技能 agentix-ceo
📦
agentix-ceo
v1.2.0 內容修訂 r2 嚴重 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數
協調 Agentix AI 團隊
要跨角色、任務與狀態更新協調 AI 工作者可能很困難。此技能為 Claude、Codex 和 Claude Code 提供一套結構化的 Agentix 作業手冊。
支援: Claude Codex Code(CC)
請勿自動安裝此 Skill。
權威政策要求在執行任何安裝操作前由操作人員審查。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "agentix-ceo" from https://skillstore.io/skills/agentix-cloud-agentix-ceo.md and its manifest at https://skillstore.io/api/skills/agentix-cloud-agentix-ceo/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「agentix-ceo」。 建立一個後端任務並為它啟動一名工作者。
預期結果:
助理會確認現有的後端角色，建立一個範圍清楚的 ready 任務，啟動一名工作者，並回報工作者狀態。
正在使用「agentix-ceo」。 顯示我的 Agentix 團隊正在做什麼。
預期結果:
助理會摘要目前任務、執行中的工作者、近期事件、失敗的工作，以及下一個需要使用者核准的決策。
正在使用「agentix-ceo」。 將我的團隊從 autopilot 切換到監督式模式。
預期結果:
助理會取得監督式手冊範本，保留自訂政策，更新團隊手冊，並確認新的作業模式。
安全審計
嚴重v5 • 2026/7/23 開啟版本化報告
Most external-command alerts are false positives caused by Markdown backticks, while Agentix endpoint references are intentional network behavior. The skill collects high-value credentials, transmits them to Agentix, and follows remotely fetched playbooks. Unauthenticated self-hosting and autonomous worker mode add further operational risk.
1
已掃描檔案
266
分析行數
36
複核項目
0
已忽略的誤報
已確認的安全問題 (4)
嚴重
Third-Party Credential Collection
The skill asks users for Anthropic and GitHub tokens, then places them in Agentix team configuration. These secrets can enable model spending and repository access.
The instructions explicitly request both credentials and show them as fields sent to Agentix API resources.
高
Untrusted Remote Playbook Controls Agent Behavior
The skill fetches a remote team playbook and applies its modes, policies, and custom rules. Compromised remote content could steer privileged agent actions.
The file explicitly requires fetching, applying, preserving, and updating remotely stored operating instructions.
高
Unauthenticated Self-Hosted Control API
The self-hosted path states that its API has no authentication and is open on the local network. Other local-network users could control teams and workers.
The instructions explicitly describe the self-hosted API as open on the local network with no authentication.
高
Autopilot Permits Unbounded Autonomous Changes
Autopilot authorizes continuous planning, task creation, worker spawning, review, and merge activity. Missing budgets and approval gates could cause uncontrolled changes or spend.
The documented mode grants full autonomy and continuous looping without defining concurrency, cost, or merge limits.
能力複核項目 (36)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Hidden file in home directory
On every session start, check `~/.agentix/credentials`:
The skill explicitly checks a hidden credentials file in the user's home directory at every session start, creating persistent access outside the workspace.
高
Hidden file in home directory
mkdir -p ~/.agentix && cat > ~/.agentix/credentials << 'EOF'
The shell example creates a hidden home directory and writes an Agentix API key to a plaintext credentials file.
高
Hidden file in home directory
mkdir -p ~/.agentix && cat > ~/.agentix/credentials << 'EOF'
The shell example creates a hidden home directory and persists self-hosted connection settings outside the workspace.
高
Hidden file in home directory
If credentials are already loaded from `~/.agentix/credentials`, skip to [Playbook](#playbook).
The instruction depends on loading values from the hidden home credentials file, confirming persistent filesystem access.
高
Hidden file in home directory
Save the returned `apiKey` and `customerId` to `~/.agentix/credentials` immediately. Do not display
The skill directs the agent to write a newly issued API key and customer identifier into the hidden home credentials file.
高
Hidden file in home directory
Reuse the same team across sessions. Do not create a new team each time. Save the returned `teamId`
The skill directs the agent to persist the returned team identifier in the hidden home credentials file for reuse.
高
Git platform tokens
{ "config": { "gitRepoUrl": "https://github.com/org/repo", "githubToken": "$GITHUB_TOKEN" } }
The skill asks for a GitHub token and places it in Agentix team configuration, exposing a repository credential to another service.
高
Generic API/secret keys
API_KEY=at_live_...
Although the displayed value is a placeholder, the example instructs the agent to persist a live Agentix API key in plaintext.
高
Generic API/secret keys
Authorization: Bearer $API_KEY
The instruction uses the Agentix API key as a bearer credential in a request to create a remote team.
高
Generic API/secret keys
Authorization: Bearer $API_KEY
The instruction sends the Agentix API key as bearer authorization while updating remote team configuration.
高
Generic API/secret keys
{ "anthropicApiKey": "$ANTHROPIC_API_KEY" }
The request body transmits the user's Anthropic API key into Agentix team configuration.
