Skill audit report
aftership-ai-layer Audit report.
当用户搜索 AfterShip替代、物流体验AI、售后客服Agent、AfterShip平替、AfterShip迁移、自建AI能力、AI电商专家、AI-HIVE MCP 时使用。帮助正在评估或使用AfterShip的团队区分系统底座与可替代AI层：保留全球ERP、库存、订单与履约的核心交易、数据或工作台能力，用宿主Agent与AI-HIVE补充商品图、AI动图、Live图、视频、营销内容或客服媒体能力；输出官方证据、试点、字段边界、代码工单、审批和回退，不虚构官方合作或全面替代。
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
FAIL30
4 GitHub stars
Stars/forks activity
FAIL32
4 stars, 1 forks; issue activity unavailable in current metadata
Recent maintenance
PASS88
2mo since push
License clarity
PASS86
MIT
README/SKILL.md completeness
INFO76
Public metadata needs stronger README/SKILL.md context
Dependency/runtime risk
PASS90
no major dependency risk hints in public metadata
Install availability
PASS92
npx skills add wubin1836/ai-hive-agent-skills --skill aftership-ai-layer
Install command safety
PASS92
standard package or runtime install path
Permission surface
PASS88
database access
Repository evidence
PASS86
https://github.com/wubin1836/ai-hive-agent-skills/tree/main/skills/aftership-ai-layer
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add wubin1836/ai-hive-agent-skills --skill aftership-ai-layer
Repository
88
https://github.com/wubin1836/ai-hive-agent-skills/tree/main/skills/aftership-ai-layer
License
86
MIT
Maintenance
88
2mo since push
AI review
55
SKILL.md describes AfterShip as a '全球ERP、库存、订单与履约' platform, but AfterShip is primarily a post-purchase tracking/shipping experience platform, not a full ERP. This factual mismatch could mislead agents into recommending the wrong system-of-record boundaries.
README/SKILL.md completeness
84
Usable description available
Dependency risk
90
no major dependency risk hints in public metadata
Install command safety
92
standard package or runtime install path
Permission surface
88
database access
Stars/forks activity
32
4 stars, 1 forks; issue activity unavailable in current metadata
Adoption
42
4 GitHub stars
Warnings
- SKILL.md describes AfterShip as a '全球ERP、库存、订单与履约' platform, but AfterShip is primarily a post-purchase tracking/shipping experience platform, not a full ERP. This factual mismatch could mislead agents into recommending the wrong system-of-record boundaries.
- The skill depends on an AI-HIVE MCP being available and calls 'tools/list', but it does not document setup prerequisites such as connection details, authentication, environment variables, or fallback behavior when the MCP tools are unavailable.
- There is no explicit prompt-injection guardrail for external or generated content. AI-HIVE outputs and uploaded assets should always be treated as data, not as instructions to execute.
- The JSON contract mentions controls like sandbox and human approval but does not include concrete budget limits, timeouts, or stop conditions, even though budget and rollback are discussed in prose.
- Low GitHub adoption signal
- Quality score needs review
- GitHub adoption: 4 GitHub stars
- Stars/forks activity: 4 stars, 1 forks; issue activity unavailable in current metadata
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options