Skill audit report

Changeme audit report.

A default credential scanner.

EXPERIMENTAL · REVIEWSafe to tryGenerated Jun 16, 2026Heuristic metadata audit

Audit

Trust

Quality

Security

Maintain

Install

OpenAgentSkill Trust Score

Strong shortlist

Stars, maintenance, license, docs, dependency risk, and installability.

The Trust Score is OpenAgentSkill's adoption layer. It is designed to help an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

PASS

1.5K GitHub stars

Recent maintenance

INFO

11mo since push

License clarity

PASS

GPL-3.0

README/SKILL.md completeness

INFO

Public metadata needs stronger README/SKILL.md context

Dependency risk

INFO

credential or environment access

Install availability

PASS

npx skills add ztgrace/changeme

Repository evidence

PASS

https://github.com/ztgrace/changeme

Review status

PASS

AI review data available

Checks

Install and adoption review

6 passed · 4 review

Install path

PASS

npx skills add ztgrace/changeme

Repository

PASS

https://github.com/ztgrace/changeme

License

PASS

GPL-3.0

Maintenance

CHECK

11mo since push

AI review

PASS

Approved with no listed issues

README/SKILL.md completeness

PASS

Usable description available

Dependency risk

CHECK

credential or environment access

Adoption

PASS

1.5K GitHub stars

Warnings

Quality score needs review
Documentation summary is thin

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Install path

Review the report before installing into production agents.

$ npx skills add ztgrace/changeme

Signals

Audit score: 84/100
Quality: 85/100
Trust: 84/100
Maintenance: 11mo since push
Events: No events yet
GitHub stars: 1.5K
Last push: Jul 8, 2025

Agent safety v2

56/100 · Review before install

Experimentalreview

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

Test manually in an isolated workspace and compare against safer alternatives.

High-risk permission hints: Secrets or environment access
56/100 agent safety score

Network access

medium

Skill likely fetches remote pages, APIs, repositories, or external services.

Filesystem access

medium

Skill may read or write project files, documents, generated artifacts, or local workspace state.

Secrets or environment access

high

Skill metadata references credentials, tokens, environment variables, or secret-bearing workflows.

High-risk permission hints: Secrets or environment access
Quality score needs review

Back to skill Alternatives Audit badge SVG

Compare nearby options

Related skills to audit next

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

33K stars · Audit report

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

29K stars · Audit report

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

16K stars · Audit report