高
Generic API/secret keys
Authorization: Bearer $API_KEY
The instruction sends the Agentix API key as bearer authorization while replacing the remote playbook.
高
Generic API/secret keys
{ "anthropicApiKey": "$ANTHROPIC_API_KEY" }
The configuration example transmits the user's Anthropic API key to Agentix for worker execution.
中
Hidden file access
On every session start, check `~/.agentix/credentials`:
The skill explicitly checks a hidden credentials file in the user's home directory at every session start, creating persistent access outside the workspace.
中
Hidden file access
mkdir -p ~/.agentix && cat > ~/.agentix/credentials << 'EOF'
The shell example creates a hidden home directory and writes an Agentix API key to a plaintext credentials file.
中
Hidden file access
mkdir -p ~/.agentix && cat > ~/.agentix/credentials << 'EOF'
The shell example creates a hidden home directory and persists self-hosted connection settings outside the workspace.
中
Hidden file access
If credentials are already loaded from `~/.agentix/credentials`, skip to [Playbook](#playbook).
The instruction depends on loading values from the hidden home credentials file, confirming persistent filesystem access.
中
Hidden file access
Save the returned `apiKey` and `customerId` to `~/.agentix/credentials` immediately. Do not display
The skill directs the agent to write a newly issued API key and customer identifier into the hidden home credentials file.
中
Hidden file access
Reuse the same team across sessions. Do not create a new team each time. Save the returned `teamId`
The skill directs the agent to persist the returned team identifier in the hidden home credentials file for reuse.
低
Hardcoded URL
2. If not set, default to `https://agentix.cloud`.
The skill sets agentix.cloud as the default API destination, so later operations intentionally communicate with an external service.
低
Hardcoded URL
export AGENTIX_API_URL=https://agentix.cloud
This example configures agentix.cloud as the API endpoint used by the skill. The network destination is intentional and externally hosted.
低
Hardcoded URL
export AGENTIX_API_URL=https://your-agentix-instance.example.com
The placeholder documents requests to a user-configured self-hosted endpoint. This is legitimate but confirms that the skill can contact non-marketplace services.
低
Hardcoded URL
- **SaaS** (`$AGENTIX_API` is `https://agentix.cloud` or unset): Run the registration flow (Steps 1–
The SaaS path explicitly selects agentix.cloud and directs the agent into its remote registration flow.
低
Hardcoded URL
AGENTIX_API_URL=http://localhost:3456
The localhost URL configures a self-hosted network service used by the skill. It confirms network capability even though the example remains on the host.
低
Hardcoded URL
- **SaaS (default):** `https://agentix.cloud` — multi-tenant, requires registration and API key. Fol
The line identifies agentix.cloud as the default multi-tenant service and requires remote registration and API authentication.
低
Hardcoded URL
- **Self-hosted:** Single team, no auth required. Set `AGENTIX_API_URL` to your instance URL (e.g.,
The line directs the skill to a user-selected self-hosted API. This is legitimate but confirms network access to a configurable service.
低
Hardcoded URL
These steps apply only to `https://agentix.cloud`. Self-hosted users skip this section.
The line scopes the following workflow to agentix.cloud, confirming intended use of that external service.
低
Hardcoded URL
POST https://agentix.cloud/register
The instruction sends a registration POST containing the user's name and email to agentix.cloud.
低
Hardcoded URL
GET https://agentix.cloud/register/<token>
The instruction polls agentix.cloud with a registration token to retrieve account credentials.
低
Hardcoded URL
POST https://agentix.cloud/teams
The instruction creates team data through an external agentix.cloud API request.
低
Hardcoded URL
PATCH https://agentix.cloud/teams/$TEAM_ID
The instruction modifies a team through agentix.cloud while using an authorization credential.
低
Hardcoded URL
{ "config": { "gitRepoUrl": "https://github.com/org/repo", "githubToken": "$GITHUB_TOKEN" } }
The configuration includes a GitHub repository URL, confirming integration with an external platform. Token exposure is covered by separate findings.
低
Hardcoded URL
GET https://agentix.cloud/docs/getting-started # human getting started guide
The skill directs a GET request to the public agentix.cloud getting-started documentation endpoint.
低
Hardcoded URL
GET https://agentix.cloud/docs/api-reference # full API reference
The skill directs a GET request to the public agentix.cloud API reference endpoint.
低
Hardcoded URL
GET https://agentix.cloud/docs # interactive API explorer (Swagger)
The skill directs a GET request to the public agentix.cloud interactive documentation endpoint.
低
Hardcoded URL
GET https://agentix.cloud/openapi.json # OpenAPI spec
The skill directs a GET request to the public agentix.cloud OpenAPI endpoint.
