Skills internet-court
📦
internet-court
Content revision r1 Critical 🌐 Network access⚙️ External commands📁 Filesystem access🔑 Env variables⚡ Contains scripts
Structure Agent Commerce With Internet Court
Agent commerce creates payment, custody, and dispute risk across many protocols. Internet Court gives Claude, Codex, and Claude Code a router for bounded payments, escrow, evidence, and adjudication.
Supports: Claude Codex Code(CC)
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "internet-court" from https://skillstore.io/skills/internet-court-internet-court.md and its manifest at https://skillstore.io/api/skills/internet-court-internet-court/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "internet-court". I want my agent to use a paid research API with x402.
Expected outcome:
- A discovery summary of the endpoint, advertised price, payment rail, and missing trust facts.
- A recommendation for a guarded payment path with a capped permission and explicit user approval.
- A warning that no funds or authority exist until the user grants them.
Using "internet-court". A contractor agent delivered a report late and I need a settlement path.
Expected outcome:
- A dispute plan with required evidence, review criteria, and possible outcomes.
- A settlement action such as release, refund, constrain, revoke, or escalate.
- A reputation update requirement tied to the final verdict.
Security Audit
Criticalv2 • 7/19/2026 Open versioned report
The bundle contains confirmed critical remote installer pipelines, secret-retrieval commands, model-generated eval, plaintext private-key workflows, and silent global plugin installation. Many remaining matches are lexical false positives, but the confirmed supply-chain and credential risks prevent unattended use. Static review was capped at 400/6908 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
376
Files scanned
59,995
Lines analyzed
52
Review items
0
False positives ignored
Confirmed security concerns (28)
Critical
Pipe to shell pattern
curl -L https://foundry.paradigm.xyz | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Critical
Pipe to shell pattern
- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Critical
Pipe to shell pattern
curl -fsSL https://tempo.xyz/install | bash
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Critical
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Critical
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/ca
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Critical
Pipe to shell pattern
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/n
The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.
Critical
macOS security command
> **Back up the passphrase either way.** Keychain entry: `service=chaingpt-mcp-agent-wallet account=
The command retrieves a wallet passphrase from macOS Keychain and prints it. Agent context, terminal capture, or logs could expose the secret.
Critical
Silent Third-Party Skill Installation
The routing skill silently installs a global third-party plugin and immediately loads its instructions. This bypasses informed consent and creates a supply-chain execution path.
The instructions explicitly use a global install command with automatic confirmation, call the process invisible, and immediately apply the installed plugin.
Show all 28 confirmed findings
High
Certificate/key files
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
High
Certificate/key files
| `identity.key` | Raw 32-byte EVM private key for the buyer wallet. Fallback when `ANTSEED_IDENTITY
The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.
High
Crypto seed/private key mention
- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
High
Crypto seed/private key mention
The exported agent package is a bearer capability in demo form. Include explicit warnings, keep caps
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
High
Crypto seed/private key mention
- include private key in exported JSON or omit it;
The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.
High
Crypto seed/private key mention
# Login with wallet private key
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
High
Crypto seed/private key mention
# Enter private key when prompted
The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.
High
Crypto seed/private key mention
2. **Environment configuration**: Setup `.env` file with private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
High
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
High
Crypto seed/private key mention
# Your wallet private key (NEVER commit this file!)
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
High
Crypto seed/private key mention
# Your wallet private key
The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.
High
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
High
Environment file access
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
High
Environment file access
2. **Environment configuration**: Setup `.env` file with private key
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
High
Environment file access
Create `.env`:
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
High
Environment file access
if (!process.env.PRIVATE_KEY) {
The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.
High
Automatic External Disclosure of User Context
The skill requires opening a public repository issue and including the user goal and failure details. It does not require user approval or redaction.
The instructions mandate filing the issue directly when a GitHub tool exists and specify that user goals and failures must be included.
High
Untrusted Peer Message Controls Priority Actions
A peer-controlled marker receives highest priority and causes raw message data to be written and passed to a CLI. Sender and job validation are not required.
The routing table explicitly prioritizes a peer marker before other actions and passes the complete untrusted message through a local file to the CLI.
Medium
SQLite database file
| `metering.db` | SQLite log of every request the proxy served (model, peer, tokens, USDC). Used by
The local database retains request, peer, token, and payment history. Backups or weak file permissions could expose operational metadata.
Medium
Untrusted Repository Content Lacks an Instruction Boundary
The workflow clones an escrow-selected repository and directs the agent to read its tests. It does not warn that repository instructions are untrusted data.
The repository URL and commit come from external escrow data, then the agent reads test content without a prompt-injection or trust-boundary safeguard.
