Habilidades internet-court
📦
internet-court
Revisión del contenido r1 Crítico 🌐 Acceso a red⚙️ Comandos externos📁 Acceso al sistema de archivos🔑 Variables de entorno⚡ Contiene scripts
Estructura el comercio de agentes con Internet Court
El comercio de agentes crea riesgos de pago, custodia y disputas en numerosos protocolos. Internet Court ofrece a Claude, Codex y Claude Code un enrutador para pagos limitados, depósito en garantía, pruebas y adjudicación.
Compatible con: Claude Codex Code(CC)
No instales este Skill automáticamente.
La política canónica exige la revisión de un operador antes de cualquier acción de instalación.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "internet-court" from https://skillstore.io/skills/internet-court-internet-court.md and its manifest at https://skillstore.io/api/skills/internet-court-internet-court/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "internet-court". Quiero que mi agente use una API de investigación de pago con x402.
Resultado esperado:
- Un resumen de descubrimiento del endpoint, el precio anunciado, la vía de pago y los datos de confianza faltantes.
- Una recomendación para una vía de pago protegida con un permiso limitado y aprobación explícita del usuario.
- Una advertencia de que no existen fondos ni autoridad hasta que el usuario los conceda.
Usando "internet-court". Un agente contratista entregó un informe tarde y necesito una vía de liquidación.
Resultado esperado:
- Un plan de disputa con las pruebas requeridas, criterios de revisión y posibles resultados.
- Una acción de liquidación como liberar, reembolsar, restringir, revocar o escalar.
- Un requisito de actualización de reputación vinculado al veredicto final.
Auditoría de seguridad
Críticov2 • 19/7/2026 Abrir el informe versionado
The bundle contains confirmed critical remote installer pipelines, secret-retrieval commands, model-generated eval, plaintext private-key workflows, and silent global plugin installation. Many remaining matches are lexical false positives, but the confirmed supply-chain and credential risks prevent unattended use. Static review was capped at 400/6908 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
376
Archivos escaneados
59,995
Líneas analizadas
52
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (28)
Crítico
Pipe to shell pattern
curl -L https://foundry.paradigm.xyz | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Crítico
Pipe to shell pattern
- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Crítico
Pipe to shell pattern
curl -fsSL https://tempo.xyz/install | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Crítico
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Crítico
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/ca
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Crítico
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/n
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Crítico
macOS security command
> **Back up the passphrase either way.** Keychain entry: `service=chaingpt-mcp-agent-wallet account=
The command retrieves a wallet passphrase from macOS Keychain and prints it. Agent context, terminal capture, or logs could expose the secret.
Crítico
Silent Third-Party Skill Installation
The routing skill silently installs a global third-party plugin and immediately loads its instructions. This bypasses informed consent and creates a supply-chain execution path.
The instructions explicitly use a global install command with automatic confirmation, call the process invisible, and immediately apply the installed plugin.
Mostrar los 28 problemas confirmados
Alto
Certificate/key files
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
Alto
Certificate/key files
| `identity.key` | Raw 32-byte EVM private key for the buyer wallet. Fallback when `ANTSEED_IDENTITY
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
Alto
Crypto seed/private key mention
- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
Alto
Crypto seed/private key mention
The exported agent package is a bearer capability in demo form. Include explicit warnings, keep caps
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
Alto
Crypto seed/private key mention
- include private key in exported JSON or omit it;
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
Alto
Crypto seed/private key mention
# Login with wallet private key
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
Alto
Crypto seed/private key mention
# Enter private key when prompted
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
Alto
Crypto seed/private key mention
2. **Environment configuration**: Setup `.env` file with private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Alto
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Alto
Crypto seed/private key mention
# Your wallet private key (NEVER commit this file!)
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Alto
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
Alto
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Alto
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Alto
Environment file access
2. **Environment configuration**: Setup `.env` file with private key
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Alto
Environment file access
Create `.env`:
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Alto
Environment file access
if (!process.env.PRIVATE_KEY) {
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
Alto
Automatic External Disclosure of User Context
The skill requires opening a public repository issue and including the user goal and failure details. It does not require user approval or redaction.
The instructions mandate filing the issue directly when a GitHub tool exists and specify that user goals and failures must be included.
Alto
Untrusted Peer Message Controls Priority Actions
A peer-controlled marker receives highest priority and causes raw message data to be written and passed to a CLI. Sender and job validation are not required.
