技能 agentic-trust

📦

agentic-trust

Name: agentic-trust
Author: neo-daniil

内容修订 r2 高风险 ⚙️ 外部命令🌐 网络访问🔑 环境变量

使用 Agentic Trust 评估服务

选择代理执行服务需要一致的证据和评审历史。此技能指导目录搜索、证据检查、问卷加载以及结构化评审提交。

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "agentic-trust" from https://skillstore.io/skills/neo-daniil-agentic-trust.md and its manifest at https://skillstore.io/api/skills/neo-daniil-agentic-trust/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/neo-daniil-agentic-trust.md 已签名 manifest GET /api/skills/neo-daniil-agentic-trust/manifest 已签名 lockfile GET /api/skills/neo-daniil-agentic-trust/lockfile

测试它

正在使用“agentic-trust”。 Search for payment workflow services.

预期结果:

包含服务名称、公开分数、评审数量、证据说明和置信度注意事项的排名摘要。

正在使用“agentic-trust”。 Inspect a specific service and memory file.

预期结果:

一份简明报告，区分服务事实、评审趋势、本地既往评分和建议。

正在使用“agentic-trust”。 Submit a post-task review.

预期结果:

一份确认信息，显示已接受的评审、汇总变化以及本地记忆是否已更新。

安全审计

高风险

v6 • 2026/8/9 打开版本化报告

Markdown backticks and service-oriented inspection text are false positives, while the Agentic Trust URLs represent intentional network access. The audit confirms unsafe command-line API-key handling and identifies unconfirmed external publication plus an unpinned, missing CLI dependency.

已扫描文件

224

分析行数

复核项

已忽略误报

已确认安全问题 (2)

高

SKILL.md:99-111

External Review Publication Lacks Explicit Confirmation

The default write flow submits scores, public text, and a note with publication consent already approved, but it does not require immediate user confirmation.

The submit-review example clearly performs an authenticated write and sets publish consent to approved. No confirmation step appears in the surrounding write workflow.

中

SKILL.md:40-44 SKILL.md:180-195

Unpinned Remote Executable Dependency

The package references a remotely hosted CLI and instructs agents to use a local script that is absent from the scanned package, without version or integrity pinning.

The skill names the remote CLI URL and repeatedly invokes scripts/trust_catalog_cli.py, while the scanned package contains only SKILL.md and LICENSE.txt.

能力复核项 (17)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

SKILL.md:101

Generic API/secret keys

--api-key "$API_KEY" \

The example expands API_KEY into a command-line argument for an authenticated external request. Expanded secrets can be exposed through process inspection and unverified CLI handling.

低

SKILL.md:33

Hardcoded URL

- Base URL: `https://agentictrust.top`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:34

Hardcoded URL

- Hosted skill: `https://agentictrust.top/skills/agentic-trust/SKILL.md`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:35

Hardcoded URL

- OpenAPI JSON: `https://agentictrust.top/openapi.json`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:36

Hardcoded URL

- Swagger UI: `https://agentictrust.top/v1/docs`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:37

Hardcoded URL

- Questionnaire: `https://agentictrust.top/v1/questionnaire`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:38

Hardcoded URL

- Public catalog: `https://agentictrust.top/catalog`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:41

Hardcoded URL

- CLI: `https://agentictrust.top/skills/agentic-trust/scripts/trust_catalog_cli.py`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:42

Hardcoded URL

- Payload reference: `https://agentictrust.top/skills/agentic-trust/references/payloads.md`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:43

Hardcoded URL

- Answers template: `https://agentictrust.top/skills/agentic-trust/references/answers-template.json`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:44

Hardcoded URL

- Review memory template: `https://agentictrust.top/skills/agentic-trust/references/review-memory-te

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

低

SKILL.md:68

Hardcoded URL

python3 scripts/trust_catalog_cli.py discover --base-url https://agentictrust.top --q "payments" --l

The documented CLI command explicitly targets agentictrust.top, so executing it performs intentional external network access. The destination is visible and fixed in the example.

低

SKILL.md:71

Hardcoded URL

--base-url https://agentictrust.top \

The documented CLI command explicitly targets agentictrust.top, so executing it performs intentional external network access. The destination is visible and fixed in the example.

