carbone-skill — 1 skill

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-18

Run UTC: 2026-10-18T09:12:27Z
Reviewed: 2026-10-18
Published: 2026-10-18
Updated: 2026-10-18

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 1 skill declaration. Ran 31 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-18T09:12:27Z, tree 47ccc3932da9f56b5fa80e740394f4269c502dbc40c4a939f2c34e1b639ecaed.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: carbone-skill — 1 skill
slug: source-skills-7017d869e0ebfec31a405d9c
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 1 skill declaration. Ran 31 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): carbone"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/carboneio/carbone-skill.git
documentation url: https://github.com/carboneio/carbone-skill.git
commit: 25207b3f52b97872312eab997ee5c62cc5c9542d
tree sha256: 47ccc3932da9f56b5fa80e740394f4269c502dbc40c4a939f2c34e1b639ecaed
file sha256: {".claude-plugin/marketplace.json":"4820998dff6891f9fd2b66f1cef09aebf633978dcfc2257bcb33983d385350be",".claude-plugin/plugin.json":"66303d439cc5bfbdf73486c31b4a3ab0b8112b5bc7d2ab571ec4c444406e1da5",".github/ISSUE_TEMPLATE/documentation-error.md":"20906ce52dbaf6c56fb59d84346b15ef392c05b62ecc271b7c8fd4c16d113dfb",".github/ISSUE_TEMPLATE/missing-coverage.md":"69cff5756d99846bae67fc01d0afaa13e8b583554b612e29647982d5869d4da4",".github/workflows/release.yml":"939f5088ba319ffe8d3f65525a814cd21a6f350709af53a7d27100fb9f5688d1",".gitignore":"d12fcdee30beb0353820e06b1d0c1118437f8b64471b36ea1b904d2d7c56cfea","CHANGELOG.md":"8165be13ca24d60ea460096405f814ef55b90bc105e201abed1a84ec80ded3e9","CLAUDE.md":"9f6be9c817782714cc50f90bce2f34e955a2ce07861961ce79787f82499df778","CONTRIBUTING.md":"108ad82c909c179803419ce2d503bb62a28084dc6b483fdf725cdfd6e09b6fce","LICENSE":"b46541d483e65b3bc02453edc67c31edee1f60836b0aaf379e1c1629f462c111","README.md":"b4711f5e04e76b9d573c82c8454922878c44f18f96109d98c1cfe645c80f703d","carbone/SKILL.md":"0ff1549ce6a435253278e0dec5e9ef424bf36ecafaf197ca9d51d138704bab5b","carbone/references/advanced-features.md":"74e9680faeeff18f398daa3e454dc1e78ffea0529d51056194ffd4390f55782f","carbone/references/aliases.md":"a1c5aa073693ef011e552e3ae41968843288db5b2cbe92829384ab863f94c6be","carbone/references/docx-tips.md":"4079f53ad098d6faffd4f6a70cdc805bc722183f4afaec1471a043de81b72ef5","carbone/references/format-support.md":"2b36dd8e0f7d853762a32e1171760fdd98e76e9c6f57d931df3467849aee5c62","carbone/references/formatters.md":"a4012bddb6d6cb1b1b40cdf4c4cfd944ddba2088f987e7b73f0a98b84ae08a2d","carbone/references/html-templates.md":"bef092e0e931b6d93c6a017d234d73f0b5dbc560962b7bb2626427653c09b490","carbone/references/in-template-options.md":"61ea6ebd228d41b2ffab02100cf9207caeff76f322c14ab22848838f2cb11b50","carbone/references/loops-advanced.md":"2bfbcfb1024ce0874f816f4b1b780c5bc5c7e0b78c7f298573c5e2707975e803","carbone/references/markdown-templates.md":"f6fe5c2823a667bda821c042a75d9dd40e3e23ebf718e50d9b9f6a2a7fd8b600","carbone/references/pdf-templates.md":"9ea3881f6480842a4fd281e818f820449d8b47ba0e91f64552a230e7a0f9a2c2","carbone/references/practical-examples.md":"cca8546981e4f1f06ed9b8935be98fbb76e99f326f18747b6658af3194e47bb6","carbone/references/set-patterns.md":"58ec70510d3f385b75600766b9e5e26c0705762b6cc40d7e5ad7e0c429a174d7","carbone/references/upgrade-guide.md":"331769bc86af89e050de7a92d916f93a9f04a0e8fd896f550291a8136319b45c","carbone/references/xlsx-tips.md":"7a1f8462dc229c0f3893fb940af9c0f11a1b8c5d0965c4a7ffdab9e54d6928ae"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-18T09:12:27Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-18
reviewed date: 2026-10-18
published date: 2026-10-18
modified date: 2026-10-18
reviewer: Machine-checked
harness version: toolwitness harness at commit ce8871b5a9b1043f5ad9a568fb833cf91f333efa
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 31 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-18T09:12:27Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"carbone-skill — 1 skill","operatingSystem":"Not exercised","softwareVersion":"25207b3f52b97872312eab997ee5c62cc5c9542d"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 skill declaration. Ran 31 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): carbone"}],"evidence_sha256":{"LOCK.json":"fd9beba59ed11b5769c8b0d4522057dbd831e087993f8d0a00231bf48251a5d6","commands.json":"13a70133d51b33617a363a7d0bd0b5107768e4717f93ebed923767bf1af7c444","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"666dda2b84b10d07a3d81c82d602671e106de270fd07e0e659866ec9b0f23998","listing.json":"519ca2b2b53c6324baacc14d1ddcd6b927820727cb5b3bfc9f325be50d0c2cdd","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"88dcaede376a078d44532ecf538d62e5e0b6ae2abebd1f318e9612416751329a","date":"2026-10-18","gates":"af7ef1d1eeede8fc171c8af85e3ddf2b160498993731c5e9632724f6ce6d64bb","grok":"bd395be6c9bbe6f231740413239028e890d65ed99b0b4c1ef557e12209970a6b","kind":"machine-checked","reviewed_sha256":"491da1522298e09521b148681374244ccfa382c19825d243f59a83ae6956044d","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 31 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "carbone/SKILL.md",
        "name": "carbone",
        "description": "Carbone templating — merge JSON data into a DOCX (Word), XLSX (Excel), PPTX (PowerPoint), ODT, ODS, HTML, Markdown or PDF template, plus text/XML formats such as CSV, TXT, SVG and IDML. Use this skill to design, validate, fix or explain Carbone syntax: tags, loops, conditions, formatters, aggregators, aliases, and mapping a JSON dataset onto a template. Trigger on: the tag syntax {d.} {c.} {#alias} {$alias} {t()} {o.} or any :formatter chain; a template error such as a missing [i+1]; whether a format supports a feature or what it converts to; filling a PDF form (AcroForm); adding a chart, barcode or dynamic image to a document; dynamic Excel formulas; upgrading between Carbone versions; and any request to build an invoice, contract or report from JSON, mail-merge data into a document, fill a template with data, or convert a document (HTML or Markdown to PDF, DOCX to PDF) — even when Carbone is not named.\n",
        "files": {
          "carbone/SKILL.md": "0ff1549ce6a435253278e0dec5e9ef424bf36ecafaf197ca9d51d138704bab5b",
          "carbone/references/advanced-features.md": "74e9680faeeff18f398daa3e454dc1e78ffea0529d51056194ffd4390f55782f",
          "carbone/references/aliases.md": "a1c5aa073693ef011e552e3ae41968843288db5b2cbe92829384ab863f94c6be",
          "carbone/references/docx-tips.md": "4079f53ad098d6faffd4f6a70cdc805bc722183f4afaec1471a043de81b72ef5",
          "carbone/references/format-support.md": "2b36dd8e0f7d853762a32e1171760fdd98e76e9c6f57d931df3467849aee5c62",
          "carbone/references/formatters.md": "a4012bddb6d6cb1b1b40cdf4c4cfd944ddba2088f987e7b73f0a98b84ae08a2d",
          "carbone/references/html-templates.md": "bef092e0e931b6d93c6a017d234d73f0b5dbc560962b7bb2626427653c09b490",
          "carbone/references/in-template-options.md": "61ea6ebd228d41b2ffab02100cf9207caeff76f322c14ab22848838f2cb11b50",
          "carb

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-18