agentica-server Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill permits Bash execution for starting servers and running local proxy commands, which could affect local system state if misused or run without user confirmation.
• The documented proxy invocation includes --allowedTools Read Write Edit Bash, which grants broad tool permissions to the underlying Claude CLI; this should be called out as a security consideration.
• SKILL.md does not include an explicit license notice or attribution to the source repository, though the repository is MIT-licensed.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.