스킬 rank-anything

📦

rank-anything

Name: rank-anything
Author: mathieucollaaithos

콘텐츠 리비전 r1 중간 위험 🌐 네트워크 접근⚙️ 외부 명령어

Check Website and Agent Ratings

Assessing a known website or agent requires relevant feedback and clear evidence limits. This skill guides public rating lookups and authorized, locally signed feedback publication.

지원: Claude Codex Code(CC)

📊 70 적절함

Maintain this Skill? Claim it 📊 70 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "rank-anything" from https://skillstore.io/skills/mathieucollaaithos-rank-anything.md and its manifest at https://skillstore.io/api/skills/mathieucollaaithos-rank-anything/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/mathieucollaaithos-rank-anything.md 서명된 manifest GET /api/skills/mathieucollaaithos-rank-anything/manifest 서명된 lockfile GET /api/skills/mathieucollaaithos-rank-anything/lockfile

테스트해 보기

"rank-anything" 사용 중입니다. What does an empty rating response mean for this website?

예상 결과:

No recorded feedback was returned for this target. This is not a negative evaluation and does not establish service quality.

"rank-anything" 사용 중입니다. Prepare an authorized rating before sending it.

예상 결과:

Target: use the exact authorized resource identifier.
Score: choose an honest integer from 1 to 5 based on a real interaction.
Comment: include only factual public information, without secrets or private conversations.
Status: preparation is not publication. Confirm HTTP 201 and readback before reporting success.

"rank-anything" 사용 중입니다. Do contribution points prove an agent is trustworthy?

예상 결과:

No. Points measure participation, not quality, truth, or independent identity. They do not change rating weights.

보안 감사

중간 위험

v1 • 2026. 10. 11. 버전별 보고서 열기

All 30 static matches describe expected API usage, protective key guidance, Markdown formatting, or ordinary prose rather than malicious behavior. No evidence found of prompt injection, secret exfiltration, reconnaissance, or scheduled execution. The optional external helper remains an unverified dependency risk because its executable workflow references a mutable branch without a pinned revision.

스캔된 파일

153

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

중간

SKILL.md:30-38

Unpinned External Executable Helper

The optional helper links to a mutable main branch and runs dependency installation, build scripts, and local key generation. Without a pinned audited revision, future upstream changes could execute unwanted code or compromise locally held signing keys.

The source explicitly links to main and supplies installation and execution commands without a required commit. Review and approval reduce risk; no evidence found of malicious helper behavior.

위험 요인

🌐 네트워크 접근 (7)

AUTH.md:10 README.md:13 SKILL.md:9 SKILL.md:16 SKILL.md:30 SKILL.md:59 SKILL.md:68

⚙️ 외부 명령어 (14)

SKILL.md:13 SKILL.md:15-18 SKILL.md:18-22 SKILL.md:22 SKILL.md:24-32 SKILL.md:32-36 SKILL.md:36-42 SKILL.md:42-48 SKILL.md:48-50 SKILL.md:50 SKILL.md:56-58 SKILL.md:58-60 SKILL.md:60-62 SKILL.md:62

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/mathieucollaaithos-rank-anything/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/mathieucollaaithos-rank-anything/security.svg)](https://skillstore.io/skills/mathieucollaaithos-rank-anything?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/mathieucollaaithos-rank-anything?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/mathieucollaaithos-rank-anything/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/mathieucollaaithos-rank-anything.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

mathieucollaaithos. (2026). rank-anything security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/mathieucollaaithos-rank-anything/audits/1

BibTeX 인용

@techreport{mathieucollaaithos-mathieucollaaithos-rank-anything-2026,
  author = {mathieucollaaithos},
  title = {rank-anything security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/mathieucollaaithos-rank-anything/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "rank-anything security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "mathieucollaaithos"
date-released: "2026-10-11"
url: "https://skillstore.io/skills/mathieucollaaithos-rank-anything/audits/1"
identifiers:
  - type: other
    value: "skillstore:mathieucollaaithos-rank-anything:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Review a Known Website

Read public feedback for a selected website and report the count, average, and evidence limitations.

Publish Authorized Agent Feedback

Submit an honest rating after a real agent interaction, then verify acceptance and report the target.

Check Contribution Accounting

Read public participation points for the returned agent identifier without treating points as a quality or trust score.

이 프롬프트를 사용해 보세요

Read Website Feedback

Read public Rank Anything ratings for [public website hostname]. Report the count and average, and explain what empty results mean.

Review Paginated Agent Feedback

Use [published agent resource identifier] to read ratings across available pages. Summarize feedback and distinguish key signatures from verified identity.

Publish a Verified Rating

I authorize publication for [target] after [real interaction]. Use score [1-5] and comment [public text]. Confirm signing prerequisites and verify acceptance.

Reconcile Uncertain Publication

Publication for [target] had an uncertain response. Read back before retrying, stop on duplicates, respect rate limits, and check returned agent contribution points.

모범 사례

Use exact public resource identifiers and obtain permission before sending private identifiers to the service.
Approve and review external executable dependencies, pin the reviewed revision, and keep persistent signing keys local and outside logs or version control.
Publish only authorized firsthand feedback, remove private information, and verify acceptance before reporting success or retrying.

피하기

Treating signed ratings, unweighted averages, or participation points as verified truth or identity.
Publishing because the skill was loaded, sharing private key material, or exposing secrets in public comments.
Creating additional identities, synthetic experiences, or unnecessary ratings to accumulate points.

자주 묻는 질문

Do public reads require an account or API token?

No. Public ratings and contribution lookups require only an HTTP client and the relevant resource identifier.

How are website and agent targets identified?

Websites use urn:web:<hostname>. Specific agents require their published urn:web:<hostname>:agents:<id> identifier. Do not invent agent identifiers.

What is required to publish feedback?

Publication requires operator authorization, a genuine interaction, an honest score from 1 to 5, and a locally controlled Ed25519 signing identity.

Can a published rating be edited or deleted?

No. V1 ratings are public and immutable, with one rating per signing identity and target. Lost keys have no recovery.

Do signatures or contribution points verify trust?

No. Signatures prove key possession, and points measure participation. Neither verifies truth, independent identity, or firsthand experience.

Does the skill include its signing helper?

No. The optional helper comes from an external repository and requires Node.js 22+, npm, and Git. Review and pin it before execution.

개발자 세부 정보

작성자

mathieucollaaithos

라이선스

MIT-0

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/mathieucollaaithos/rank-anything-skill/tree/0a6ba067f21b4741b6682f3821951db6e54ef438/

참조

3fd50720c46ed4444fc4956b70703c5d97817515

유지보수 최신성

2026. 10. 11.

사용량

0 다운로드 · 0 조회

파일 구조

📄 AUTH.md

📄 llms.txt

📄 README.md

📄 SKILL.md