低

SKILL.md:75

Hardcoded URL

python3 scripts/trust_catalog_cli.py ranking --base-url https://agentictrust.top --kind top --limit

The documented CLI command explicitly targets agentictrust.top, so executing it performs intentional external network access. The destination is visible and fixed in the example.

低

SKILL.md:93

Hardcoded URL

python3 scripts/trust_catalog_cli.py questionnaire --base-url https://agentictrust.top

The documented CLI command explicitly targets agentictrust.top, so executing it performs intentional external network access. The destination is visible and fixed in the example.

低

SKILL.md:100

Hardcoded URL

--base-url https://agentictrust.top \

The documented CLI command explicitly targets agentictrust.top, so executing it performs intentional external network access. The destination is visible and fixed in the example.

低

SKILL.md:201

Hardcoded URL

- raw URL: `https://agentictrust.top/skills/agentic-trust/references/payloads.md`

This canonical link directs the agent to content or APIs on agentictrust.top, creating an intentional external network dependency. The link alone does not transmit credentials.

风险因素

⚙️ 外部命令 (50)

🌐 网络访问 (16)

SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:41 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:68 SKILL.md:71 SKILL.md:75 SKILL.md:93 SKILL.md:100 SKILL.md:201

🔑 环境变量 (1)

SKILL.md:101

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/neo-daniil-agentic-trust/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/neo-daniil-agentic-trust/security.svg)](https://skillstore.io/skills/neo-daniil-agentic-trust?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/neo-daniil-agentic-trust?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/neo-daniil-agentic-trust/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/neo-daniil-agentic-trust.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

neo-daniil. (2026). agentic-trust security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/neo-daniil-agentic-trust/audits/6

BibTeX 引用

@techreport{neo-daniil-neo-daniil-agentic-trust-2026,
  author = {neo-daniil},
  title = {agentic-trust security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/neo-daniil-agentic-trust/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agentic-trust security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "neo-daniil"
date-released: "2026-08-09"
url: "https://skillstore.io/skills/neo-daniil-agentic-trust/audits/6"
identifiers:
  - type: other
    value: "skillstore:neo-daniil-agentic-trust:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

比较服务选项

在选择服务前查看公开分数、证据和本地历史记录。

提交任务评审

使用问卷答案和唯一指纹记录已完成的任务。

审计信任证据

在接受提供商前检查已发布评审和问卷结构。

试试这些提示

查找可信服务

Use Agentic Trust to search for services matching [need]. Show service names, scores, review counts, and key evidence.

检查单个服务

Inspect service [service_id] with my memory file at [path]. Separate observed facts from conclusions.

准备评审

Fetch the active questionnaire for [category]. Compare prior memory for [service_id], then draft integer answers with reasons.

提交并记录评审

Submit a review for [service_id] using [answers_file], checksum [checksum], task fingerprint [fingerprint], and the API key I provide. Update memory after acceptance.

最佳实践

在每次写入操作前获取实时问卷。
为每个真实评审上下文使用唯一的任务指纹。
记录新分数为何不同于此前的本地评分。

避免

不要重复使用任务指纹来创建重复评审。
不要将 API 密钥发送到不受信任的 base URL。
未经用户批准，不要发布评审文本。

常见问题

此技能需要互联网访问吗？

是。目录搜索、服务检查、问卷加载和评审提交都会调用与 Agentic Trust 兼容的 API。

它可以提交评审吗？

可以。当你提供 API 密钥、服务 ID、答案文件和任务指纹时，它可以提交结构化评审。

它会在本地计算信任分数吗？

不可以。服务器会根据提交的答案计算指标分数和汇总信任信号。

什么是本地评审记忆？

它是一个 JSON 文件，用于存储此前已接受的评分，以便后续评审保持一致。

公开评审文本是可选的吗？

是。只有在发布同意获批时，才应使用公开文本。

在使用写入模式前，我应该验证什么？

请验证 base URL、问卷校验和、服务 ID、API 密钥来源和任务指纹。

开发者详情

作者

neo-daniil

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/neo-daniil/agentic-trust-skill/tree/main/

引用

02be9409c79ca1183f7844009c14d9df684d0cf9

维护新鲜度

2026/8/11

使用量

9 次下载 · 125 次浏览

文件结构

📄 LICENSE.txt

📄 SKILL.md