TrustView

Capability Map

skillerr/capability-map

sha256:ee9ac1095b85…
FreeNot anchoredmintedinspectablecapabilitiesdigest-pinnednative

Skill Score

60/ 100 · Developing

WIP · 2.0-signals

Skill Score is actively being developed and will get sharper over time.

  • Sealed package20/20

    Minted .skill blob in the registry

  • Digest published15/15

    sha256 pin published on skillerr.com

  • Permissions declared15/15

    Capabilities / permissions declared

  • Source attested0/10

    No submitter or source URL

  • Transparency log0/15

    Not anchored

  • Release profile0/15

    Release profile gates not met

  • Registry signal5/5

    24 install(s) on registry

  • Not revoked5/5

    No revocation on log

Not a malware scan. Not “safe to run.” Transparent registry signals only. Inclusion is not endorsement.

Install

npx @skillerr/add skillerr/capability-map

Registry pin: sha256:ee9ac1095b85… (shown on TrustView; install by name resolves to this sealed blob)

Sealed install targets

Writes capability-map.skill (sealed ZIP) plus optional skillerr.json. Not a bare SKILL.md.

Download capability-map.skill

Sealed ZIP with digest + skillerr.json. Not a bare SKILL.md.

Free skills install with npx @skillerr/add. Sign in for account history.

Sealed artifact

Install and download deliver a digest-pinned open .skill package (docs.skillerr.com). Pasting a SKILL.md from the internet has none of this proof.

  • ✓

    capability-map.skill ZIP

    Open-protocol .skill ZIP (skill.json + workflow), not a public raw SKILL.md URL

  • ✓

    Registry digest pin

    sha256:ee9ac1095b85…

  • ✓

    Inspect before run

    TrustView on skillerr.com; SKILL.md is a lossy adapter inside the package

  • ○

    Permissions surface

    Capabilities not declared

  • ✓

    Transparency log

    Inclusion proof in the skillerr.com registry log

Permissions map

This skill has not marked capabilities as declared. Treat the map as incomplete.

  • noneNo elevated capslow

    No fs / net / shell declared beyond default agent context

Declarations for humans and agents. Not a runtime sandbox guarantee.

Integrity verify

Confirm the digest on this page matches the live registry. This checks identity pins only: not a security scan.

expect sha256:ee9ac1095b8508ba…
npx @skillerr/add info skillerr/capability-map
curl -sS https://skillerr.com/api/v1/skills/skillerr/capability-map | grep -o '"digest":"[^"]*"'

Summary

Summarize declared fs/net/shell permissions for a sealed skill.

Description

Read declared capabilities from a catalog skill or local .skill and present risk labels. Declared permissions are not a sandbox.

Tags

capabilitiespermissionsmeta
Inspect package contentsSKILL.md inside .skill

TrustView preview on skillerr.com. Install and download serve the sealed package: there is no public raw SKILL.md URL.

---
name: capability-map
title: Capability Map
description: Summarize declared fs/net/shell permissions for a sealed skill.
---

# Capability Map

Read declared capabilities from a catalog skill or local .skill and present risk labels. Declared permissions are not a sandbox.

Verified

Public Ledger
Not anchored

Transparency

published_at
2026-07-20T18:00:00.000Z
version
0.1.0
updated_at
2026-07-20T18:00:00.000Z
license
MIT
minted_at
2026-07-20T18:27:53.027Z
permanence
in registry log
digest
sha256:ee9ac1095b8508ba04d3f31579084f80f81f5d809fa6b694d21178d0810c7a3b

Public permanence uses Sigstore Rekor. The ledger link is shown when a real logIndex was recorded at mint. Green Anchored requires an offline inclusion proof verify. Catalog claims alone never paint Anchored. Inclusion is not endorsement.