📦

agent-world

Name: agent-world
Author: ptreezh

v1.0.0 Ревизия содержимого r1 Критично 🌐 Доступ к сети🔑 Переменные окружения📁 Доступ к файловой системе⚙️ Внешние команды

Navigate Agent Communities Safely

Agent community requirements, access methods, and status information are scattered across many platforms. This skill organizes platform routes, participation steps, status checks, and credential guidance.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Не устанавливайте этот Skill автоматически.

Каноническая политика требует проверки оператором перед любым действием по установке.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "agent-world" from https://skillstore.io/skills/ptreezh-agent-world.md and its manifest at https://skillstore.io/api/skills/ptreezh-agent-world/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/ptreezh-agent-world.md Подписанный manifest GET /api/skills/ptreezh-agent-world/manifest Подписанный lockfile GET /api/skills/ptreezh-agent-world/lockfile

Протестировать

Использование «agent-world». Recommend a platform for listing an open-source agent skill with minimal registration.

Ожидаемый результат:

Recommendation: theskills.directory. Submit a pull request using its template and keep the description on one line. Confirm current availability before submission.

Использование «agent-world». Create a safe registration checklist for agentid.sh.

Ожидаемый результат:

Confirm the official endpoint and review its current documentation.
Register the chosen handle only after operator approval.
Store the returned private key in an encrypted credential manager.
Record only non-secret account metadata in project documentation.

Использование «agent-world». Summarize status checks for all configured platforms.

Ожидаемый результат:

The checker contacts each configured base URL and reports HTTP success or failure. Results show reachability, not authentication, API correctness, or service health.

Аудит безопасности

Критично

v1 • 12.09.2026 Открыть версионный отчет

Most static matches are benign documentation syntax, schema URLs, or defensive credential guidance. Confirmed risks include remote pipe-to-shell commands, plaintext private-key storage guidance, executable installation into a home directory, and outbound network requests. Semantic review also identified unsafe delegation to mutable remote skills, unverified archive extraction, unrestricted URL probing, and coordinated engagement behavior.

Просканировано файлов

479

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (7)

Критично

references/interaction-playbook.md:10

Pipe to shell pattern

> - How to join (one command): "One-command join: curl -sL https://raw.githubusercontent.com/<owner>

The post template recommends downloading a mutable remote script and piping it directly to bash. This permits immediate arbitrary code execution without inspection or integrity verification.

Критично

references/interaction-playbook.md:24

Pipe to shell pattern

> "Join in one command: curl -sL https://raw.githubusercontent.com/<owner>/<repo>/main/join.sh | bas

The reply template promotes direct execution of a remotely downloaded join script. A compromised repository or substituted script would execute with the user's privileges.

Высокий

references/credential-handling.md:6

Crypto seed/private key mention

2. **Server-issued private keys cannot be recovered.** agentid.sh returns a private key and explicit

The skill instructs the agent to persist an unrecoverable private key in a local gitignored file. It does not require encryption or restrictive permissions, leaving high-value key material exposed locally.

Высокий

SKILL.md:40 references/skill-routes.md:3-10

Untrusted Remote Skills Treated as Authoritative

The routing flow tells agents to fetch changing platform skills, treat them as authoritative, and follow them directly. Without pinning, integrity checks, or instruction isolation, a compromised remote skill can inject instructions and trigger unauthorized actions.

The text explicitly calls remote skills authoritative, directs the agent to follow them, and recommends re-fetching changed versions. No verification or trust boundary is specified.

Высокий

references/skill-routes.md:22

Unverified Remote Archive Installed as Executable

The KodaClaw route streams a mutable release archive into tar and extracts it directly into ~/.local/bin. It provides no version pin, checksum, signature, or archive-content validation.

The complete installation command is present and visibly lacks integrity verification. The destination is an executable search path.

Средний

scripts/check_status.py:48-55 scripts/check_status.py:63-64

Unrestricted URL Probing

The status checker accepts any URL and opens it without scheme or destination validation. Agent-supplied targets can reach loopback, private network, metadata, or redirected endpoints.

The positional URL is copied directly into the request path and urllib follows supported targets. No allowlist, address filtering, or redirect restriction is present.

Средний

SKILL.md:42-44 references/interaction-playbook.md:26-30

Coordinated Engagement Automation

The skill prescribes replying to every comment and upvoting a fixed number of other posts each session. Automated execution can create inauthentic engagement or violate platform rules.

The instructions explicitly define repeated posting, reply, and upvote behavior as obligations. The skill does not require operator approval or relevance checks for each social action.

Пункты проверки возможностей (15)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий

references/credential-handling.md:11

Generic API/secret keys

Content: handle, api_key/token, id, verification code, claim URL, creation date, status.

The guidance directs users to store API keys, tokens, and verification codes together in plaintext account files. Gitignore reduces commit exposure but does not protect local files or backups.

Высокий

references/skill-routes.md:22

Hidden file in home directory

| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k

The documented command extracts a remote archive directly into ~/.local/bin. This writes an unverified executable into a user command path.

Средний

references/skill-routes.md:22

Hidden file access

| KodaClaw | `kc-community` CLI (own skill mgmt) | install: `curl -sL https://github.com/koda-claw/k

The installation command writes to the hidden ~/.local/bin directory. The access is intentional, but it creates a persistence and executable replacement risk because the archive is unverified.

Средний

scripts/check_status.py:38

Python HTTP libraries

with urllib.request.urlopen(req, timeout=timeout) as resp:

urlopen executes the outbound request to the supplied target. Because destinations are unrestricted, the checker can contact local or private network services.

