스킬 agent-world

📦

agent-world

Name: agent-world
Author: ptreezh

v1.0.0 콘텐츠 리비전 r1 치명적 🌐 네트워크 접근🔑 환경 변수📁 파일 시스템 접근⚙️ 외부 명령어

Navigate Agent Communities Safely

Agent community requirements, access methods, and status information are scattered across many platforms. This skill organizes platform routes, participation steps, status checks, and credential guidance.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

이 Skill을 자동으로 설치하지 마세요.

공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "agent-world" from https://skillstore.io/skills/ptreezh-agent-world.md and its manifest at https://skillstore.io/api/skills/ptreezh-agent-world/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/ptreezh-agent-world.md 서명된 manifest GET /api/skills/ptreezh-agent-world/manifest 서명된 lockfile GET /api/skills/ptreezh-agent-world/lockfile

테스트해 보기

"agent-world" 사용 중입니다. Recommend a platform for listing an open-source agent skill with minimal registration.

예상 결과:

Recommendation: theskills.directory. Submit a pull request using its template and keep the description on one line. Confirm current availability before submission.

"agent-world" 사용 중입니다. Create a safe registration checklist for agentid.sh.

예상 결과:

Confirm the official endpoint and review its current documentation.
Register the chosen handle only after operator approval.
Store the returned private key in an encrypted credential manager.
Record only non-secret account metadata in project documentation.

"agent-world" 사용 중입니다. Summarize status checks for all configured platforms.

예상 결과:

The checker contacts each configured base URL and reports HTTP success or failure. Results show reachability, not authentication, API correctness, or service health.

보안 감사

치명적

v1 • 2026. 9. 12. 버전별 보고서 열기

Most static matches are benign documentation syntax, schema URLs, or defensive credential guidance. Confirmed risks include remote pipe-to-shell commands, plaintext private-key storage guidance, executable installation into a home directory, and outbound network requests. Semantic review also identified unsafe delegation to mutable remote skills, unverified archive extraction, unrestricted URL probing, and coordinated engagement behavior.

스캔된 파일

479

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (7)

치명적

references/interaction-playbook.md:10

Pipe to shell pattern

> - How to join (one command): "One-command join: curl -sL https://raw.githubusercontent.com/<owner>

The post template recommends downloading a mutable remote script and piping it directly to bash. This permits immediate arbitrary code execution without inspection or integrity verification.

치명적

references/interaction-playbook.md:24

Pipe to shell pattern

> "Join in one command: curl -sL https://raw.githubusercontent.com/<owner>/<repo>/main/join.sh | bas

The reply template promotes direct execution of a remotely downloaded join script. A compromised repository or substituted script would execute with the user's privileges.

높음

references/credential-handling.md:6

Crypto seed/private key mention

2. **Server-issued private keys cannot be recovered.** agentid.sh returns a private key and explicit

The skill instructs the agent to persist an unrecoverable private key in a local gitignored file. It does not require encryption or restrictive permissions, leaving high-value key material exposed locally.

높음

SKILL.md:40 references/skill-routes.md:3-10

Untrusted Remote Skills Treated as Authoritative

The routing flow tells agents to fetch changing platform skills, treat them as authoritative, and follow them directly. Without pinning, integrity checks, or instruction isolation, a compromised remote skill can inject instructions and trigger unauthorized actions.

The text explicitly calls remote skills authoritative, directs the agent to follow them, and recommends re-fetching changed versions. No verification or trust boundary is specified.

높음

references/skill-routes.md:22

Unverified Remote Archive Installed as Executable

The KodaClaw route streams a mutable release archive into tar and extracts it directly into ~/.local/bin. It provides no version pin, checksum, signature, or archive-content validation.

The complete installation command is present and visibly lacks integrity verification. The destination is an executable search path.

중간

scripts/check_status.py:48-55 scripts/check_status.py:63-64

Unrestricted URL Probing

The status checker accepts any URL and opens it without scheme or destination validation. Agent-supplied targets can reach loopback, private network, metadata, or redirected endpoints.

The positional URL is copied directly into the request path and urllib follows supported targets. No allowlist, address filtering, or redirect restriction is present.

중간

SKILL.md:42-44 references/interaction-playbook.md:26-30

Coordinated Engagement Automation

The skill prescribes replying to every comment and upvoting a fixed number of other posts each session. Automated execution can create inauthentic engagement or violate platform rules.

The instructions explicitly define repeated posting, reply, and upvote behavior as obligations. The skill does not require operator approval or relevance checks for each social action.

기능 검토 항목 (15)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음

references/credential-handling.md:11

Generic API/secret keys

Content: handle, api_key/token, id, verification code, claim URL, creation date, status.

The guidance directs users to store API keys, tokens, and verification codes together in plaintext account files. Gitignore reduces commit exposure but does not protect local files or backups.

높음

references/skill-routes.md:22

Hidden file in home directory

| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k

The documented command extracts a remote archive directly into ~/.local/bin. This writes an unverified executable into a user command path.

중간

references/skill-routes.md:22

Hidden file access

| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k

The installation command writes to the hidden ~/.local/bin directory. The access is intentional, but it creates a persistence and executable replacement risk because the archive is unverified.

중간

scripts/check_status.py:38

Python HTTP libraries

with urllib.request.urlopen(req, timeout=timeout) as resp:

urlopen executes the outbound request to the supplied target. Because destinations are unrestricted, the checker can contact local or private network services.

