Skip to content
← Registry
Trust Report

multi-user-workspace

Multi-user workspace management with sandbox permissions, user profiles, and relationship networks.

83
SUSPICIOUS
Format: openclawScanner: v0.8.0Duration: 7msScanned: 10d ago · Apr 30, 2:36 PMSource →
Embed this badge
AgentVerus SUSPICIOUS 83AgentVerus SUSPICIOUS 83AgentVerus SUSPICIOUS 83
[![AgentVerus](https://agentverus.ai/api/v1/skill/77a73764-1702-4aa3-9599-d03e17c4ef06/badge)](https://agentverus.ai/skill/77a73764-1702-4aa3-9599-d03e17c4ef06)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/77a73764-1702-4aa3-9599-d03e17c4ef06/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"77a73764-1702-4aa3-9599-d03e17c4ef06","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/77a73764-1702-4aa3-9599-d03e17c4ef06/trust

Category Scores

80
Permissions
75
Injection
100
Dependencies
80
Behavioral
90
Content
100
Code Safety

Findings (5)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: execute

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highComprehensive secret collection detected-25

Found comprehensive secret collection pattern: "Extract userId from the session key"

2. Extract userId from the session key (e.g., `agent:main:alice` → `alice`)

Skills should not instruct collection of all tokens, keys, or credentials. Access only the specific credentials needed and declare them.

injectionASST-05
highUnrestricted scope detected-20

Found unrestricted scope pattern: "Full access"

Full access, no sandbox restrictions:

Define clear boundaries for what the skill can and cannot do. Unrestricted scope is a security risk.

behavioralASST-09
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: write/execute in their own directory

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

Keep these safety boundaries. They improve trust.

contentASST-09