# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 1 · high: 1 · medium: 1 · low: 0 · info: 1 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-21T22:39:01.885Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] Instruction override language detected
- **high** [security] Dangerous data flow in command pipeline
- **medium** [security] References external URL — review for indirect prompt injection risk
- **info** [security] Skill does not specify a license

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/affaan-m/ecc/tree/main/skills/github-ops |
| Assessed at | 2026-10-07T04:31:35.865Z |
| Published at | 2026-08-06T17:11:24.164Z |
| Public ID | df7e9c4b-5f35-4c85-a2d3-63dbdafaeedc |
| Canonical page | https://vettd.agentichighway.ai/skill/df7e9c4b-5f35-4c85-a2d3-63dbdafaeedc |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> github-ops

Description:

> GitHub repository operations, automation, and management. Issue triage, PR management, CI/CD operations, release management, and security monitoring using the gh CLI. Use when the user wants to manage GitHub issues, PRs, CI status, releases, contributors, stale items, or any GitHub operational task beyond simple git commands.

Author:

> affaan-m

Version:

> _not provided_

License:

> MIT