Skill audit report
portable-bundle-review Audit report.
检查并解释 portable Pragma bundle 的内容、依赖和环境绑定。
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
INFO62
119 GitHub stars
Stars/forks activity
WARN57
119 stars, 11 forks; issue activity unavailable in current metadata
Recent maintenance
PASS88
2mo since push
License clarity
PASS86
NOASSERTION
README/SKILL.md completeness
WARN60
Public metadata needs stronger README/SKILL.md context
Dependency/runtime risk
INFO72
credential or environment access
Install availability
PASS92
npx skills add pqpo/pragma --skill portable-bundle-review
Install command safety
PASS92
standard package or runtime install path
Permission surface
INFO74
secrets or environment access
Repository evidence
PASS86
https://github.com/pqpo/pragma/tree/main/examples/projects/bundle-transfer/skill
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add pqpo/pragma --skill portable-bundle-review
Repository
88
https://github.com/pqpo/pragma/tree/main/examples/projects/bundle-transfer/skill
License
86
NOASSERTION
Maintenance
88
2mo since push
AI review
55
Repository license is NOASSERTION, which may cause legal ambiguity.
README/SKILL.md completeness
84
Usable description available
Dependency risk
72
credential or environment access
Install command safety
92
standard package or runtime install path
Permission surface
74
secrets or environment access
Stars/forks activity
57
119 stars, 11 forks; issue activity unavailable in current metadata
Adoption
68
119 GitHub stars
Warnings
- Repository license is NOASSERTION, which may cause legal ambiguity.
- SKILL.md is concise but lacks explicit input/output examples and edge-case handling.
- Quality score needs review
- Stars/forks activity: 119 stars, 11 forks; issue activity unavailable in current metadata
- README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options