The routing table explicitly prioritizes a peer marker before other actions and passes the complete untrusted message through a local file to the CLI.
Medio
SQLite database file
| `metering.db` | SQLite log of every request the proxy served (model, peer, tokens, USDC). Used by
The local database retains request, peer, token, and payment history. Backups or weak file permissions could expose operational metadata.
Medio
Untrusted Repository Content Lacks an Instruction Boundary
The workflow clones an escrow-selected repository and directs the agent to read its tests. It does not warn that repository instructions are untrusted data.
The repository URL and commit come from external escrow data, then the agent reads test content without a prompt-injection or trust-boundary safeguard.
Elementos de revisión de capacidades (52)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Dynamic code evaluation with eval()
LLMs can't reliably inspect characters in their input (they hallucinate em dashes, miscount characte
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
Alto
Dynamic code evaluation with eval()
# Step 2: eval() all checks in one sandbox — deterministic, no hallucination
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
Alto
Dynamic code evaluation with eval()
ok = eval(c["expression"], {
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
Alto
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in .env");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in environment variables");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
#### "PRIVATE_KEY not found"
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
Alto
Hidden file in home directory
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session under the home directory. Weak permissions, backups, or unintended reads could expose reusable credentials.
Alto
Hidden file in home directory
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file is a raw funded-wallet private key. Local disclosure or unsafe backup would permit unauthorized signing.
Alto
sudo privilege escalation
sudo systemctl restart hermes
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
Alto
sudo privilege escalation
> Or whatever supervisor you use. Then check the journal: `sudo journalctl -u hermes --no-pager -n 3
The guide invokes sudo to read service logs, which may expose sensitive runtime data. Elevated access should require explicit user approval.
Alto
sudo privilege escalation
- *Want to swap the routed model without restarting AntSeed* — Edit `model.default` (and `models:` i
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
Medio
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
Medio
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
Medio
Hidden file access
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session in a hidden home directory. Weak file permissions or backups could expose reusable credentials.
Medio
Hidden file access
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file contains a raw funded-wallet private key. Unintended local access would permit unauthorized signing.
Medio
Shell command substitution
export ANTSEED_IDENTITY_HEX=$(openssl rand -hex 32)
The command creates a raw wallet key and exports it into the process environment. Child processes or environment capture could expose it.
Medio
Shell command substitution
WALLET=$(cast wallet address --private-key "$PRIVATE_KEY")
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
Medio
Shell command substitution
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
Medio
Temp directory access
2. Clone it to a temporary location: `git clone <url> /tmp/escrow-tests-<uid> && cd /tmp/escrow-test
The guide clones an externally supplied repository into a predictable temporary path. Existing paths, symlinks, or crafted identifiers could redirect writes.
Medio
Temp directory access
cat > /tmp/eip712.json << EOF
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
Medio
Temp directory access
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
Medio
Temp directory access
| 1 | Contains `[intent:deliver]` | **Highest priority — process THIS TURN before any other CLI call
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
Medio
Temp directory access
1. Write its **raw JSON** to `/tmp/a2a_deliver_<jobId>.json` first.
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
Medio
xargs command (can execute arbitrary commands)
lsof -ti:7378 | xargs kill -9
The command force-kills every process listening on a port without checking ownership or identity. It can terminate an unrelated process.
