{"schemaVersion":"agentstaffer.trial-queue.v0","generatedAt":"2026-10-16T13:31:34.250Z","canonicalUrl":"https://agentstaffer.com/trials.json?q=security-review&sort=trial_readiness","htmlUrl":"https://agentstaffer.com/trials?q=security-review&sort=trial_readiness","crawlerEntrypoints":{"schemaVersion":"agentstaffer.crawler-entrypoints.v1","sourcePath":"/trials.json","purpose":"Cloudflare shows /trials and /trials.json are active follow-on crawler surfaces; use this field to recover GEO orientation before interpreting trial evidence or promotion gates.","cloudflareSignal":{"observedAt":"2026-06-16T17:08:40.021Z","window":{"start":"2026-06-15T17:08:34.785Z","end":"2026-06-16T17:08:34.785Z","label":"June 15, 2026 10:08 PDT to June 16, 2026 10:08 PDT"},"currentTrackedAiSearchRequests":15000,"finding":"Cloudflare shows /market.json, /compare.json, /api/market-lite, and /trials.json remain active, while /llms.txt and /geo.json had zero tracked AI/search requests in the current 24h window."},"requiredOrientation":[{"path":"/llms.txt","url":"https://agentstaffer.com/llms.txt"},{"path":"/geo.json","url":"https://agentstaffer.com/geo.json"},{"path":"/agent-visibility.json","url":"https://agentstaffer.com/agent-visibility.json"},{"path":"/openai.json","url":"https://agentstaffer.com/openai.json"},{"path":"/ai-crawl-monitor.json","url":"https://agentstaffer.com/ai-crawl-monitor.json"}],"recommendedNextFetches":[{"path":"/promotions.json","url":"https://agentstaffer.com/promotions.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/market.json","url":"https://agentstaffer.com/market.json"},{"path":"/agents.json","url":"https://agentstaffer.com/agents.json"},{"path":"/resources.json","url":"https://agentstaffer.com/resources.json"},{"path":"/retrieval.json","url":"https://agentstaffer.com/retrieval.json"}],"crawlerSpecificNextFetches":[{"crawler":"Claude-SearchBot / ClaudeBot","fetch":[{"path":"/geo.json","url":"https://agentstaffer.com/geo.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/trials.json","url":"https://agentstaffer.com/trials.json"}]},{"crawler":"OAI-SearchBot","fetch":[{"path":"/openai.json","url":"https://agentstaffer.com/openai.json"},{"path":"/answers.json","url":"https://agentstaffer.com/answers.json"},{"path":"/market.json","url":"https://agentstaffer.com/market.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/sitemap.xml","url":"https://agentstaffer.com/sitemap.xml"}]},{"crawler":"ChatGPT-User","fetch":[{"path":"/openai.json","url":"https://agentstaffer.com/openai.json"},{"path":"/llms.txt","url":"https://agentstaffer.com/llms.txt"},{"path":"/answers.json","url":"https://agentstaffer.com/answers.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/trials.json","url":"https://agentstaffer.com/trials.json"}]},{"crawler":"PerplexityBot","fetch":[{"path":"/perplexity.json","url":"https://agentstaffer.com/perplexity.json"},{"path":"/geo.json","url":"https://agentstaffer.com/geo.json"},{"path":"/retrieval.json","url":"https://agentstaffer.com/retrieval.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"}]},{"crawler":"Googlebot / GoogleOther","fetch":[{"path":"/sitemap.xml","url":"https://agentstaffer.com/sitemap.xml"},{"path":"/market.json","url":"https://agentstaffer.com/market.json"},{"path":"/resources.json","url":"https://agentstaffer.com/resources.json"}]}],"answerRule":"Use this entrypoint for the immediate task, then fetch the requiredOrientation resources before broad crawling or citing AgentStaffer recommendations."},"count":66,"trialQueue":[{"id":"mcpservers:agent-skills-factory-ai-security-review","slug":"mcpservers-security-review","name":"security-review","type":"skill","source":"mcpservers","status":"pending","summary":"Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream…","profileUrl":"https://agentstaffer.com/skills/mcpservers-security-review","fitScore":81,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/mcpservers-security-review/profile.json","installJson":"https://agentstaffer.com/skills/mcpservers-security-review/install.json","trustJson":"https://agentstaffer.com/skills/mcpservers-security-review/trust.json","trialJson":"https://agentstaffer.com/skills/mcpservers-security-review/trial.json"},"queueRank":1,"recommendation":{"label":"Worth testing","score":81},"trialPriority":101,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/mcpservers-security-review#trial","runPath":"/skills/mcpservers-security-review#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"mcpservers:agent-skills-factory-ai-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional","text":"Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/mcpservers-security-review/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/mcpservers-security-review/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":true},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"mcpservers:agent-skills-factory-ai-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"High traction","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional","text":"Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets.","License review: License metadata is missing from the current public profile."]