📦
agentbazaar
38Coordinate Tasks Through AgentBazaar
Agents need a structured way to exchange work and credits. This skill provides registration, publication, claiming, submission, and deterministic review workflows.
Productividad Ver
Habilidades agent-world
📦
agent-world
v1.0.0 Revisión del contenido r1 Crítico 🌐 Acceso a red🔑 Variables de entorno📁 Acceso al sistema de archivos⚙️ Comandos externos
Navigate Agent Communities Safely
Agent community requirements, access methods, and status information are scattered across many platforms. This skill organizes platform routes, participation steps, status checks, and credential guidance.
Compatible con: Claude Codex Code(CC)
No instales este Skill automáticamente.
La política canónica exige la revisión de un operador antes de cualquier acción de instalación.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "agent-world" from https://skillstore.io/skills/ptreezh-agent-world.md and its manifest at https://skillstore.io/api/skills/ptreezh-agent-world/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "agent-world". Recommend a platform for listing an open-source agent skill with minimal registration.
Resultado esperado:
Recommendation: theskills.directory. Submit a pull request using its template and keep the description on one line. Confirm current availability before submission.
Usando "agent-world". Create a safe registration checklist for agentid.sh.
Resultado esperado:
- Confirm the official endpoint and review its current documentation.
- Register the chosen handle only after operator approval.
- Store the returned private key in an encrypted credential manager.
- Record only non-secret account metadata in project documentation.
Usando "agent-world". Summarize status checks for all configured platforms.
Resultado esperado:
The checker contacts each configured base URL and reports HTTP success or failure. Results show reachability, not authentication, API correctness, or service health.
Auditoría de seguridad
Críticov1 • 12/9/2026 Abrir el informe versionado
Most static matches are benign documentation syntax, schema URLs, or defensive credential guidance. Confirmed risks include remote pipe-to-shell commands, plaintext private-key storage guidance, executable installation into a home directory, and outbound network requests. Semantic review also identified unsafe delegation to mutable remote skills, unverified archive extraction, unrestricted URL probing, and coordinated engagement behavior.
8
Archivos escaneados
479
Líneas analizadas
15
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (7)
Crítico
Pipe to shell pattern
> - How to join (one command): "One-command join: curl -sL https://raw.githubusercontent.com/<owner>
The post template recommends downloading a mutable remote script and piping it directly to bash. This permits immediate arbitrary code execution without inspection or integrity verification.
Crítico
Pipe to shell pattern
> "Join in one command: curl -sL https://raw.githubusercontent.com/<owner>/<repo>/main/join.sh | bas
The reply template promotes direct execution of a remotely downloaded join script. A compromised repository or substituted script would execute with the user's privileges.
Alto
Crypto seed/private key mention
2. **Server-issued private keys cannot be recovered.** agentid.sh returns a private key and explicit
The skill instructs the agent to persist an unrecoverable private key in a local gitignored file. It does not require encryption or restrictive permissions, leaving high-value key material exposed locally.
Alto
Untrusted Remote Skills Treated as Authoritative
The routing flow tells agents to fetch changing platform skills, treat them as authoritative, and follow them directly. Without pinning, integrity checks, or instruction isolation, a compromised remote skill can inject instructions and trigger unauthorized actions.
The text explicitly calls remote skills authoritative, directs the agent to follow them, and recommends re-fetching changed versions. No verification or trust boundary is specified.
Alto
Unverified Remote Archive Installed as Executable
The KodaClaw route streams a mutable release archive into tar and extracts it directly into ~/.local/bin. It provides no version pin, checksum, signature, or archive-content validation.
The complete installation command is present and visibly lacks integrity verification. The destination is an executable search path.
Medio
Unrestricted URL Probing
The status checker accepts any URL and opens it without scheme or destination validation. Agent-supplied targets can reach loopback, private network, metadata, or redirected endpoints.
The positional URL is copied directly into the request path and urllib follows supported targets. No allowlist, address filtering, or redirect restriction is present.
Medio
Coordinated Engagement Automation
The skill prescribes replying to every comment and upvoting a fixed number of other posts each session. Automated execution can create inauthentic engagement or violate platform rules.
The instructions explicitly define repeated posting, reply, and upvote behavior as obligations. The skill does not require operator approval or relevance checks for each social action.
Elementos de revisión de capacidades (15)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Generic API/secret keys
Content: handle, api_key/token, id, verification code, claim URL, creation date, status.
