Fähigkeiten internet-court
📦
internet-court
Inhaltsrevision r1 Kritisch 🌐 Netzwerkzugriff⚙️ Externe Befehle📁 Dateisystemzugriff🔑 Umgebungsvariablen⚡ Enthält Skripte
Agentenhandel mit Internet Court strukturieren
Agentenhandel birgt über viele Protokolle hinweg Risiken bei Zahlungen, Verwahrung und Streitfällen. Internet Court bietet Claude, Codex und Claude Code einen Router für begrenzte Zahlungen, Treuhandabwicklung, Beweismittel und Schlichtung.
Unterstützt: Claude Codex Code(CC)
Diesen Skill nicht automatisch installieren.
Die maßgebliche Richtlinie verlangt vor jeder Installationsaktion eine Prüfung durch einen Bediener.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Agent-Anfrage
Review the Skillstore skill "internet-court" from https://skillstore.io/skills/internet-court-internet-court.md and its manifest at https://skillstore.io/api/skills/internet-court-internet-court/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„internet-court“ wird verwendet. Ich möchte, dass mein Agent eine kostenpflichtige Forschungs-API mit x402 verwendet.
Erwartetes Ergebnis:
- Eine Ermittlungszusammenfassung zum Endpunkt, zum beworbenen Preis, zum Zahlungsweg und zu fehlenden Vertrauensinformationen.
- Eine Empfehlung für einen geschützten Zahlungsweg mit einer begrenzten Berechtigung und ausdrücklicher Zustimmung des Benutzers.
- Ein Hinweis, dass weder Geldmittel noch Befugnisse vorhanden sind, bis der Benutzer sie gewährt.
„internet-court“ wird verwendet. Ein Auftragnehmer-Agent hat einen Bericht verspätet geliefert, und ich benötige einen Weg zur Streitbeilegung.
Erwartetes Ergebnis:
- Ein Plan zur Streitbeilegung mit erforderlichen Beweismitteln, Prüfkriterien und möglichen Ergebnissen.
- Eine Abwicklungsmaßnahme wie Freigabe, Rückerstattung, Einschränkung, Widerruf oder Eskalation.
- Eine an das endgültige Urteil gebundene Anforderung zur Reputationsaktualisierung.
Sicherheitsaudit
Kritischv2 • 19.7.2026 Versionsbericht öffnen
The bundle contains confirmed critical remote installer pipelines, secret-retrieval commands, model-generated eval, plaintext private-key workflows, and silent global plugin installation. Many remaining matches are lexical false positives, but the confirmed supply-chain and credential risks prevent unattended use. Static review was capped at 400/6908 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
376
Gescannte Dateien
59,995
Analysierte Zeilen
52
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (28)
Kritisch
Pipe to shell pattern
curl -L https://foundry.paradigm.xyz | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Kritisch
Pipe to shell pattern
- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Kritisch
Pipe to shell pattern
curl -fsSL https://tempo.xyz/install | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Kritisch
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Kritisch
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/ca
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Kritisch
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/n
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Kritisch
macOS security command
> **Back up the passphrase either way.** Keychain entry: `service=chaingpt-mcp-agent-wallet account=
The command retrieves a wallet passphrase from macOS Keychain and prints it. Agent context, terminal capture, or logs could expose the secret.
Kritisch
Silent Third-Party Skill Installation
The routing skill silently installs a global third-party plugin and immediately loads its instructions. This bypasses informed consent and creates a supply-chain execution path.
The instructions explicitly use a global install command with automatic confirmation, call the process invisible, and immediately apply the installed plugin.