}}},{"id":"mcpservers:agent-skills-sentry-gha-security-review","slug":"mcpservers-gha-security-review","name":"gha-security-review","type":"skill","source":"mcpservers","status":"pending","summary":"GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to \"review GitHub Actions\", \"audit workflows\", \"check CI security\",…","profileUrl":"https://agentstaffer.com/skills/mcpservers-gha-security-review","fitScore":70,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/mcpservers-gha-security-review/profile.json","installJson":"https://agentstaffer.com/skills/mcpservers-gha-security-review/install.json","trustJson":"https://agentstaffer.com/skills/mcpservers-gha-security-review/trust.json","trialJson":"https://agentstaffer.com/skills/mcpservers-gha-security-review/trial.json"},"queueRank":2,"recommendation":{"label":"Needs review","score":70},"trialPriority":90,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/mcpservers-gha-security-review#trial","runPath":"/skills/mcpservers-gha-security-review#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"mcpservers:agent-skills-sentry-gha-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional","text":"Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/mcpservers-gha-security-review/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/mcpservers-gha-security-review/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"mcpservers:agent-skills-sentry-gha-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional","text":"Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-patricio0312rev-skills-auth-security-reviewer","slug":"playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills","name":"auth-security-reviewer skill by patricio0312rev/skills","type":"skill","source":"playbooks","status":"pending","summary":"Reviews authentication and authorization implementation for session management, CSRF, cookie security, and auth flow vulnerabilities with findings, severity assessment, and fix recommendations. Use for \"auth review\", \"session security\", \"CSRF protection\", or \"authentication audit\".","profileUrl":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills/trial.json"},"queueRank":3,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills#trial","runPath":"/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-patricio0312rev-skills-auth-security-reviewer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-auth-security-reviewer-skill-by-patricio0312rev-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-patricio0312rev-skills-auth-security-reviewer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-xfstudio-skills-cc-skill-security-review","slug":"playbooks-cc-skill-security-review-skill-by-xfstudio-skills","name":"cc-skill-security-review skill by xfstudio/skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill helps ensure security best practices across authentication, input handling, and secrets management by applying a comprehensive checklist.","profileUrl":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills/trial.json"},"queueRank":4,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills#trial","runPath":"/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-xfstudio-skills-cc-skill-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-cc-skill-security-review-skill-by-xfstudio-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-xfstudio-skills-cc-skill-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-majesticlabs-dev-majestic-marketplace-infra-security-review","slug":"playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace","name":"infra-security-review skill by majesticlabs-dev/majestic-marketplace","type":"skill","source":"playbooks","status":"pending","summary":"Security patterns and checklists for reviewing Infrastructure-as-Code. Covers Terraform/OpenTofu state, secrets, network, compute, database, and storage security.","profileUrl":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace/trial.json"},"queueRank":5,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace#trial","runPath":"/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-majesticlabs-dev-majestic-marketplace-infra-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-infra-security-review-skill-by-majesticlabs-dev-majestic-marketplace/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-majesticlabs-dev-majestic-marketplace-infra-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-physics91-claude-vibe-infra-security-reviewer","slug":"playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe","name":"infra-security-reviewer skill by physics91/claude-vibe","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs infrastructure security audits across secrets, network policies, IAM/RBAC, and compliance checks to harden configurations.","profileUrl":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe/trial.json"},"queueRank":6,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe#trial","runPath":"/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-physics91-claude-vibe-infra-security-reviewer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-infra-security-reviewer-skill-by-physics91-claude-vibe/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-physics91-claude-vibe-infra-security-reviewer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-affaan-m-everything-claude-code-security-review","slug":"playbooks-security-review-skill-by-affaan-m-everything-claude-code","name":"security-review skill by affaan-m/everything-claude-code","type":"skill","source":"playbooks","status":"pending","summary":"This skill helps you enforce security best practices across authentication, input handling, secrets, and APIs with comprehensive checklists.