vanguard-advisor-tools — 1 skill

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked ·

Run UTC
Reviewed
Published
Updated

Observations · Limitations · Evidence

Works with:

Works with Claude Code
Works with Codex
Works with Gemini CLI
Works with Grok Build

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 1 skill declaration. Ran 10 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-20T00:19:03Z, tree 9760d1cb683157684387e1ae78a7c61f2bc3c8aaa5dc325757ff076b81426db8.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record
name
vanguard-advisor-tools — 1 skill
slug
source-skills-7195c385a63a0a994eb0a274
type
skills
category
developer-tools
example
false
evidence state
pinned_source_listing
stamp
Pinned source listing — machine-checked
summary
Pinned source declarations and file hashes were listed.
outcome
Listed 1 skill declaration. Ran 10 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results
["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): model-prep"]
task
What declarations and files are present in this pinned source?
setup
Git blob acquisition followed by static source inspection.
limitations
Scope: acquisition and static inspection. Command results: commands.json.
source url
https://github.com/Vanguard-oss/vanguard-advisor-tools.git
documentation url
https://github.com/Vanguard-oss/vanguard-advisor-tools.git
commit
328fe9f61fe7a375b87a6492e265b4a5a955b0ce
tree sha256
9760d1cb683157684387e1ae78a7c61f2bc3c8aaa5dc325757ff076b81426db8
file sha256
{".claude-plugin/plugin.json":"0e86c5bccba56ead1affef7866dcc402dcfbf32919736c4bc34ca402b989103d","skills/model-prep/SKILL.md":"644822466e6c7aa24ca0b6f939d042750a429df518194f210416a32dda38a362","skills/model-prep/reference/client-output.md":"d550d83d90e9203403c7e285a24daf9527868cab34b9455e46d521b89867dc9c","skills/model-prep/reference/one-pager.md":"8b6e7fc1e122fde01dc004a454ebd28870e7ac38fb8e96b46cf944977e41da4c","skills/model-prep/scripts/make_model_pdf.py":"072c70631867b9b2dcbc2183bdc8857ee67032ae279e628c83c7d340680876b2"}
lockfiles
["LOCK.json"]
utc date
2026-10-20T00:19:03Z
source date
2026-10-16
discovered date
2026-10-16
retested date
2026-10-20
reviewed date
2026-10-20
published date
2026-10-20
modified date
2026-10-20
reviewer
Machine-checked
harness version
toolwitness harness at commit 80347ac5c68b1268b011b015a8797984151a16e7
claude code version
Not applicable: static source inspection (commands.json).
model id
Not applicable: static source inspection (commands.json).
scanner version
Not applicable: static source inspection.
rulepack version
Not applicable: static source inspection.
agents
[]
commands
["Ran 10 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list
["Not applicable: static source inspection (commands.json)."]
history
["2026-10-20T00:19:03Z: pinned source inspection"]
application
{"applicationCategory":"DeveloperApplication","name":"vanguard-advisor-tools — 1 skill","operatingSystem":"Not exercised","softwareVersion":"328fe9f61fe7a375b87a6492e265b4a5a955b0ce"}
review input
{"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 skill declaration. Ran 10 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): model-prep"}],"evidence_sha256":{"LOCK.json":"22fe8b72380c1ee4baf3f06ec9abebec4e8b5d7452916d1b343462817089827d","commands.json":"31ba6191656524fd4d385578756670a3c81d9f866b7cbdf26555b5ecce69e93d","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"144690fa26ab6635f1c8253ff9730d852f5aafd89096018ed82464c3540699cb","listing.json":"f035f7bbabdf690b1fdfc32c711136c32a58f1b147d01e036c049334cd108e41","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review
{"codex":"0e7151ed35cfd1f0732d90cdc01cfe81ec64907cdc9c0ee9c31bb228ac25f087","date":"2026-10-20","gates":"74c0eea647266c77e74b8b890dfc5a6784f4c9fb9024994cf3e71b87116b5b3d","grok":"001f2816dec6b047a3260dede2e51e68b5979fe689a1494b1a4b7d5bd29e0971","kind":"machine-checked","reviewed_sha256":"1d314deb8698addec9d20e558d01ea00edab49b6c8b04f86c20ba197ccf2c079","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 10 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/model-prep/SKILL.md",
        "name": "model-prep",
        "description": "Help a financial advisor find Vanguard model portfolios that match a client need, understand how those models are built, and produce a meeting-ready advisor one-pager — as text and as a styled PDF — with optional client-facing material. Use when an advisor asks about model portfolios, model series, prebuilt or off-the-shelf portfolios, outsourcing portfolio construction, wants a PDF of a model one-pager, or wants to prepare for a client conversation about a model approach. Also use when an advisor describes a client need or goal — income, growth, retirement, \"something safer\" — and asks what portfolio to show, present, put in front of, or build for them, even when they never say the word \"model\" and name no specific funds. That phrasing is how advisors actually open this request. This skill covers model portfolios rather than individual funds, so weighing two or more specific tickers against each other is a fund-comparison question and outside its scope.",
        "files": {
          "skills/model-prep/SKILL.md": "644822466e6c7aa24ca0b6f939d042750a429df518194f210416a32dda38a362",
          "skills/model-prep/reference/client-output.md": "d550d83d90e9203403c7e285a24daf9527868cab34b9455e46d521b89867dc9c",
          "skills/model-prep/reference/one-pager.md": "8b6e7fc1e122fde01dc004a454ebd28870e7ac38fb8e96b46cf944977e41da4c",
          "skills/model-prep/scripts/make_model_pdf.py": "072c70631867b9b2dcbc2183bdc8857ee67032ae279e628c83c7d340680876b2"
        }
      }
    ],
    "hooks": [],
    "executions": []
  }
}
Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated