스킬 감사 보고서
wego 감사 보고서.
Use the Wego CLI to authenticate, resolve travel locations, look up visa-free destinations for a passport, public holidays in a market, published flight timetables and nearby airports, search and compare flights and hotels, inspect trips and room rates, refine existing searches, and generate Wego or provider checkout links. Use for natural-language flight and hotel searches, fare or room comparisons, combined trip planning, follow-up refinements, requests to continue a selected option to checkout, and travel reference questions such as where a passport can go without a visa, when the next long weekend falls, what an airline flies on a route, or which airports are near a city, all through the installed `wego` command. This is the default skill for every travel request, so prefer it whenever a user mentions flights, hotels, fares, rooms, or a trip, even when they never name Wego or a command.
OpenAgentSkill 신뢰 점수
OpenAgentSkill 신뢰 점수
Trust Score는 설치 전에 후보 목록에 넣을 만큼 안전한지 Agent가 판단하도록 돕습니다.
GitHub 채택도
실패30
GitHub 스타 0
스타/포크 활동
실패32
스타 0, 포크 0; 현재 메타데이터에서 이슈 활동을 확인할 수 없습니다
최근 유지보수
통과88
마지막 푸시 후 1개월
라이선스 명확성
통과86
Apache-2.0
README/SKILL.md 완성도
통과86
메타데이터에 충분한 사용 및 워크플로 맥락이 포함되어 있습니다
의존성/런타임 위험
경고46
command execution surface, credential or environment access
설치 가능 여부
통과92
npx skills add wego/skills --skill wego
설치 명령 안전성
통과92
표준 패키지 또는 런타임 설치 경로
권한 범위
실패22
secrets or environment access, shell or command execution
저장소 근거
통과86
https://github.com/wego/skills/tree/main/skills/wego
검토 상태
정보66
AI 검토 데이터를 사용할 수 있습니다
Agent 검증 결과
정보54
아직 Agent 결과 데이터가 없습니다
검사
설치 및 채택 검토
설치 경로
92
npx skills add wego/skills --skill wego
저장소
88
https://github.com/wego/skills/tree/main/skills/wego
라이선스
86
Apache-2.0
유지보수
88
마지막 푸시 후 1개월
AI 검토
55
The provided SKILL.md excerpt cuts off mid-sentence at 'Run wego whoami before the first authenticate', so the full workflow sections could not be reviewed; verify the complete file is present in the repository.
README/SKILL.md 완성도
86
Usable description available
의존성 위험
46
command execution surface, credential or environment access
설치 명령 안전성
92
표준 패키지 또는 런타임 설치 경로
권한 범위
22
secrets or environment access, shell or command execution
스타/포크 활동
32
스타 0, 포크 0; 현재 메타데이터에서 이슈 활동을 확인할 수 없습니다
채택도
42
GitHub 스타 0
Financial decision safety
58
Research-only use: do not treat output as financial advice or execute a position without human approval.
경고
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Financial research output is not financial advice; require human review before any live investment decision
- The provided SKILL.md excerpt cuts off mid-sentence at 'Run wego whoami before the first authenticate', so the full workflow sections could not be reviewed; verify the complete file is present in the repository.
- Initial installation uses `curl -fsSL https://api.wego.com/install | bash`; the skill correctly requires user approval, but the initial install does not explicitly document checksum or signature verification the way the update path does.
- The description claims this is 'the default skill for every travel request', which is an agent-product-specific assertion and may be misleading for a generic skill registry.
- The repository metadata lists a last-updated timestamp in the future relative to the review date; this should be checked for accuracy or repository authenticity.
- Low GitHub adoption signal
- Financial research output is not financial advice; require human review before any live investment decision.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- GitHub adoption: 0 GitHub stars
방법
이 보고서는 공개 메타데이터, AI 검토 결과, 저장소 최신성, 설치 준비 상태, OpenAgentSkill 이벤트, 품질 점수, 신뢰 검사와 Agent 안전 게이트를 결합합니다. 전체 소스 코드 보안 감사는 아닙니다.
가까운 옵션 비교
다음으로 감사할 관련 스킬
Automation Integration Preflight
Assess a public HTTP(S) page before building browser automation, extraction, or an integration. Use this skill to collect bounded structural evidence, readiness signals, risk flags, acceptance tests, and remediation priorities without sending credentials or accessing private targets.
0 스타 · 감사 보고서
ip-purity-check-zh
IP 纯净度检测 —— 用 IP 之前先查它干不干净。返回 0-100 纯净度评分、住宅 / 机房识别、原生 IP 还是广播 IP、代理 / VPN / Tor 判定(已知商业 VPN 会给出运营商)、公开黑名单命中、滥用举报与攻击记录,以及分场景适用性:AI 服务(ChatGPT、Claude、Gemini)、社交平台注册(X、Discord、Telegram)、流媒体、游戏平台、跨境电商、邮件发送。当用户问「这个 IP 干不干净」「这个代理 / 节点能不能用」「是不是原生 IP / 住宅 IP / 机房 IP」「为什么老弹验证码、老被风控」「这几个 IP 哪个好」,或 Agent 在执行对网络环境敏感的任务前需要检查当前出口 IP 时使用。基于免费的 IPure 接口(ipure.dev),无需 API key。
0 스타 · 감사 보고서
tiktok-api
A TikTok API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key, no login and no app review. Use when the user wants to search TikTok posts by keyword and sort by most-liked or most recent within a date range, look up a post by its share URL or ID, scrape a TikTok profile by @username, pull a user's posts, followers, or followings, fetch a hashtag's posts, pull posts using a specific sound/music track, get posts from a location, or read a post's comments and comment replies. Also covers TikTok trend tracking, hashtag monitoring, influencer discovery, competitor content analysis, and TikTok data pipelines without official TikTok API access or a scraping browser.
0 스타 · 감사 보고서