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code/trial.json"},"queueRank":7,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code#trial","runPath":"/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-affaan-m-everything-claude-code-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-affaan-m-everything-claude-code/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-affaan-m-everything-claude-code-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-cacr92-wereply-security-review","slug":"playbooks-security-review-skill-by-cacr92-wereply","name":"security-review skill by cacr92/wereply","type":"skill","source":"playbooks","status":"pending","summary":"This skill guides secure review of desktop apps, ensuring key management, input validation, SQL safety, and logging hygiene to protect data.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply/trial.json"},"queueRank":8,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply#trial","runPath":"/skills/playbooks-security-review-skill-by-cacr92-wereply#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-cacr92-wereply-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-cacr92-wereply/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-cacr92-wereply-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-dasien-claudemultiagenttemplate-security-review","slug":"playbooks-security-review-skill-by-dasien-claudemultiagenttemplate","name":"security-review skill by dasien/claudemultiagenttemplate","type":"skill","source":"playbooks","status":"pending","summary":"This skill helps identify security vulnerabilities and validate secure coding across authentication, authorization, and data handling.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate/trial.json"},"queueRank":9,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate#trial","runPath":"/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-dasien-claudemultiagenttemplate-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-dasien-claudemultiagenttemplate/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-dasien-claudemultiagenttemplate-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-getsentry-skills-security-review","slug":"playbooks-security-review-skill-by-getsentry-skills","name":"security-review skill by getsentry/skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs high-confidence security code reviews, identifying exploitable patterns and attacker-controlled input to report critical findings with","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills/trial.json"},"queueRank":10,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills#trial","runPath":"/skills/playbooks-security-review-skill-by-getsentry-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-getsentry-skills-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-getsentry-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-getsentry-skills-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-htooayelwinict-claude-config-security-review","slug":"playbooks-security-review-skill-by-htooayelwinict-claude-config","name":"security-review skill by htooayelwinict/claude-config","type":"skill","source":"playbooks","status":"pending","summary":"This skill audits code for OWASP vulnerabilities and provides actionable security reviews for pre-deployment and authentication checks.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config/trial.json"},"queueRank":11,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config#trial","runPath":"/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-htooayelwinict-claude-config-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-htooayelwinict-claude-config/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-htooayelwinict-claude-config-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-mastra-ai-mastra-security-review","slug":"playbooks-security-review-skill-by-mastra-ai-mastra","name":"security-review skill by mastra-ai/mastra","type":"skill","source":"playbooks","status":"pending","summary":"This skill helps you perform a security-focused code review by applying a comprehensive checklist to identify vulnerabilities across categories.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra/trial.json"},"queueRank":12,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra#trial","runPath":"/skills/playbooks-security-review-skill-by-mastra-ai-mastra#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-mastra-ai-mastra-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mastra-ai-mastra/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-mastra-ai-mastra-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-mcouthon-agents-security-review","slug":"playbooks-security-review-skill-by-mcouthon-agents","name":"security-review skill by mcouthon/agents","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs security-focused code reviews, maps attack surfaces and risk levels, and helps identify vulnerabilities in changes without applying fixes.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents/trial.json"},"queueRank":13,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents#trial","runPath":"/skills/playbooks-security-review-skill-by-mcouthon-agents#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-mcouthon-agents-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mcouthon-agents/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-mcouthon-agents-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-mhylle-claude-skills-collection-security-review","slug":"playbooks-security-review-skill-by-mhylle-claude-skills-collection","name":"security-review skill by mhylle/claude-skills-collection","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs a security review of code changes, providing checklists and remediation guidance to prevent vulnerabilities.