Agent Economy ReportAgent Economy ReportSAFE version 1.0.2 · audited 2026-09-17
This package is an instruction-only skill for searching public Discord discussions indexed by Answer Overflow. It tells the agent to use web_search and web_fetch against www.answeroverflow.com and documents related website, documentation, Discord, and MCP endpoints. It does not contain executable payloads, install scripts, credential access, payment instructions, persistence, or file writes. The main caution is that it retrieves third-party Discord content, which may be informal, outdated, or adversarial. The observed behavior matches the declared purpose.
| Declared purpose | Search indexed Discord community discussions via Answer Overflow. Find solutions to coding problems, library issues, and community Q&A that only exist in Discord conversations. |
| Observed behavior | The skill gives examples of web_search queries restricted to site:answeroverflow.com and web_fetch calls to retrieve markdown from www.answeroverflow.com threads. It documents the Answer Overflow MCP server and links to website, docs, and Discord. It does not request credentials or perform file writes or persistence. |
| Verdict, rules only | SAFE |
| Verdict, AI | SAFE |
| Final verdict | SAFE (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| network | needed | Uses web_search and web_fetch against www.answeroverflow.com, docs.answeroverflow.com, discord.answeroverflow.com, and references clawhub.ai; also mentions the Answer Overflow MCP endpoint. |
| shell | needed | Uses bash code fences around web_search and web_fetch examples; no standalone shell script or exec call is present. |
| severity | finding |
|---|---|
| info | Declared purpose This matches the documented search and fetch behavior. SKILL.md:3 description: Search indexed Discord community discussions via Answer Overflow. Find solutions to coding problems, library issues, and community Q&A that only ex |
| info | web_search instruction Directs the agent to use web_search for Answer Overflow content. SKILL.md:16 Use web_search to find Answer Overflow results: |
| low | Shell-style examples Code examples are wrapped in bash fences. They are search and fetch commands, not executable payloads. SKILL.md:17 ```bash |
| info | Search example Search examples are restricted with the site:answeroverflow.com operator. SKILL.md:19 web_search "site:answeroverflow.com prisma connection pooling" |
| low | Fetches third-party Discord content The skill instructs the agent to fetch thread content from Answer Overflow. This content is created by third parties and should be treated as untrusted. SKILL.md:38 web_fetch url="https://www.answeroverflow.com/m/<message-id>" |
| low | External MCP endpoint documented Describes an external MCP server; if used, it can retrieve or search Discord messages from Answer Overflow. SKILL.md:46 Answer Overflow has an MCP server at `https://www.answeroverflow.com/mcp` with these tools: |
| low | Content risk acknowledged The publisher acknowledges retrieved content may be unreliable; this supports treating fetched content as untrusted. skill-card.md:24 Risk: Public Discord discussions can contain informal, outdated, incomplete, or incorrect technical answers. |
| info | No credential or privileged access claim The skill card states no credentials or privileged access are requested; no such code was found. skill-card.md:43 **Other Properties Related to Output:** [The skill guides public Answer Overflow searches and thread fetches; it does not request credentials or privileged acce |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:9 |
| discord.answeroverflow.com | not in the service index | SKILL.md:88 |
| docs.answeroverflow.com | not in the service index | SKILL.md:86 |
| www.answeroverflow.com | not in the service index | SKILL.md:29 |
| Binaries invoked | bash |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 2 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 88 | e94a40d6b287e2cb… |
_meta.json | 6 | bb18c903c48bf98d… |
skill-card.md | 51 | c165a1d099fc0648… |
For agents
JSON: https://agenteconomy.report/k/answeroverflow.audit.json · badge: https://agenteconomy.report/k/answeroverflow.audited.svg ·
skill rating: /k/answeroverflow · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).