Alle 28 bestätigten Funde anzeigen
Hoch
Certificate/key files
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
Hoch
Certificate/key files
| `identity.key` | Raw 32-byte EVM private key for the buyer wallet. Fallback when `ANTSEED_IDENTITY
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
Hoch
Crypto seed/private key mention
- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
Hoch
Crypto seed/private key mention
The exported agent package is a bearer capability in demo form. Include explicit warnings, keep caps
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
Hoch
Crypto seed/private key mention
- include private key in exported JSON or omit it;
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
Hoch
Crypto seed/private key mention
# Login with wallet private key
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
Hoch
Crypto seed/private key mention
# Enter private key when prompted
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
Hoch
Crypto seed/private key mention
2. **Environment configuration**: Setup `.env` file with private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Hoch
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Hoch
Crypto seed/private key mention
# Your wallet private key (NEVER commit this file!)
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Hoch
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Hoch
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Hoch
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Hoch
Environment file access
2. **Environment configuration**: Setup `.env` file with private key
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Hoch
Environment file access
Create `.env`:
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Hoch
Environment file access
if (!process.env.PRIVATE_KEY) {
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Hoch
Automatic External Disclosure of User Context
The skill requires opening a public repository issue and including the user goal and failure details. It does not require user approval or redaction.
The instructions mandate filing the issue directly when a GitHub tool exists and specify that user goals and failures must be included.
Hoch
Untrusted Peer Message Controls Priority Actions
A peer-controlled marker receives highest priority and causes raw message data to be written and passed to a CLI. Sender and job validation are not required.
The routing table explicitly prioritizes a peer marker before other actions and passes the complete untrusted message through a local file to the CLI.
Mittel
SQLite database file
| `metering.db` | SQLite log of every request the proxy served (model, peer, tokens, USDC). Used by
The local database retains request, peer, token, and payment history. Backups or weak file permissions could expose operational metadata.
Mittel
Untrusted Repository Content Lacks an Instruction Boundary
The workflow clones an escrow-selected repository and directs the agent to read its tests. It does not warn that repository instructions are untrusted data.
The repository URL and commit come from external escrow data, then the agent reads test content without a prompt-injection or trust-boundary safeguard.
Elemente der Fähigkeitsprüfung (52)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Hoch
Dynamic code evaluation with eval()
LLMs can't reliably inspect characters in their input (they hallucinate em dashes, miscount characte
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
Hoch
Dynamic code evaluation with eval()
# Step 2: eval() all checks in one sandbox — deterministic, no hallucination
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
Hoch
Dynamic code evaluation with eval()
ok = eval(c["expression"], {
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
Hoch
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in .env");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in environment variables");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
#### "PRIVATE_KEY not found"
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Hoch
Hidden file in home directory
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session under the home directory. Weak permissions, backups, or unintended reads could expose reusable credentials.
Hoch
Hidden file in home directory
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file is a raw funded-wallet private key. Local disclosure or unsafe backup would permit unauthorized signing.
Hoch
sudo privilege escalation
sudo systemctl restart hermes
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
Hoch
sudo privilege escalation
> Or whatever supervisor you use. Then check the journal: `sudo journalctl -u hermes --no-pager -n 3
The guide invokes sudo to read service logs, which may expose sensitive runtime data. Elevated access should require explicit user approval.
Hoch
sudo privilege escalation
- *Want to swap the routed model without restarting AntSeed* — Edit `model.default` (and `models:` i
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
Mittel
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
Mittel
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
Mittel
Hidden file access
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session in a hidden home directory. Weak file permissions or backups could expose reusable credentials.
Mittel
Hidden file access
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file contains a raw funded-wallet private key. Unintended local access would permit unauthorized signing.
Mittel
Shell command substitution
export ANTSEED_IDENTITY_HEX=$(openssl rand -hex 32)
The command creates a raw wallet key and exports it into the process environment. Child processes or environment capture could expose it.
Mittel
Shell command substitution
WALLET=$(cast wallet address --private-key "$PRIVATE_KEY")
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
Mittel
Shell command substitution
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
Mittel
Temp directory access
2. Clone it to a temporary location: `git clone <url> /tmp/escrow-tests-<uid> && cd /tmp/escrow-test
The guide clones an externally supplied repository into a predictable temporary path. Existing paths, symlinks, or crafted identifiers could redirect writes.