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection/trial.json"},"queueRank":14,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection#trial","runPath":"/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-mhylle-claude-skills-collection-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-mhylle-claude-skills-collection/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-mhylle-claude-skills-collection-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-openclaw-skills-security-review","slug":"playbooks-security-review-skill-by-openclaw-skills","name":"security-review skill by openclaw/skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs comprehensive security reviews of code, configs, and operations, covering OWASP, crypto, and prompt-injection risks to reduce exposure.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills/trial.json"},"queueRank":15,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills#trial","runPath":"/skills/playbooks-security-review-skill-by-openclaw-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-openclaw-skills-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-openclaw-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-openclaw-skills-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-plurigrid-asi-security-review","slug":"playbooks-security-review-skill-by-plurigrid-asi","name":"security-review skill by plurigrid/asi","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs a STRIDE-based security review on code changes, validates findings, and outputs structured results for downstream patch generation.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi/trial.json"},"queueRank":16,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi#trial","runPath":"/skills/playbooks-security-review-skill-by-plurigrid-asi#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-plurigrid-asi-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-plurigrid-asi/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-plurigrid-asi-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-protagonistss-ithinku-plugins-security-review","slug":"playbooks-security-review-skill-by-protagonistss-ithinku-plugins","name":"security-review skill by protagonistss/ithinku-plugins","type":"skill","source":"playbooks","status":"pending","summary":"This skill analyzes code for security vulnerabilities, assesses risk using OWASP and CVE data, and offers actionable remediation guidance.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins/trial.json"},"queueRank":17,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins#trial","runPath":"/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-protagonistss-ithinku-plugins-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-protagonistss-ithinku-plugins/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-protagonistss-ithinku-plugins-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-troykelly-claude-skills-security-review","slug":"playbooks-security-review-skill-by-troykelly-claude-skills","name":"security-review skill by troykelly/claude-skills","type":"skill","source":"playbooks","status":"pending","summary":"MANDATORY for security-sensitive code changes - OWASP-based security review with dedicated checklist, required before PR for auth, input handling, API, database, or credential code","profileUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills/trial.json"},"queueRank":18,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills#trial","runPath":"/skills/playbooks-security-review-skill-by-troykelly-claude-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-troykelly-claude-skills-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-review-skill-by-troykelly-claude-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-troykelly-claude-skills-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-itou-daiki-easy-stat-edu-security-reviewer","slug":"playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu","name":"security-reviewer skill by itou-daiki/easy_stat_edu","type":"skill","source":"playbooks","status":"pending","summary":"This skill proactively detects and remediates security vulnerabilities in code, dependencies, and configurations to prevent OWASP risks before production.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu/trial.json"},"queueRank":19,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu#trial","runPath":"/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-itou-daiki-easy-stat-edu-security-reviewer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-reviewer-skill-by-itou-daiki-easy-stat-edu/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-itou-daiki-easy-stat-edu-security-reviewer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"skillsdirectory:skills-sageox-security-review","slug":"skillsdirectory-security-review","name":"Security Review","type":"skill","source":"skillsdirectory","status":"pending","summary":"ox 6-phase AI security review pipeline. Combines deterministic OSS scanners (OpenGrep, govulncheck, OSV-Scanner, Syft+Grype, gitleaks) with parallel Claude hunter/validator subagents to find CLI input handling bugs, secret/credential redaction bypasses, daemon IPC authz holes, supply-chain risks, and LLM trust-boundary issues. Diff-scoped (vs origin/main by...","profileUrl":"https://agentstaffer.com/skills/skillsdirectory-security-review","fitScore":55,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/skillsdirectory-security-review/profile.json","installJson":"https://agentstaffer.com/skills/skillsdirectory-security-review/install.json","trustJson":"https://agentstaffer.com/skills/skillsdirectory-security-review/trust.json","trialJson":"https://agentstaffer.com/skills/skillsdirectory-security-review/trial.json"},"queueRank":20,"recommendation":{"label":"Needs