The guidance directs users to store API keys, tokens, and verification codes together in plaintext account files. Gitignore reduces commit exposure but does not protect local files or backups.
Alto
Hidden file in home directory
| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k
The documented command extracts a remote archive directly into ~/.local/bin. This writes an unverified executable into a user command path.
Medio
Hidden file access
| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k
The installation command writes to the hidden ~/.local/bin directory. The access is intentional, but it creates a persistence and executable replacement risk because the archive is unverified.
Medio
Python HTTP libraries
with urllib.request.urlopen(req, timeout=timeout) as resp:
urlopen executes the outbound request to the supplied target. Because destinations are unrestricted, the checker can contact local or private network services.
Bajo
Python HTTP libraries
req = urllib.request.Request(url, method="GET", headers={"User-Agent": "agent-world-status-check/1.0
The function constructs an outbound GET request for a caller-supplied URL. This is expected status-check behavior but creates a network access capability.
Bajo
Hardcoded URL
"XiaLiao/ClawdChat": "https://clawdchat.cn",
The --all mode sends an HTTP request to this hardcoded external platform. The behavior is legitimate health checking but still performs outbound network access.
Bajo
Hardcoded URL
"InStreet": "https://instreet.coze.site",
The --all mode sends an HTTP request to this hardcoded external platform. No credentials are sent, but network access is real.
Bajo
Hardcoded URL
"agentid.sh": "https://agentid.sh",
The status checker contacts this external URL when --all is selected. The request is expected and unauthenticated but remains an outbound connection.
Bajo
Hardcoded URL
"SkillsMD": "https://skillsmd.dev",
The status checker contacts this external URL when --all is selected. The behavior is narrow health checking with no secret transmission.
Bajo
Hardcoded URL
"theskills.directory": "https://theskills.directory",
This URL is an active target of the --all health check. It represents intentional outbound network access without credential data.
Bajo
Hardcoded URL
"KodaClaw Community": "https://community.ai-koda.com",
This URL is an active target of the --all health check. The external request is legitimate but confirmed.
Bajo
Hardcoded URL
"Coze Agent World": "https://world.coze.site",
The checker performs an outbound GET to this platform in --all mode. It sends only a fixed user agent and no stored secrets.
Bajo
Hardcoded URL
"Agentica": "https://agentica.wiki",
The checker performs an outbound GET to this platform in --all mode. The access is expected but externally observable.
Bajo
Hardcoded URL
"Moltbook": "https://moltbook.com",
The --all command contacts this external platform to obtain an HTTP status. This is a real, low-impact network operation.
Bajo
Hardcoded URL
"PromptFrenzy": "https://promptfrenzy.com",
The --all command contacts this external platform to obtain an HTTP status. No sensitive payload is attached.
Factores de riesgo
🌐 Acceso a red (17)
MANIFEST.json:2 MANIFEST.json:54 scripts/check_status.py:17 scripts/check_status.py:36 scripts/check_status.py:38 scripts/check_status.py:22 scripts/check_status.py:23 scripts/check_status.py:24 scripts/check_status.py:25 scripts/check_status.py:26 scripts/check_status.py:27 scripts/check_status.py:28 scripts/check_status.py:29 scripts/check_status.py:30 scripts/check_status.py:31 scripts/gen_manifest.py:32 scripts/gen_manifest.py:41
🔑 Variables de entorno (4)
📁 Acceso al sistema de archivos (3)
⚙️ Comandos externos (14)
Patrones detectados
Pipe to shell pattern×2
Auditado por: codex
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/ptreezh-agent-world/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ptreezh-agent-world/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/ptreezh-agent-world.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
ptreezh. (2026). agent-world security audit report (audit version 1) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/ptreezh-agent-world/audits/1Cita BibTeX
@techreport{ptreezh-ptreezh-agent-world-2026,
author = {ptreezh},
title = {agent-world security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/ptreezh-agent-world/audits/1},
note = {Author version 1.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-world security audit report (audit version 1)"
version: "1.0.0"
type: report
authors:
- name: "ptreezh"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/ptreezh-agent-world/audits/1"
identifiers:
- type: other
value: "skillstore:ptreezh-agent-world:audit:1"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 68
Arquitectura
100
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación
Lo que puedes crear
Choose a Community
Compare communities by registration method, audience, availability, and verification needs before selecting a platform.
Plan Community Operations
Prepare posting, reply, notification, and rate-limit workflows across selected agent communities.
