Is static-f20b27 safe to install?

SaferSkills independently audited static-f20b27 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

quantum-chemistry/dft-vasp/static/SKILL.md · 1 file

quantum-chemistry/dft-vasp/static/SKILL.md1.4 KB · Markdown

name: static

description: Prepare VASP static SCF input tasks from a user-provided structure and essential DFT settings. Use when the user needs single-point electronic structure/total-energy calculations with INCAR generation, KSPACING-based k-point policy (or explicit KPOINTS on request), and POTCAR mapping instructions.

compatibility: Requires a user-provided structure and valid VASP pseudopotential resources/license in the target environment.

catalog-hidden: true

license: LGPL-3.0-or-later

metadata:

author: qqgu

version: 0.1.0

repository: https://vasp.at/

VASP Static SCF (Subskill)

Scope

This skill prepares static SCF tasks only.

It should generate:

POSCAR
INCAR
optional KPOINTS (manual mesh only when requested)
POTCAR mapping/assembly instructions

It should not submit or execute jobs.

Must provide

structure input
ENCUT
k-point policy (KSPACING default or explicit mesh)
ISMEAR / SIGMA
POTCAR mapping for each element

Usually should be explicit

EDIFF
NELM
PREC
LREAL
ISPIN / MAGMOM when relevant
IVDW when relevant

K-point policy

default: KSPACING in INCAR
generate KPOINTS only when user asks for explicit mesh

Expected output

task directory with generated input files
settings summary and assumptions
unresolved choices for user confirmation
handoff note to dpdisp-submit if execution is requested

static-f20b27— agent skill

Is static-f20b27 safe to install?

VASP Static SCF (Subskill)

Scope

Must provide

Usually should be explicit

K-point policy

Expected output

Audit the pieces. Scan the whole. Decide.