Medio
Fetch API call
const response = await fetch(url);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
Medio
Fetch API call
const response = await fetch(imageUrl);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
Bajo
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Bajo
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Bajo
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Bajo
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Bajo
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Bajo
Environment variable access (bracket notation)
for (const key of required) creds[key] = process.env[key];
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
Bajo
Environment variable access (bracket notation)
const value = process.env[name]?.trim();
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
Bajo
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Environment variable access (dot notation)
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Environment variable object
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Bajo
Python environment access
1. **Store API keys in environment variables** — never hardcode. Use `process.env.CHAINGPT_API_KEY`
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
Bajo
Python environment access
'Authorization': f'Bearer {os.environ["NEAR_API_KEY"]}'
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
Factores de riesgo
🌐 Acceso a red (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-intelligent-contracts/SKILL.md:3 integrations/genlayer-intelligent-contracts/SKILL.md:12 README.md:135 README.md:148 README.md:158 README.md:177 SKILL.md:36 SKILL.md:47 SKILL.md:218 SKILL.md:363 skills-lock.json:138 skills-lock.json:257 skills-lock.json:280 skills-lock.json:711 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/account-management.md:218 vendored/0g/0g-compute/references/account-management.md:219 vendored/0g/0g-compute/references/account-management.md:568 vendored/0g/0g-compute/references/examples/speech-to-text.md:238 vendored/0g/0g-compute/references/examples/speech-to-text.md:114 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/streaming-chat.md:277 vendored/0g/0g-compute/references/examples/streaming-chat.md:113 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:450 vendored/0g/0g-compute/references/examples/text-to-image.md:188 vendored/0g/0g-compute/references/examples/text-to-image.md:280 vendored/0g/0g-compute/references/examples/text-to-image.md:440 vendored/0g/0g-compute/references/examples/text-to-image.md:457 vendored/0g/0g-compute/references/examples/text-to-image.md:67 vendored/0g/0g-compute/references/examples/text-to-image.md:111 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:389 vendored/0g/0g-compute/references/inference.md:131 vendored/0g/0g-compute/references/inference.md:156 vendored/0g/0g-compute/references/inference.md:236 vendored/0g/0g-compute/references/inference.md:273 vendored/0g/0g-compute/references/inference.md:296 vendored/0g/0g-compute/references/inference.md:16 vendored/0g/0g-compute/references/inference.md:17 vendored/0g/0g-compute/SKILL.md:73 vendored/0g/0g-compute/SKILL.md:27 vendored/0g/0g-compute/SKILL.md:28 vendored/0g/0g-compute/SKILL.md:56 vendored/0g/0g-compute/SKILL.md:57 vendored/0g/0g-compute/SKILL.md:171 vendored/0g/0g-compute/SKILL.md:172
⚙️ Comandos externos (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-erc7710-connector/SKILL.md:12-18 integrations/genlayer-erc7710-connector/SKILL.md:18-27 integrations/genlayer-erc7710-connector/SKILL.md:27 integrations/genlayer-erc7710-connector/SKILL.md:63-71 integrations/genlayer-erc7710-connector/SKILL.md:71-75 integrations/genlayer-erc7710-connector/SKILL.md:75-76 integrations/genlayer-erc7710-connector/SKILL.md:76-77 integrations/genlayer-erc7710-connector/SKILL.md:77 integrations/genlayer-erc7710-connector/SKILL.md:81-82 integrations/genlayer-erc7710-connector/SKILL.md:82 integrations/genlayer-erc7710-connector/SKILL.md:83 integrations/genlayer-erc7710-connector/SKILL.md:103-106 integrations/genlayer-erc7710-connector/SKILL.md:106-113 integrations/genlayer-erc7710-connector/SKILL.md:113-114 integrations/genlayer-erc7710-connector/SKILL.md:114-115 integrations/genlayer-erc7710-connector/SKILL.md:115-120 integrations/genlayer-erc7710-connector/SKILL.md:120-124 integrations/genlayer-erc7710-connector/SKILL.md:124-127 integrations/genlayer-erc7710-connector/SKILL.md:127-128 integrations/genlayer-erc7710-connector/SKILL.md:128-129 integrations/genlayer-erc7710-connector/SKILL.md:129-132 integrations/genlayer-erc7710-connector/SKILL.md:132-138 integrations/genlayer-erc7710-connector/SKILL.md:138-148 integrations/genlayer-erc7710-connector/SKILL.md:148-159 integrations/genlayer-erc7710-connector/SKILL.md:159-160 integrations/genlayer-erc7710-connector/SKILL.md:160-161 integrations/genlayer-erc7710-connector/SKILL.md:161-162 integrations/genlayer-erc7710-connector/SKILL.md:162 integrations/genlayer-erc7710-connector/SKILL.md:163-178 integrations/genlayer-erc7710-connector/SKILL.md:178-179 integrations/genlayer-erc7710-connector/SKILL.md:179-180 integrations/genlayer-erc7710-connector/SKILL.md:180-193 integrations/genlayer-erc7710-connector/SKILL.md:193-202 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:40-41 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:41-44 integrations/genlayer-intelligent-contracts/SKILL.md:12 integrations/genlayer-intelligent-contracts/SKILL.md:16-23 integrations/genlayer-intelligent-contracts/SKILL.md:23-36 integrations/genlayer-intelligent-contracts/SKILL.md:36 integrations/genlayer-intelligent-contracts/SKILL.md:38 integrations/genlayer-intelligent-contracts/SKILL.md:46-70 integrations/genlayer-intelligent-contracts/SKILL.md:70-74 integrations/genlayer-intelligent-contracts/SKILL.md:74-77 integrations/genlayer-intelligent-contracts/SKILL.md:77-79 integrations/genlayer-intelligent-contracts/SKILL.md:79-80 integrations/genlayer-intelligent-contracts/SKILL.md:80-81 integrations/genlayer-intelligent-contracts/SKILL.md:81-82 integrations/genlayer-intelligent-contracts/SKILL.md:82-83 integrations/genlayer-intelligent-contracts/SKILL.md:83-84
