{"task":"Use Enterprise Security Skill in an agent workflow","recommendations":[{"rank":1,"skill":"Reverse Skill","slug":"zhaoxuya520-reverse-skill","description":"Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base  Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端","confidence":"0.52","match_score":52,"raw_match_score":166.4009598612474,"semantic_relevance":52,"match_label":"Useful shortlist","safety_adjusted_score":178.4009598612474,"install":"npx skills add zhaoxuya520/reverse-skill","repository":"https://github.com/zhaoxuya520/reverse-skill","stats":{"stars":25600,"verified_installs":0,"successful_runs":0,"total_outcomes":0,"rating":0,"quality_score":72.56},"quality":{"score":100,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"26K","tone":"positive"},{"label":"Freshness","value":"6d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"MIT","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":88,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"26K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":97,"weight":0.08,"status":"pass","detail":"26K stars, 3.5K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"6d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":66,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":72,"weight":0.12,"status":"info","detail":"command execution surface"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add zhaoxuya520/reverse-skill"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":76,"weight":0.07,"status":"info","detail":"shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/zhaoxuya520/reverse-skill"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"26K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"26K stars, 3.5K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"6d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"info","label":"Dependency/runtime risk","detail":"command execution surface"},{"status":"pass","label":"Install availability","detail":"npx skills add zhaoxuya520/reverse-skill"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"info","label":"Permission surface","detail":"shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/zhaoxuya520/reverse-skill"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":[],"evidence":{"stars":"26K GitHub stars","repoActivity":"26K stars, 3.5K forks","lastPushed":"6d since push","license":"MIT","repository":"https://github.com/zhaoxuya520/reverse-skill","install":"npx skills add zhaoxuya520/reverse-skill","installSafety":"standard package or runtime install path","permissionSurface":"shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add zhaoxuya520/reverse-skill","policy":"agent_install_candidate","label":"Agent install candidate","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","6d since push"]},"agentCompatibility":["PowerShell","Claude Code","Codex","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"low","label":"Low metadata risk","notes":["No major trust warnings detected from available metadata"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":true,"sandboxRequired":true,"policy":"agent_install_candidate","reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"bestFor":["development","claude-code","agent-skills","developer-tools","powershell","github"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"knownRisks":[]},"safety":{"score":69,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["High-risk permission hints: Shell or command execution","69/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"shell","label":"Shell or command execution","reason":"Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.","severity":"high"},{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["High-risk permission hints: Shell or command execution"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["High-risk permission hints: Shell or command execution","69/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"Coding agents","description":"I need a coding agent that can understand a repository, edit code, and review pull requests.","useCases":[{"slug":"coding-agents","title":"Coding agents"},{"slug":"rag-knowledge","title":"RAG and knowledge"},{"slug":"research-agents","title":"Research agents"}]},"applicableAgents":["Claude Code","Cursor","CLI","Codex","PowerShell"],"install":{"ready":true,"command":"npx skills add zhaoxuya520/reverse-skill","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":25600,"starsLabel":"26K","forks":3465,"license":"MIT","qualityScore":100,"trustScore":88,"auditScore":93},"maintenance":{"status":"fresh","label":"6d since push","daysSincePush":6,"lastPushedAt":"2026-08-16T12:41:00+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":false,"notes":["No major risk signals from available metadata"]},"coverageTags":["Coding","Coding agents","development","claude-code","agent-skills","developer-tools","powershell","github"]},"audit":{"audit_score":93,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":[]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install zhaoxuya520-reverse-skill","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Reverse Skill\" agent skill from https://github.com/zhaoxuya520/reverse-skill. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端 After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"zhaoxuya520-reverse-skill\",\"task\":\"Install Reverse Skill\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Reverse Skill\" as a Claude Code skill from https://github.com/zhaoxuya520/reverse-skill. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端 After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"zhaoxuya520-reverse-skill\",\"task\":\"Install Reverse Skill\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Reverse Skill\" from https://github.com/zhaoxuya520/reverse-skill into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端 After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"zhaoxuya520-reverse-skill\",\"task\":\"Install Reverse Skill\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/zhaoxuya520-reverse-skill","api":"https://www.openagentskill.com/api/agent/skills/zhaoxuya520-reverse-skill","install_api":"https://www.openagentskill.com/api/skills/zhaoxuya520-reverse-skill/install","audit":"https://www.openagentskill.com/skills/zhaoxuya520-reverse-skill/audit","repository":"https://github.com/zhaoxuya520/reverse-skill"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Coding agents","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"Coding agents","best_for":["Coding agents workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"proof_points":["25,600 GitHub stars","recent repository activity","install command or GitHub repo available","100/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one Coding agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"rag-knowledge","title":"RAG and knowledge","url":"https://www.openagentskill.com/use-cases/rag-knowledge"}],"recommendation_reasons":["Matches task terms: security","Strong GitHub adoption: 25,600 stars","Quality score 73/100","Install handoff is available","Repository freshness signal is available"],"reasoning":"Useful shortlist. Evidence: 26K GitHub stars, verified author, 73 quality score. Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base  Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端"},{"rank":2,"skill":"Wazuh","slug":"wazuh-wazuh","description":"Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.","confidence":"0.52","match_score":52,"raw_match_score":126.6496569803119,"semantic_relevance":52,"match_label":"Useful shortlist","safety_adjusted_score":138.6496569803119,"install":"npx skills add wazuh/wazuh","repository":"https://github.com/wazuh/wazuh","stats":{"stars":16271,"verified_installs":0,"successful_runs":0,"total_outcomes":0,"rating":0,"quality_score":72.68},"quality":{"score":100,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"16K","tone":"positive"},{"label":"Freshness","value":"29d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":86,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"16K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":97,"weight":0.08,"status":"pass","detail":"16K stars, 2.4K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"29d since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":66,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":80,"weight":0.12,"status":"info","detail":"external package install surface"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add wazuh/wazuh"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/wazuh/wazuh"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"16K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"16K stars, 2.4K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"29d since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"info","label":"Dependency/runtime risk","detail":"external package install surface"},{"status":"pass","label":"Install availability","detail":"npx skills add wazuh/wazuh"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/wazuh/wazuh"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown"],"evidence":{"stars":"16K GitHub stars","repoActivity":"16K stars, 2.4K forks","lastPushed":"29d since push","license":"Unknown","repository":"https://github.com/wazuh/wazuh","install":"npx skills add wazuh/wazuh","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add wazuh/wazuh","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","No Agent Proven outcome evidence yet","29d since push"]},"agentCompatibility":["C++","Compliance","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["security","compliance","cloud-security","configuration-assessement","container-security","cybersecurity"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace","Commercial reuse before clarifying license terms"],"knownRisks":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"safety":{"score":75,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","75/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":["License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","75/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"research-agents","title":"Research agents"},{"slug":"security-compliance","title":"Security and compliance"},{"slug":"browser-automation","title":"Browser automation"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","C++"],"install":{"ready":true,"command":"npx skills add wazuh/wazuh","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":16271,"starsLabel":"16K","forks":2392,"license":"Unknown","qualityScore":100,"trustScore":86,"auditScore":91},"maintenance":{"status":"fresh","label":"29d since push","daysSincePush":29,"lastPushedAt":"2026-07-24T02:24:31+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"coverageTags":["Coding","GitHub automation","security","compliance","cloud-security","configuration-assessement","container-security","cybersecurity"]},"audit":{"audit_score":91,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install wazuh-wazuh","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Wazuh\" agent skill from https://github.com/wazuh/wazuh. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"wazuh-wazuh\",\"task\":\"Install Wazuh\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Wazuh\" as a Claude Code skill from https://github.com/wazuh/wazuh. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"wazuh-wazuh\",\"task\":\"Install Wazuh\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Wazuh\" from https://github.com/wazuh/wazuh into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"wazuh-wazuh\",\"task\":\"Install Wazuh\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/wazuh-wazuh","api":"https://www.openagentskill.com/api/agent/skills/wazuh-wazuh","install_api":"https://www.openagentskill.com/api/skills/wazuh-wazuh/install","audit":"https://www.openagentskill.com/skills/wazuh-wazuh/audit","repository":"https://github.com/wazuh/wazuh"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Research agents","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"Research agents","best_for":["Research agents workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"proof_points":["16,271 GitHub stars","recent repository activity","install command or GitHub repo available","100/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one Research agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"research-agents","title":"Research agents","url":"https://www.openagentskill.com/use-cases/research-agents"},{"slug":"security-compliance","title":"Security and compliance","url":"https://www.openagentskill.com/use-cases/security-compliance"}],"recommendation_reasons":["Matches task terms: security","Strong GitHub adoption: 16,271 stars","Quality score 73/100","Install handoff is available","Repository freshness signal is available"],"reasoning":"Useful shortlist. Evidence: 16K GitHub stars, verified author, 73 quality score. Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads."},{"rank":3,"skill":"Union","slug":"unionlabs-union","description":"The trust-minimized, zero-knowledge bridging protocol, designed for censorship resistance, extremely high security, and usage in decentralized finance.","confidence":"0.47","match_score":47,"raw_match_score":78.75935331617444,"semantic_relevance":52,"match_label":"Useful shortlist","safety_adjusted_score":90.75935331617444,"install":"npx skills add unionlabs/union","repository":"https://github.com/unionlabs/union","stats":{"stars":73933,"verified_installs":0,"successful_runs":0,"total_outcomes":0,"rating":0,"quality_score":74.28},"quality":{"score":100,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"74K","tone":"positive"},{"label":"Freshness","value":"2mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Apache-2.0","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":91,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"74K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":97,"weight":0.08,"status":"pass","detail":"74K stars, 3.9K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"2mo since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"Apache-2.0"},{"id":"documentation","label":"README/SKILL.md completeness","score":76,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add unionlabs/union"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/unionlabs/union"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"74K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"74K stars, 3.9K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"2mo since push"},{"status":"pass","label":"License clarity","detail":"Apache-2.0"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add unionlabs/union"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/unionlabs/union"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Financial research output is not financial advice; require human review before any live investment decision.","Documentation summary is thin"],"evidence":{"stars":"74K GitHub stars","repoActivity":"74K stars, 3.9K forks","lastPushed":"2mo since push","license":"Apache-2.0","repository":"https://github.com/unionlabs/union","install":"npx skills add unionlabs/union","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add unionlabs/union","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","2mo since push","Financial domain: human review is required before use in a live investment workflow."]},"agentCompatibility":["Rust","Blockchain","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Financial research output is not financial advice; require human review before any live investment decision.","Documentation summary is thin"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["web3-analytics","blockchain","web3","analytics","astro","cosmos"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace","Autonomous investment, trading, tax, or suitability decisions without a qualified human review"],"knownRisks":["Financial research output is not financial advice; require human review before any live investment decision.","Documentation summary is thin"]},"safety":{"score":81,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["Financial research output is not financial advice; require human review before any live investment decision","81/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"needs_review","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["Financial research output is not financial advice; require human review before any live investment decision"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["Financial research output is not financial advice; require human review before any live investment decision","81/100 agent safety score"]},"supply_profile":{"track":{"slug":"finance","label":"Finance and quant workflows","shortLabel":"Finance","description":"Market data, SEC filings, portfolio analysis, quant research, backtesting, and risk workflows."