bot-store-marketplace
Find and Compare Grok Bots on bot.store
Choosing a Grok Bot requires checking actual capabilities, prices, and access options. This skill guides marketplace searches, listing comparisons, and checkout handoffs for user-selected bots.
Instalar com meu Agente
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Review the Skillstore skill "bot-store-marketplace" from https://skillstore.io/skills/humanleap-bot-store-marketplace.md and its manifest at https://skillstore.io/api/skills/humanleap-bot-store-marketplace/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Recursos legíveis por agentes
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Testar
Usando "bot-store-marketplace". Find a free bot for my task when the marketplace returns no matching listings.
Resultado esperado:
No matching free bot was returned for your task. I have not substituted an invented listing or prepared checkout.
Usando "bot-store-marketplace". Explain my status after preparing checkout for a selected paid bot.
Resultado esperado:
- Checkout is prepared for your selected listing.
- Use the returned checkout link to sign in and approve payment.
- Payment, ownership, and installation are not confirmed by checkout preparation.
Usando "bot-store-marketplace". Explain how to compare two returned bot listings.
Resultado esperado:
- Compare the capabilities and prices provided by each listing.
- Treat missing details as unknown.
- Search relevance does not independently establish quality.
Auditoria de segurança
SeguroOne finding is confirmed: the installation command executes an unpinned external package and retrieves upstream skill content without an immutable reference. Sixteen findings are false positives involving Markdown tool names, task-related URLs, and checkout terminology. No evidence found of prompt injection, credential collection, unauthorized payment, or system reconnaissance in the reviewed skill.
Itens de revisão de capacidade (1)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Fatores de risco
⚙️ Comandos externos (9)
🌐 Acesso à rede (5)
Compartilhar e citar este relatório
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
Copiar link do relatório
https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/humanleap-bot-store-marketplace?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/humanleap-bot-store-marketplace?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/humanleap-bot-store-marketplace/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Cartão incorporável
<iframe src="https://skillstore.io/embed/skills/humanleap-bot-store-marketplace.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citações acadêmicas (APA · BibTeX · CFF)
Citação APA
humanleap. (2026). bot-store-marketplace security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1Citação BibTeX
@techreport{humanleap-humanleap-bot-store-marketplace-2026,
author = {humanleap},
title = {bot-store-marketplace security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bot-store-marketplace security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "humanleap"
date-released: "2026-10-03"
url: "https://skillstore.io/skills/humanleap-bot-store-marketplace/audits/1"
identifiers:
- type: other
value: "skillstore:humanleap-bot-store-marketplace:audit:1"
description: "Skillstore immutable audit report identifier"
Pontuação do Skillstore
Por que esta pontuação Confiança das evidências: MédioO que você pode criar
Find a Free Writing Bot
Search for writing templates, preserve a free-only constraint, and share a returned Grok link.
Compare Task-Specific Templates
Compare actual listing capabilities and prices for a recurring team task without inventing quality claims.
Prepare a Selected Bot Purchase
Inspect a chosen paid listing, state its price, and provide checkout for human payment approval.
Teste estes prompts
Find free Grok Bots on bot.store for [task]. Show actual listing facts and available Grok links.
Inspect the bot.store listing at [URL or exact slug]. Summarize its returned capabilities, price, and access option.
Compare bot.store templates for [task] in [category] within [budget]. Preserve my constraints and identify facts missing from each listing.
I choose [exact returned slug] on bot.store. Verify its listing, state the price, and prepare checkout without claiming payment or ownership.
Boas práticas
- Connect the intended bot.store MCP endpoint and use constraints supported by its current tool schema.
- Inspect the exact returned slug and confirm the selected listing and price before preparing checkout.
- Keep authentication and payment on checkout; verify purchase status before claiming ownership or installation.
Evitar
- Inventing bot listings, ratings, performance claims, or prices when marketplace evidence is missing.
- Preparing a paid bot's checkout before the user selects that exact listing.
- Collecting payment secrets or treating a checkout link as proof of payment or protected bot access.