Skills manifest
📦

manifest

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables

Configure Manifest Observability

Agent telemetry setup can be error-prone when plugins, API keys, and endpoints must align. This skill guides Manifest installation, configuration, verification, and troubleshooting.

Supports: Claude Codex Code(CC)
⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "manifest" from https://skillstore.io/skills/sickn33-manifest.md and its manifest at https://skillstore.io/api/skills/sickn33-manifest/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-manifest.md Signed manifest GET /api/skills/sickn33-manifest/manifest Signed lockfile GET /api/skills/sickn33-manifest/lockfile

Test it

Using "manifest". Set up Manifest observability with the default endpoint.

Expected outcome:

The assistant stops the gateway, installs Manifest, requests the API key, configures the plugin, starts the gateway, and verifies activation.

Using "manifest". Connect to our self-hosted Manifest endpoint.

Expected outcome:

The assistant asks for the trusted endpoint, configures it with the API key, and checks whether Manifest appears in gateway logs.

Using "manifest". Manifest is installed but telemetry is not appearing.

Expected outcome:

The assistant checks for missing keys, invalid key format, unreachable endpoint, and duplicate telemetry plugin conflicts.

Security Audit

Medium Risk
v5 • 7/9/2026 Open versioned report

The skill is a legitimate Manifest setup guide, but it performs security-sensitive actions. Confirmed risks include plugin installation, gateway changes, API key handling, telemetry endpoint configuration, and local hidden log access; many Markdown backtick findings were false positives.

1
Files scanned
127
Lines analyzed
13
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:14-16SKILL.md:65SKILL.md:118
Telemetry Export To External Endpoint
The instructions connect agent observability data to Manifest or a custom OTLP endpoint. This can disclose agent activity outside the local environment and requires explicit consent.
The skill explicitly describes connecting agents to Manifest for monitoring and configuring hosted or custom endpoints. The exact telemetry contents are not shown, so confidence is high but not absolute.
Capability review items (13)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
SKILL.md:59-61
Ruby/shell backtick execution
```bash
The fenced block runs a Claude CLI configuration command with a user-provided API key. This writes sensitive configuration and can expose secrets through command handling.
High
SKILL.md:67-69
Ruby/shell backtick execution
```bash
The fenced block runs a Claude CLI command that sets a custom telemetry endpoint. A user-controlled endpoint can redirect observability data outside the expected service.
High
SKILL.md:82
Hidden file in home directory
grep "manifest" ~/.claude/logs/gateway.log | tail -5
The command reads a hidden Claude gateway log under the user home directory. Even read-only log access can expose sensitive operational or configuration data.
High
SKILL.md:60
Generic API/secret keys
claude config set plugins.entries.manifest.config.apiKey "USER_API_KEY"
The command persists a user-provided Manifest API key in Claude plugin configuration. Secrets can be exposed through shell history, logs, or insecure config storage.
High
SKILL.md:63
Generic API/secret keys
Replace `USER_API_KEY` with the actual key the user provided.
The prose instructs replacing the placeholder with the actual API key. That is explicit secret handling and requires careful redaction and storage controls.
Medium
SKILL.md:32-34
Ruby/shell backtick execution
```bash
The fenced block instructs running a Claude CLI command that stops the local gateway. It has hardcoded arguments, but it still changes local agent runtime state.
Medium
SKILL.md:38-40
Ruby/shell backtick execution
```bash
The fenced block installs a Manifest plugin through the Claude CLI. Installing agent plugins changes executable agent behavior and creates supply-chain risk.
Medium
SKILL.md:73-75
Ruby/shell backtick execution
```bash
The fenced block runs a Claude CLI gateway installation command. It changes local agent runtime components and should require explicit user approval.
Medium
SKILL.md:81-83
Ruby/shell backtick execution
```bash
The fenced block runs a shell pipeline that reads the Claude gateway log from the home directory. Log output can contain sensitive operational data.
Medium
SKILL.md:105-111
Ruby/shell backtick execution
| Duplicate OTel registration | Disable the conflicting built-in plugin: `claude plugins disable dia
The troubleshooting table includes a Claude CLI command that disables another plugin. It alters local plugin state and can reduce existing telemetry coverage.
Medium
SKILL.md:65
Hardcoded URL
Ask the user if they have a custom endpoint. If not, the default (`https://app.manifest.build/api/v1
The default endpoint is a hosted OTLP API destination for telemetry. Sending agent observability data to that endpoint requires user consent and trust verification.
Medium
SKILL.md:82
Hidden file access
grep "manifest" ~/.claude/logs/gateway.log | tail -5
The command accesses a hidden Claude log file for troubleshooting. The use is legitimate, but it is still sensitive local filesystem access.
Low
SKILL.md:50
Hardcoded URL
> 1. Go to **https://app.manifest.build** and create an account (or sign in)
The skill directs users to a hosted Manifest web application to create an account and API key. This is expected for setup, but it is a real external service dependency.