},"scenario":{"label":"Finance and quant","description":"I need my agent to analyze markets, financial data, filings, portfolios, and quant strategies.","useCases":[{"slug":"rag-knowledge","title":"RAG and knowledge"},{"slug":"data-analysis","title":"Data analysis"},{"slug":"finance-quant","title":"Finance and quant"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Rust"],"install":{"ready":true,"command":"npx skills add unionlabs/union","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":73933,"starsLabel":"74K","forks":3887,"license":"Apache-2.0","qualityScore":100,"trustScore":91,"auditScore":93},"maintenance":{"status":"active","label":"2mo since push","daysSincePush":61,"lastPushedAt":"2026-06-22T13:20:52+00:00"},"risk":{"level":"needs_review","label":"Needs review","requiresReview":true,"notes":["Financial research output is not financial advice; require human review before any live investment decision","Financial research output is not financial advice; require human review before any live investment decision.","Documentation summary is thin","Needs review"]},"coverageTags":["Finance","Finance and quant","web3-analytics","blockchain","web3","analytics","astro","cosmos"]},"audit":{"audit_score":93,"risk_level":"needs_review","risk_label":"Needs review","warnings":["Financial research output is not financial advice; require human review before any live investment decision","Financial research output is not financial advice; require human review before any live investment decision.","Documentation summary is thin"]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install unionlabs-union","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Union\" agent skill from https://github.com/unionlabs/union. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: The trust-minimized, zero-knowledge bridging protocol, designed for censorship resistance, extremely high security, and usage in decentralized finance. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"unionlabs-union\",\"task\":\"Install Union\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Union\" as a Claude Code skill from https://github.com/unionlabs/union. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: The trust-minimized, zero-knowledge bridging protocol, designed for censorship resistance, extremely high security, and usage in decentralized finance. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"unionlabs-union\",\"task\":\"Install Union\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Union\" from https://github.com/unionlabs/union into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: The trust-minimized, zero-knowledge bridging protocol, designed for censorship resistance, extremely high security, and usage in decentralized finance. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"unionlabs-union\",\"task\":\"Install Union\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/unionlabs-union","api":"https://www.openagentskill.com/api/agent/skills/unionlabs-union","install_api":"https://www.openagentskill.com/api/skills/unionlabs-union/install","audit":"https://www.openagentskill.com/skills/unionlabs-union/audit","repository":"https://github.com/unionlabs/union"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for RAG and knowledge","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"RAG and knowledge","best_for":["RAG and knowledge workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"proof_points":["73,933 GitHub stars","recent repository activity","install command or GitHub repo available","100/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one RAG and knowledge task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"rag-knowledge","title":"RAG and knowledge","url":"https://www.openagentskill.com/use-cases/rag-knowledge"},{"slug":"data-analysis","title":"Data analysis","url":"https://www.openagentskill.com/use-cases/data-analysis"}],"recommendation_reasons":["Matches task terms: security","Strong GitHub adoption: 73,933 stars","Quality score 74/100","Install handoff is available","Repository freshness signal is available"],"reasoning":"Useful shortlist. Evidence: 74K GitHub stars, verified author, 74 quality score. The trust-minimized, zero-knowledge bridging protocol, designed for censorship resistance, extremely high security, and usage in decentralized finance."}],"blocked_candidates":[],"suggested_composition":{"name":"zhaoxuya520-reverse-skill-agent-stack","description":"Start with Reverse Skill, then add Wazuh + Union only if the workflow needs extra coverage.","skills":["zhaoxuya520-reverse-skill","wazuh-wazuh","unionlabs-union"],"steps":["Prototype the task with Reverse Skill as the primary skill.","Add the second skill only if the first one leaves a capability gap.","Keep the third skill as a fallback during evaluation instead of installing everything at once."]},"suggested_stacks":[{"slug":"coding-review-agent","name":"Coding review agent workflow","url":"https://www.openagentskill.com/collections/coding-review-agent","use_case":"coding-agents"},{"slug":"browser-qa-agent","name":"Browser QA agent workflow","url":"https://www.openagentskill.com/collections/browser-qa-agent","use_case":"browser-automation"}],"meta":{"timestamp":"2026-08-22T18:51:47.274Z","api_version":"1.0","total_skills_searched":258,"blocked_candidates":0,"safety_policy":"Blocked candidates are excluded from recommendations. Verified and reviewed candidates receive ranking priority.","public_search_endpoint":"https://www.openagentskill.com/api/skills/search","agent_friendly":true}}