bot-store-marketplace
Find and Compare Grok Bots on bot.store
Choosing a Grok Bot requires checking actual capabilities, prices, and access options. This skill guides marketplace searches, listing comparisons, and checkout handoffs for user-selected bots.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Review the Skillstore skill "bot-store-marketplace" from https://skillstore.io/skills/humanleap-bot-store-marketplace.md and its manifest at https://skillstore.io/api/skills/humanleap-bot-store-marketplace/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "bot-store-marketplace". Find a free bot for my task when the marketplace returns no matching listings.
Resultado esperado:
No matching free bot was returned for your task. I have not substituted an invented listing or prepared checkout.
Usando "bot-store-marketplace". Explain my status after preparing checkout for a selected paid bot.
Resultado esperado:
- Checkout is prepared for your selected listing.
- Use the returned checkout link to sign in and approve payment.
- Payment, ownership, and installation are not confirmed by checkout preparation.
Usando "bot-store-marketplace". Explain how to compare two returned bot listings.
Resultado esperado:
- Compare the capabilities and prices provided by each listing.
- Treat missing details as unknown.
- Search relevance does not independently establish quality.
Auditoría de seguridad
SeguroOne finding is confirmed: the installation command executes an unpinned external package and retrieves upstream skill content without an immutable reference. Sixteen findings are false positives involving Markdown tool names, task-related URLs, and checkout terminology. No evidence found of prompt injection, credential collection, unauthorized payment, or system reconnaissance in the reviewed skill.
Elementos de revisión de capacidades (1)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Factores de riesgo
⚙️ Comandos externos (9)
🌐 Acceso a red (5)
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/humanleap-bot-store-marketplace?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/humanleap-bot-store-marketplace?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/humanleap-bot-store-marketplace/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/humanleap-bot-store-marketplace.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
humanleap. (2026). bot-store-marketplace security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1Cita BibTeX
@techreport{humanleap-humanleap-bot-store-marketplace-2026,
author = {humanleap},
title = {bot-store-marketplace security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bot-store-marketplace security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "humanleap"
date-released: "2026-10-03"
url: "https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1"
identifiers:
- type: other
value: "skillstore:humanleap-bot-store-marketplace:audit:1"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: MedioLo que puedes crear
Find a Free Writing Bot
Search for writing templates, preserve a free-only constraint, and share a returned Grok link.
Compare Task-Specific Templates
Compare actual listing capabilities and prices for a recurring team task without inventing quality claims.
Prepare a Selected Bot Purchase
Inspect a chosen paid listing, state its price, and provide checkout for human payment approval.
Prueba estos prompts
Find free Grok Bots on bot.store for [task]. Show actual listing facts and available Grok links.
Inspect the bot.store listing at [URL or exact slug]. Summarize its returned capabilities, price, and access option.
Compare bot.store templates for [task] in [category] within [budget]. Preserve my constraints and identify facts missing from each listing.
I choose [exact returned slug] on bot.store. Verify its listing, state the price, and prepare checkout without claiming payment or ownership.
Mejores prácticas
- Connect the intended bot.store MCP endpoint and use constraints supported by its current tool schema.
- Inspect the exact returned slug and confirm the selected listing and price before preparing checkout.
- Keep authentication and payment on checkout; verify purchase status before claiming ownership or installation.
Evitar
- Inventing bot listings, ratings, performance claims, or prices when marketplace evidence is missing.
- Preparing a paid bot's checkout before the user selects that exact listing.
- Collecting payment secrets or treating a checkout link as proof of payment or protected bot access.