📦

treg

Name: treg
Author: superdesigndev

v0.11.0 مراجعة المحتوى r1 حرج ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات🔑 متغيرات البيئة

Access Live Data and Connected APIs with treg

Agents often lack credentials for live data and external APIs. treg searches priced endpoints and calls approved services through one authenticated interface.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

لا تثبّت هذا Skill تلقائيًا.

تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "treg" from https://skillstore.io/skills/superdesigndev-treg.md and its manifest at https://skillstore.io/api/skills/superdesigndev-treg/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/superdesigndev-treg.md manifest موقَّع GET /api/skills/superdesigndev-treg/manifest lockfile موقَّع GET /api/skills/superdesigndev-treg/lockfile

اختبرها

جارٍ استخدام "treg". Find a provider for subreddit posts, but do not spend any balance.

النتيجة المتوقعة:

I found matching endpoints and compared their required inputs, observed reliability, speed, and price. No endpoint was called.

جارٍ استخدام "treg". Prepare a company enrichment request and use the least expensive reliable provider.

النتيجة المتوقعة:

The selected provider accepts the company domain you have and has stronger observed reliability. The listed call price requires your confirmation.

جارٍ استخدام "treg". Create a plan for a limited CI agent that can read Stripe balances.

النتيجة المتوقعة:

Use a dedicated agent identity, allow only the Stripe tool, grant read-only access, set a daily cap, and review the audit log.

التدقيق الأمني

حرج

v1 • ١٤‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

The audit confirms remote pipe-to-shell installation, credential collection, hidden configuration access, and broad authenticated command execution. Many backtick and URL matches are documentation-only false positives, but the confirmed critical and high-risk workflows require strong user consent and verification.

الملفات التي تم فحصها

271

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (6)

حرج

SKILL.md:13

Pipe to shell pattern

curl -fsSL https://treg.to/install.sh | sh # 1. the CLI (skip if `treg --version` already works)

The skill explicitly pipes an unpinned HTTPS response into sh, allowing remote code to execute without prior inspection.

حرج

SKILL.md:72

Pipe to shell pattern

curl -fsSL https://treg.to/install.sh | sh # installs the CLI + points it here

The repeated installation command pipes a mutable remote script directly into sh.

مرتفع

SKILL.md:177

Environment file access

**Bulk (the fast path):** point treg at a directory — it detects provider keys in the `.env` AND

The bulk workflow scans a chosen directory for provider keys in .env and then registers selected credentials remotely.

مرتفع

SKILL.md:54-60

Approval Weakening Instruction

The skill tells agents to request blanket approval for treg and avoid per-command confirmation, even though later commands upload secrets and change accounts.

The instruction explicitly labels additional confirmation as friction and asks for treg approval as a whole.

مرتفع

SKILL.md:176-181 SKILL.md:197-205 SKILL.md:219-231

Third-Party Credential Collection and Custody

The workflows discover environment keys, read secret files or CLI keychains, and send credentials or OAuth material to treg for storage and injection.

The text directly describes .env detection, secret upload, keychain extraction, and hosted OAuth token capture.

مرتفع

SKILL.md:152-174

Broad Credentialed Action Surface

The proxy relays arbitrary HTTP methods, headers, cookies, and bodies, while treg run executes vendor CLIs locally or remotely with injected credentials.

The documented interface supports state-changing HTTP requests and arbitrary vendor CLI arguments under organizational credentials.

عناصر مراجعة القدرات (34)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

حرج

SKILL.md:12-13

Ruby/shell backtick execution

```bash

The fenced block begins an installation sequence that downloads a remote script, signs in, and changes agent configuration.

حرج

SKILL.md:13-16

Ruby/shell backtick execution

curl -fsSL https://treg.to/install.sh | sh # 1. the CLI (skip if `treg --version` already works)

This command downloads an unpinned remote script and immediately executes it, followed by login and MCP installation.

حرج

SKILL.md:71-76

Ruby/shell backtick execution

```bash

This fenced block installs remote code and performs authentication, including a token-based non-interactive login option.

حرج

SKILL.md:13

Hardcoded URL

curl -fsSL https://treg.to/install.sh | sh # 1. the CLI (skip if `treg --version` already works)

The URL supplies an installation script that is executed immediately without a pinned digest or signature verification.

حرج

SKILL.md:72

Hardcoded URL

curl -fsSL https://treg.to/install.sh | sh # installs the CLI + points it here

The external URL is the source of a remote installer that is piped directly into a shell.

مرتفع

SKILL.md:58-59

Ruby/shell backtick execution

shell commands, request `treg` **once**, as a whole, rather than a prompt per subcommand. Halting

The skill asks for blanket approval of every treg subcommand, reducing oversight for later commands that spend funds, upload secrets, or change accounts.

مرتفع

SKILL.md:88

Ruby/shell backtick execution

- "call it" → `call` with the endpoint id, or `<tool-name>/<path>` for one of the team's own tools

The call tool can invoke catalog endpoints or team tools, including state-changing upstream API operations with injected credentials.

