Skills
Your agent installs code. Somebody should have read it first.
An agent gains its abilities by installing add-ons from open sources nobody checks. That is a live attack surface: instructions hidden inside a tool description that hijack the agent, a price checker that quietly reads your keys, a clean first version followed by a poisoned second one. One bad add-on empties the wallet, and the agent does it to itself.
So an auditor puts money down, reads a build, is paid when the verdict stands, and loses the money when it does not. Below, every add-on carries what is actually known about it, and five of the seven states are ways of not knowing.
Curated examples. The registry answered, and it holds nothing that matches.
Curated examples shipped with the build so that this page is never blank. They are marked as examples on every card, and none of them is installable. Every record below carries an example tag and an id beginning example-. Nothing here is installable, and no author or auditor named below is a real one.
How it got here
- 1the skill registry, answered, but empty, 0 items
- 2bundled examples, answered, 4 itemsThese records are curated EXAMPLES shipped with the backend to exercise every audit status. They are not real skills, authors, or auditors, and nothing here is installable. Every example carries example: true and an id prefixed with 'example-'.
Every skill on record
Nothing matches those filters
The registry answered, and nothing in it fits. Clearing the filters shows everything it does hold, including the skills nobody has audited, which are the ones worth looking at hardest.
Seven statuses, and only one of them means safe
Colour is never the only difference between two of them: each has its own wording, its own glyph and its own border texture, so the seven stay seven in grayscale as well.
The status is worked out from the audits actually held. There is no column anywhere that a publisher, an auditor or this page could write by hand.
We checked, and it is clean1 of 7
- Passed audit
The only status that means safe. The audited digest equals the digest being served, and the evidence is held.
We checked, and it is dangerous1 of 7
- Failed audit
Knowledge, not ignorance. This build was examined and found harmful, a different thing from never having been looked at.
We do not know5 of 7
- Audit is for an older build
The rug-pull shape: a clean v1 followed by a v2 nobody checked. A verdict is bound to the digest it examined and does not travel.
- Audit inconclusive
An audit that reached no verdict has still told us something real, and it is not rounded to either clean or dangerous.
- Audit running
Work in progress is not a result. A partial pipeline clears nothing.
- Audit requested
Money put at stake is a promise about the future, not a statement about the code.
- Never audited
The default state of everything on an open registry, and the state most installs happen in today.
What makes a verdict cost something
A badge is worth exactly as much as the auditor loses by handing it out wrongly. The fee and the money at stake sit in 0x0354d2a4…ec8a52 ↗, deployed and verified on BNB Chain testnet, and the whole cycle has been run on it. These are those four transactions.
- 01An audit job was created, with the developer, the auditor and the exact build namedThe contract refuses a job whose developer and auditor are the same wallet, so nobody audits their own skill.0xa522fcb04d269a5ecc7b114bb5556faff371462e67bee4dd02f0ec2657267c22 ↗
- 02The developer funded the fee: 5 mUSD paid in and heldThe amount booked is the contract's own change in balance, not a figure its caller supplies, so a token that skims on transfer cannot pay one job out of another job's money.0x11488b8bbde7836bd80760ad2b5c130a101799aef6dd794e86b342ebb762534b ↗
- 03The auditor put 2 mUSD at stake, the money it loses if the verdict is wrongWithout money at stake an auditor risks nothing by waving a skill through, and a green badge costs nothing to hand out.0x2a867edeff55920fda798f8e0dfff4f50dc19574854d8117fdef297467108862 ↗
- 04The verdict stood, so the fee and the stake were released: 7 mUSD to the auditorReleasing is not open to everyone: only the developer or the arbiter may do it, and only the arbiter may take the stake away. The job now reads as settled, with the held balance at zero.0x338030ed89923a5bc995a1170a9aa884e63e07193a8846d1ee58a5daee520c53 ↗