スキル internet-court
📦
internet-court
コンテンツリビジョン r1 重大 🌐 ネットワークアクセス⚙️ 外部コマンド📁 ファイルシステムへのアクセス🔑 環境変数⚡ スクリプトを含む
Internet Courtでエージェントコマースを構築
エージェントコマースでは、多数のプロトコルにまたがって、決済、資産管理、紛争のリスクが生じます。Internet Courtは、Claude、Codex、Claude Codeに、制限付き決済、エスクロー、証拠、裁定を扱うためのルーターを提供します。
対応: Claude Codex Code(CC)
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "internet-court" from https://skillstore.io/skills/internet-court-internet-court.md and its manifest at https://skillstore.io/api/skills/internet-court-internet-court/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「internet-court」を使用しています。 自分のエージェントに、x402を使用する有料の調査APIを利用させたいです。
期待される結果:
- エンドポイント、提示価格、決済手段、不足している信頼情報をまとめた探索結果。
- 上限付き権限と明示的なユーザー承認を備えた、保護付き決済経路の推奨案。
- ユーザーが付与するまでは、資金も権限も存在しないという警告。
「internet-court」を使用しています。 請負エージェントによるレポートの納品が遅れたため、精算手順が必要です。
期待される結果:
- 必要な証拠、審査基準、想定される結果を含む紛争対応計画。
- 支払いの解放、返金、制限、取り消し、エスカレーションなどの精算措置。
- 最終評決に基づく評価更新の要件。
セキュリティ監査
重大v2 • 2026/7/19 バージョン別レポートを開く
The bundle contains confirmed critical remote installer pipelines, secret-retrieval commands, model-generated eval, plaintext private-key workflows, and silent global plugin installation. Many remaining matches are lexical false positives, but the confirmed supply-chain and credential risks prevent unattended use. Static review was capped at 400/6908 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
376
スキャンされたファイル
59,995
解析済み行数
52
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (28)
重大
Pipe to shell pattern
curl -L https://foundry.paradigm.xyz | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
重大
Pipe to shell pattern
- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
重大
Pipe to shell pattern
curl -fsSL https://tempo.xyz/install | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
重大
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
重大
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/ca
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
重大
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/n
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
重大
macOS security command
> **Back up the passphrase either way.** Keychain entry: `service=chaingpt-mcp-agent-wallet account=
The command retrieves a wallet passphrase from macOS Keychain and prints it. Agent context, terminal capture, or logs could expose the secret.
重大
Silent Third-Party Skill Installation
The routing skill silently installs a global third-party plugin and immediately loads its instructions. This bypasses informed consent and creates a supply-chain execution path.
The instructions explicitly use a global install command with automatic confirmation, call the process invisible, and immediately apply the installed plugin.
確認済みの28件をすべて表示
高
Certificate/key files
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
高
Certificate/key files
| `identity.key` | Raw 32-byte EVM private key for the buyer wallet. Fallback when `ANTSEED_IDENTITY
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
高
Crypto seed/private key mention
- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
高
Crypto seed/private key mention
The exported agent package is a bearer capability in demo form. Include explicit warnings, keep caps
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
高
Crypto seed/private key mention
- include private key in exported JSON or omit it;
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
高
Crypto seed/private key mention
# Login with wallet private key
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
高
Crypto seed/private key mention
# Enter private key when prompted
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
高
Crypto seed/private key mention
2. **Environment configuration**: Setup `.env` file with private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
高
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
高
Crypto seed/private key mention
# Your wallet private key (NEVER commit this file!)
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
高
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
高
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
高
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
高
Environment file access
2. **Environment configuration**: Setup `.env` file with private key
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
高
Environment file access
Create `.env`:
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
高
Environment file access
if (!process.env.PRIVATE_KEY) {
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
高
Automatic External Disclosure of User Context
The skill requires opening a public repository issue and including the user goal and failure details. It does not require user approval or redaction.
The instructions mandate filing the issue directly when a GitHub tool exists and specify that user goals and failures must be included.
高
Untrusted Peer Message Controls Priority Actions
A peer-controlled marker receives highest priority and causes raw message data to be written and passed to a CLI. Sender and job validation are not required.
The routing table explicitly prioritizes a peer marker before other actions and passes the complete untrusted message through a local file to the CLI.
