Loading listing…
Every scan of this listing, newest first.
Every rescan is logged, even when nothing changed.
By trailofbits
Every scan of this listing, newest first.
Every rescan is logged, even when nothing changed.
Nothing new reaches your agent until a person has looked at it.
A skill has no tools of its own. It’s instructions, plus any scripts in its folder, that your agent loads when a task needs them, so it can do whatever your agent is allowed to do. We scan the whole SKILL.md for instructions that hide what they do, reach for credentials, run downloaded code or send data out.
Scanned on every change, and again when our rules improve.
Every scan of this listing, newest first.
Every rescan is logged, even when nothing changed.
Passed
Safe to install in every agent it supports. Runs in your agent, as instructions.
We read the SKILL.md your agent loads, and the listing for a959c2a. 6 checks, no findings.
Runs whatever a URL returns, with no chance to read it first. SKILL.md, line 76
…port CC="clang-15" export CXX="clang++-15" ``` Install Rust: ```bash curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh ``` Install additional dependencies: ```bash apt install libssl-dev …
A skill has no tools of its own. It’s instructions, plus any scripts in its folder, that your agent loads when a task needs them, so it can do whatever your agent is allowed to do. We scan the whole SKILL.md for instructions that hide what they do, reach for credentials, run downloaded code or send data out.