Skill audit report
ask-sonner Audit report.
Guide to Sonner, the React toast library — install and wire up the Toaster, pick the right toast() call, promise and loading toasts, updating, dismissing and persisting toasts, styling, theming and icons, positioning and multiple toasters. Use when working with Sonner or troubleshooting it — toasts that don't appear, appear twice, lose their styles, ignore Tailwind classes, sit behind a modal, or don't follow dark mode.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
FAIL30
20 GitHub stars
Stars/forks activity
FAIL32
20 stars, 1 forks; issue activity unavailable in current metadata
Recent maintenance
PASS100
2d since push
License clarity
PASS86
MIT
README/SKILL.md completeness
PASS86
Metadata includes enough usage and workflow context
Dependency/runtime risk
WARN54
command execution surface, external package install surface
Install availability
PASS92
npx skills add wankimmy/Bossku-Superpowers --skill ask-sonner
Install command safety
PASS92
standard package or runtime install path
Permission surface
WARN48
shell or command execution, filesystem or document access
Repository evidence
PASS86
https://github.com/wankimmy/Bossku-Superpowers/tree/main/skills/ask-sonner
Review status
WARN46
AI review approval is missing
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add wankimmy/Bossku-Superpowers --skill ask-sonner
Repository
88
https://github.com/wankimmy/Bossku-Superpowers/tree/main/skills/ask-sonner
License
86
MIT
Maintenance
100
2d since push
AI review
55
Review approval is missing
README/SKILL.md completeness
86
Usable description available
Dependency risk
54
command execution surface, external package install surface
Install command safety
92
standard package or runtime install path
Permission surface
48
shell or command execution, filesystem or document access
Stars/forks activity
32
20 stars, 1 forks; issue activity unavailable in current metadata
Adoption
42
20 GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
- Low GitHub adoption signal
- AI review approval is missing
- This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
- Quality score needs review
- Permission surface needs review: shell or command execution, filesystem or document access
- GitHub adoption: 20 GitHub stars
- Stars/forks activity: 20 stars, 1 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, external package install surface
- Permission surface: shell or command execution, filesystem or document access
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
weather
Current weather and forecasts with web_fetch, falling back to wttr.in curl for locations, rain, temperature, travel planning.
391K Stars · Audit report
mcporter
List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio.
391K Stars · Audit report
release-openspec
Use this skill when releasing OpenSpec: audit merged work and changeset coverage, decide whether a catch-up changeset PR is needed, prepare or resume the Changesets Version Packages PR, cut a beta or stable release, verify publishing, and polish GitHub release notes. Also use when asked whether an open release PR is complete, what the next release step is, or to continue a release paused for human approval.
71K Stars · Audit report