مرتفع

SKILL.md:167-168

Ruby/shell backtick execution

**Run a registered CLI tool** — the command-line complement to `treg call` (which proxies HTTP

The skill directs execution of registered vendor CLI tools with organizational credentials, creating a broad command and account-action surface.

مرتفع

SKILL.md:168-169

Ruby/shell backtick execution

APIs). `treg run <tool> -- <cli args>` runs a vendor CLI (stripe, gh, vercel, gcloud...) with the ke

treg run forwards arbitrary CLI arguments to vendor tools and injects credentials, enabling authenticated operations chosen at runtime.

مرتفع

SKILL.md:169-170

Ruby/shell backtick execution

injected, so you never hold or log into it. Two tiers: `--local` (default, runs on this machine) ·

The documented local tier executes vendor commands on the user's machine, while the server tier executes them remotely with credentials.

مرتفع

SKILL.md:171-174

Ruby/shell backtick execution

```

The fenced examples execute Stripe locally and another credentialed CLI on the registry server.

مرتفع

SKILL.md:180-181

Ruby/shell backtick execution

treg upload # both sides of the cwd; `treg upload env|skills --dir <d>` to res

The upload command scans the working directory and can register selected environment secrets and skills with the external treg service.

مرتفع

SKILL.md:186-192

Ruby/shell backtick execution

```bash

The fenced sequence creates local files, initializes a skill, and registers its recipe, secret, and tool with the remote service.

مرتفع

SKILL.md:192-196

Ruby/shell backtick execution

Call it: `treg call posthog api/projects/@current` (upstream: https://us.posthog.com)

This range includes commands that initialize and remotely register a skill bundle containing a recipe, secret, and API tool.

مرتفع

SKILL.md:200-206

Ruby/shell backtick execution

```bash

The fenced commands read an API key or secret file, upload the secret, and register authenticated upstream tools.

مرتفع

SKILL.md:208-216

Ruby/shell backtick execution

```bash

The fenced sequence scans a hidden Claude skill directory, captures secret files, and pushes the resulting credential bundle remotely.

مرتفع

SKILL.md:229-230

Ruby/shell backtick execution

- **Manual:** do your own OAuth locally, then `treg secret add gsc --file token.json --kind oauth`.

The command uploads a locally obtained OAuth token file to treg for storage and later injection.

مرتفع

SKILL.md:230-232

Ruby/shell backtick execution

- **Hosted connect:** `treg oauth connect gsc --client-secret client_secret.json --scopes <scope>`

The hosted OAuth command supplies a client-secret file to treg and delegates token capture to its callback service.

مرتفع

SKILL.md:235-240

Ruby/shell backtick execution

```bash

The fenced administrative commands can remove tools, secrets, and skills or actively refresh and probe credentials.

مرتفع

SKILL.md:242-247

Ruby/shell backtick execution

```bash

The fenced commands create organizations, invite members, and switch account context, causing consequential remote state changes.

مرتفع

SKILL.md:250-255

Ruby/shell backtick execution

```bash

The fenced commands mint, scope, rotate, and revoke agent authentication tokens, which are security-sensitive account operations.

مرتفع

SKILL.md:232

Hardcoded URL

One-time setup: add `https://treg.to/oauth/callback` to your OAuth app's redirect URIs.

The OAuth redirect sends authorization results to treg, allowing the service to capture and retain delegated tokens.

مرتفع

SKILL.md:28

Hidden file in home directory

this same skill into `~/.claude/skills/treg/`. It is harmless, but it duplicates what this plugin

The installer writes a skill copy into the hidden ~/.claude configuration tree, modifying agent behavior outside the current workspace.

مرتفع

SKILL.md:209

Hidden file in home directory

treg skill scaffold ~/.claude/skills/google-ads --out gads.json

The command scans a hidden Claude skill directory and captures its recipe and secret files into a bundle.

مرتفع

SKILL.md:28

Hidden file access

this same skill into `~/.claude/skills/treg/`. It is harmless, but it duplicates what this plugin

The setup modifies the hidden ~/.claude skills directory and explicitly leaves a duplicate skill installation there.

مرتفع

SKILL.md:201

Hidden file access

treg secret add posthog-key --value "$POSTHOG_API_KEY" # or --file ./.secret/token.json

The command can read a token from ./.secret/token.json and send it to treg for storage.

مرتفع

SKILL.md:209

Hidden file access

treg skill scaffold ~/.claude/skills/google-ads --out gads.json

The scaffold command traverses ~/.claude/skills/google-ads and captures every .secret file described by the following lines.

مرتفع

SKILL.md:201

Generic API/secret keys

treg secret add posthog-key --value "$POSTHOG_API_KEY" # or --file ./.secret/token.json

The command reads POSTHOG_API_KEY from the environment and uploads its value to the external treg service.

متوسط

SKILL.md:78

Ruby/shell backtick execution

email — see them with `treg invites`, accept with `treg accept` (or `treg org join <code>`). Switch

The documented commands accept organization invitations, join organizations, and switch the active organization, which changes account state.

متوسط

SKILL.md:79-83

Ruby/shell backtick execution

teams: `treg org switch <slug>`.

The command changes the active organization used by all later operations, so accidental execution can affect the wrong account.

متوسط

SKILL.md:106-112

Ruby/shell backtick execution

```bash

The fenced commands invoke external catalog APIs and can spend the team's prepaid balance, although the skill also requires price disclosure.

