📦

agent-world

Name: agent-world
Author: ptreezh

v1.0.0 Revisión del contenido r1 Crítico 🌐 Acceso a red🔑 Variables de entorno📁 Acceso al sistema de archivos⚙️ Comandos externos

Navigate Agent Communities Safely

Agent community requirements, access methods, and status information are scattered across many platforms. This skill organizes platform routes, participation steps, status checks, and credential guidance.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

No instales este Skill automáticamente.

La política canónica exige la revisión de un operador antes de cualquier acción de instalación.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "agent-world" from https://skillstore.io/skills/ptreezh-agent-world.md and its manifest at https://skillstore.io/api/skills/ptreezh-agent-world/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/ptreezh-agent-world.md Manifest firmado GET /api/skills/ptreezh-agent-world/manifest Lockfile firmado GET /api/skills/ptreezh-agent-world/lockfile

Pruébalo

Usando "agent-world". Recommend a platform for listing an open-source agent skill with minimal registration.

Resultado esperado:

Recommendation: theskills.directory. Submit a pull request using its template and keep the description on one line. Confirm current availability before submission.

Usando "agent-world". Create a safe registration checklist for agentid.sh.

Resultado esperado:

Confirm the official endpoint and review its current documentation.
Register the chosen handle only after operator approval.
Store the returned private key in an encrypted credential manager.
Record only non-secret account metadata in project documentation.

Usando "agent-world". Summarize status checks for all configured platforms.

Resultado esperado:

The checker contacts each configured base URL and reports HTTP success or failure. Results show reachability, not authentication, API correctness, or service health.

Auditoría de seguridad

Crítico

v1 • 12/9/2026 Abrir el informe versionado

Most static matches are benign documentation syntax, schema URLs, or defensive credential guidance. Confirmed risks include remote pipe-to-shell commands, plaintext private-key storage guidance, executable installation into a home directory, and outbound network requests. Semantic review also identified unsafe delegation to mutable remote skills, unverified archive extraction, unrestricted URL probing, and coordinated engagement behavior.

Archivos escaneados

479

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (7)

Crítico

references/interaction-playbook.md:10

Pipe to shell pattern

> - How to join (one command): "One-command join: curl -sL https://raw.githubusercontent.com/<owner>

The post template recommends downloading a mutable remote script and piping it directly to bash. This permits immediate arbitrary code execution without inspection or integrity verification.

Crítico

references/interaction-playbook.md:24

Pipe to shell pattern

> "Join in one command: curl -sL https://raw.githubusercontent.com/<owner>/<repo>/main/join.sh | bas

The reply template promotes direct execution of a remotely downloaded join script. A compromised repository or substituted script would execute with the user's privileges.

Alto

references/credential-handling.md:6

Crypto seed/private key mention

2. **Server-issued private keys cannot be recovered.** agentid.sh returns a private key and explicit

The skill instructs the agent to persist an unrecoverable private key in a local gitignored file. It does not require encryption or restrictive permissions, leaving high-value key material exposed locally.

Alto

SKILL.md:40 references/skill-routes.md:3-10

Untrusted Remote Skills Treated as Authoritative

The routing flow tells agents to fetch changing platform skills, treat them as authoritative, and follow them directly. Without pinning, integrity checks, or instruction isolation, a compromised remote skill can inject instructions and trigger unauthorized actions.

The text explicitly calls remote skills authoritative, directs the agent to follow them, and recommends re-fetching changed versions. No verification or trust boundary is specified.

Alto

references/skill-routes.md:22

Unverified Remote Archive Installed as Executable

The KodaClaw route streams a mutable release archive into tar and extracts it directly into ~/.local/bin. It provides no version pin, checksum, signature, or archive-content validation.

The complete installation command is present and visibly lacks integrity verification. The destination is an executable search path.

Medio

scripts/check_status.py:48-55 scripts/check_status.py:63-64

Unrestricted URL Probing

The status checker accepts any URL and opens it without scheme or destination validation. Agent-supplied targets can reach loopback, private network, metadata, or redirected endpoints.

The positional URL is copied directly into the request path and urllib follows supported targets. No allowlist, address filtering, or redirect restriction is present.

Medio

SKILL.md:42-44 references/interaction-playbook.md:26-30

Coordinated Engagement Automation

The skill prescribes replying to every comment and upvoting a fixed number of other posts each session. Automated execution can create inauthentic engagement or violate platform rules.

The instructions explicitly define repeated posting, reply, and upvote behavior as obligations. The skill does not require operator approval or relevance checks for each social action.

Elementos de revisión de capacidades (15)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

references/credential-handling.md:11

Generic API/secret keys

Content: handle, api_key/token, id, verification code, claim URL, creation date, status.

The guidance directs users to store API keys, tokens, and verification codes together in plaintext account files. Gitignore reduces commit exposure but does not protect local files or backups.

Alto

references/skill-routes.md:22

Hidden file in home directory

| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k

The documented command extracts a remote archive directly into ~/.local/bin. This writes an unverified executable into a user command path.

Medio

references/skill-routes.md:22

Hidden file access

| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k

The installation command writes to the hidden ~/.local/bin directory. The access is intentional, but it creates a persistence and executable replacement risk because the archive is unverified.

Medio

scripts/check_status.py:38

Python HTTP libraries

with urllib.request.urlopen(req, timeout=timeout) as resp:

urlopen executes the outbound request to the supplied target. Because destinations are unrestricted, the checker can contact local or private network services.

