BB → stable

Skills Audit (skills-audit)

Name: Skills Audit skill trust rating BB
Item: Skills Audit
Rating: BB
Author: Agent Economy Report

Trend stable: 41 downloads in the last 7 days vs 44 in the 7 before (-7%). The trend is not the direction of the rating.

below the trust line (BBB): unproven adoption, young, or flagged instructions.

Security audit + append-only logging + monitoring for OpenClaw skills (file-level diff, baseline approval, SHA-256 integrity).

Signals

Downloads	1,000 (7d: +41)
Installs · stars · versions	25 · 1 · 18
Track record	99 days in the registry
Author	ucloud-sec
Requires	none declared
Instructions read	yes: payees, wallets and shell patterns extracted from SKILL.md

Flags

PIPE_SHELL: instructs the agent to pipe a download straight into a shell

Who it pays (x402 counterparties found in its instructions)

service	service rating	wallet
No payee found in its instructions.

Install

openclaw skills install @ucloud-sec/skills-audit · registry page

For agents

Free JSON: https://agenteconomy.report/k/skills-audit.json · badge: https://agenteconomy.report/k/skills-audit.svg · paid record via x402: GET https://agenteconomy.report/api/skill/skills-audit (US$ 0.005). Check any skill before installing it with the x402-trust-check skill.

Code audit

No independent code audit of this skill yet. Commission one (US$ 29 per version; the result is published whatever it says).

How this is computed

Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-10-05.