📁 Acceso al sistema de archivos (50)
integrations/genlayer-intelligent-contracts/SKILL.md:38 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 SKILL.md:42 SKILL.md:48 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/examples/README.md:145 vendored/0g/0g-compute/references/examples/README.md:146 vendored/0g/0g-compute/references/examples/README.md:147 vendored/0g/0g-compute/references/examples/README.md:163 vendored/0g/0g-compute/references/examples/speech-to-text.md:299 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:672 vendored/0g/0g-compute/references/examples/speech-to-text.md:287 vendored/0g/0g-compute/references/examples/speech-to-text.md:298 vendored/0g/0g-compute/references/examples/speech-to-text.md:303 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:225 vendored/0g/0g-compute/references/examples/speech-to-text.md:528 vendored/0g/0g-compute/references/examples/speech-to-text.md:341 vendored/0g/0g-compute/references/examples/speech-to-text.md:676 vendored/0g/0g-compute/references/examples/streaming-chat.md:250 vendored/0g/0g-compute/references/examples/streaming-chat.md:273 vendored/0g/0g-compute/references/examples/streaming-chat.md:645 vendored/0g/0g-compute/references/examples/streaming-chat.md:646 vendored/0g/0g-compute/references/examples/text-to-image.md:194 vendored/0g/0g-compute/references/examples/text-to-image.md:228 vendored/0g/0g-compute/references/examples/text-to-image.md:325 vendored/0g/0g-compute/references/examples/text-to-image.md:442 vendored/0g/0g-compute/references/examples/text-to-image.md:446 vendored/0g/0g-compute/references/examples/text-to-image.md:227
🔑 Variables de entorno (50)
vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:67 vendored/0g/0g-compute/references/examples/speech-to-text.md:136 vendored/0g/0g-compute/references/examples/speech-to-text.md:141 vendored/0g/0g-compute/references/examples/speech-to-text.md:117 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:275 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:66 vendored/0g/0g-compute/references/examples/streaming-chat.md:138 vendored/0g/0g-compute/references/examples/streaming-chat.md:141 vendored/0g/0g-compute/references/examples/streaming-chat.md:116 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:190 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:574 vendored/0g/0g-compute/references/examples/streaming-chat.md:578 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:139 vendored/0g/0g-compute/references/examples/text-to-image.md:143 vendored/0g/0g-compute/references/examples/text-to-image.md:203
⚡ Contiene scripts (14)
vendored/arkhai/alkahest-developer/references/python-api.md:16-21 vendored/arkhai/alkahest-developer/references/python-api.md:183-192 vendored/arkhai/alkahest-developer/references/python-api.md:202-208 vendored/arkhai/alkahest-developer/references/python-api.md:235-241 vendored/genlayer/write-contract/SKILL.md:393 vendored/genlayer/write-contract/SKILL.md:407 vendored/genlayer/write-contract/SKILL.md:412 vendored/genlayer/write-contract/SKILL.md:178 vendored/kleros/kleros-ipfs-upload/SKILL.md:107 vendored/okx/okx-agent-payments-protocol/SKILL.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:175 vendored/openserv/openserv-agent-sdk/troubleshooting.md:179 vendored/openserv/openserv-agent-sdk/troubleshooting.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:186
Patrones detectados
Pipe to shell pattern×6macOS security command
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/internet-court-internet-court/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-internet-court/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/internet-court-internet-court.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
internet-court. (2026). internet-court security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/internet-court-internet-court/audits/2Cita BibTeX
@techreport{internet-court-internet-court-internet-court-2026,
author = {internet-court},
title = {internet-court security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/internet-court-internet-court/audits/2},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "internet-court security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "internet-court"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/internet-court-internet-court/audits/2"
identifiers:
- type: other
value: "skillstore:internet-court-internet-court:audit:2"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación
Lo que puedes crear
Evaluar un servicio de agente de pago
Inspecciona un endpoint de pago, identifica su vía de pago y enumera los datos de confianza faltantes antes de gastar.
