Laporan audit skill
provenance Laporan audit.
收集系统全链路操作日志，生成可追溯的执行证据链与向量索引，是多智能体系统可观测性与安全审计的底座。
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopsi GitHub
Lulus94
6.2K star GitHub
Aktivitas star/fork
Lulus88
6.2K star dan 593 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Pemeliharaan terbaru
Lulus88
1 bulan sejak push
Kejelasan lisensi
Peringatan42
Tidak diketahui
Kelengkapan README/SKILL.md
Info70
Metadata publik memerlukan konteks README/SKILL.md yang lebih kuat
Risiko dependensi/runtime
Lulus82
database surface
Ketersediaan pemasangan
Lulus92
npx skills add anbeime/skill --skill provenance
Keamanan perintah pemasangan
Lulus92
Jalur pemasangan paket atau runtime standar
Cakupan izin
Lulus88
Akses database
Bukti repositori
Lulus86
https://github.com/anbeime/skill/tree/main/antinet-agentteams/skills/provenance
Status peninjauan
Info66
Data tinjauan AI tersedia
Hasil terbukti Agent
Info54
Belum ada data hasil Agent
Pemeriksaan
Tinjauan pemasangan dan adopsi
Jalur pemasangan
92
npx skills add anbeime/skill --skill provenance
Repositori
88
https://github.com/anbeime/skill/tree/main/antinet-agentteams/skills/provenance
Lisensi
45
Tidak diketahui
Pemeliharaan
88
1 bulan sejak push
Tinjauan AI
55
Repository license is unknown; compliance cannot be fully verified.
Kelengkapan README/SKILL.md
84
Usable description available
Risiko dependensi
82
database surface
Keamanan perintah pemasangan
92
Jalur pemasangan paket atau runtime standar
Cakupan izin
88
Akses database
Aktivitas star/fork
88
6.2K star dan 593 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Adopsi
88
6.2K star GitHub
Peringatan
- Lisensi tidak jelas
- Repository license is unknown; compliance cannot be fully verified.
- SKILL.md describes vector index and query API outputs, but the provided script only generates trace.jsonl and trace_summary.json; no evidence of vector index or query API implementation.
- Dependencies mention Qdrant and MCP, but the script claims to run offline; the actual vector storage integration is unclear.
- Quality score needs review
- License clarity: Unknown
Metode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Bandingkan opsi sekitar