스킬 treg
📦
treg
v0.11.0 콘텐츠 리비전 r1 치명적 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근🔑 환경 변수
Access Live Data and Connected APIs with treg
Agents often lack credentials for live data and external APIs. treg searches priced endpoints and calls approved services through one authenticated interface.
지원: Claude Codex Code(CC)
이 Skill을 자동으로 설치하지 마세요.
공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "treg" from https://skillstore.io/skills/superdesigndev-treg.md and its manifest at https://skillstore.io/api/skills/superdesigndev-treg/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"treg" 사용 중입니다. Find a provider for subreddit posts, but do not spend any balance.
예상 결과:
I found matching endpoints and compared their required inputs, observed reliability, speed, and price. No endpoint was called.
"treg" 사용 중입니다. Prepare a company enrichment request and use the least expensive reliable provider.
예상 결과:
The selected provider accepts the company domain you have and has stronger observed reliability. The listed call price requires your confirmation.
"treg" 사용 중입니다. Create a plan for a limited CI agent that can read Stripe balances.
예상 결과:
Use a dedicated agent identity, allow only the Stripe tool, grant read-only access, set a daily cap, and review the audit log.
보안 감사
치명적v1 • 2026. 8. 14. 버전별 보고서 열기
The audit confirms remote pipe-to-shell installation, credential collection, hidden configuration access, and broad authenticated command execution. Many backtick and URL matches are documentation-only false positives, but the confirmed critical and high-risk workflows require strong user consent and verification.
1
스캔된 파일
271
분석된 줄 수
34
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (6)
치명적
Pipe to shell pattern
curl -fsSL https://treg.to/install.sh | sh # 1. the CLI (skip if `treg --version` already works)
The skill explicitly pipes an unpinned HTTPS response into sh, allowing remote code to execute without prior inspection.
치명적
Pipe to shell pattern
curl -fsSL https://treg.to/install.sh | sh # installs the CLI + points it here
The repeated installation command pipes a mutable remote script directly into sh.
높음
Environment file access
**Bulk (the fast path):** point treg at a directory — it detects provider keys in the `.env` AND
The bulk workflow scans a chosen directory for provider keys in .env and then registers selected credentials remotely.
높음
Approval Weakening Instruction
The skill tells agents to request blanket approval for treg and avoid per-command confirmation, even though later commands upload secrets and change accounts.
The instruction explicitly labels additional confirmation as friction and asks for treg approval as a whole.
높음
Third-Party Credential Collection and Custody
The workflows discover environment keys, read secret files or CLI keychains, and send credentials or OAuth material to treg for storage and injection.
The text directly describes .env detection, secret upload, keychain extraction, and hosted OAuth token capture.
높음
Broad Credentialed Action Surface
The proxy relays arbitrary HTTP methods, headers, cookies, and bodies, while treg run executes vendor CLIs locally or remotely with injected credentials.
The documented interface supports state-changing HTTP requests and arbitrary vendor CLI arguments under organizational credentials.
기능 검토 항목 (34)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
치명적
Ruby/shell backtick execution
```bash
The fenced block begins an installation sequence that downloads a remote script, signs in, and changes agent configuration.
치명적
Ruby/shell backtick execution
curl -fsSL https://treg.to/install.sh | sh # 1. the CLI (skip if `treg --version` already works)
This command downloads an unpinned remote script and immediately executes it, followed by login and MCP installation.
치명적
Ruby/shell backtick execution
```bash
This fenced block installs remote code and performs authentication, including a token-based non-interactive login option.
치명적
Hardcoded URL
curl -fsSL https://treg.to/install.sh | sh # 1. the CLI (skip if `treg --version` already works)
The URL supplies an installation script that is executed immediately without a pinned digest or signature verification.
치명적
Hardcoded URL
curl -fsSL https://treg.to/install.sh | sh # installs the CLI + points it here
The external URL is the source of a remote installer that is piped directly into a shell.
높음
Ruby/shell backtick execution
shell commands, request `treg` **once**, as a whole, rather than a prompt per subcommand. Halting
The skill asks for blanket approval of every treg subcommand, reducing oversight for later commands that spend funds, upload secrets, or change accounts.
높음
Ruby/shell backtick execution
- "call it" → `call` with the endpoint id, or `<tool-name>/<path>` for one of the team's own tools
The call tool can invoke catalog endpoints or team tools, including state-changing upstream API operations with injected credentials.
높음
Ruby/shell backtick execution
**Run a registered CLI tool** — the command-line complement to `treg call` (which proxies HTTP
The skill directs execution of registered vendor CLI tools with organizational credentials, creating a broad command and account-action surface.
높음
Ruby/shell backtick execution
APIs). `treg run <tool> -- <cli args>` runs a vendor CLI (stripe, gh, vercel, gcloud...) with the ke
treg run forwards arbitrary CLI arguments to vendor tools and injects credentials, enabling authenticated operations chosen at runtime.