Mittel
Temp directory access
cat > /tmp/eip712.json << EOF
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
Mittel
Temp directory access
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
Mittel
Temp directory access
| 1 | Contains `[intent:deliver]` | **Highest priority — process THIS TURN before any other CLI call
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
Mittel
Temp directory access
1. Write its **raw JSON** to `/tmp/a2a_deliver_<jobId>.json` first.
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
Mittel
xargs command (can execute arbitrary commands)
lsof -ti:7378 | xargs kill -9
The command force-kills every process listening on a port without checking ownership or identity. It can terminate an unrelated process.
Mittel
Fetch API call
const response = await fetch(url);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
Mittel
Fetch API call
const response = await fetch(imageUrl);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
Niedrig
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Niedrig
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Niedrig
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Niedrig
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Niedrig
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Niedrig
Environment variable access (bracket notation)
for (const key of required) creds[key] = process.env[key];
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
Niedrig
Environment variable access (bracket notation)
const value = process.env[name]?.trim();
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
Niedrig
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Environment variable access (dot notation)
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Environment variable object
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Niedrig
Python environment access
1. **Store API keys in environment variables** — never hardcode. Use `process.env.CHAINGPT_API_KEY`
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
Niedrig
Python environment access
'Authorization': f'Bearer {os.environ["NEAR_API_KEY"]}'
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
Risikofaktoren
🌐 Netzwerkzugriff (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-intelligent-contracts/SKILL.md:3 integrations/genlayer-intelligent-contracts/SKILL.md:12 README.md:135 README.md:148 README.md:158 README.md:177 SKILL.md:36 SKILL.md:47 SKILL.md:218 SKILL.md:363 skills-lock.json:138 skills-lock.json:257 skills-lock.json:280 skills-lock.json:711 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/account-management.md:218 vendored/0g/0g-compute/references/account-management.md:219 vendored/0g/0g-compute/references/account-management.md:568 vendored/0g/0g-compute/references/examples/speech-to-text.md:238 vendored/0g/0g-compute/references/examples/speech-to-text.md:114 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/streaming-chat.md:277 vendored/0g/0g-compute/references/examples/streaming-chat.md:113 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:450 vendored/0g/0g-compute/references/examples/text-to-image.md:188 vendored/0g/0g-compute/references/examples/text-to-image.md:280 vendored/0g/0g-compute/references/examples/text-to-image.md:440 vendored/0g/0g-compute/references/examples/text-to-image.md:457 vendored/0g/0g-compute/references/examples/text-to-image.md:67 vendored/0g/0g-compute/references/examples/text-to-image.md:111 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:389 vendored/0g/0g-compute/references/inference.md:131 vendored/0g/0g-compute/references/inference.md:156 vendored/0g/0g-compute/references/inference.md:236 vendored/0g/0g-compute/references/inference.md:273 vendored/0g/0g-compute/references/inference.md:296 vendored/0g/0g-compute/references/inference.md:16 vendored/0g/0g-compute/references/inference.md:17 vendored/0g/0g-compute/SKILL.md:73 vendored/0g/0g-compute/SKILL.md:27 vendored/0g/0g-compute/SKILL.md:28 vendored/0g/0g-compute/SKILL.md:56 vendored/0g/0g-compute/SKILL.md:57 vendored/0g/0g-compute/SKILL.md:171 vendored/0g/0g-compute/SKILL.md:172