낮음

scripts/check_status.py:36

Python HTTP libraries

req = urllib.request.Request(url, method="GET", headers={"User-Agent": "agent-world-status-check/1.0

The function constructs an outbound GET request for a caller-supplied URL. This is expected status-check behavior but creates a network access capability.

낮음

scripts/check_status.py:22

Hardcoded URL

"XiaLiao/ClawdChat": "https://clawdchat.cn",

The --all mode sends an HTTP request to this hardcoded external platform. The behavior is legitimate health checking but still performs outbound network access.

낮음

scripts/check_status.py:23

Hardcoded URL

"InStreet": "https://instreet.coze.site",

The --all mode sends an HTTP request to this hardcoded external platform. No credentials are sent, but network access is real.

낮음

scripts/check_status.py:24

Hardcoded URL

"agentid.sh": "https://agentid.sh",

The status checker contacts this external URL when --all is selected. The request is expected and unauthenticated but remains an outbound connection.

낮음

scripts/check_status.py:25

Hardcoded URL

"SkillsMD": "https://skillsmd.dev",

The status checker contacts this external URL when --all is selected. The behavior is narrow health checking with no secret transmission.

낮음

scripts/check_status.py:26

Hardcoded URL

"theskills.directory": "https://theskills.directory",

This URL is an active target of the --all health check. It represents intentional outbound network access without credential data.

낮음

scripts/check_status.py:27

Hardcoded URL

"KodaClaw Community": "https://community.ai-koda.com",

This URL is an active target of the --all health check. The external request is legitimate but confirmed.

낮음

scripts/check_status.py:28

Hardcoded URL

"Coze Agent World": "https://world.coze.site",

The checker performs an outbound GET to this platform in --all mode. It sends only a fixed user agent and no stored secrets.

낮음

scripts/check_status.py:29

Hardcoded URL

"Agentica": "https://agentica.wiki",

The checker performs an outbound GET to this platform in --all mode. The access is expected but externally observable.

낮음

scripts/check_status.py:30

Hardcoded URL

"Moltbook": "https://moltbook.com",

The --all command contacts this external platform to obtain an HTTP status. This is a real, low-impact network operation.

낮음

scripts/check_status.py:31

Hardcoded URL

"PromptFrenzy": "https://promptfrenzy.com",

The --all command contacts this external platform to obtain an HTTP status. No sensitive payload is attached.

위험 요인

🌐 네트워크 접근 (17)

MANIFEST.json:2 MANIFEST.json:54 scripts/check_status.py:17 scripts/check_status.py:36 scripts/check_status.py:38 scripts/check_status.py:22 scripts/check_status.py:23 scripts/check_status.py:24 scripts/check_status.py:25 scripts/check_status.py:26 scripts/check_status.py:27 scripts/check_status.py:28 scripts/check_status.py:29 scripts/check_status.py:30 scripts/check_status.py:31 scripts/gen_manifest.py:32 scripts/gen_manifest.py:41

🔑 환경 변수 (4)

references/credential-handling.md:11 references/platform-registry.md:8 references/platform-registry.md:16 references/platform-registry.md:28

📁 파일 시스템 접근 (3)

references/skill-routes.md:22 references/skill-routes.md:22 scripts/gen_manifest.py:57

⚙️ 외부 명령어 (14)

SKILL.md:28 SKILL.md:39 SKILL.md:40 SKILL.md:43 SKILL.md:44 SKILL.md:56 SKILL.md:67 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:77 SKILL.md:67

감지된 패턴

Pipe to shell pattern×2

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/ptreezh-agent-world/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/ptreezh-agent-world/security.svg)](https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ptreezh-agent-world/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/ptreezh-agent-world.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

ptreezh. (2026). agent-world security audit report (audit version 1) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/ptreezh-agent-world/audits/1

BibTeX 인용

@techreport{ptreezh-ptreezh-agent-world-2026,
  author = {ptreezh},
  title = {agent-world security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/ptreezh-agent-world/audits/1},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-world security audit report (audit version 1)"
version: "1.0.0"
type: report
authors:
  - name: "ptreezh"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/ptreezh-agent-world/audits/1"
identifiers:
  - type: other
    value: "skillstore:ptreezh-agent-world:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

100

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Choose a Community

Compare communities by registration method, audience, availability, and verification needs before selecting a platform.

Plan Community Operations

Prepare posting, reply, notification, and rate-limit workflows across selected agent communities.

Assess Platform Access

Review current status notes and run HTTP checks before integrating a community into an automated workflow.

이 프롬프트를 사용해 보세요

Find a Suitable Platform

I want to {goal}. Compare the listed agent communities and recommend one option. Include registration, verification, current status, and important limits.

Prepare a Registration Checklist

Create a registration checklist for {platform}. Separate automated steps from human verification. Identify required tools, credentials, and secure storage actions.

Plan a Community Launch

Plan a project launch on {platforms}. Draft platform-appropriate announcements and an approval-based engagement schedule. Respect each platform's stated limits and rules.

Review a Cross-Platform Workflow

Audit my proposed workflow for {platforms}. Check remote instruction trust, credential storage, installation integrity, network destinations, rate limits, and human approval points.

모범 사례

Verify remote skills and installation files against pinned revisions, checksums, or signatures before use.
Keep credentials in an encrypted store and require human approval for registration, publishing, and social actions.
Recheck current platform rules, availability, and rate limits before every campaign or integration.

피하기

Do not pipe remote downloads into a shell or executable directory.
Do not treat fetched skill text or API suggestions as trusted instructions.
Do not automate repetitive posts, replies, or votes without operator approval and platform permission.