Laporan audit skill
Tern Laporan audit.
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopsi GitHub
Lulus86
1.0K star GitHub
Aktivitas star/fork
Info77
1.0K star dan 188 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Pemeliharaan terbaru
Gagal22
2 tahun sejak push
Kejelasan lisensi
Lulus86
BSD-2-Clause
Kelengkapan README/SKILL.md
Lulus90
Metadata memuat konteks penggunaan dan alur kerja yang cukup
Risiko dependensi/runtime
Info80
Cakupan pemasangan paket eksternal
Ketersediaan pemasangan
Lulus92
npx skills add tern-tools/tern
Keamanan perintah pemasangan
Lulus92
Jalur pemasangan paket atau runtime standar
Cakupan izin
Lulus86
Akses sistem file atau dokumen
Bukti repositori
Lulus86
https://github.com/tern-tools/tern
Status peninjauan
Lulus88
Data tinjauan AI tersedia
Hasil terbukti Agent
Info54
Belum ada data hasil Agent
Pemeriksaan
Tinjauan pemasangan dan adopsi
Jalur pemasangan
92
npx skills add tern-tools/tern
Repositori
88
https://github.com/tern-tools/tern
Lisensi
86
BSD-2-Clause
Pemeliharaan
20
2 tahun sejak push
Tinjauan AI
88
Approved with no listed issues
Kelengkapan README/SKILL.md
90
Usable description available
Risiko dependensi
80
Cakupan pemasangan paket eksternal
Keamanan perintah pemasangan
92
Jalur pemasangan paket atau runtime standar
Cakupan izin
86
Akses sistem file atau dokumen
Aktivitas star/fork
77
1.0K star dan 188 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Adopsi
88
1.0K star GitHub
Financial decision safety
58
Research-only use: do not treat output as financial advice or execute a position without human approval.
Peringatan
- Repository appears stale
- Financial research output is not financial advice; require human review before any live investment decision
- Repository looks stale
- Financial research output is not financial advice; require human review before any live investment decision.
- Quality score needs review
- Recent maintenance: 2y since push
Metode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Bandingkan opsi sekitar