⚙️ Externe Befehle (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-erc7710-connector/SKILL.md:12-18 integrations/genlayer-erc7710-connector/SKILL.md:18-27 integrations/genlayer-erc7710-connector/SKILL.md:27 integrations/genlayer-erc7710-connector/SKILL.md:63-71 integrations/genlayer-erc7710-connector/SKILL.md:71-75 integrations/genlayer-erc7710-connector/SKILL.md:75-76 integrations/genlayer-erc7710-connector/SKILL.md:76-77 integrations/genlayer-erc7710-connector/SKILL.md:77 integrations/genlayer-erc7710-connector/SKILL.md:81-82 integrations/genlayer-erc7710-connector/SKILL.md:82 integrations/genlayer-erc7710-connector/SKILL.md:83 integrations/genlayer-erc7710-connector/SKILL.md:103-106 integrations/genlayer-erc7710-connector/SKILL.md:106-113 integrations/genlayer-erc7710-connector/SKILL.md:113-114 integrations/genlayer-erc7710-connector/SKILL.md:114-115 integrations/genlayer-erc7710-connector/SKILL.md:115-120 integrations/genlayer-erc7710-connector/SKILL.md:120-124 integrations/genlayer-erc7710-connector/SKILL.md:124-127 integrations/genlayer-erc7710-connector/SKILL.md:127-128 integrations/genlayer-erc7710-connector/SKILL.md:128-129 integrations/genlayer-erc7710-connector/SKILL.md:129-132 integrations/genlayer-erc7710-connector/SKILL.md:132-138 integrations/genlayer-erc7710-connector/SKILL.md:138-148 integrations/genlayer-erc7710-connector/SKILL.md:148-159 integrations/genlayer-erc7710-connector/SKILL.md:159-160 integrations/genlayer-erc7710-connector/SKILL.md:160-161 integrations/genlayer-erc7710-connector/SKILL.md:161-162 integrations/genlayer-erc7710-connector/SKILL.md:162 integrations/genlayer-erc7710-connector/SKILL.md:163-178 integrations/genlayer-erc7710-connector/SKILL.md:178-179 integrations/genlayer-erc7710-connector/SKILL.md:179-180 integrations/genlayer-erc7710-connector/SKILL.md:180-193 integrations/genlayer-erc7710-connector/SKILL.md:193-202 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:40-41 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:41-44 integrations/genlayer-intelligent-contracts/SKILL.md:12 integrations/genlayer-intelligent-contracts/SKILL.md:16-23 integrations/genlayer-intelligent-contracts/SKILL.md:23-36 integrations/genlayer-intelligent-contracts/SKILL.md:36 integrations/genlayer-intelligent-contracts/SKILL.md:38 integrations/genlayer-intelligent-contracts/SKILL.md:46-70 integrations/genlayer-intelligent-contracts/SKILL.md:70-74 integrations/genlayer-intelligent-contracts/SKILL.md:74-77 integrations/genlayer-intelligent-contracts/SKILL.md:77-79 integrations/genlayer-intelligent-contracts/SKILL.md:79-80 integrations/genlayer-intelligent-contracts/SKILL.md:80-81 integrations/genlayer-intelligent-contracts/SKILL.md:81-82 integrations/genlayer-intelligent-contracts/SKILL.md:82-83 integrations/genlayer-intelligent-contracts/SKILL.md:83-84
📁 Dateisystemzugriff (50)
integrations/genlayer-intelligent-contracts/SKILL.md:38 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 SKILL.md:42 SKILL.md:48 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/examples/README.md:145 vendored/0g/0g-compute/references/examples/README.md:146 vendored/0g/0g-compute/references/examples/README.md:147 vendored/0g/0g-compute/references/examples/README.md:163 vendored/0g/0g-compute/references/examples/speech-to-text.md:299 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:672 vendored/0g/0g-compute/references/examples/speech-to-text.md:287 vendored/0g/0g-compute/references/examples/speech-to-text.md:298 vendored/0g/0g-compute/references/examples/speech-to-text.md:303 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:225 vendored/0g/0g-compute/references/examples/speech-to-text.md:528 vendored/0g/0g-compute/references/examples/speech-to-text.md:341 vendored/0g/0g-compute/references/examples/speech-to-text.md:676 vendored/0g/0g-compute/references/examples/streaming-chat.md:250 vendored/0g/0g-compute/references/examples/streaming-chat.md:273 vendored/0g/0g-compute/references/examples/streaming-chat.md:645 vendored/0g/0g-compute/references/examples/streaming-chat.md:646 vendored/0g/0g-compute/references/examples/text-to-image.md:194 vendored/0g/0g-compute/references/examples/text-to-image.md:228 vendored/0g/0g-compute/references/examples/text-to-image.md:325 vendored/0g/0g-compute/references/examples/text-to-image.md:442 vendored/0g/0g-compute/references/examples/text-to-image.md:446 vendored/0g/0g-compute/references/examples/text-to-image.md:227
