validate_skill
shallowio.github.maco144/nullcone · Verify this server
Synchronous SKILL IOC lookup — call this before loading or invoking any MCP tool/skill to check it against the Nullcone threat feed. This is the pre-invocation enforcement hook. Returns an allow/warn/block decision based on whether the skill hash is a known-malicious indicator. Args: skill_hash: SHA256 of the skill manifest (preferred identifier) skill_name: Human-readable skill name (for logging) manifest_url: URL of the skill manifest (fallback if hash unknown) Returns: risk: "clean" | "suspicious" | "malicious" action: "allow" | "warn" | "block" confidence: 0-100 signature_id: DB id of matching IOC (if found) family_name: Associated malware family (if known) reason: Human-readable explanation
1 trials · measured 8 days ago
validate_skill scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against io.github.maco144/nullcone, measured 25 Aug 2026 under methodology v0.2.0. Every measured component scored 100.
Component breakdown
| Component | Weight | Value |
|---|---|---|
| Reliability | 35% | not applicable |
| Schema integrity | 25% | 100.0 |
| Failure behaviour | 15% | not applicable |
| Latency | 15% | not applicable |
| Concurrency | 10% | not applicable |
Tool details
- Transport
- remote
- Credential class
- unreachable
- Category
- Travel & local
- Input schema
- not declared
- Output schema
- not declared
- Side-effect classification
- unclassified
Score history
| Day | Score | Tier | Methodology |
|---|---|---|---|
| 2026-08-25 | 100.0 | shallow | v0.2.0 |
Probe evidence
| Probe | Outcomes |
|---|---|
| schema_integrity | pass: 1 |
Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.
Embed this score
Available for every tool, scored or not — not a verification perk. Always links back to this page.
[](https://vouch.tools/tools/c95fa1f4-2633-4f85-9f20-c4b3c18de45f)