Risk Factors

⚙️ External commands (26)
SKILL.md:22 SKILL.md:32-34 SKILL.md:34-38 SKILL.md:38-40 SKILL.md:40-52 SKILL.md:52-55 SKILL.md:55-59 SKILL.md:59-61 SKILL.md:61-63 SKILL.md:63-65 SKILL.md:65-67 SKILL.md:67-69 SKILL.md:69-73 SKILL.md:73-75 SKILL.md:75-81 SKILL.md:81-83 SKILL.md:83-87 SKILL.md:87-89 SKILL.md:89-96 SKILL.md:96-103 SKILL.md:103-105 SKILL.md:105-111 SKILL.md:111-113 SKILL.md:113-117 SKILL.md:117-119 SKILL.md:119-125
🌐 Network access (3)
SKILL.md:50 SKILL.md:65 SKILL.md:118
📁 Filesystem access (2)
SKILL.md:82 SKILL.md:82
🔑 Env variables (2)
SKILL.md:60 SKILL.md:63
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-manifest/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-manifest/security.svg)](https://skillstore.io/skills/sickn33-manifest?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-manifest?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-manifest/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-manifest.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). manifest security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-manifest/audits/5

BibTeX citation

@techreport{sickn33-sickn33-manifest-2026, author = {sickn33}, title = {manifest security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-manifest/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "manifest security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-09" url: "https://skillstore.io/skills/sickn33-manifest/audits/5" identifiers: - type: other value: "skillstore:sickn33-manifest:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
85
Content
69
Community
91
Spec Compliance

What You Can Build

Set Up Agent Monitoring

Install Manifest and connect a Claude agent to a hosted observability endpoint.

Configure Private Telemetry

Point the Manifest plugin at a self-hosted endpoint after confirming the endpoint is trusted.

Resolve Plugin Startup Issues

Check gateway logs and apply documented fixes for missing keys, invalid formats, or duplicate telemetry registration.

Try These Prompts

Basic Setup 
Use this skill to install Manifest observability for my Claude agent with the default endpoint.
API Key Configuration 
Use this skill to configure my Manifest API key, verify the key format, and start the gateway.
Custom Endpoint Setup 
Use this skill to connect my agent to a trusted custom Manifest endpoint and verify the connection.
Troubleshoot Telemetry 
Use this skill to inspect Manifest gateway logs and recommend the safest fix for the current error.

Best Practices

  • Confirm the Manifest endpoint is trusted before sending telemetry.
  • Enter API keys only when needed and avoid sharing them in logs.
  • Review gateway logs with minimal output and redact sensitive values.

Avoid

  • Do not paste API keys into shared tickets or public chat logs.
  • Do not use an unverified custom endpoint for agent telemetry.
  • Do not skip gateway verification after changing plugin settings.

Frequently Asked Questions

What does this skill configure?
It configures the Manifest observability plugin for Claude agents, including API key, endpoint, gateway startup, and verification.
Does this skill require a Manifest account?
Yes. The hosted setup requires a Manifest account and an API key from the Manifest application.
Can I use a self-hosted endpoint?
Yes. The skill supports a custom endpoint when you confirm that the endpoint is trusted.
Does the skill create dashboards?
No. It focuses on plugin setup and connection checks, not dashboard design or alert rules.
What local files does it inspect?
It checks the Claude gateway log for recent Manifest messages during troubleshooting.
What security care is needed?
Protect the API key, verify telemetry endpoints, and avoid exposing sensitive log output.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/manifest

Ref

26421118b848d9f1efc0aa169d8a7a9e7e0a877e

Maintenance freshness

7/18/2026

Usage

8 downloads · 132 views

File structure

📄 SKILL.md

More from sickn33

View all

Related Skills

View all