🔑 Umgebungsvariablen (50)
vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:67 vendored/0g/0g-compute/references/examples/speech-to-text.md:136 vendored/0g/0g-compute/references/examples/speech-to-text.md:141 vendored/0g/0g-compute/references/examples/speech-to-text.md:117 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:275 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:66 vendored/0g/0g-compute/references/examples/streaming-chat.md:138 vendored/0g/0g-compute/references/examples/streaming-chat.md:141 vendored/0g/0g-compute/references/examples/streaming-chat.md:116 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:190 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:574 vendored/0g/0g-compute/references/examples/streaming-chat.md:578 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:139 vendored/0g/0g-compute/references/examples/text-to-image.md:143 vendored/0g/0g-compute/references/examples/text-to-image.md:203
⚡ Enthält Skripte (14)
vendored/arkhai/alkahest-developer/references/python-api.md:16-21 vendored/arkhai/alkahest-developer/references/python-api.md:183-192 vendored/arkhai/alkahest-developer/references/python-api.md:202-208 vendored/arkhai/alkahest-developer/references/python-api.md:235-241 vendored/genlayer/write-contract/SKILL.md:393 vendored/genlayer/write-contract/SKILL.md:407 vendored/genlayer/write-contract/SKILL.md:412 vendored/genlayer/write-contract/SKILL.md:178 vendored/kleros/kleros-ipfs-upload/SKILL.md:107 vendored/okx/okx-agent-payments-protocol/SKILL.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:175 vendored/openserv/openserv-agent-sdk/troubleshooting.md:179 vendored/openserv/openserv-agent-sdk/troubleshooting.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:186
Erkannte Muster
Pipe to shell pattern×6macOS security command
Geprüft von: codex Audit-Verlauf anzeigen →
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/internet-court-internet-court/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-internet-court/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/internet-court-internet-court.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
internet-court. (2026). internet-court security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/internet-court-internet-court/audits/2BibTeX-Zitat
@techreport{internet-court-internet-court-internet-court-2026,
author = {internet-court},
title = {internet-court security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/internet-court-internet-court/audits/2},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "internet-court security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "internet-court"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/internet-court-internet-court/audits/2"
identifiers:
- type: other
value: "skillstore:internet-court-internet-court:audit:2"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: Mittel 55
Architektur
85
Wartbarkeit
87
Inhalt
65
Gemeinschaft
83
Spezifikationskonformität
Was Sie erstellen können
Einen kostenpflichtigen Agentendienst bewerten
Einen kostenpflichtigen Endpunkt untersuchen, seinen Zahlungsweg ermitteln und vor einer Ausgabe fehlende Vertrauensinformationen auflisten.
Einen begrenzten Zahlungsablauf entwerfen
Eine x402-Zahlung oder eine Zahlung über eine delegierte Wallet mit Obergrenzen, zulässigen Routen und Zustimmungsgrenzen planen.
Einen Weg zur Streitbeilegung vorbereiten
Beweismittel, Prüfkriterien, Abwicklungsmaßnahmen und Reputationsaktualisierungen für strittige Arbeiten definieren.
Diese Prompts ausprobieren
Ein Geschäft abbilden
Verwende Internet Court, um diese Transaktion zwischen Agenten abzubilden: [Dienstleistung, Gegenpartei, Kosten und Ergebnis]. Beginne ausschließlich mit der Ermittlung und liste fehlende Vertrauensinformationen auf.
Eine Vertrauensstufe auswählen
Wähle für dieses vorgeschlagene Agentengeschäft: [Details] den Schutz Basic, Guarded oder Adjudicated. Erläutere den Zielkonflikt und was zuerst bestätigt werden muss.
Eine geschützte Zahlung vorbereiten
Entwirf einen geschützten Zahlungsablauf für [kostenpflichtige Ressource]. Berücksichtige den Zahlungsweg, die Ausgabenobergrenze, zulässige Ressourcen, die Zustimmungsgrenze der Wallet und die Fehlerbehandlung.
Eine geschlichtete Abwicklung entwerfen
Erstelle einen geschlichteten Workflow für [Agentenauftrag]. Definiere Beweismittel, Bewertungsrichtlinien, Entscheidungsresultate, Durchsetzungsmaßnahmen und Anforderungen an Reputationsaktualisierungen.
Bewährte Praktiken
- Installiere nach Möglichkeit das vollständige Repository, damit weitergeleitete Sub-Skills lokal verfügbar und überprüfbar sind.
- Belasse den Agenten im Ermittlungsmodus, bis der Benutzer Geldmittel, Wallet-Befugnisse oder ausdrückliche Berechtigungen gewährt.
- Verwende die niedrigste Vertrauensstufe, die das tatsächliche Zahlungs-, Verwahrungs- und Lieferrisiko abdeckt.
Vermeiden
- Fordere Benutzer nicht zur Angabe privater Schlüssel, Seed-Phrasen oder uneingeschränkt übertragbarer Wallet-Zugriffsartefakte auf.
- Rufe keine entfernten Installationsskripte ohne Prüfsummen- oder Signaturprüfung ab und führe sie nicht aus.
- Behaupte nicht, dass eine Zahlung, Delegierung, ein Vertrag oder ein Ergebnis eines Streitfalls existiert, bevor ein Nachweis vorliegt.
Häufig gestellte Fragen
Wofür wird Internet Court verwendet?
Der Skill hilft Agenten dabei, Handelsworkflows mit Zahlungen, Treuhandabwicklung, Beweismitteln, Schlichtung und Reputationsaktualisierungen zu strukturieren.
Führt der Skill Zahlungen automatisch aus?
Nein. Der Skill kann Zahlungsworkflows planen und weiterleiten, aber der Benutzer muss Wallets finanzieren und die erforderlichen Berechtigungen genehmigen.
Welche Tools können diesen Skill verwenden?
Der Bericht nennt die Unterstützung für Claude, Codex und Claude Code.
Warum gibt es so viele eingebundene Skills?
Internet Court leitet Anfragen an protokolleigene Skills für Identität, Zahlungen, Treuhandabwicklung, Ausführung und Streitfälle weiter, anstatt diese Funktionen neu zu implementieren.
Ist der Skill für eine automatische Installation sicher?
Nein. Bei der Prüfung wurden risikoreiche Muster im Zusammenhang mit Wallets, Geheimnissen, Befehlen und Netzwerken gefunden, die eine manuelle Überprüfung erfordern.
Was sollten Benutzer vor der Verwendung überprüfen?
Benutzer sollten das vollständige Repository, die Anbieterzugangsdaten, die Wallet-Grenzen, die Zahlungsobergrenzen und die Anforderungen an Beweismittel für Streitfälle überprüfen.
Entwicklerdetails
Autor
internet-courtLizenz
MIT
Skillstore-Revision
r1
Versionshinweis
Der Autor hat keine Version angegeben.
Ref.
3f6e026a3363e0954ede7bef0cfe88d4475de137
Aktualität der Wartung
23.7.2026
Nutzung
0 Downloads · 0 Aufrufe
Dateistruktur
📄 SKILL.md
📁 genlayer-intelligent-contracts/
📄 agent-supervisor-contract.md
📄 SKILL.md
📄 SKILL.md
📁 0g/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 antseed/
📄 SKILL.md
📁 arkhai/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 x402/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 heurist/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 kleros/
📄 SKILL.md
📁 scripts/
📄 SKILL.md
📁 lifi/
📁 lifi/
📄 SKILL.md
📄 SKILL.md
📄 skill.md
📁 nansen/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 near/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📁 okx/
📁 okx-agent-payments-protocol/
📁 _shared/
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-ai/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-dex/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 openserv-multi-agent-workflows/
📄 SKILL.md
📁 privy/
📁 privy/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 tempo/
📁 mppx/
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md