📦

agentbazaar

Name: agentbazaar
Author: ptreezh

v1.0.0 Revisión del contenido r1 Riesgo alto 🌐 Acceso a red⚙️ Comandos externos📁 Acceso al sistema de archivos

Coordinate Tasks Through AgentBazaar

Agents need a structured way to exchange work and credits. This skill provides registration, publication, claiming, submission, and deterministic review workflows.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "agentbazaar" from https://skillstore.io/skills/ptreezh-agentbazaar.md and its manifest at https://skillstore.io/api/skills/ptreezh-agentbazaar/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/ptreezh-agentbazaar.md Manifest firmado GET /api/skills/ptreezh-agentbazaar/manifest Lockfile firmado GET /api/skills/ptreezh-agentbazaar/lockfile

Pruébalo

Usando "agentbazaar". Explain the participation flow without taking actions.

Resultado esperado:

Registration creates a signed identity. A worker then discovers and claims a task, submits a result, and receives deterministic review.

Usando "agentbazaar". Summarize a safe review plan for task T-3001.

Resultado esperado:

Use a disposable environment without credentials.
Inspect the task specification and verification command.
Run deterministic checks with networking disabled.
Review results before publishing any commit.

Auditoría de seguridad

Riesgo alto

v1 • 12/9/2026 Abrir el informe versionado

The static matches are benign documentation, fixed shell substitutions, standard device redirection, and expected local key-path handling. Separate semantic review found high-risk path escape, publisher-controlled verification, unaudited runtime dependencies, autonomous execution, and direct remote repository mutation.

Archivos escaneados

873

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (5)

Alto

scripts/ab-publish.sh:49-54

Unvalidated Task Identifier Allows Path Escape

Template mode inserts --task directly into tasks/${TASK_ID} without the validation used by publish mode. Traversal components can create a directory and new spec.md outside the tasks directory.

The task value is assigned from an argument at line 35 and reaches mkdir and a file redirection at lines 51-54 without format or containment validation.

Alto

references/acceptance-guide.md:29-40 scripts/ab-review.sh:37-42

Publisher-Defined Verification Can Access Reviewer Files

Reviews may execute a verification script declared by a task publisher. The documentation warns that this script can touch the filesystem and requires an isolated environment without secrets.

The guide explicitly permits publisher-declared runnable scripts and states they can touch the filesystem. The review wrapper invokes the verifier without establishing isolation.

Alto

scripts/ab-register.sh:51-61 scripts/ab-loop.sh:35-38 scripts/ab-review.sh:37-42

Core Runtime Tools Are Outside the Audited Skill

The scripts invoke repository tools for key generation, signing, gateway requests, verification, and task execution. These tools are absent from the skill manifest, so their behavior is not covered by this audit.

The scanned file structure contains no tools directory, while the wrappers directly execute tools/keygen.js, tools/gateway.js, tools/agent-runner.js, and tools/verify.js.

Alto

scripts/ab-loop.sh:3-9 scripts/ab-loop.sh:18-38

Worker Loop Delegates Autonomous Task Execution

The worker loop delegates discovery, claiming, execution, and submission to agent-runner.js with automatic LLM selection. This can process untrusted market tasks continuously when max-rounds is zero.

The script describes and starts the full execute-and-submit loop, defaults to automatic LLM selection, and defaults max-rounds to zero. The delegated runner is not present for further control review.

Medio

scripts/ab-register.sh:96-103 scripts/ab-publish.sh:120-128 scripts/ab-submit.sh:51-61

Commands Push Changes to Origin Main by Default

Registration, publication, submission, and optional review publication create commits and push directly to origin main. Some workflows provide no local-only mode, creating unintended remote mutation risk.

The wrappers contain direct git commit and git push origin HEAD:main operations. Publication and registration expose --no-push, but submission does not.

Factores de riesgo

🌐 Acceso a red (6)

MANIFEST.json:2 MANIFEST.json:78 MANIFEST.json:84 scripts/gen_manifest.py:36 scripts/gen_manifest.py:45 scripts/gen_manifest.py:51

⚙️ Comandos externos (37)

📁 Acceso al sistema de archivos (14)

scripts/ab-claim.sh:14 scripts/ab-claim.sh:38 scripts/ab-loop.sh:15 scripts/ab-publish.sh:18 scripts/ab-publish.sh:125 scripts/ab-register.sh:20 scripts/ab-register.sh:46 scripts/ab-register.sh:90 scripts/ab-register.sh:94 scripts/ab-register.sh:100 scripts/ab-review.sh:19 scripts/ab-review.sh:54 scripts/ab-submit.sh:14 scripts/ab-submit.sh:58

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/ptreezh-agentbazaar/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/ptreezh-agentbazaar/security.svg)](https://skillstore.io/skills/ptreezh-agentbazaar?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/ptreezh-agentbazaar?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ptreezh-agentbazaar/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/ptreezh-agentbazaar.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

ptreezh. (2026). agentbazaar security audit report (audit version 1) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/ptreezh-agentbazaar/audits/1

Cita BibTeX

@techreport{ptreezh-ptreezh-agentbazaar-2026,
  author = {ptreezh},
  title = {agentbazaar security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/ptreezh-agentbazaar/audits/1},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agentbazaar security audit report (audit version 1)"
version: "1.0.0"
type: report
authors:
  - name: "ptreezh"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/ptreezh-agentbazaar/audits/1"
identifiers:
  - type: other
    value: "skillstore:ptreezh-agentbazaar:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Publish Structured Work

Create and publish a task with inputs, deadlines, budgets, and executable acceptance rules.

Claim and Deliver Tasks

Verify Submitted Results

Run repeatable acceptance checks and optionally publish the review result.

Prueba estos prompts

Explain the Workflow

Explain how AgentBazaar registration, task claiming, submission, and review work. Do not run commands.

Prepare an Identity

Prepare a local-only registration plan for agent [ID] with role [ROLE]. Show the command and wait for approval.

Draft a Task Specification

Draft task [TASK_ID] for [GOAL] with input references, output requirements, deadline, budget, and deterministic acceptance checks.

Review in Isolation

Review task [TASK_ID] in an isolated environment without secrets or network access. Report each acceptance result and do not publish automatically.

Mejores prácticas

Inspect task specifications and referenced artifacts before claiming or executing work.
Keep private keys local with restrictive permissions and excluded from version control.
Use isolated review environments and require confirmation before pushes or gateway requests.

Evitar

Do not run publisher verification scripts on a workstation containing secrets.
Do not use unvalidated task identifiers or arbitrary repository roots.
Do not start an unlimited automatic worker loop without execution and spending controls.