character limitflagged1/1024 characters usedvettd · scan · 2moInfo
Valid name fieldflaggedName "matter-workspace" follows spec (lowercase, hyphens, ≤64 chars)vettd · scan · 2moInfo
Examples includedflaggedFound code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectivelyvettd · scan · 2moInfo
Description too briefflaggedA few sentences covering scope and trigger conditions improves activation accuracyvettd · scan · 2moInfo
SKILL.md body length is reasonableflagged175 lines (recommended: under 500)vettd · scan · 2moInfo
No repository linkflaggedNo repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.vettd · scan · 2moInfo
Skill does not specify a licenseflaggedSKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.cisco · scan · 2moInfo
Step-by-step workflow foundflaggedStructured procedures improve reliability for complex tasksvettd · scan · 2moInfo
No evaluation test casesflaggedAdd an evals/ directory with test prompts and expected outputs to measure skill qualityvettd · scan · 2moInfo
Description lacks usage contextflaggedAdd context like "Use this skill when..." to help agents know when to activate itvettd · scan · 2moInfo
Reliability & Quality◌ not assessednot assessed0 signalsrecord de1395c3-2e3a-4017-842b-1feccfd1af2c
how it was establishednot assessed; no producer has emitted into this category
vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --json
Not assessed; no producer has emitted into reliability & quality for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Performance◌ not assessednot assessed0 signalsrecord de1395c3-2e3a-4017-842b-1feccfd1af2c
how it was establishednot assessed; no producer has emitted into this category
vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --json
Not assessed; no producer has emitted into performance for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Cost◌ not assessednot assessed0 signalsrecord de1395c3-2e3a-4017-842b-1feccfd1af2c
how it was establishednot assessed; no producer has emitted into this category
vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --json
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Compatibility◌ not assessednot assessed0 signalsrecord de1395c3-2e3a-4017-842b-1feccfd1af2c
how it was establishednot assessed; no producer has emitted into this category
vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --json
Not assessed; no producer has emitted into compatibility for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Popularity◇ context onlynot judgedmost recent 1w ago5 signalsrecord de1395c3-2e3a-4017-842b-1feccfd1af2c
how it was establishedgithub-repo-object · 5 signals · github-api · research
vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --json
show
Forksmeasuredgithub-api · research · 1w1875
Days since last commitmeasuredgithub-api · research · 1w8 days
Open issuesmeasuredgithub-api · research · 1w80
Starsmeasuredgithub-api · research · 1w9619
Watchersmeasuredgithub-api · research · 1w117
Characteristics◇ context onlynot judgedmost recent 1w ago1 signalrecord de1395c3-2e3a-4017-842b-1feccfd1af2c
how it was established1 signal · github-api · research
vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --json
show
Archivedreadgithub-api · research · 1wfalse
Coverage3 of 7 categories assessed · shown
Safety
✓ assessed
assessed as findings and a letter grade, not as signals
Reliability & Quality
△ not assessed
no producer has emitted for this category
Performance
△ not assessed
no producer has emitted for this category
Cost
△ not assessed
no producer has emitted for this category
Compatibility
△ not assessed
no producer has emitted for this category
Popularity
✓ assessed
5 signals recorded
Characteristics
✓ assessed
1 signal recorded
Freshness & re-evaluation
assessed2mo ago · Cisco AI Defense · Vettd core○ untracked
source stateThis asset is not yet covered by scheduled change detection.
re-check policyno re-check is scheduled for this assetnot scheduled
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisednot scheduled
Limitations & open conflicts
limitationReliability & Quality, Performance, Cost, Compatibility are not assessed: behaviour there is unmeasured, not clean△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record de1395c3-2e3a-4017-842b-1feccfd1af2c covers
scannerv9△ superseded by v11
validityassessed 2mo ago · Staleness unknown
$ vettd scan folder <path>
this record was taken at digest sha256:4a6c651889c9… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$ vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
$ vettd directory view de1395c3-2e3a-4017-842b-1feccfd1af2c --jsonas JSON ↗