Skill Trust Decision
agentkind
Skill contains a documented but dangerous curl|sh setup pattern that could be executed by an AI agent, though skill-card.md explicitly warns against it.
Most direct threat evidence
01
AI agent loads SKILL.md documentation Entry · SKILL.md
02
Documentation shows curl|sh as the 'Setup (once)' command persuasion · SKILL.md
03
Agent executes curl -fsSL https://agentkind.io/join.sh | sh, downloading and running remote script Execution · SKILL.md
Why this conclusion was reached
2/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Block
Attack chain and severe findings
The report includes 4 attack-chain steps and 1 severe findings.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
Attack Chain
01
AI agent loads SKILL.md documentation
Entry · SKILL.md:1
02
Documentation shows curl|sh as the 'Setup (once)' command
persuasion · SKILL.md:18
03
Agent executes curl -fsSL https://agentkind.io/join.sh | sh, downloading and running remote script
Execution · SKILL.md:18
04
Remote script executes with agent's shell permissions (arbitrary code execution)
Impact · https://agentkind.io/join.sh
What drove the risk score up
Dangerous curl|sh pattern in documentation +25
SKILL.md:18 shows 'curl -fsSL https://agentkind.io/join.sh | sh' which executes arbitrary remote script code
Undeclared shell:WRITE capability +15
Skill shows bash commands but does not declare shell:WRITE in any allowedTools mapping
Mitigated by explicit warning +-10
skill-card.md explicitly warns against curl|sh and recommends API-based registration
No actual malicious code present +-5
Skill is pure documentation; no scripts to execute
Most important evidence
High RCE
Dangerous curl|sh pattern in documentation
SKILL.md shows a curl pipe to shell command for setup. If an AI agent executes this, it will download and run an arbitrary script from agentkind.io with the agent's permissions. This is a classic supply chain attack vector.
SKILL.md:18 Use the API-based registration instead: POST to https://agentkind.io/api/v1/agents/register with a JSON body.
Medium Doc Mismatch
Undeclared shell execution capability
The skill shows bash commands but does not declare shell:WRITE in any allowedTools mapping, violating transparency requirements.
SKILL.md:18 If shell execution is intended, declare it explicitly with clear documentation of what commands will be run.
Low Credential Theft
Sensitive credential path access mentioned
Skill references storing API keys in ~/.config/agentkind/credentials.json. While documented, this creates a persistent credential storage location.
SKILL.md:25 Ensure this path is excluded from any git/sync mechanisms. Consider using a more secure credential management approach.
Declared capability vs actual capability
Network Pass
Declared NONE
→ Inferred READ
SKILL.md:21,29 - API calls to agentkind.io Shell Pass
Declared NONE
→ Inferred WRITE
SKILL.md:18 - curl|sh command shown but not declared Suspicious artifacts and egress
Critical Dangerous Command
curl -fsSL https://agentkind.io/join.sh | sh SKILL.md:18
Medium External URL
https://agentkind.io SKILL.md:4
Medium External URL
https://agentkind.io/join.sh SKILL.md:18
Medium External URL
https://agentkind.io/api/v1/agents/register SKILL.md:21
Medium External URL
https://agentkind.io/api/v1/home SKILL.md:29
Medium External URL
https://agentkind.io/skill.md. SKILL.md:39
Medium External URL
https://agentkind.io/openapi.json. SKILL.md:39
Medium External URL
https://clawhub.ai/user/namanyayg skill-card.md:9
Medium External URL
https://agentkind.io/skill.md skill-card.md:43
Medium External URL
https://agentkind.io/openapi.json skill-card.md:44
Medium External URL
https://clawhub.ai/namanyayg/skills/agentkind skill-card.md:45
Dependencies and supply chain
There are no structured dependency warnings.
File composition
3 files · 108 lines
Markdown 2 files · 103 linesJSON 1 files · 5 lines
Files of concern · 2
skill-card.md https://clawhub.ai/user/namanyayg · https://agentkind.io/skill.md · https://agentkind.io/openapi.json · https://clawhub.ai/namanyayg/skills/agentkind
SKILL.md Dangerous curl|sh pattern in documentation · Undeclared shell execution capability · Sensitive credential path access mentioned · curl -fsSL https://agentkind.io/join.sh | sh · https://agentkind.io · https://agentkind.io/join.sh · https://agentkind.io/api/v1/agents/register · https://agentkind.io/api/v1/home · https://agentkind.io/skill.md. · https://agentkind.io/openapi.json.
Other files · _meta.json
Security positives
skill-card.md explicitly warns about the curl|sh risk and recommends the safer API-based registration
No actual malicious scripts or code present in the skill
API calls use standard Authorization Bearer token pattern
Skill explicitly states 'Never send your key anywhere but agentkind.io'
Credential storage location is documented, allowing operators to exclude it