evaluate-new-port

evaluate-new-port is a Secrets & supply chain skill for AI agents, published by microsoft in the vcpkg repository on GitHub. Skillspace rates evaluate-new-port C (71/100) and it passed the safety scan; a judge model has also reviewed it.

Audit a vcpkg port locally. Reads the port metadata and build recipe, installs the port, inspects extracted sources and installed files, and produces a report covering license risks, vendored code, optional dependencies, and other port review suggestions.

Grade
C
Quality
71 / 100
Safety
Passed
GitHub stars
27,247

Placed #6 of 6 in the judged category final for Secrets & supply chain.

Not launch-quality. It is graded C with a clean safety verdict, but our quality filters exclude it: a model that read it found it written only for the repository it lives in. So it is not in our launch-quality set, the skills our MCP server searches and recommends. How launch-quality is decided

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Our review

Architecture
94 / 100
Maturity
Structured: ships references or scripts
Security scan
No issues found
License
MIT
Adoption
Adopted by 0 other repositories, in 0 collections
Scope
Repo-internal: written for the repository it lives in. Reviews ports in vcpkg's own registry; maintainer workflow

Judge review

Placed #6 of 6 in the judged category final for Secrets & supply chain.

  • Trigger8282
  • Instructions8888
  • Specificity9090
  • Safety8585
  • Disclosure5555
  • Maintenance6565
Careful, concrete build-and-inspect workflow with real unsupported-platform handling, but the whole audit lives in one long file with no split into references for the vendoring/license detail it covers.

Not checked yet

  • No blind task eval yet
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.