Skill Detail

Skill Installer v3.0

This skill installer validates, registers, and verifies new skills within the ecosystem.

GitHub:sickn33/antigravity-awesome-skills skill-installer
version dbb1b0f1a5e7
static analysis only
no human review yet
Needs Review

Current public label

Needs Review

Because the skill references secrets, it needs review to ensure they are handled securely.

This label is currently coming from the automated scorecard.

Automated result

Needs Review

The static analysis found references to secrets or credentials in the skill's scripts.

2 medium Final label: needs review.

Human review

No human review has been recorded yet.

The current public label is still relying on automation. A human has not weighed in yet.

What happened

Driftloom completed a static scan. It inspected the skill files, recorded findings, and generated a scorecard.

Runtime evidence

No sandbox runtime result has been recorded yet.

Driftloom currently recommends runtime testing for this version (priority 30).

What did not happen

  • Driftloom did not run this skill in an isolated sandbox yet.
  • This label is not a guarantee that the skill is safe, bug-free, or appropriate for every environment.
  • A good score does not replace human judgment when a skill touches secrets, shell access, or external systems.

Source provenance

Source: Workspace import

Originally ingested from a local workspace copy.

Scorecard

Safety
70
Quality
100
Transparency
100
Operational
92
Maintenance
70

2 medium Final label: needs review.

Severity mix: 2 medium

What Driftloom checked

  • Read the skill files and metadata to understand what the skill claims to do.
  • Looked for shell commands and risky command patterns, even if none stood out strongly.
  • Looked for external URLs and network behavior.
  • Looked for secret, token, password, and credential references.
  • Checked whether the skill structure and references looked internally consistent.

Findings

Secret or credential reference detected
secret.reference · safety
Medium

The source references credentials or secret material in executable or configuration context.

File: scripts/package_skill.py
Evidence: token
Secret or credential reference detected
secret.reference · safety
Medium

The source references credentials or secret material in executable or configuration context.

File: scripts/validate_skill.py
Evidence: secret