높음
Ruby/shell backtick execution
injected, so you never hold or log into it. Two tiers: `--local` (default, runs on this machine) ·
The documented local tier executes vendor commands on the user's machine, while the server tier executes them remotely with credentials.
높음
Ruby/shell backtick execution
```
The fenced examples execute Stripe locally and another credentialed CLI on the registry server.
높음
Ruby/shell backtick execution
treg upload # both sides of the cwd; `treg upload env|skills --dir <d>` to res
The upload command scans the working directory and can register selected environment secrets and skills with the external treg service.
높음
Ruby/shell backtick execution
```bash
The fenced sequence creates local files, initializes a skill, and registers its recipe, secret, and tool with the remote service.
높음
Ruby/shell backtick execution
Call it: `treg call posthog api/projects/@current` (upstream: https://us.posthog.com)
This range includes commands that initialize and remotely register a skill bundle containing a recipe, secret, and API tool.
높음
Ruby/shell backtick execution
```bash
The fenced commands read an API key or secret file, upload the secret, and register authenticated upstream tools.
높음
Ruby/shell backtick execution
```bash
The fenced sequence scans a hidden Claude skill directory, captures secret files, and pushes the resulting credential bundle remotely.
높음
Ruby/shell backtick execution
- **Manual:** do your own OAuth locally, then `treg secret add gsc --file token.json --kind oauth`.
The command uploads a locally obtained OAuth token file to treg for storage and later injection.
높음
Ruby/shell backtick execution
- **Hosted connect:** `treg oauth connect gsc --client-secret client_secret.json --scopes <scope>`
The hosted OAuth command supplies a client-secret file to treg and delegates token capture to its callback service.
높음
Ruby/shell backtick execution
```bash
The fenced administrative commands can remove tools, secrets, and skills or actively refresh and probe credentials.
높음
Ruby/shell backtick execution
```bash
The fenced commands create organizations, invite members, and switch account context, causing consequential remote state changes.
높음
Ruby/shell backtick execution
```bash
The fenced commands mint, scope, rotate, and revoke agent authentication tokens, which are security-sensitive account operations.
높음
Hardcoded URL
One-time setup: add `https://treg.to/oauth/callback` to your OAuth app's redirect URIs.
The OAuth redirect sends authorization results to treg, allowing the service to capture and retain delegated tokens.
높음
Hidden file in home directory
this same skill into `~/.claude/skills/treg/`. It is harmless, but it duplicates what this plugin
The installer writes a skill copy into the hidden ~/.claude configuration tree, modifying agent behavior outside the current workspace.
높음
Hidden file in home directory
treg skill scaffold ~/.claude/skills/google-ads --out gads.json
The command scans a hidden Claude skill directory and captures its recipe and secret files into a bundle.
높음
Hidden file access
this same skill into `~/.claude/skills/treg/`. It is harmless, but it duplicates what this plugin
The setup modifies the hidden ~/.claude skills directory and explicitly leaves a duplicate skill installation there.
높음
Hidden file access
treg secret add posthog-key --value "$POSTHOG_API_KEY" # or --file ./.secret/token.json
The command can read a token from ./.secret/token.json and send it to treg for storage.
높음
Hidden file access
treg skill scaffold ~/.claude/skills/google-ads --out gads.json
The scaffold command traverses ~/.claude/skills/google-ads and captures every .secret file described by the following lines.
높음
Generic API/secret keys
treg secret add posthog-key --value "$POSTHOG_API_KEY" # or --file ./.secret/token.json
The command reads POSTHOG_API_KEY from the environment and uploads its value to the external treg service.
중간
Ruby/shell backtick execution
email — see them with `treg invites`, accept with `treg accept` (or `treg org join <code>`). Switch
The documented commands accept organization invitations, join organizations, and switch the active organization, which changes account state.
중간
Ruby/shell backtick execution
teams: `treg org switch <slug>`.
The command changes the active organization used by all later operations, so accidental execution can affect the wrong account.
중간
Ruby/shell backtick execution
```bash
The fenced commands invoke external catalog APIs and can spend the team's prepaid balance, although the skill also requires price disclosure.
중간
Ruby/shell backtick execution
The invitee signs in with the invited email and runs `treg accept` — no code handling needed
The accept command changes organization membership for the signed-in account.
중간
Ruby/shell backtick execution
(the code path still works: `treg org join <code>`). A brand-new invitee also gets their own
The join command uses an invitation code to change organization membership and account context.
중간
Hardcoded URL
through treg: GET https://treg.to/call/https://api.intercom.io/conversations?per_page=5
The example routes an upstream API request through treg, exposing request metadata and content to an additional external service.
