Skip to content
← Registry
Trust Report

AgentOS SDK Skill

78
SUSPICIOUS
Format: claudeScanner: v0.8.0Duration: 18msScanned: 7d ago · Jun 1, 5:59 AMSource →
Embed this badge
AgentVerus SUSPICIOUS 78AgentVerus SUSPICIOUS 78AgentVerus SUSPICIOUS 78
[![AgentVerus](https://agentverus.ai/api/v1/skill/7b821211-e467-4e40-b074-c3ab5d038c5e/badge)](https://agentverus.ai/skill/7b821211-e467-4e40-b074-c3ab5d038c5e)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/7b821211-e467-4e40-b074-c3ab5d038c5e/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"7b821211-e467-4e40-b074-c3ab5d038c5e","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/7b821211-e467-4e40-b074-c3ab5d038c5e/trust

Category Scores

71
Permissions
100
Injection
36
Dependencies
92
Behavioral
65
Content
90
Code Safety

Findings (11)

highCapability contract mismatch: inferred credential access is not declared-15

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Access info, server locations (NOT actual keys!) | `secrets/` | `["secrets

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-05
highDirect IP address reference-20

The skill references a direct IP address which is classified as high risk.

http://178.156.216.106:3100

Replace direct IP addresses with proper domain names. IP-based URLs bypass DNS-based security controls.

dependenciesASST-04
highDirect IP address reference-20

The skill references a direct IP address which is classified as high risk.

http://178.156.216.106:3100`

Replace direct IP addresses with proper domain names. IP-based URLs bypass DNS-based security controls.

dependenciesASST-04
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Save working state

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: http://178.156.216.106:3100

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumMany external URLs referenced (4)-8

The skill references 4 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: http://178.156.216.106:3100, https://api.agentos.software, http://178.156.216.106:3100`, https://your-server.com/agentos-webhook

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumWebSocket connection to non-standard port-10

WebSocket connection to an unusual port detected. Could indicate C2 communication, data tunneling, or connection to unauthorized services.

const ws = new WebSocket('ws://178.156.216.106:3100');

Review the code block starting at line 348. Ensure this pattern is necessary and does not pose a security risk.

code-safetyASST-02
mediumEnvironment secret piping detected-5

Found environment secret piping pattern: "echo "$messages" |" Related auth/profile context: - overlapping signals from the same auth risk family — Federated auth flow detected

echo "$messages" | jq -r '.[] | "From: \(.from) - \(.topic)"'

Treat shell pipelines that pass secrets from environment variables as sensitive credential handling. Avoid exposing secret values to command histories or subprocess pipelines unless absolutely necessary.

behavioralASST-05
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://api.agentos.software

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowMissing or insufficient description-5

The skill lacks a meaningful description, making it difficult to assess its purpose.

No description found

Add a clear, detailed description of what the skill does and what it needs access to.

contentASST-09
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09