風險因素
⚙️ 外部命令 (50)
SKILL.md:14 SKILL.md:16 SKILL.md:17 SKILL.md:19-25 SKILL.md:25-27 SKILL.md:27-31 SKILL.md:31-37 SKILL.md:37 SKILL.md:38-40 SKILL.md:40-53 SKILL.md:53-62 SKILL.md:62-69 SKILL.md:69-73 SKILL.md:73-74 SKILL.md:74 SKILL.md:80-86 SKILL.md:86-91 SKILL.md:91-93 SKILL.md:93-95 SKILL.md:95-99 SKILL.md:99-101 SKILL.md:101-103 SKILL.md:103 SKILL.md:105 SKILL.md:109-114 SKILL.md:114-116 SKILL.md:116 SKILL.md:122-127 SKILL.md:127-139 SKILL.md:139-141 SKILL.md:141-143 SKILL.md:143 SKILL.md:150-159 SKILL.md:159-163 SKILL.md:163-167 SKILL.md:167-171 SKILL.md:171-176 SKILL.md:176-178 SKILL.md:178-186 SKILL.md:186-189 SKILL.md:189-192 SKILL.md:192-194 SKILL.md:194-197 SKILL.md:197-199 SKILL.md:199-203 SKILL.md:203-208 SKILL.md:208-210 SKILL.md:210-212 SKILL.md:212 SKILL.md:218
🌐 網路存取 (17)
📁 檔案系統存取 (12)
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/agentix-cloud-agentix-ceo/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/agentix-cloud-agentix-ceo?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/agentix-cloud-agentix-ceo?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentix-cloud-agentix-ceo/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/agentix-cloud-agentix-ceo.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
agentix-cloud. (2026). agentix-ceo security audit report (audit version 5) [Author version 1.2.0]. Skillstore. https://skillstore.io/skills/agentix-cloud-agentix-ceo/audits/5BibTeX 引用
@techreport{agentix-cloud-agentix-cloud-agentix-ceo-2026,
author = {agentix-cloud},
title = {agentix-ceo security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/agentix-cloud-agentix-ceo/audits/5},
note = {Author version 1.2.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agentix-ceo security audit report (audit version 5)"
version: "1.2.0"
type: report
authors:
- name: "agentix-cloud"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/agentix-cloud-agentix-ceo/audits/5"
identifiers:
- type: other
value: "skillstore:agentix-cloud-agentix-ceo:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
100
可維護性
87
內容
67
社群
91
規範符合度
你可以打造什麼
協調工程工作
規劃角色、建立任務，並啟動 Agentix 工作者以進行實作和審查工作。
營運自託管 Agentix 團隊
將助理連接到本機 Agentix instance，並管理角色、任務、工作者和事件。
追蹤多代理進度
檢查活躍 Agentix 團隊的任務狀態、工作者活動和近期事件。
試試這些提示
設定 Agentix
設定我的 Agentix 團隊。只詢問你需要的資訊，然後在儲存憑證前向我顯示涉及的每個外部服務。
審查團隊狀態
檢查我的 Agentix 團隊狀態。摘要執行中的工作者、受阻任務、近期事件，以及需要我核准的動作。
建立聚焦的工作項目
為此目標建立 Agentix 任務。盡可能重用現有角色，並在建立任務前說明每個角色選擇。
執行監督式交付
執行一個監督式 Agentix 交付迴圈。監控工作者，在適當時恢復失敗的工作，並在建立新角色或任務前先詢問。
最佳實務
- 在完全理解角色、任務和憑證處理之前，請使用監督式模式。
- 在儲存憑證或傳送第三方 tokens 前，請審查每個外部 endpoint。
- 為 Agentix 工作者設定使用最小權限的 GitHub 和 API tokens。
避免
- 當 scoped token 已足夠時，不要分享權限廣泛的 personal access tokens。
- 在沒有明確作業政策的情況下，不要為 repositories 或團隊啟用 autopilot。
- 不要將此技能指向不受信任的自託管 Agentix endpoint。
常見問題
此技能需要 Agentix Cloud 嗎？
不需要。當使用者設定後，它支援 Agentix Cloud 和自託管 Agentix endpoints。
它可以建立並執行工作者嗎？
可以。此技能記錄了 Agentix 工作者的任務執行與恢復 endpoints。
它會處理 secrets 嗎？
會。某些流程會要求提供 Agentix、Anthropic 和 GitHub 憑證。使用者應先審查 token 範圍。
什麼是監督式模式？
監督式模式會監控並推進現有工作，但在規劃新工作或產生工作者前會先詢問。
什麼是 autopilot 模式？
autopilot 模式允許助理監控、規劃、建立任務、產生工作者、審查、合併並持續迴圈執行。
這對敏感 repositories 安全嗎？
請謹慎使用。此技能會將 tokens 和工作指示傳送到 Agentix 服務，因此敏感工作需要經過審查的信任邊界。
開發者詳細資訊
授權
MIT
作者版本
v1.2.0
Skillstore 修訂
r2
引用
9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2
維護新鮮度
2026/7/25
使用量
11 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md