위험 요인
⚙️ 외부 명령어 (50)
SKILL.md:9 SKILL.md:12-13 SKILL.md:13-16 SKILL.md:16-20 SKILL.md:20 SKILL.md:28-49 SKILL.md:49 SKILL.md:50-58 SKILL.md:58-59 SKILL.md:59 SKILL.md:63-67 SKILL.md:67 SKILL.md:68 SKILL.md:71-76 SKILL.md:76-78 SKILL.md:78 SKILL.md:79-83 SKILL.md:83-84 SKILL.md:84 SKILL.md:87 SKILL.md:88 SKILL.md:89-92 SKILL.md:92 SKILL.md:95 SKILL.md:106-112 SKILL.md:112-114 SKILL.md:114-116 SKILL.md:116-117 SKILL.md:117 SKILL.md:122-123 SKILL.md:123 SKILL.md:124 SKILL.md:125-127 SKILL.md:127-128 SKILL.md:128 SKILL.md:130 SKILL.md:131-143 SKILL.md:143-144 SKILL.md:144-145 SKILL.md:145-155 SKILL.md:155-159 SKILL.md:159-162 SKILL.md:162-164 SKILL.md:164 SKILL.md:165-167 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170 SKILL.md:171-174
🌐 네트워크 접근 (11)
📁 파일 시스템 접근 (5)
🔑 환경 변수 (2)
감지된 패턴
Pipe to shell pattern×2
감사자: codex
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/superdesigndev-treg/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/superdesigndev-treg?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/superdesigndev-treg?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/superdesigndev-treg/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/superdesigndev-treg.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
superdesigndev. (2026). treg security audit report (audit version 1) [Author version 0.11.0]. Skillstore. https://skillstore.io/skills/superdesigndev-treg/audits/1BibTeX 인용
@techreport{superdesigndev-superdesigndev-treg-2026,
author = {superdesigndev},
title = {treg security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/superdesigndev-treg/audits/1},
note = {Author version 0.11.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "treg security audit report (audit version 1)"
version: "0.11.0"
type: report
authors:
- name: "superdesigndev"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/superdesigndev-treg/audits/1"
identifiers:
- type: other
value: "skillstore:superdesigndev-treg:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 55
아키텍처
100
유지보수성
87
콘텐츠
65
커뮤니티
91
사양 준수
만들 수 있는 것
Research live market data
Find and compare endpoints for rankings, backlinks, trends, advertising, or company enrichment before making approved calls.
Connect internal API accounts
Register an existing service credential and let authorized teammates call the API without receiving the raw secret.
Automate scoped agent tasks
Create a limited agent identity, allow selected tools, set daily caps, and review its call history.
이 프롬프트를 사용해 보세요
Find a data endpoint
Search treg for an endpoint that provides [data type]. Show required inputs, price, and reliability. Do not call it yet.
Compare providers
Compare treg providers for [task] using my available inputs. Rank them by compatibility, reliability, price, and recent success.
Run an approved catalog request
Prepare a treg call for [endpoint] with [inputs]. State the exact price and request confirmation before spending any balance.
Design a restricted team integration
Plan a treg integration for [service]. Use minimal scopes, read-only access, explicit tool allowlists, daily caps, and item-level secret consent.
모범 사례
- Review endpoint inputs, observed reliability, price, and recent success before calling.
- Confirm every paid or state-changing action with the user immediately before execution.
- Use dedicated identities, minimal scopes, tool allowlists, daily caps, and audit logs.
피하기
- Do not pipe a remote installer into a shell without verification.
- Do not grant blanket approval for every treg command.
- Do not scan or upload credentials without an exact preview and item-level consent.
자주 묻는 질문
What does treg provide?
It provides a searchable API catalog, MCP tools, a CLI, and access to team-registered tools with credential injection.
Does every call cost money?
No. Catalog calls served with treg credentials can spend prepaid balance. Calls using a team's own registered credentials are described as unmetered.
Can treg access existing team APIs?
Yes. Administrators can register API bases and credentials, then authorized agents can proxy requests through treg.
Does treg handle secrets?
Yes. It can store environment values, token files, OAuth material, and CLI authentication for later server-side injection.
Can treg change connected accounts?
Yes. Proxied HTTP methods and vendor CLI commands can perform state-changing actions when the connected credential permits them.
What should users verify before installation?
Verify the installer source and integrity, review requested permissions, and understand credential storage, retention, and deletion policies.
개발자 세부 정보
작성자
superdesigndev라이선스
MIT
작성자 버전
v0.11.0
Skillstore 리비전
r1
리포지토리
https://github.com/superdesigndev/treg/tree/bc0c6111d1f25f802b3675a5d8ecf7267650bd9b/skills/treg참조
8d471fa6bb01c43c43d332bf9105df157c067391
유지보수 최신성
2026. 8. 15.
사용량
0 다운로드 · 0 조회
파일 구조
📄 SKILL.md