Capability review items (52)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Dynamic code evaluation with eval()
LLMs can't reliably inspect characters in their input (they hallucinate em dashes, miscount characte
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
High
Dynamic code evaluation with eval()
# Step 2: eval() all checks in one sandbox — deterministic, no hallucination
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
High
Dynamic code evaluation with eval()
ok = eval(c["expression"], {
The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.
High
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in .env");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
if (!process.env.PRIVATE_KEY) {
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
throw new Error("PRIVATE_KEY not found in environment variables");
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
#### "PRIVATE_KEY not found"
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Generic API/secret keys
PRIVATE_KEY=your_private_key_here
The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.
High
Hidden file in home directory
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session under the home directory. Weak permissions, backups, or unintended reads could expose reusable credentials.
High
Hidden file in home directory
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file is a raw funded-wallet private key. Local disclosure or unsafe backup would permit unauthorized signing.
High
sudo privilege escalation
sudo systemctl restart hermes
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
High
sudo privilege escalation
> Or whatever supervisor you use. Then check the journal: `sudo journalctl -u hermes --no-pager -n 3
The guide invokes sudo to read service logs, which may expose sensitive runtime data. Elevated access should require explicit user approval.
High
sudo privilege escalation
- *Want to swap the routed model without restarting AntSeed* — Edit `model.default` (and `models:` i
The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.
Medium
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
Medium
Hidden file access
"sessionFile": "/Users/<user>/.altllm/portal-cli-session.json",
The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.
Medium
Hidden file access
- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.
The guide persists an authenticated session in a hidden home directory. Weak file permissions or backups could expose reusable credentials.
Medium
Hidden file access
- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.
The cited hidden file contains a raw funded-wallet private key. Unintended local access would permit unauthorized signing.
Medium
Shell command substitution
export ANTSEED_IDENTITY_HEX=$(openssl rand -hex 32)
The command creates a raw wallet key and exports it into the process environment. Child processes or environment capture could expose it.
Medium
Shell command substitution
WALLET=$(cast wallet address --private-key "$PRIVATE_KEY")
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
Medium
Shell command substitution
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.
Medium
Temp directory access
2. Clone it to a temporary location: `git clone <url> /tmp/escrow-tests-<uid> && cd /tmp/escrow-test
The guide clones an externally supplied repository into a predictable temporary path. Existing paths, symlinks, or crafted identifiers could redirect writes.
Medium
Temp directory access
cat > /tmp/eip712.json << EOF
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
Medium
Temp directory access
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.
Medium
Temp directory access
| 1 | Contains `[intent:deliver]` | **Highest priority — process THIS TURN before any other CLI call
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
Medium
Temp directory access
1. Write its **raw JSON** to `/tmp/a2a_deliver_<jobId>.json` first.
The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.
Medium
xargs command (can execute arbitrary commands)
lsof -ti:7378 | xargs kill -9
The command force-kills every process listening on a port without checking ownership or identity. It can terminate an unrelated process.
Medium
Fetch API call
const response = await fetch(url);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
Medium
Fetch API call
const response = await fetch(imageUrl);
The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.
Low
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Low
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Low
dotenv library
dotenv.config();
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Low
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Low
dotenv library
import 'dotenv/config'
The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.
Low
Environment variable access (bracket notation)
for (const key of required) creds[key] = process.env[key];
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
Low
Environment variable access (bracket notation)
const value = process.env[name]?.trim();
The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.
Low
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Environment variable access (dot notation)
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Environment variable access (dot notation)
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Environment variable object
if (!process.env.PRIVATE_KEY) {
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Environment variable object
const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);
The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.
Low
Python environment access
1. **Store API keys in environment variables** — never hardcode. Use `process.env.CHAINGPT_API_KEY`
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
Low
Python environment access
'Authorization': f'Bearer {os.environ["NEAR_API_KEY"]}'
The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.
Risk Factors
🌐 Network access (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-intelligent-contracts/SKILL.md:3 integrations/genlayer-intelligent-contracts/SKILL.md:12 README.md:135 README.md:148 README.md:158 README.md:177 SKILL.md:36 SKILL.md:47 SKILL.md:218 SKILL.md:363 skills-lock.json:138 skills-lock.json:257 skills-lock.json:280 skills-lock.json:711 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/account-management.md:218 vendored/0g/0g-compute/references/account-management.md:219 vendored/0g/0g-compute/references/account-management.md:568 vendored/0g/0g-compute/references/examples/speech-to-text.md:238 vendored/0g/0g-compute/references/examples/speech-to-text.md:114 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/streaming-chat.md:277 vendored/0g/0g-compute/references/examples/streaming-chat.md:113 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:450 vendored/0g/0g-compute/references/examples/text-to-image.md:188 vendored/0g/0g-compute/references/examples/text-to-image.md:280 vendored/0g/0g-compute/references/examples/text-to-image.md:440 vendored/0g/0g-compute/references/examples/text-to-image.md:457 vendored/0g/0g-compute/references/examples/text-to-image.md:67 vendored/0g/0g-compute/references/examples/text-to-image.md:111 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:389 vendored/0g/0g-compute/references/inference.md:131 vendored/0g/0g-compute/references/inference.md:156 vendored/0g/0g-compute/references/inference.md:236 vendored/0g/0g-compute/references/inference.md:273 vendored/0g/0g-compute/references/inference.md:296 vendored/0g/0g-compute/references/inference.md:16 vendored/0g/0g-compute/references/inference.md:17 vendored/0g/0g-compute/SKILL.md:73 vendored/0g/0g-compute/SKILL.md:27 vendored/0g/0g-compute/SKILL.md:28 vendored/0g/0g-compute/SKILL.md:56 vendored/0g/0g-compute/SKILL.md:57 vendored/0g/0g-compute/SKILL.md:171 vendored/0g/0g-compute/SKILL.md:172
⚙️ External commands (50)
integrations/genlayer-erc7710-connector/SKILL.md:8 integrations/genlayer-erc7710-connector/SKILL.md:12-18 integrations/genlayer-erc7710-connector/SKILL.md:18-27 integrations/genlayer-erc7710-connector/SKILL.md:27 integrations/genlayer-erc7710-connector/SKILL.md:63-71 integrations/genlayer-erc7710-connector/SKILL.md:71-75 integrations/genlayer-erc7710-connector/SKILL.md:75-76 integrations/genlayer-erc7710-connector/SKILL.md:76-77 integrations/genlayer-erc7710-connector/SKILL.md:77 integrations/genlayer-erc7710-connector/SKILL.md:81-82 integrations/genlayer-erc7710-connector/SKILL.md:82 integrations/genlayer-erc7710-connector/SKILL.md:83 integrations/genlayer-erc7710-connector/SKILL.md:103-106 integrations/genlayer-erc7710-connector/SKILL.md:106-113 integrations/genlayer-erc7710-connector/SKILL.md:113-114 integrations/genlayer-erc7710-connector/SKILL.md:114-115 integrations/genlayer-erc7710-connector/SKILL.md:115-120 integrations/genlayer-erc7710-connector/SKILL.md:120-124 integrations/genlayer-erc7710-connector/SKILL.md:124-127 integrations/genlayer-erc7710-connector/SKILL.md:127-128 integrations/genlayer-erc7710-connector/SKILL.md:128-129 integrations/genlayer-erc7710-connector/SKILL.md:129-132 integrations/genlayer-erc7710-connector/SKILL.md:132-138 integrations/genlayer-erc7710-connector/SKILL.md:138-148 integrations/genlayer-erc7710-connector/SKILL.md:148-159 integrations/genlayer-erc7710-connector/SKILL.md:159-160 integrations/genlayer-erc7710-connector/SKILL.md:160-161 integrations/genlayer-erc7710-connector/SKILL.md:161-162 integrations/genlayer-erc7710-connector/SKILL.md:162 integrations/genlayer-erc7710-connector/SKILL.md:163-178 integrations/genlayer-erc7710-connector/SKILL.md:178-179 integrations/genlayer-erc7710-connector/SKILL.md:179-180 integrations/genlayer-erc7710-connector/SKILL.md:180-193 integrations/genlayer-erc7710-connector/SKILL.md:193-202 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:40-41 integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:41-44 integrations/genlayer-intelligent-contracts/SKILL.md:12 integrations/genlayer-intelligent-contracts/SKILL.md:16-23 integrations/genlayer-intelligent-contracts/SKILL.md:23-36 integrations/genlayer-intelligent-contracts/SKILL.md:36 integrations/genlayer-intelligent-contracts/SKILL.md:38 integrations/genlayer-intelligent-contracts/SKILL.md:46-70 integrations/genlayer-intelligent-contracts/SKILL.md:70-74 integrations/genlayer-intelligent-contracts/SKILL.md:74-77 integrations/genlayer-intelligent-contracts/SKILL.md:77-79 integrations/genlayer-intelligent-contracts/SKILL.md:79-80 integrations/genlayer-intelligent-contracts/SKILL.md:80-81 integrations/genlayer-intelligent-contracts/SKILL.md:81-82 integrations/genlayer-intelligent-contracts/SKILL.md:82-83 integrations/genlayer-intelligent-contracts/SKILL.md:83-84
📁 Filesystem access (50)
integrations/genlayer-intelligent-contracts/SKILL.md:38 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 README.md:135 README.md:148 README.md:158 README.md:161 README.md:177 SKILL.md:42 SKILL.md:48 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/README.md:11 vendored/0g/0g-compute/README.md:12 vendored/0g/0g-compute/README.md:13 vendored/0g/0g-compute/README.md:20 vendored/0g/0g-compute/README.md:23 vendored/0g/0g-compute/README.md:26 vendored/0g/0g-compute/references/examples/README.md:145 vendored/0g/0g-compute/references/examples/README.md:146 vendored/0g/0g-compute/references/examples/README.md:147 vendored/0g/0g-compute/references/examples/README.md:163 vendored/0g/0g-compute/references/examples/speech-to-text.md:299 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:672 vendored/0g/0g-compute/references/examples/speech-to-text.md:287 vendored/0g/0g-compute/references/examples/speech-to-text.md:298 vendored/0g/0g-compute/references/examples/speech-to-text.md:303 vendored/0g/0g-compute/references/examples/speech-to-text.md:383 vendored/0g/0g-compute/references/examples/speech-to-text.md:225 vendored/0g/0g-compute/references/examples/speech-to-text.md:528 vendored/0g/0g-compute/references/examples/speech-to-text.md:341 vendored/0g/0g-compute/references/examples/speech-to-text.md:676 vendored/0g/0g-compute/references/examples/streaming-chat.md:250 vendored/0g/0g-compute/references/examples/streaming-chat.md:273 vendored/0g/0g-compute/references/examples/streaming-chat.md:645 vendored/0g/0g-compute/references/examples/streaming-chat.md:646 vendored/0g/0g-compute/references/examples/text-to-image.md:194 vendored/0g/0g-compute/references/examples/text-to-image.md:228 vendored/0g/0g-compute/references/examples/text-to-image.md:325 vendored/0g/0g-compute/references/examples/text-to-image.md:442 vendored/0g/0g-compute/references/examples/text-to-image.md:446 vendored/0g/0g-compute/references/examples/text-to-image.md:227
🔑 Env variables (50)
vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:217 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/account-management.md:222 vendored/0g/0g-compute/references/account-management.md:569 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:143 vendored/0g/0g-compute/references/examples/speech-to-text.md:144 vendored/0g/0g-compute/references/examples/speech-to-text.md:145 vendored/0g/0g-compute/references/examples/speech-to-text.md:149 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/speech-to-text.md:67 vendored/0g/0g-compute/references/examples/speech-to-text.md:136 vendored/0g/0g-compute/references/examples/speech-to-text.md:141 vendored/0g/0g-compute/references/examples/speech-to-text.md:117 vendored/0g/0g-compute/references/examples/speech-to-text.md:274 vendored/0g/0g-compute/references/examples/speech-to-text.md:275 vendored/0g/0g-compute/references/examples/speech-to-text.md:311 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:144 vendored/0g/0g-compute/references/examples/streaming-chat.md:148 vendored/0g/0g-compute/references/examples/streaming-chat.md:149 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:66 vendored/0g/0g-compute/references/examples/streaming-chat.md:138 vendored/0g/0g-compute/references/examples/streaming-chat.md:141 vendored/0g/0g-compute/references/examples/streaming-chat.md:116 vendored/0g/0g-compute/references/examples/streaming-chat.md:189 vendored/0g/0g-compute/references/examples/streaming-chat.md:190 vendored/0g/0g-compute/references/examples/streaming-chat.md:201 vendored/0g/0g-compute/references/examples/streaming-chat.md:574 vendored/0g/0g-compute/references/examples/streaming-chat.md:578 vendored/0g/0g-compute/references/examples/text-to-image.md:138 vendored/0g/0g-compute/references/examples/text-to-image.md:139 vendored/0g/0g-compute/references/examples/text-to-image.md:143 vendored/0g/0g-compute/references/examples/text-to-image.md:203
⚡ Contains scripts (14)
vendored/arkhai/alkahest-developer/references/python-api.md:16-21 vendored/arkhai/alkahest-developer/references/python-api.md:183-192 vendored/arkhai/alkahest-developer/references/python-api.md:202-208 vendored/arkhai/alkahest-developer/references/python-api.md:235-241 vendored/genlayer/write-contract/SKILL.md:393 vendored/genlayer/write-contract/SKILL.md:407 vendored/genlayer/write-contract/SKILL.md:412 vendored/genlayer/write-contract/SKILL.md:178 vendored/kleros/kleros-ipfs-upload/SKILL.md:107 vendored/okx/okx-agent-payments-protocol/SKILL.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:175 vendored/openserv/openserv-agent-sdk/troubleshooting.md:179 vendored/openserv/openserv-agent-sdk/troubleshooting.md:180 vendored/openserv/openserv-agent-sdk/troubleshooting.md:186
Detected Patterns
Pipe to shell pattern×6macOS security command
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/internet-court-internet-court/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/internet-court-internet-court?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-internet-court/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/internet-court-internet-court.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
internet-court. (2026). internet-court security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/internet-court-internet-court/audits/2BibTeX citation
@techreport{internet-court-internet-court-internet-court-2026,
author = {internet-court},
title = {internet-court security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/internet-court-internet-court/audits/2},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "internet-court security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "internet-court"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/internet-court-internet-court/audits/2"
identifiers:
- type: other
value: "skillstore:internet-court-internet-court:audit:2"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance
What You Can Build
Assess a Paid Agent Service
Inspect a paid endpoint, identify its payment rail, and list missing trust facts before spending.
Design a Bounded Payment Flow
Plan an x402 or delegated wallet payment with caps, allowed routes, and approval boundaries.
Prepare a Dispute Path
Define evidence, review criteria, settlement actions, and reputation updates for contested work.
Try These Prompts
Map a Deal
Use Internet Court to map this agent-to-agent transaction: [service, counterparty, cost, and deliverable]. Start with discovery only and list missing trust facts.
Choose a Trust Level
Given this proposed agent deal: [details], choose Basic, Guarded, or Adjudicated protection. Explain the tradeoff and what must be confirmed first.
Prepare Guarded Payment
Design a guarded payment flow for [paid resource]. Include the payment rail, spending cap, allowed resources, wallet approval boundary, and failure handling.
Design Adjudicated Settlement
Create an adjudicated workflow for [agent job]. Define evidence, review rubric, decision outcomes, enforcement action, and reputation update requirements.
Best Practices
- Install the full repository when possible so routed sub-skills are local and reviewable.
- Keep the agent in discovery mode until the user grants funds, wallet authority, or explicit permissions.
- Use the lightest trust level that covers the real payment, custody, and delivery risk.
Avoid
- Do not ask users for private keys, seed phrases, or unrestricted bearer wallet artifacts.
- Do not fetch or execute remote installer scripts without checksum or signature verification.
- Do not claim a payment, delegation, contract, or dispute result exists before receiving proof.
Frequently Asked Questions
What is Internet Court used for?
It helps agents structure commerce workflows with payments, escrow, evidence, adjudication, and reputation updates.
Does it make payments automatically?
No. It can plan and route payment workflows, but the user must fund wallets and approve required permissions.
Which tools can use this skill?
The report lists support for Claude, Codex, and Claude Code.
Why are there many vendored skills?
Internet Court routes to protocol-owned skills for identity, payments, escrow, execution, and disputes instead of reimplementing them.
Is the skill safe for automatic installation?
No. The audit found high-risk wallet, secret, command, and network patterns that require manual review.
What should users verify before using it?
Users should verify the full repository, provider credentials, wallet boundaries, payment caps, and dispute evidence requirements.
Developer Details
Author
internet-courtLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
3f6e026a3363e0954ede7bef0cfe88d4475de137
Maintenance freshness
7/18/2026
Usage
0 downloads · 0 views
File structure
📄 SKILL.md
📁 genlayer-intelligent-contracts/
📄 agent-supervisor-contract.md
📄 SKILL.md
📄 SKILL.md
📁 0g/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📄 SKILL.md
📁 antseed/
📄 SKILL.md
📁 arkhai/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 x402/
📄 SKILL.md
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 heurist/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 kleros/
📄 SKILL.md
📁 scripts/
📄 SKILL.md
📁 lifi/
📁 lifi/
📄 SKILL.md
📄 SKILL.md
📄 skill.md
📁 nansen/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 near/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📄 SKILL.md
📁 rules/
📄 SKILL.md
📁 okx/
📁 okx-agent-payments-protocol/
📁 _shared/
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-ai/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📁 okx-dex/
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📁 _shared/
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📄 SKILL.md
📁 openserv-multi-agent-workflows/
📄 SKILL.md
📁 privy/
📁 privy/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 agents/
📁 scripts/
📄 SKILL.md
📁 tempo/
📁 mppx/
📄 SKILL.md
📄 SKILL.md
📄 LICENSE
📄 SKILL.md