TrustView

Score Signals

skillerr/score-signals

sha256:14e3ba4e214a…
FreeNot anchoredmintedinspectablecapabilitiesdigest-pinnednative

Skill Score

60/ 100 · Developing

WIP · 2.0-signals

Skill Score is actively being developed and will get sharper over time.

  • Sealed package20/20

    Minted .skill blob in the registry

  • Digest published15/15

    sha256 pin published on skillerr.com

  • Permissions declared15/15

    Capabilities / permissions declared

  • Source attested0/10

    No submitter or source URL

  • Transparency log0/15

    Not anchored

  • Release profile0/15

    Release profile gates not met

  • Registry signal5/5

    15 install(s) on registry

  • Not revoked5/5

    No revocation on log

Not a malware scan. Not “safe to run.” Transparent registry signals only. Inclusion is not endorsement.

Install

npx @skillerr/add skillerr/score-signals

Registry pin: sha256:14e3ba4e214a… (shown on TrustView; install by name resolves to this sealed blob)

Sealed install targets

Writes score-signals.skill (sealed ZIP) plus optional skillerr.json. Not a bare SKILL.md.

Download score-signals.skill

Sealed ZIP with digest + skillerr.json. Not a bare SKILL.md.

Free skills install with npx @skillerr/add. Sign in for account history.

Sealed artifact

Install and download deliver a digest-pinned open .skill package (docs.skillerr.com). Pasting a SKILL.md from the internet has none of this proof.

  • ✓

    score-signals.skill ZIP

    Open-protocol .skill ZIP (skill.json + workflow), not a public raw SKILL.md URL

  • ✓

    Registry digest pin

    sha256:14e3ba4e214a…

  • ✓

    Inspect before run

    TrustView on skillerr.com; SKILL.md is a lossy adapter inside the package

  • ○

    Permissions surface

    Capabilities not declared

  • ✓

    Transparency log

    Inclusion proof in the skillerr.com registry log

Permissions map

This skill has not marked capabilities as declared. Treat the map as incomplete.

  • noneNo elevated capslow

    No fs / net / shell declared beyond default agent context

Declarations for humans and agents. Not a runtime sandbox guarantee.

Integrity verify

Confirm the digest on this page matches the live registry. This checks identity pins only: not a security scan.

expect sha256:14e3ba4e214ae80e…
npx @skillerr/add info skillerr/score-signals
curl -sS https://skillerr.com/api/v1/skills/skillerr/score-signals | grep -o '"digest":"[^"]*"'

Summary

Explain Skill Score v2 factors from protocol scoreSignals.

Description

Walk through sealed, digest, permissions, source, Rekor, release profile, and registry signals that feed Skill Score. Honest WIP: not a security scan.

Tags

scoretrustmetasignals
Inspect package contentsSKILL.md inside .skill

TrustView preview on skillerr.com. Install and download serve the sealed package: there is no public raw SKILL.md URL.

---
name: score-signals
title: Score Signals
description: Explain Skill Score v2 factors from protocol scoreSignals.
---

# Score Signals

Walk through sealed, digest, permissions, source, Rekor, release profile, and registry signals that feed Skill Score. Honest WIP: not a security scan.

Verified

Public Ledger
Not anchored

Transparency

published_at
2026-07-20T18:00:00.000Z
version
0.1.0
updated_at
2026-07-20T18:00:00.000Z
license
MIT
minted_at
2026-07-20T18:27:53.024Z
permanence
in registry log
digest
sha256:14e3ba4e214ae80ee3c7fbcff09e4838726decd8e4ae2b4a4081a10995acec97

Public permanence uses Sigstore Rekor. The ledger link is shown when a real logIndex was recorded at mint. Green Anchored requires an offline inclusion proof verify. Catalog claims alone never paint Anchored. Inclusion is not endorsement.