hackerone 監査レポート.

警告

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The SKILL.md references external skills (e.g., skills/coordination/SKILL.md) and tools that are not fully documented in the provided excerpt, which may require users to access the full repository for complete context.
• The skill description and workflow assume a HackerOne program scope CSV with specific columns; if the CSV format differs, the parser may fail, but this is a minor edge case.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

方法

このレポートは公開メタデータ、AI レビュー、リポジトリの鮮度、インストール準備、OpenAgentSkill イベント、品質スコア、信頼チェック、Agent セーフティゲートを統合します。完全なソースコード監査ではありません。