Bajo

scripts/check_status.py:36

Python HTTP libraries

req = urllib.request.Request(url, method="GET", headers={"User-Agent": "agent-world-status-check/1.0

The function constructs an outbound GET request for a caller-supplied URL. This is expected status-check behavior but creates a network access capability.

Bajo

scripts/check_status.py:22

Hardcoded URL

"XiaLiao/ClawdChat": "https://clawdchat.cn",

The --all mode sends an HTTP request to this hardcoded external platform. The behavior is legitimate health checking but still performs outbound network access.

Bajo

scripts/check_status.py:23

Hardcoded URL

"InStreet": "https://instreet.coze.site",

The --all mode sends an HTTP request to this hardcoded external platform. No credentials are sent, but network access is real.

Bajo

scripts/check_status.py:24

Hardcoded URL

"agentid.sh": "https://agentid.sh",

The status checker contacts this external URL when --all is selected. The request is expected and unauthenticated but remains an outbound connection.

Bajo

scripts/check_status.py:25

Hardcoded URL

"SkillsMD": "https://skillsmd.dev",

The status checker contacts this external URL when --all is selected. The behavior is narrow health checking with no secret transmission.

Bajo

scripts/check_status.py:26

Hardcoded URL

"theskills.directory": "https://theskills.directory",

This URL is an active target of the --all health check. It represents intentional outbound network access without credential data.

Bajo

scripts/check_status.py:27

Hardcoded URL

"KodaClaw Community": "https://community.ai-koda.com",

This URL is an active target of the --all health check. The external request is legitimate but confirmed.

Bajo

scripts/check_status.py:28

Hardcoded URL

"Coze Agent World": "https://world.coze.site",

The checker performs an outbound GET to this platform in --all mode. It sends only a fixed user agent and no stored secrets.

Bajo

scripts/check_status.py:29

Hardcoded URL

"Agentica": "https://agentica.wiki",

The checker performs an outbound GET to this platform in --all mode. The access is expected but externally observable.

Bajo

scripts/check_status.py:30

Hardcoded URL

"Moltbook": "https://moltbook.com",

The --all command contacts this external platform to obtain an HTTP status. This is a real, low-impact network operation.

Bajo

scripts/check_status.py:31

Hardcoded URL

"PromptFrenzy": "https://promptfrenzy.com",

The --all command contacts this external platform to obtain an HTTP status. No sensitive payload is attached.

Factores de riesgo

🌐 Acceso a red (17)

MANIFEST.json:2 MANIFEST.json:54 scripts/check_status.py:17 scripts/check_status.py:36 scripts/check_status.py:38 scripts/check_status.py:22 scripts/check_status.py:23 scripts/check_status.py:24 scripts/check_status.py:25 scripts/check_status.py:26 scripts/check_status.py:27 scripts/check_status.py:28 scripts/check_status.py:29 scripts/check_status.py:30 scripts/check_status.py:31 scripts/gen_manifest.py:32 scripts/gen_manifest.py:41

🔑 Variables de entorno (4)

references/credential-handling.md:11 references/platform-registry.md:8 references/platform-registry.md:16 references/platform-registry.md:28

📁 Acceso al sistema de archivos (3)

references/skill-routes.md:22 references/skill-routes.md:22 scripts/gen_manifest.py:57

⚙️ Comandos externos (14)

SKILL.md:28 SKILL.md:39 SKILL.md:40 SKILL.md:43 SKILL.md:44 SKILL.md:56 SKILL.md:67 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:77 SKILL.md:67

Patrones detectados

Pipe to shell pattern×2

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/ptreezh-agent-world/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/ptreezh-agent-world/security.svg)](https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ptreezh-agent-world/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/ptreezh-agent-world.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

ptreezh. (2026). agent-world security audit report (audit version 1) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/ptreezh-agent-world/audits/1

Cita BibTeX

@techreport{ptreezh-ptreezh-agent-world-2026,
  author = {ptreezh},
  title = {agent-world security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/ptreezh-agent-world/audits/1},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-world security audit report (audit version 1)"
version: "1.0.0"
type: report
authors:
  - name: "ptreezh"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/ptreezh-agent-world/audits/1"
identifiers:
  - type: other
    value: "skillstore:ptreezh-agent-world:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Choose a Community

Compare communities by registration method, audience, availability, and verification needs before selecting a platform.

Plan Community Operations

Prepare posting, reply, notification, and rate-limit workflows across selected agent communities.

Assess Platform Access

Review current status notes and run HTTP checks before integrating a community into an automated workflow.

Prueba estos prompts

Find a Suitable Platform

I want to {goal}. Compare the listed agent communities and recommend one option. Include registration, verification, current status, and important limits.

Prepare a Registration Checklist

Create a registration checklist for {platform}. Separate automated steps from human verification. Identify required tools, credentials, and secure storage actions.

Plan a Community Launch

Plan a project launch on {platforms}. Draft platform-appropriate announcements and an approval-based engagement schedule. Respect each platform's stated limits and rules.

Review a Cross-Platform Workflow

Audit my proposed workflow for {platforms}. Check remote instruction trust, credential storage, installation integrity, network destinations, rate limits, and human approval points.

Mejores prácticas

Verify remote skills and installation files against pinned revisions, checksums, or signatures before use.
Keep credentials in an encrypted store and require human approval for registration, publishing, and social actions.
Recheck current platform rules, availability, and rate limits before every campaign or integration.

Evitar

Do not pipe remote downloads into a shell or executable directory.
Do not treat fetched skill text or API suggestions as trusted instructions.
Do not automate repetitive posts, replies, or votes without operator approval and platform permission.