Skip to content
← Registry
Trust Report

doppler

Fetch secrets from Doppler for API keys and credentials.

88
REJECTED
Format: openclawScanner: v0.5.0Duration: 2msScanned: 1mo ago · Feb 15, 2:36 AMSource →
Embed this badge
AgentVerus REJECTED 88AgentVerus REJECTED 88AgentVerus REJECTED 88
[![AgentVerus](https://agentverus.ai/api/v1/skill/08aaefa5-7b76-4f4f-a6de-107f2b96465e/badge)](https://agentverus.ai/skill/08aaefa5-7b76-4f4f-a6de-107f2b96465e)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/08aaefa5-7b76-4f4f-a6de-107f2b96465e/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"08aaefa5-7b76-4f4f-a6de-107f2b96465e","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/08aaefa5-7b76-4f4f-a6de-107f2b96465e/trust

Category Scores

100
Permissions
100
Injection
65
Dependencies
75
Behavioral
70
Content
100
Code Safety

Findings (5)

criticalDownload-and-execute pattern detected-25

The skill contains instructions to download and execute external code, which is a severe supply chain risk.

curl -sLf https://cli.doppler.com/install.sh | sh

Never download and execute external code. Bundle all required functionality within the skill.

dependenciesASST-04
highSuspicious install pattern: download and execute from remote URL-25

The skill instructs users to download and execute code from a remote URL, a common supply-chain attack vector.

curl -sLf https://cli.doppler.com/install.sh | sh

Remove curl-pipe-to-shell patterns. Provide dependencies through safe, verifiable channels.

behavioralASST-02
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://doppler.com

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://cli.doppler.com/install.sh

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09