스킬 bot-store-marketplace

📦

bot-store-marketplace

Name: bot-store-marketplace
Author: humanleap

콘텐츠 리비전 r1 안전 ⚙️ 외부 명령어🌐 네트워크 접근

Find and Compare Grok Bots on bot.store

Choosing a Grok Bot requires checking actual capabilities, prices, and access options. This skill guides marketplace searches, listing comparisons, and checkout handoffs for user-selected bots.

지원: Claude Codex Code(CC)

🥉 78 브론즈

Maintain this Skill? Claim it 🥉 78 브론즈

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "bot-store-marketplace" from https://skillstore.io/skills/humanleap-bot-store-marketplace.md and its manifest at https://skillstore.io/api/skills/humanleap-bot-store-marketplace/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/humanleap-bot-store-marketplace.md 서명된 manifest GET /api/skills/humanleap-bot-store-marketplace/manifest 서명된 lockfile GET /api/skills/humanleap-bot-store-marketplace/lockfile

테스트해 보기

"bot-store-marketplace" 사용 중입니다. Find a free bot for my task when the marketplace returns no matching listings.

예상 결과:

No matching free bot was returned for your task. I have not substituted an invented listing or prepared checkout.

"bot-store-marketplace" 사용 중입니다. Explain my status after preparing checkout for a selected paid bot.

예상 결과:

Checkout is prepared for your selected listing.
Use the returned checkout link to sign in and approve payment.
Payment, ownership, and installation are not confirmed by checkout preparation.

"bot-store-marketplace" 사용 중입니다. Explain how to compare two returned bot listings.

예상 결과:

Compare the capabilities and prices provided by each listing.
Treat missing details as unknown.
Search relevance does not independently establish quality.

보안 감사

안전

v1 • 2026. 10. 3. 버전별 보고서 열기

One finding is confirmed: the installation command executes an unpinned external package and retrieves upstream skill content without an immutable reference. Sixteen findings are false positives involving Markdown tool names, task-related URLs, and checkout terminology. No evidence found of prompt injection, credential collection, unauthorized payment, or system reconnaissance in the reviewed skill.

스캔된 파일

분석된 줄 수

검토 항목

오탐 무시됨

기능 검토 항목 (1)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

중간

SKILL.md:13

Ruby/shell backtick execution

Install this skill with `pnpm dlx skills add Humanleap/agent-skills --skill bot-store-marketplace`.

The backticks are Markdown, but the enclosed pnpm dlx installation command executes an unpinned external package and retrieves upstream skill content. This creates a concrete supply-chain execution risk, although no malicious payload is shown.

위험 요인

⚙️ 외부 명령어 (9)

SKILL.md:13 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:38 SKILL.md:39 SKILL.md:40

🌐 네트워크 접근 (5)

SKILL.md:4 SKILL.md:13 SKILL.md:50 SKILL.md:51 SKILL.md:52

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/humanleap-bot-store-marketplace/security.svg)](https://skillstore.io/skills/humanleap-bot-store-marketplace?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/humanleap-bot-store-marketplace?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/humanleap-bot-store-marketplace/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/humanleap-bot-store-marketplace.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

humanleap. (2026). bot-store-marketplace security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1

BibTeX 인용

@techreport{humanleap-humanleap-bot-store-marketplace-2026,
  author = {humanleap},
  title = {bot-store-marketplace security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bot-store-marketplace security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "humanleap"
date-released: "2026-10-03"
url: "https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1"
identifiers:
  - type: other
    value: "skillstore:humanleap-bot-store-marketplace:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Find a Free Writing Bot

Search for writing templates, preserve a free-only constraint, and share a returned Grok link.

Compare Task-Specific Templates

Compare actual listing capabilities and prices for a recurring team task without inventing quality claims.

Prepare a Selected Bot Purchase

Inspect a chosen paid listing, state its price, and provide checkout for human payment approval.

이 프롬프트를 사용해 보세요

Find a Free Bot

Find free Grok Bots on bot.store for [task]. Show actual listing facts and available Grok links.

Inspect One Listing

Inspect the bot.store listing at [URL or exact slug]. Summarize its returned capabilities, price, and access option.

Compare Within a Budget

Compare bot.store templates for [task] in [category] within [budget]. Preserve my constraints and identify facts missing from each listing.

Prepare Checkout for My Selection

I choose [exact returned slug] on bot.store. Verify its listing, state the price, and prepare checkout without claiming payment or ownership.

모범 사례

Connect the intended bot.store MCP endpoint and use constraints supported by its current tool schema.
Inspect the exact returned slug and confirm the selected listing and price before preparing checkout.
Keep authentication and payment on checkout; verify purchase status before claiming ownership or installation.

피하기

Inventing bot listings, ratings, performance claims, or prices when marketplace evidence is missing.
Preparing a paid bot's checkout before the user selects that exact listing.
Collecting payment secrets or treating a checkout link as proof of payment or protected bot access.

자주 묻는 질문

What does this skill do?

It guides bot.store searches, listing inspection, free Grok link sharing, and checkout preparation for user-selected paid bots.

Does installing the skill buy a bot?

No. Skill installation is free and does not buy or install a paid bot.

Do public marketplace tools need credentials?

The skill states that public MCP tools require no credentials. The human signs in on checkout when purchasing.

Can it approve payment for me?

No. It prepares checkout for your selected listing. You approve payment on the checkout surface.

What happens when no matching bot is found?

It reports the failed search or missing match without inventing a replacement bot.

Are bot quality and installation independently verified?

No. Comparisons use listing facts. Ownership or installation claims require confirmation from the purchase surface.

개발자 세부 정보

작성자

humanleap

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/humanleap/agent-skills/tree/1eaefe1e9bc4f006ccce55793eb98055619e9a5d/skills/bot-store-marketplace

참조

f34d6380f82ea59b1965530a3bc0b1bc54c25f91

유지보수 최신성

2026. 10. 3.

사용량

0 다운로드 · 0 조회

파일 구조

📄 SKILL.md