中
SQLite database file
| `metering.db` | SQLite log of every request the proxy served (model, peer, tokens, USDC). Used by
The local database retains request, peer, token, and payment history. Backups or weak file permissions could expose operational metadata.
中
Untrusted Repository Content Lacks an Instruction Boundary
The workflow clones an escrow-selected repository and directs the agent to read its tests. It does not warn that repository instructions are untrusted data.
The repository URL and commit come from external escrow data, then the agent reads test content without a prompt-injection or trust-boundary safeguard.
機能レビュー項目 (52)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Dynamic code evaluation with eval()
LLMs can't reliably inspect characters in their input (they hallucinate em dashes, miscount characte
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
高
Dynamic code evaluation with eval()
# Step 2: eval() all checks in one sandbox — deterministic, no hallucination
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
高
Dynamic code evaluation with eval()
ok = eval(c["expression"], {
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
高
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in .env");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in environment variables");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
#### "PRIVATE_KEY not found"
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
高
Hidden file in home directory
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session under the home directory. Weak permissions, backups, or unintended reads could expose reusable credentials.
高
Hidden file in home directory
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file is a raw funded-wallet private key. Local disclosure or unsafe backup would permit unauthorized signing.
高
sudo privilege escalation
sudo systemctl restart hermes
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
高
sudo privilege escalation
> Or whatever supervisor you use. Then check the journal: `sudo journalctl -u hermes --no-pager -n 3
The guide invokes sudo to read service logs, which may expose sensitive runtime data. Elevated access should require explicit user approval.
高
sudo privilege escalation
- *Want to swap the routed model without restarting AntSeed* — Edit `model.default` (and `models:` i
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
中
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
中
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
中
Hidden file access
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session in a hidden home directory. Weak file permissions or backups could expose reusable credentials.
中
Hidden file access
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file contains a raw funded-wallet private key. Unintended local access would permit unauthorized signing.
中
Shell command substitution
export ANTSEED_IDENTITY_HEX=$(openssl rand -hex 32)
The command creates a raw wallet key and exports it into the process environment. Child processes or environment capture could expose it.
中
Shell command substitution
WALLET=$(cast wallet address --private-key "$PRIVATE_KEY")
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
中
Shell command substitution
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
中
Temp directory access
2. Clone it to a temporary location: `git clone <url> /tmp/escrow-tests-<uid> && cd /tmp/escrow-test
The guide clones an externally supplied repository into a predictable temporary path. Existing paths, symlinks, or crafted identifiers could redirect writes.
中
Temp directory access
cat > /tmp/eip712.json << EOF
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
中
Temp directory access
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
中
Temp directory access
| 1 | Contains `[intent:deliver]` | **Highest priority — process THIS TURN before any other CLI call
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
中
Temp directory access
1. Write its **raw JSON** to `/tmp/a2a_deliver_<jobId>.json` first.
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
中
xargs command (can execute arbitrary commands)
lsof -ti:7378 | xargs kill -9
The command force-kills every process listening on a port without checking ownership or identity. It can terminate an unrelated process.
中
Fetch API call
const response = await fetch(url);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
中
Fetch API call
const response = await fetch(imageUrl);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
低
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
低
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
低
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
低
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
低
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
低
Environment variable access (bracket notation)
for (const key of required) creds[key] = process.env[key];
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
低
Environment variable access (bracket notation)
const value = process.env[name]?.trim();
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
低
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Environment variable access (dot notation)
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Environment variable object
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
低
Python environment access
1. **Store API keys in environment variables** — never hardcode. Use `process.env.CHAINGPT_API_KEY`
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
低
Python environment access
'Authorization': f'Bearer {os.environ["NEAR_API_KEY"]}'
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
リスク要因
🌐 ネットワークアクセス (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-intelligent-contracts/SKILL.md:3 integrations/genlayer-intelligent-contracts/SKILL.md:12 README.md:135 README.md:148 README.md:158 README.md:177 SKILL.md:36 SKILL.md:47 SKILL.md:218 SKILL.md:363 skills-lock.json:138 skills-lock.json:257 skills-lock.json:280 skills-lock.json:711 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/account-management.md:218 vendored/0g/0g-compute/references/account-management.md:219 vendored/0g/0g-compute/references/account-management.md:568 vendored/0g/0g-compute/references/examples/speech-to-text.md:238 vendored/0g/0g-compute/references/examples/speech-to-text.md:114 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/streaming-chat.md:277 vendored/0g/0g-compute/references/examples/streaming-chat.md:113 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:450 vendored/0g/0g-compute/references/examples/text-to-image.md:188 vendored/0g/0g-compute/references/examples/text-to-image.md:280 vendored/0g/0g-compute/references/examples/text-to-image.md:440 vendored/0g/0g-compute/references/examples/text-to-image.md:457 vendored/0g/0g-compute/references/examples/text-to-image.md:67 vendored/0g/0g-compute/references/examples/text-to-image.md:111 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:389 vendored/0g/0g-compute/references/inference.md:131 vendored/0g/0g-compute/references/inference.md:156 vendored/0g/0g-compute/references/inference.md:236 vendored/0g/0g-compute/references/inference.md:273 vendored/0g/0g-compute/references/inference.md:296 vendored/0g/0g-compute/references/inference.md:16 vendored/0g/0g-compute/references/inference.md:17 vendored/0g/0g-compute/SKILL.md:73 vendored/0g/0g-compute/SKILL.md:27 vendored/0g/0g-compute/SKILL.md:28 vendored/0g/0g-compute/SKILL.md:56 vendored/0g/0g-compute/SKILL.md:57 vendored/0g/0g-compute/SKILL.md:171 vendored/0g/0g-compute/SKILL.md:172
⚙️ 外部コマンド (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-erc7710-connector/SKILL.md:12-18 integrations/genlayer-erc7710-connector/SKILL.md:18-27 integrations/genlayer-erc7710-connector/SKILL.md:27 integrations/genlayer-erc7710-connector/SKILL.md:63-71 integrations/genlayer-erc7710-connector/SKILL.md:71-75 integrations/genlayer-erc7710-connector/SKILL.md:75-76 integrations/genlayer-erc7710-connector/SKILL.md:76-77 integrations/genlayer-erc7710-connector/SKILL.md:77 integrations/genlayer-erc7710-connector/SKILL.md:81-82 integrations/genlayer-erc7710-connector/SKILL.md:82 integrations/genlayer-erc7710-connector/SKILL.md:83 integrations/genlayer-erc7710-connector/SKILL.md:103-106 integrations/genlayer-erc7710-connector/SKILL.md:106-113 integrations/genlayer-erc7710-connector/SKILL.md:113-114 integrations/genlayer-erc7710-connector/SKILL.md:114-115 integrations/genlayer-erc7710-connector/SKILL.md:115-120 integrations/genlayer-erc7710-connector/SKILL.md:120-124 integrations/genlayer-erc7710-connector/SKILL.md:124-127 integrations/genlayer-erc7710-connector/SKILL.md:127-128 integrations/genlayer-erc7710-connector/SKILL.md:128-129 integrations/genlayer-erc7710-connector/SKILL.md:129-132 integrations/genlayer-erc7710-connector/SKILL.md:132-138 integrations/genlayer-erc7710-connector/SKILL.md:138-148 integrations/genlayer-erc7710-connector/SKILL.md:148-159 integrations/genlayer-erc7710-connector/SKILL.md:159-160 integrations/genlayer-erc7710-connector/SKILL.md:160-161 integrations/genlayer-erc7710-connector/SKILL.md:161-162 integrations/genlayer-erc7710-connector/SKILL.md:162 integrations/genlayer-erc7710-connector/SKILL.md:163-178 integrations/genlayer-erc7710-connector/SKILL.md:178-179 integrations/genlayer-erc7710-connector/SKILL.md:179-180 integrations/genlayer-erc7710-connector/SKILL.md:180-193 integrations/genlayer-erc7710-connector/SKILL.md:193-202 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:40-41 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:41-44 integrations/genlayer-intelligent-contracts/SKILL.md:12 integrations/genlayer-intelligent-contracts/SKILL.md:16-23 integrations/genlayer-intelligent-contracts/SKILL.md:23-36 integrations/genlayer-intelligent-contracts/SKILL.md:36 integrations/genlayer-intelligent-contracts/SKILL.md:38 integrations/genlayer-intelligent-contracts/SKILL.md:46-70 integrations/genlayer-intelligent-contracts/SKILL.md:70-74 integrations/genlayer-intelligent-contracts/SKILL.md:74-77 integrations/genlayer-intelligent-contracts/SKILL.md:77-79 integrations/genlayer-intelligent-contracts/SKILL.md:79-80 integrations/genlayer-intelligent-contracts/SKILL.md:80-81 integrations/genlayer-intelligent-contracts/SKILL.md:81-82 integrations/genlayer-intelligent-contracts/SKILL.md:82-83 integrations/genlayer-intelligent-contracts/SKILL.md:83-84
📁 ファイルシステムへのアクセス (50)
integrations/genlayer-intelligent-contracts/SKILL.md:38 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 SKILL.md:42 SKILL.md:48 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/examples/README.md:145 vendored/0g/0g-compute/references/examples/README.md:146 vendored/0g/0g-compute/references/examples/README.md:147 vendored/0g/0g-compute/references/examples/README.md:163 vendored/0g/0g-compute/references/examples/speech-to-text.md:299 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:672 vendored/0g/0g-compute/references/examples/speech-to-text.md:287 vendored/0g/0g-compute/references/examples/speech-to-text.md:298 vendored/0g/0g-compute/references/examples/speech-to-text.md:303 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:225 vendored/0g/0g-compute/references/examples/speech-to-text.md:528 vendored/0g/0g-compute/references/examples/speech-to-text.md:341 vendored/0g/0g-compute/references/examples/speech-to-text.md:676 vendored/0g/0g-compute/references/examples/streaming-chat.md:250 vendored/0g/0g-compute/references/examples/streaming-chat.md:273 vendored/0g/0g-compute/references/examples/streaming-chat.md:645 vendored/0g/0g-compute/references/examples/streaming-chat.md:646 vendored/0g/0g-compute/references/examples/text-to-image.md:194 vendored/0g/0g-compute/references/examples/text-to-image.md:228 vendored/0g/0g-compute/references/examples/text-to-image.md:325 vendored/0g/0g-compute/references/examples/text-to-image.md:442 vendored/0g/0g-compute/references/examples/text-to-image.md:446 vendored/0g/0g-compute/references/examples/text-to-image.md:227
🔑 環境変数 (50)
vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:67 vendored/0g/0g-compute/references/examples/speech-to-text.md:136 vendored/0g/0g-compute/references/examples/speech-to-text.md:141 vendored/0g/0g-compute/references/examples/speech-to-text.md:117 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:275 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:66 vendored/0g/0g-compute/references/examples/streaming-chat.md:138 vendored/0g/0g-compute/references/examples/streaming-chat.md:141 vendored/0g/0g-compute/references/examples/streaming-chat.md:116 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:190 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:574 vendored/0g/0g-compute/references/examples/streaming-chat.md:578 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:139 vendored/0g/0g-compute/references/examples/text-to-image.md:143 vendored/0g/0g-compute/references/examples/text-to-image.md:203
⚡ スクリプトを含む (14)
