Laporan audit skill
espalier-migrate Laporan audit.
Migrate an existing harness/espalier install to the current Espalier version — auto-detects which of v0.1→v0.2, v0.3→v0.4, v0.4→v0.5, the v0.5.3 coder-agent patch, v0.5→v0.6 (Stage 1 grill), v0.6→v0.7 (read-only /espalier-ask lane), v0.7→v0.8 (requirements approval gate), the v0.8.1 impact-analysis agent patch, the v0.8.2 re-review fixpoint loop, the v0.9.0 security audit, the v0.9.1 configurable escalation caps, the v0.9.2 correctness patch, the v0.9.3 skill-clarity patch, the v0.9.4 security-skill patch, the v0.9.6→v0.10.0 push-gate reshape, the v0.10.0→v0.11.0 hook exit-code release, the v0.11.0→v0.12.0 grill blind-spot pass (Stage 1 rules/wiki cross-check), the v0.12.0→v0.13.0 minimalism release (coder Solution Selection Ladder + reviewer advisory Minimalism Review), the v0.13.0→v0.13.1 polish patch (stage-conditional coding guidance + reviewer step-7 abuse-test duty + code-review gate line), the v0.13.1→v0.13.2 readability release (coder clarity-then-brevity tie-break + comment-co
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopsi GitHub
Peringatan48
72 star GitHub
Aktivitas star/fork
Peringatan43
72 star dan 9 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Pemeliharaan terbaru
Lulus88
1 bulan sejak push
Kejelasan lisensi
Lulus86
MIT
Kelengkapan README/SKILL.md
Lulus86
Metadata memuat konteks penggunaan dan alur kerja yang cukup
Risiko dependensi/runtime
Peringatan56
command execution surface, network or browser surface
Ketersediaan pemasangan
Lulus92
npx skills add Junhanliu-dev/espalier-engineering --skill espalier-migrate
Keamanan perintah pemasangan
Lulus92
Jalur pemasangan paket atau runtime standar
Cakupan izin
Gagal36
shell or command execution, filesystem or document access
Bukti repositori
Lulus86
https://github.com/Junhanliu-dev/espalier-engineering/tree/main/skills/espalier-migrate
Status peninjauan
Peringatan46
Persetujuan tinjauan AI belum ada
Hasil terbukti Agent
Info54
Belum ada data hasil Agent
Pemeriksaan
Tinjauan pemasangan dan adopsi
Jalur pemasangan
92
npx skills add Junhanliu-dev/espalier-engineering --skill espalier-migrate
Repositori
88
https://github.com/Junhanliu-dev/espalier-engineering/tree/main/skills/espalier-migrate
Lisensi
86
MIT
Pemeliharaan
88
1 bulan sejak push
Tinjauan AI
55
Review approval is missing
Kelengkapan README/SKILL.md
86
Usable description available
Risiko dependensi
56
command execution surface, network or browser surface
Keamanan perintah pemasangan
92
Jalur pemasangan paket atau runtime standar
Cakupan izin
36
shell or command execution, filesystem or document access
Aktivitas star/fork
43
72 star dan 9 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Adopsi
68
72 star GitHub
Financial decision safety
58
Research-only use: do not treat output as financial advice or execute a position without human approval.
Peringatan
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Financial research output is not financial advice; require human review before any live investment decision
- Persetujuan tinjauan AI belum ada
- Financial research output is not financial advice; require human review before any live investment decision.
- Quality score needs review
- Permission surface needs review: shell or command execution, filesystem or document access
- GitHub adoption: 72 GitHub stars
- Stars/forks activity: 72 stars, 9 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, network or browser surface
- Permission surface: shell or command execution, filesystem or document access
- Review status: AI review approval is missing
Metode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Bandingkan opsi sekitar
Skill terkait untuk diaudit berikutnya
Wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
16K Star · Laporan audit
Maigret
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
33K Star · Laporan audit
Nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
29K Star · Laporan audit