Diseñar un flujo de pago limitado
Planifica un pago x402 o de cartera delegada con límites, rutas permitidas y límites de aprobación.
Preparar una vía de disputa
Define pruebas, criterios de revisión, acciones de liquidación y actualizaciones de reputación para trabajo en disputa.
Prueba estos prompts
Mapear un acuerdo
Usa Internet Court para mapear esta transacción entre agentes: [servicio, contraparte, costo y entregable]. Comienza solo con descubrimiento y enumera los datos de confianza faltantes.
Elegir un nivel de confianza
Dado este acuerdo propuesto entre agentes: [details], elige protección Basic, Guarded o Adjudicated. Explica la compensación y qué debe confirmarse primero.
Preparar un pago protegido
Diseña un flujo de pago protegido para [paid resource]. Incluye la vía de pago, el límite de gasto, los recursos permitidos, el límite de aprobación de la cartera y el manejo de fallos.
Diseñar una liquidación adjudicada
Crea un flujo de trabajo adjudicado para [agent job]. Define las pruebas, la rúbrica de revisión, los resultados de la decisión, la acción de ejecución y los requisitos de actualización de reputación.
Mejores prácticas
- Instala el repositorio completo cuando sea posible para que las sub-skills enrutadas sean locales y revisables.
- Mantén al agente en modo de descubrimiento hasta que el usuario conceda fondos, autoridad de cartera o permisos explícitos.
- Usa el nivel de confianza más ligero que cubra el riesgo real de pago, custodia y entrega.
Evitar
- No solicites a los usuarios claves privadas, frases semilla ni artefactos de cartera al portador sin restricciones.
- No obtengas ni ejecutes scripts de instalación remotos sin verificación de suma de comprobación o firma.
- No afirmes que existe un pago, delegación, contrato o resultado de disputa antes de recibir una prueba.
Preguntas frecuentes
¿Para qué se utiliza Internet Court?
Ayuda a los agentes a estructurar flujos de trabajo comerciales con pagos, depósito en garantía, pruebas, adjudicación y actualizaciones de reputación.
¿Realiza pagos automáticamente?
No. Puede planificar y enrutar flujos de trabajo de pago, pero el usuario debe financiar las carteras y aprobar los permisos requeridos.
¿Qué herramientas pueden usar esta skill?
El informe indica compatibilidad con Claude, Codex y Claude Code.
¿Por qué hay tantas skills integradas?
Internet Court enruta a skills propiedad de los protocolos para identidad, pagos, depósito en garantía, ejecución y disputas, en lugar de reimplementarlas.
¿Es segura la skill para instalación automática?
No. La auditoría detectó patrones de alto riesgo relacionados con carteras, secretos, comandos y red que requieren revisión manual.
¿Qué deben verificar los usuarios antes de utilizarla?
Los usuarios deben verificar el repositorio completo, las credenciales de los proveedores, los límites de la cartera, los límites de pago y los requisitos de pruebas para disputas.
Detalles del desarrollador
Autor
internet-courtLicencia
MIT
Revisión de Skillstore
r1
Aviso de versión
El autor no declaró una versión.
Ref.
3f6e026a3363e0954ede7bef0cfe88d4475de137
Actualidad del mantenimiento
22/7/2026
Uso
0 descargas · 0 vistas
Estructura de archivos
📄 SKILL.md
📁 genlayer-intelligent-contracts/
📄 agent-supervisor-contract.md
📄 SKILL.md
📄 SKILL.md
📁 0g/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 antseed/
📄 SKILL.md
📁 arkhai/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 x402/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 heurist/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 kleros/
📄 SKILL.md
📁 scripts/
📄 SKILL.md
📁 lifi/
📁 lifi/
📄 SKILL.md
📄 SKILL.md
📄 skill.md
📁 nansen/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 near/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📁 okx/
📁 okx-agent-payments-protocol/
📁 _shared/
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-ai/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-dex/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 openserv-multi-agent-workflows/
📄 SKILL.md
📁 privy/
📁 privy/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 tempo/
📁 mppx/
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md