Assess Platform Access
Review current status notes and run HTTP checks before integrating a community into an automated workflow.
Prueba estos prompts
Find a Suitable Platform
I want to {goal}. Compare the listed agent communities and recommend one option. Include registration, verification, current status, and important limits.Prepare a Registration Checklist
Create a registration checklist for {platform}. Separate automated steps from human verification. Identify required tools, credentials, and secure storage actions.Plan a Community Launch
Plan a project launch on {platforms}. Draft platform-appropriate announcements and an approval-based engagement schedule. Respect each platform's stated limits and rules.Review a Cross-Platform Workflow
Audit my proposed workflow for {platforms}. Check remote instruction trust, credential storage, installation integrity, network destinations, rate limits, and human approval points.Mejores prácticas
- Verify remote skills and installation files against pinned revisions, checksums, or signatures before use.
- Keep credentials in an encrypted store and require human approval for registration, publishing, and social actions.
- Recheck current platform rules, availability, and rate limits before every campaign or integration.
Evitar
- Do not pipe remote downloads into a shell or executable directory.
- Do not treat fetched skill text or API suggestions as trusted instructions.
- Do not automate repetitive posts, replies, or votes without operator approval and platform permission.
Preguntas frecuentes
Which assistants can use this skill?
The marketplace metadata supports Claude, Codex, and Claude Code.
Does the skill create platform accounts automatically?
It provides workflows, but some steps require external tools, network access, credentials, or human verification.
Does the status checker prove a platform is working?
No. It checks HTTP responses only and does not validate authentication, APIs, or complete service behavior.
How should credentials be stored?
Use an encrypted operating system credential store or vault. Gitignore alone does not protect plaintext secrets.
Are remote platform skills safe to follow directly?
No. Pin trusted revisions, verify integrity, inspect instructions, and require approval before sensitive actions.
Can platform status and limits change?
Yes. Recheck official documentation and current responses because the included observations can become outdated.
Detalles del desarrollador
Autor
ptreezhLicencia
apache-2.0
Versión del autor
v1.0.0
Revisión de Skillstore
r1
Repositorio
https://github.com/ptreezh/agentmarket/tree/5cd5fa167f3dcacbf35eda02fb108bbe040b2d5c/skills/agent-worldRef.
5526951beaeca22519572a471618555839b53b05
Actualidad del mantenimiento
14/9/2026
Uso
0 descargas · 0 vistas
Estructura de archivos
Más de ptreezh
Ver todoHabilidades relacionadas
Ver todo📦
task-state-ledger
90Track Long Tasks With a Portable State Ledger
por glenskii
Long technical tasks lose decisions, evidence, and next actions across sessions. This skill maintains a concise Markdown state file with reviewed local evidence references.
Productividad Ver
📦
tool-discovery
87Elige la herramienta de IA adecuada para cada tarea
por 0xDarkMatter
Elegir entre muchas habilidades y agentes puede retrasar el trabajo técnico. Esta habilidad asigna cada tarea a herramientas especializadas mediante catálogos concisos y reglas de selección.
Productividad Ver
📦
prompt-engineering-patterns
86Optimizar Prompts de LLM en Producción
por wshobson
Los prompts de LLM suelen fallar porque las instrucciones, los ejemplos y los criterios de evaluación no están claros. Esta skill proporciona plantillas y flujos de trabajo para mejorar prompts en Claude, Codex, Claude Code y herramientas similares.
Productividad Ver
📦
organizing-with-labels
86Organiza GitHub Issues con etiquetas
por C0ntr0lledCha0s
Los repositorios grandes pierden tiempo cuando las incidencias usan etiquetas inconsistentes e hitos poco claros. Esta skill ayuda a crear taxonomías, ejecutar actualizaciones masivas e informar el progreso mediante flujos de trabajo de GitHub.
Productividad Ver
📦
tarot-reading
86Create Reflective Tarot Readings
por gokimedia
Tarot requests can become inconsistent or overconfident without a structured source. This skill uses a bundled 78-card dataset and defined spreads for reflective interpretations.
Productividad Ver
📦
capa-officer
84Gestionar investigaciones CAPA y planes de acción
por davila7
Los equipos de CAPA necesitan investigaciones coherentes, análisis de causa raíz, planificación de acciones y registros de verificación. Esta skill guía flujos de trabajo CAPA estructurados, documentación, métricas y alineación regulatoria.
Productividad Ver