Skill-Audit-Bericht
Automation Integration Preflight Audit-Bericht.
Assess a public HTTP(S) page before building browser automation, extraction, or an integration. Use this skill to collect bounded structural evidence, readiness signals, risk flags, acceptance tests, and remediation priorities without sending credentials or accessing private targets.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub-Akzeptanz
Fehlgeschlagen30
0 GitHub-Stars
Star-/Fork-Aktivität
Fehlgeschlagen32
0 Stars und 0 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar
Aktuelle Wartung
Bestanden88
2 Monate seit dem letzten Push
Lizenzklarheit
Bestanden86
MIT
README/SKILL.md-Vollständigkeit
Bestanden94
Metadaten enthalten ausreichend Nutzungs- und Workflow-Kontext
Abhängigkeits-/Laufzeitrisiko
Warnung46
command execution surface, credential or environment access
Installationsverfügbarkeit
Bestanden92
npx skills add tinyopsstudio/skills --skill Automation Integration Preflight
Sicherheit des Installationsbefehls
Bestanden92
Standard-Paket- oder Laufzeit-Installationspfad
Berechtigungsumfang
Fehlgeschlagen22
secrets or environment access, shell or command execution
Repository-Nachweis
Bestanden86
https://github.com/tinyopsstudio/skills/tree/65a363309a8ada1d2191079982a15a4ece8909b1/skills/automation-integration-preflight
Prüfstatus
Info66
KI-Prüfdaten verfügbar
Agent-validierte Ergebnisse
Info54
Noch keine Agent-Ergebnisdaten
Prüfungen
Installations- und Adoptionsprüfung
Installationspfad
92
npx skills add tinyopsstudio/skills --skill Automation Integration Preflight
Repository
88
https://github.com/tinyopsstudio/skills/tree/65a363309a8ada1d2191079982a15a4ece8909b1/skills/automation-integration-preflight
Lizenz
86
MIT
Wartung
88
2 Monate seit dem letzten Push
KI-Prüfung
55
The skill does not explicitly instruct the agent to treat API response content and analyzed page content as untrusted data, leaving some risk of indirect prompt injection if the remote service or a scanned page returns malicious instructions.
README/SKILL.md-Vollständigkeit
94
Usable description available
Abhängigkeitsrisiko
46
command execution surface, credential or environment access
Sicherheit des Installationsbefehls
92
Standard-Paket- oder Laufzeit-Installationspfad
Berechtigungsumfang
22
secrets or environment access, shell or command execution
Star-/Fork-Aktivität
32
0 Stars und 0 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar
Akzeptanz
42
0 GitHub-Stars
Financial decision safety
58
Research-only use: do not treat output as financial advice or execute a position without human approval.
Warnungen
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Financial research output is not financial advice; require human review before any live investment decision
- The skill does not explicitly instruct the agent to treat API response content and analyzed page content as untrusted data, leaving some risk of indirect prompt injection if the remote service or a scanned page returns malicious instructions.
- The acceptance-pack 'objective' field is sent to a third-party API; the skill warns against personal data and credentials but does not warn against confidential business information that could be present in the objective.
- There is no fallback or error-handling guidance for network failures, rate limits, malformed responses, or API unavailability.
- Low GitHub adoption signal
- Financial research output is not financial advice; require human review before any live investment decision.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- GitHub adoption: 0 GitHub stars
- Stars/forks activity: 0 stars, 0 forks; issue activity unavailable in current metadata
Methode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Nahe Optionen vergleichen
Ähnliche Skills als Nächstes prüfen
ip-purity-check-zh
IP 纯净度检测 —— 用 IP 之前先查它干不干净。返回 0-100 纯净度评分、住宅 / 机房识别、原生 IP 还是广播 IP、代理 / VPN / Tor 判定（已知商业 VPN 会给出运营商）、公开黑名单命中、滥用举报与攻击记录，以及分场景适用性：AI 服务（ChatGPT、Claude、Gemini）、社交平台注册（X、Discord、Telegram）、流媒体、游戏平台、跨境电商、邮件发送。当用户问「这个 IP 干不干净」「这个代理 / 节点能不能用」「是不是原生 IP / 住宅 IP / 机房 IP」「为什么老弹验证码、老被风控」「这几个 IP 哪个好」，或 Agent 在执行对网络环境敏感的任务前需要检查当前出口 IP 时使用。基于免费的 IPure 接口（ipure.dev），无需 API key。
0 Stars · Audit-Bericht
tiktok-api
A TikTok API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key, no login and no app review. Use when the user wants to search TikTok posts by keyword and sort by most-liked or most recent within a date range, look up a post by its share URL or ID, scrape a TikTok profile by @username, pull a user's posts, followers, or followings, fetch a hashtag's posts, pull posts using a specific sound/music track, get posts from a location, or read a post's comments and comment replies. Also covers TikTok trend tracking, hashtag monitoring, influencer discovery, competitor content analysis, and TikTok data pipelines without official TikTok API access or a scraping browser.
0 Stars · Audit-Bericht
reddit-api
A Reddit API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key, no OAuth app registration. Use when the user wants to search Reddit posts across every subreddit by keyword and sort by top, hot, new, or most-discussed, search subreddits or users by keyword, fetch a subreddit's info or its hot/new/top post feed, fetch a single post with its comment tree and comment replies, pull the sitewide best/hot/new/top feeds, or fetch a user's profile, posts, and comments. Also covers Reddit sentiment analysis input, subreddit monitoring, keyword tracking, and Reddit data pipelines without Reddit's own API app registration or rate-limit tiers.
0 Stars · Audit-Bericht