Skill audit report

Secret Agent audit report.

The web scraper that's nearly impossible to block - now called @ulixee/hero

EXPERIMENTAL · REVIEWNeeds reviewGenerated Jun 16, 2026Heuristic metadata audit

Audit

Trust

Quality

Security

Maintain

Install

OpenAgentSkill Trust Score

Manual review

Stars, maintenance, license, docs, dependency risk, and installability.

The Trust Score is OpenAgentSkill's adoption layer. It is designed to help an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

737 GitHub stars

Recent maintenance

FAIL

3y since push

License clarity

PASS

MIT

README/SKILL.md completeness

INFO

Public metadata needs stronger README/SKILL.md context

Dependency risk

INFO

credential or environment access, network or browser surface

Install availability

PASS

npx skills add ulixee/secret-agent

Repository evidence

PASS

https://github.com/ulixee/secret-agent

Review status

PASS

AI review data available

Checks

Install and adoption review

6 passed · 6 review

Install path

PASS

npx skills add ulixee/secret-agent

Repository

PASS

https://github.com/ulixee/secret-agent

License

PASS

MIT

Maintenance

FIX

3y since push

AI review

PASS

Approved with no listed issues

README/SKILL.md completeness

PASS

Usable description available

Dependency risk

CHECK

credential or environment access, network or browser surface

Adoption

PASS

737 GitHub stars

Warnings

Repository appears stale
Repository looks stale
Quality score needs review
Recent maintenance: 3y since push

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Install path

Review the report before installing into production agents.

$ npx skills add ulixee/secret-agent

Signals

Audit score: 65/100
Quality: 55/100
Trust: 69/100
Maintenance: 3y since push
Events: No events yet
GitHub stars: 737
Last push: Mar 7, 2023

Agent safety v2

37/100 · Avoid automatic install

Experimentalreview

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

Test manually in an isolated workspace and compare against safer alternatives.

High-risk permission hints: Secrets or environment access
37/100 agent safety score

Browser automation

medium

Skill may drive a browser or interact with web pages.

Network access

medium

Skill likely fetches remote pages, APIs, repositories, or external services.

Secrets or environment access

high

Skill metadata references credentials, tokens, environment variables, or secret-bearing workflows.

High-risk permission hints: Secrets or environment access
Repository appears stale

Back to skill Alternatives Audit badge SVG

Compare nearby options

Related skills to audit next

Playwright

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

91K stars · Audit report

Crawlee

Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.

24K stars · Audit report

Playwright Python

Python version of the Playwright testing and automation library.

15K stars · Audit report