vendored/arkhai/alkahest-developer/references/python-api.md:16-21 vendored/arkhai/alkahest-developer/references/python-api.md:183-192 vendored/arkhai/alkahest-developer/references/python-api.md:202-208 vendored/arkhai/alkahest-developer/references/python-api.md:235-241 vendored/genlayer/write-contract/SKILL.md:393 vendored/genlayer/write-contract/SKILL.md:407 vendored/genlayer/write-contract/SKILL.md:412 vendored/genlayer/write-contract/SKILL.md:178 vendored/kleros/kleros-ipfs-upload/SKILL.md:107 vendored/okx/okx-agent-payments-protocol/SKILL.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:175 vendored/openserv/openserv-agent-sdk/troubleshooting.md:179 vendored/openserv/openserv-agent-sdk/troubleshooting.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:186
検出されたパターン
Pipe to shell pattern×6macOS security command
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/internet-court-internet-court/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-internet-court/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/internet-court-internet-court.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
internet-court. (2026). internet-court security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/internet-court-internet-court/audits/2BibTeX形式の引用
@techreport{internet-court-internet-court-internet-court-2026,
author = {internet-court},
title = {internet-court security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/internet-court-internet-court/audits/2},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "internet-court security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "internet-court"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/internet-court-internet-court/audits/2"
identifiers:
- type: other
value: "skillstore:internet-court-internet-court:audit:2"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
有料エージェントサービスを評価する
有料エンドポイントを調査し、決済手段を特定して、支出前に不足している信頼情報を一覧化します。
制限付き決済フローを設計する
上限、許可された経路、承認境界を備えたx402または委任ウォレットによる決済を計画します。
紛争解決手順を準備する
係争中の作業について、証拠、審査基準、精算措置、評価の更新を定義します。
これらのプロンプトを試す
取引を整理する
Internet Courtを使用して、このエージェント間取引を整理してください：[サービス、取引相手、費用、成果物]。まず探索のみを行い、不足している信頼情報を一覧化してください。
信頼レベルを選択する
提案された次のエージェント間取引：[詳細]について、Basic、Guarded、Adjudicatedのいずれかの保護レベルを選択してください。トレードオフと、最初に確認すべき事項を説明してください。
保護付き決済を準備する
[有料リソース]向けに、保護付き決済フローを設計してください。決済手段、支出上限、許可するリソース、ウォレット承認境界、障害発生時の処理を含めてください。
裁定付き精算を設計する
[エージェントのジョブ]向けに、裁定付きワークフローを作成してください。証拠、審査基準、判定結果、執行措置、評価更新の要件を定義してください。
ベストプラクティス
- ルーティング先のサブスキルをローカルで利用およびレビューできるように、可能な限りリポジトリ全体をインストールしてください。
- ユーザーが資金、ウォレット権限、または明示的な許可を付与するまでは、エージェントを探索モードに維持してください。
- 実際の決済、資産管理、成果物の引き渡しに関するリスクをカバーできる、最も軽量な信頼レベルを使用してください。
回避
- 秘密鍵、シードフレーズ、または制限のないベアラー型ウォレット情報をユーザーに要求しないでください。
- チェックサムまたは署名を検証せずに、リモートのインストーラースクリプトを取得または実行しないでください。
- 証明を受け取る前に、決済、デリゲーション、コントラクト、または紛争結果が存在すると主張しないでください。
よくある質問
Internet Courtは何に使用されますか？
決済、エスクロー、証拠、裁定、評価更新を含むコマースワークフローをエージェントが構築できるよう支援します。
決済は自動的に実行されますか？
いいえ。決済ワークフローの計画とルーティングは行えますが、ウォレットへの資金供給と必要な権限の承認はユーザーが行う必要があります。
このスキルを使用できるツールはどれですか？
レポートには、Claude、Codex、Claude Codeのサポートが記載されています。
同梱されたスキルが多数あるのはなぜですか？
Internet Courtは、ID、決済、エスクロー、実行、紛争に関する機能を再実装せず、それぞれのプロトコルが所有するスキルへルーティングします。
このスキルは自動インストールしても安全ですか？
いいえ。監査では、手動レビューが必要な高リスクのウォレット、シークレット、コマンド、ネットワークに関するパターンが確認されています。
使用前に何を確認すべきですか？
ユーザーは、リポジトリ全体、プロバイダーの認証情報、ウォレットの境界、決済上限、紛争時の証拠要件を確認する必要があります。
開発者情報
作成者
internet-courtライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
3f6e026a3363e0954ede7bef0cfe88d4475de137
メンテナンスの新しさ
2026/7/20
利用状況
0 ダウンロード · 0 閲覧
ファイル構成
📄 SKILL.md
📁 genlayer-intelligent-contracts/
📄 agent-supervisor-contract.md
📄 SKILL.md
📄 SKILL.md
📁 0g/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 antseed/
📄 SKILL.md
📁 arkhai/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 x402/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 heurist/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 kleros/
📄 SKILL.md
📁 scripts/
📄 SKILL.md
📁 lifi/
📁 lifi/
📄 SKILL.md
📄 SKILL.md
📄 skill.md
📁 nansen/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 near/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📁 okx/
📁 okx-agent-payments-protocol/
📁 _shared/
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-ai/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-dex/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 openserv-multi-agent-workflows/
📄 SKILL.md
📁 privy/
📁 privy/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 tempo/
📁 mppx/
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md