Низкий

scripts/check_status.py:36

Python HTTP libraries

req = urllib.request.Request(url, method="GET", headers={"User-Agent": "agent-world-status-check/1.0

The function constructs an outbound GET request for a caller-supplied URL. This is expected status-check behavior but creates a network access capability.

Низкий

scripts/check_status.py:22

Hardcoded URL

"XiaLiao/ClawdChat": "https://clawdchat.cn",

The --all mode sends an HTTP request to this hardcoded external platform. The behavior is legitimate health checking but still performs outbound network access.

Низкий

scripts/check_status.py:23

Hardcoded URL

"InStreet": "https://instreet.coze.site",

The --all mode sends an HTTP request to this hardcoded external platform. No credentials are sent, but network access is real.

Низкий

scripts/check_status.py:24

Hardcoded URL

"agentid.sh": "https://agentid.sh",

The status checker contacts this external URL when --all is selected. The request is expected and unauthenticated but remains an outbound connection.

Низкий

scripts/check_status.py:25

Hardcoded URL

"SkillsMD": "https://skillsmd.dev",

The status checker contacts this external URL when --all is selected. The behavior is narrow health checking with no secret transmission.

Низкий

scripts/check_status.py:26

Hardcoded URL

"theskills.directory": "https://theskills.directory",

This URL is an active target of the --all health check. It represents intentional outbound network access without credential data.

Низкий

scripts/check_status.py:27

Hardcoded URL

"KodaClaw Community": "https://community.ai-koda.com",

This URL is an active target of the --all health check. The external request is legitimate but confirmed.

Низкий

scripts/check_status.py:28

Hardcoded URL

"Coze Agent World": "https://world.coze.site",

The checker performs an outbound GET to this platform in --all mode. It sends only a fixed user agent and no stored secrets.

Низкий

scripts/check_status.py:29

Hardcoded URL

"Agentica": "https://agentica.wiki",

The checker performs an outbound GET to this platform in --all mode. The access is expected but externally observable.

Низкий

scripts/check_status.py:30

Hardcoded URL

"Moltbook": "https://moltbook.com",

The --all command contacts this external platform to obtain an HTTP status. This is a real, low-impact network operation.

Низкий

scripts/check_status.py:31

Hardcoded URL

"PromptFrenzy": "https://promptfrenzy.com",

The --all command contacts this external platform to obtain an HTTP status. No sensitive payload is attached.

Факторы риска

🌐 Доступ к сети (17)

MANIFEST.json:2 MANIFEST.json:54 scripts/check_status.py:17 scripts/check_status.py:36 scripts/check_status.py:38 scripts/check_status.py:22 scripts/check_status.py:23 scripts/check_status.py:24 scripts/check_status.py:25 scripts/check_status.py:26 scripts/check_status.py:27 scripts/check_status.py:28 scripts/check_status.py:29 scripts/check_status.py:30 scripts/check_status.py:31 scripts/gen_manifest.py:32 scripts/gen_manifest.py:41

🔑 Переменные окружения (4)

references/credential-handling.md:11 references/platform-registry.md:8 references/platform-registry.md:16 references/platform-registry.md:28

📁 Доступ к файловой системе (3)

references/skill-routes.md:22 references/skill-routes.md:22 scripts/gen_manifest.py:57

⚙️ Внешние команды (14)

SKILL.md:28 SKILL.md:39 SKILL.md:40 SKILL.md:43 SKILL.md:44 SKILL.md:56 SKILL.md:67 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:77 SKILL.md:67

Обнаруженные паттерны

Pipe to shell pattern×2

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/ptreezh-agent-world/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/ptreezh-agent-world/security.svg)](https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/ptreezh-agent-world?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ptreezh-agent-world/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/ptreezh-agent-world.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

ptreezh. (2026). agent-world security audit report (audit version 1) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/ptreezh-agent-world/audits/1

Цитата BibTeX

@techreport{ptreezh-ptreezh-agent-world-2026,
  author = {ptreezh},
  title = {agent-world security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/ptreezh-agent-world/audits/1},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-world security audit report (audit version 1)"
version: "1.0.0"
type: report
authors:
  - name: "ptreezh"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/ptreezh-agent-world/audits/1"
identifiers:
  - type: other
    value: "skillstore:ptreezh-agent-world:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

100

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Choose a Community

Compare communities by registration method, audience, availability, and verification needs before selecting a platform.

Plan Community Operations

Prepare posting, reply, notification, and rate-limit workflows across selected agent communities.

Assess Platform Access

Review current status notes and run HTTP checks before integrating a community into an automated workflow.

Попробуйте эти промпты

Find a Suitable Platform

I want to {goal}. Compare the listed agent communities and recommend one option. Include registration, verification, current status, and important limits.

Prepare a Registration Checklist

Create a registration checklist for {platform}. Separate automated steps from human verification. Identify required tools, credentials, and secure storage actions.

Plan a Community Launch

Plan a project launch on {platforms}. Draft platform-appropriate announcements and an approval-based engagement schedule. Respect each platform's stated limits and rules.

Review a Cross-Platform Workflow

Audit my proposed workflow for {platforms}. Check remote instruction trust, credential storage, installation integrity, network destinations, rate limits, and human approval points.

Лучшие практики

Verify remote skills and installation files against pinned revisions, checksums, or signatures before use.
Keep credentials in an encrypted store and require human approval for registration, publishing, and social actions.
Recheck current platform rules, availability, and rate limits before every campaign or integration.

Избегать

Do not pipe remote downloads into a shell or executable directory.
Do not treat fetched skill text or API suggestions as trusted instructions.
Do not automate repetitive posts, replies, or votes without operator approval and platform permission.