Laporan audit skill

agent-launcher-orchestrator Laporan audit.

Use when a user wants to build, launch, grade, or schedule a Claude Managed Agent (CMA) in their own Anthropic account — "build me an agent", "launch this as a managed agent", "run this on a schedule", "grade my agent against a rubric", "set up a nightly worker". Reads the per-session goal (./my-agent/goal.json), routes deterministically to one of five phase sub-skills (interview → stage-launch → grade-iterate → run-without-you → wrap-up) via goal_router.py, and compiles the goal+phase into an execution shape (single-pass workflow / bounded grade→iterate loop / recurring cron deployment loop) via loop_compiler.py. Forks context so heavy intake (build sheets, payloads, eval cases) stays out of the parent thread. All launches are emitted as BYOK curl the user runs with their own key; no tool makes API calls. Inspired by anthropics/launch-your-agent (Apache-2.0). Distinct from engineering/agent-harness (generic domain loop) and engineering/write-a-skill (authors Claude Code skills, not CM

Eksperimental · TinjauPerlu ditinjauDihasilkan 14 Okt 2026Audit metadata heuristik
83
Audit
75
Kepercayaan
92
Kualitas
76
Keamanan
88
Maintain
92
Pasang

Trust Score OpenAgentSkill

75
Shortlist kuat

Trust Score OpenAgentSkill

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

Adopsi GitHub

Lulus

100

25K star GitHub

Aktivitas star/fork

Lulus

97

25K star dan 3.5K fork; aktivitas issue tidak tersedia dalam metadata saat ini

Pemeliharaan terbaru

Lulus

88

2 bulan sejak push

Kejelasan lisensi

Lulus

86

MIT

Kelengkapan README/SKILL.md

Lulus

84

Metadata memuat konteks penggunaan dan alur kerja yang cukup

Risiko dependensi/runtime

Info

64

command execution surface, network or browser surface

Ketersediaan pemasangan

Lulus

92

npx skills add alirezarezvani/claude-skills --skill agent-launcher-orchestrator

Keamanan perintah pemasangan

Lulus

92

Jalur pemasangan paket atau runtime standar

Cakupan izin

Peringatan

50

shell or command execution, network or browser access

Bukti repositori

Lulus

86

https://github.com/alirezarezvani/claude-skills/tree/main/.gemini/skills/agent-launcher-orchestrator

Status peninjauan

Info

66

Data tinjauan AI tersedia

Hasil terbukti Agent

Info

54

Belum ada data hasil Agent

Pemeriksaan

Tinjauan pemasangan dan adopsi

8 Lulus · 8 Perlu ditinjau

Jalur pemasangan

92

Lulus

npx skills add alirezarezvani/claude-skills --skill agent-launcher-orchestrator

Repositori

88

Lulus

https://github.com/alirezarezvani/claude-skills/tree/main/.gemini/skills/agent-launcher-orchestrator

Lisensi

86

Lulus

MIT

Pemeliharaan

88

Lulus

2 bulan sejak push

Tinjauan AI

55

Periksa

The underlying Python scripts (goal_router.py, loop_compiler.py, goal_state.py) are not included in the submission, so their behavior cannot be fully audited; ensure they do not execute untrusted content from goal.json or make unintended network calls.

Kelengkapan README/SKILL.md

84

Lulus

Usable description available

Risiko dependensi

64

Periksa

command execution surface, network or browser surface

Keamanan perintah pemasangan

92

Lulus

Jalur pemasangan paket atau runtime standar

Cakupan izin

50

Perbaiki

shell or command execution, network or browser access

Aktivitas star/fork

97

Lulus

25K star dan 3.5K fork; aktivitas issue tidak tersedia dalam metadata saat ini

Adopsi

88

Lulus

25K star GitHub

Peringatan

  • Permission surface may require sandboxing
  • The underlying Python scripts (goal_router.py, loop_compiler.py, goal_state.py) are not included in the submission, so their behavior cannot be fully audited; ensure they do not execute untrusted content from goal.json or make unintended network calls.
  • The SKILL.md excerpt ends mid-sentence in the forcing-question library, which may indicate truncation in the submitted documentation; verify the full file is present and complete.
  • Permission surface needs review: shell or command execution, network or browser access
  • Permission surface: shell or command execution, network or browser access

Metode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Bandingkan opsi sekitar

Skill terkait untuk diaudit berikutnya