Skip to content
← Registry
Trust Report

agent-republic-docs

Docs-only guide to Agent Republic. No bundled scripts, just clear workflows and HTTP examples so agents can register, manage bots, and monitor onboarding health after asking their human for approval.

58
SUSPICIOUS
Format: openclawScanner: v0.8.0Duration: 11msScanned: 7d ago · May 31, 6:43 AMSource →
Embed this badge
AgentVerus SUSPICIOUS 58AgentVerus SUSPICIOUS 58AgentVerus SUSPICIOUS 58
[![AgentVerus](https://agentverus.ai/api/v1/skill/2a0b9155-2094-4c39-945d-5da128ce02f6/badge)](https://agentverus.ai/skill/2a0b9155-2094-4c39-945d-5da128ce02f6)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/2a0b9155-2094-4c39-945d-5da128ce02f6/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"2a0b9155-2094-4c39-945d-5da128ce02f6","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/2a0b9155-2094-4c39-945d-5da128ce02f6/trust

Category Scores

59
Permissions
50
Injection
20
Dependencies
75
Behavioral
90
Content
100
Code Safety

Findings (11)

highCapability contract mismatch: inferred credential access is not declared-15

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Read `~/.config/agentrepublic/credentials.json` and parse `api_key

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-05
highCapability contract mismatch: inferred system modification is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: sudo

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCredential access detected-25

Found credential access pattern: "Read `~/.config/agentrepublic/credentials.json` and parse `api_key"

- Read `~/.config/agentrepublic/credentials.json` and parse `api_key`.

Remove references to credentials and secrets. Skills should never access sensitive authentication data.

injectionASST-05
highCredential access detected-25

Found credential access pattern: "credential file"

- Print API keys or full credential file contents into chat or logs.

Remove references to credentials and secrets. Skills should never access sensitive authentication data.

injectionASST-05
highPotential data exfiltration: skill reads credentials and sends them to external endpoints-25

The skill contains patterns that actively read credential files and send data to external endpoints, suggesting a possible data exfiltration flow.

Active credential reading and suspicious network exfiltration patterns both present

Separate credential access from network operations. If both are needed, declare them explicitly and justify.

behavioralASST-06
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: create a local credentials file

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://agentrepublic.net

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumMany external URLs referenced (10)-8

The skill references 10 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://agentrepublic.net`, https://agentrepublic.net/api/v1`, https://agentrepublic.net/api/v1, https://agentrepublic.net/api/v1/agents/register, https://agentrepublic.net/claim/...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://agentrepublic.net`

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://agentrepublic.net/claim/

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

Keep these safety boundaries. They improve trust.

contentASST-09