Loading listing…
Every scan of this listing, newest first.
Every rescan is logged, even when nothing changed.
By AgriciDaniel
Every scan of this listing, newest first.
Every rescan is logged, even when nothing changed.
Nothing new reaches your agent until a person has looked at it.
A skill has no tools of its own. It’s instructions, plus any scripts in its folder, that your agent loads when a task needs them, so it can do whatever your agent is allowed to do. We scan the whole SKILL.md for instructions that hide what they do, reach for credentials, run downloaded code or send data out.
Scanned on every change, and again when our rules improve.
Every scan of this listing, newest first.
Every rescan is logged, even when nothing changed.
Passed
Safe to install in every agent it supports. Runs in your agent, as instructions.
We read the SKILL.md your agent loads, and the listing for 6205a95. 6 checks, no findings.
Runs whatever a URL returns, with no chance to read it first. SKILL.md, line 252
…t, or logs. ## Installation, uninstall, and secret safety - Refuse `curl ... | bash`, `wget ... | sh`, `irm ... | iex`, and every other remote pipe-to-…
Runs whatever a URL returns, with no chance to read it first. SKILL.md, line 252
…tallation, uninstall, and secret safety - Refuse `curl ... | bash`, `wget ... | sh`, `irm ... | iex`, and every other remote pipe-to-shell install. Do…
A skill has no tools of its own. It’s instructions, plus any scripts in its folder, that your agent loads when a task needs them, so it can do whatever your agent is allowed to do. We scan the whole SKILL.md for instructions that hide what they do, reach for credentials, run downloaded code or send data out.