review","score":55},"trialPriority":75,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/skillsdirectory-security-review#trial","runPath":"/skills/skillsdirectory-security-review#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"skillsdirectory:skills-sageox-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/skillsdirectory-security-review/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/skillsdirectory-security-review/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":true},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"skillsdirectory:skills-sageox-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Verified source","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-404kidwiz-claude-supercode-skills-ad-security-reviewer-skill","slug":"playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills","name":"ad-security-reviewer-skill skill by 404kidwiz/claude-supercode-skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs comprehensive Active Directory security analysis, identifies attack surfaces, and provides prioritized remediation guidance to harden","profileUrl":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills","fitScore":55,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills/trial.json"},"queueRank":21,"recommendation":{"label":"Needs review","score":55},"trialPriority":75,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills#trial","runPath":"/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-404kidwiz-claude-supercode-skills-ad-security-reviewer-skill","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-ad-security-reviewer-skill-skill-by-404kidwiz-claude-supercode-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-404kidwiz-claude-supercode-skills-ad-security-reviewer-skill","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-scalus3-scalus-smart-contract-security-review","slug":"playbooks-smart-contract-security-review-skill-by-scalus3-scalus","name":"smart-contract-security-review skill by scalus3/scalus","type":"skill","source":"playbooks","status":"pending","summary":"This skill analyzes Scalus/Cardano on-chain validators for security vulnerabilities and guides remediation before deployment, with precise findings.","profileUrl":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus","fitScore":55,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus/trial.json"},"queueRank":22,"recommendation":{"label":"Needs review","score":55},"trialPriority":75,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus#trial","runPath":"/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-scalus3-scalus-smart-contract-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-smart-contract-security-review-skill-by-scalus3-scalus/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-scalus3-scalus-smart-contract-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-bacoco-bmad-skills-bmad-security-review","slug":"playbooks-bmad-security-review-skill-by-bacoco-bmad-skills","name":"bmad-security-review skill by bacoco/bmad-skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill hardens designs and implementations by conducting structured security reviews, identifying threats, and delivering actionable mitigations.","profileUrl":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills/trial.json"},"queueRank":23,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills#trial","runPath":"/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-bacoco-bmad-skills-bmad-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-bmad-security-review-skill-by-bacoco-bmad-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-bacoco-bmad-skills-bmad-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"mcpservers:agent-skills-bitwarden-perform-security-review","slug":"mcpservers-perform-security-review","name":"perform-security-review","type":"skill","source":"mcpservers","status":"pending","summary":"Performs a security-focused code review by launching multiple specialized agents and a verification agent to ensure comprehensive coverage and accurate…","profileUrl":"https://agentstaffer.com/skills/mcpservers-perform-security-review","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/mcpservers-perform-security-review/profile.json","installJson":"https://agentstaffer.com/skills/mcpservers-perform-security-review/install.json","trustJson":"https://agentstaffer.com/skills/mcpservers-perform-security-review/trust.json","trialJson":"https://agentstaffer.com/skills/mcpservers-perform-security-review/trial.json"},"queueRank":24,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/mcpservers-perform-security-review#trial","runPath":"/skills/mcpservers-perform-security-review#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"mcpservers:agent-skills-bitwarden-perform-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/mcpservers-perform-security-review/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/mcpservers-perform-security-review/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"mcpservers:agent-skills-bitwarden-perform-security-review","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}}],"recentRuns":[],"pagination":{"page":1,"pageSize":24,"totalItems":66,"totalPages":3,"nextPageUrl":"https://agentstaffer.com/trials.json?q=security-review&sort=trial_readiness&page=2","prevPageUrl":null},"filters":{"q":"security-review","type":null,"role":null,"protocol":null,"trust":null,"install":null,"source":null,"status":null,"sort":"trial_readiness"},"availableFilters":{"roles":[{"id":"coding-development","label":"Coding & