Scan Report
5 /100
s2-soul-anchor
Deterministic identity anchor that generates S2-DID using SHA-256 hash of agent name
The S2-Soul-Anchor skill is a straightforward, deterministic identity generator that performs exactly as documented with no hidden functionality.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file I/O operations in skill.py |
| Network | NONE | NONE | — | No network calls in skill.py |
| Shell | NONE | NONE | — | No subprocess or shell execution |
| Environment | NONE | NONE | — | No os.environ access |
| Skill Invoke | NONE | NONE | — | No cross-skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser automation |
| Database | NONE | NONE | — | No database operations |
1 findings
Medium External URL 外部 URL
https://space2.world SKILL.md:15 File Tree
3 files · 3.1 KB · 68 lines Python 1f · 45L
Markdown 1f · 14L
JSON 1f · 9L
├─
manifest.json
JSON
├─
SKILL.md
Markdown
└─
skill.py
Python
Security Positives
✓ Skill behavior matches documentation exactly - no doc-to-code mismatch
✓ No network calls - 100% local computation as claimed
✓ No file system writes - outputs to console only (HITL) as documented
✓ Uses only standard library (hashlib) - no third-party dependencies
✓ No credential access or environment variable reading
✓ No shell execution or subprocess usage
✓ No obfuscation or encoded payloads
✓ Pure deterministic SHA-256 hashing for identity generation