BB → stable

skill-security-checker (skill-security-checker)

Name: skill-security-checker skill trust rating BB
Item: skill-security-checker
Rating: BB
Author: Agent Economy Report

Trend stable: 29 downloads in the last 7 days vs 42 in the 7 before (-31%). The trend is not the direction of the rating.

below the trust line (BBB): unproven adoption, young, or flagged instructions.

Skill Security: 安全审计扫描器，审一下这个 skill、装之前帮我查查、这个 skill 安全吗？一键快扫 30 秒出三档裁定（✅干净/⚠️可疑/🚫恶意）+ Top3 风险 + 一句话理由；全量模式覆盖轻量 SAST 污点追踪（Python AST + JS 词法近似，source→sink 证据链降误报）、规则引擎（YAML 规则包热插拔扩展）、社区规则（schema 校验 + 来源记录 + 签名验证）、提示注入 ML 语义检测（ONNX + 正则降级）、系统级行为捕获（eBPF Linux / ETW Windows）、动态沙箱执行扫描、供应链风险分析、OSV.dev 离线

Signals

Downloads	1,343 (7d: +29)
Installs · stars · versions	1 · 0 · 10
Track record	115 days in the registry
Author	fyniujin
Requires	none declared
Instructions read	yes: payees, wallets and shell patterns extracted from SKILL.md

Flags

OBFUSCATED: contains encoded blobs or eval-style execution

Who it pays (x402 counterparties found in its instructions)

service	service rating	wallet
No payee found in its instructions.

Install

openclaw skills install @fyniujin/skill-security-checker · registry page

For agents

Free JSON: https://agenteconomy.report/k/skill-security-checker.json · badge: https://agenteconomy.report/k/skill-security-checker.svg · paid record via x402: GET https://agenteconomy.report/api/skill/skill-security-checker (US$ 0.005). Check any skill before installing it with the x402-trust-check skill.

Code audit

No independent code audit of this skill. Audits are not sold and none is made since 4 November 2026: the published ones are a closed archive of 150 skills read in September 2026 (policy); the list is at /k/audited.

How this is computed

Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-11-05.