متوسط

SKILL.md:261-262

Ruby/shell backtick execution

The invitee signs in with the invited email and runs `treg accept` — no code handling needed

The accept command changes organization membership for the signed-in account.

متوسط

SKILL.md:262-264

Ruby/shell backtick execution

(the code path still works: `treg org join <code>`). A brand-new invitee also gets their own

The join command uses an invitation code to change organization membership and account context.

متوسط

SKILL.md:157

Hardcoded URL

through treg: GET https://treg.to/call/https://api.intercom.io/conversations?per_page=5

The example routes an upstream API request through treg, exposing request metadata and content to an additional external service.

عوامل الخطر

⚙️ الأوامر الخارجية (50)

🌐 الوصول إلى الشبكة (11)

SKILL.md:13 SKILL.md:49 SKILL.md:72 SKILL.md:83 SKILL.md:156 SKILL.md:157 SKILL.md:192 SKILL.md:202 SKILL.md:204 SKILL.md:232 SKILL.md:270

📁 الوصول إلى نظام الملفات (5)

SKILL.md:28 SKILL.md:209 SKILL.md:28 SKILL.md:201 SKILL.md:209

🔑 متغيرات البيئة (2)

SKILL.md:201 SKILL.md:205

الأنماط المكتشفة

Pipe to shell pattern×2

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/superdesigndev-treg/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/superdesigndev-treg/security.svg)](https://skillstore.io/skills/superdesigndev-treg?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/superdesigndev-treg?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/superdesigndev-treg/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/superdesigndev-treg.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

superdesigndev. (2026). treg security audit report (audit version 1) [Author version 0.11.0]. Skillstore. https://skillstore.io/skills/superdesigndev-treg/audits/1

اقتباس BibTeX

@techreport{superdesigndev-superdesigndev-treg-2026,
  author = {superdesigndev},
  title = {treg security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/superdesigndev-treg/audits/1},
  note = {Author version 0.11.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "treg security audit report (audit version 1)"
version: "0.11.0"
type: report
authors:
  - name: "superdesigndev"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/superdesigndev-treg/audits/1"
identifiers:
  - type: other
    value: "skillstore:superdesigndev-treg:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

100

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Research live market data

Find and compare endpoints for rankings, backlinks, trends, advertising, or company enrichment before making approved calls.

Connect internal API accounts

Automate scoped agent tasks

Create a limited agent identity, allow selected tools, set daily caps, and review its call history.

جرّب هذه الموجّهات

Find a data endpoint

Search treg for an endpoint that provides [data type]. Show required inputs, price, and reliability. Do not call it yet.

Compare providers

Compare treg providers for [task] using my available inputs. Rank them by compatibility, reliability, price, and recent success.

Run an approved catalog request

Prepare a treg call for [endpoint] with [inputs]. State the exact price and request confirmation before spending any balance.

Design a restricted team integration

Plan a treg integration for [service]. Use minimal scopes, read-only access, explicit tool allowlists, daily caps, and item-level secret consent.

أفضل الممارسات

Review endpoint inputs, observed reliability, price, and recent success before calling.
Confirm every paid or state-changing action with the user immediately before execution.
Use dedicated identities, minimal scopes, tool allowlists, daily caps, and audit logs.

تجنب

Do not pipe a remote installer into a shell without verification.
Do not grant blanket approval for every treg command.
Do not scan or upload credentials without an exact preview and item-level consent.

الأسئلة المتكررة

What does treg provide?

It provides a searchable API catalog, MCP tools, a CLI, and access to team-registered tools with credential injection.

Does every call cost money?

No. Catalog calls served with treg credentials can spend prepaid balance. Calls using a team's own registered credentials are described as unmetered.

Can treg access existing team APIs?

Yes. Administrators can register API bases and credentials, then authorized agents can proxy requests through treg.

Does treg handle secrets?

Yes. It can store environment values, token files, OAuth material, and CLI authentication for later server-side injection.

Can treg change connected accounts?

Yes. Proxied HTTP methods and vendor CLI commands can perform state-changing actions when the connected credential permits them.

What should users verify before installation?

Verify the installer source and integrity, review requested permissions, and understand credential storage, retention, and deletion policies.

تفاصيل المطور

المؤلف

superdesigndev

الترخيص

MIT

إصدار المؤلف

v0.11.0

مراجعة Skillstore

المستودع

https://github.com/superdesigndev/treg/tree/bc0c6111d1f25f802b3675a5d8ecf7267650bd9b/skills/treg

مرجع

8d471fa6bb01c43c43d332bf9105df157c067391

حداثة الصيانة

١٦‏/٨‏/٢٠٢٦

الاستخدام

0 تنزيلات · 1 مشاهدات

بنية الملفات

📄 SKILL.md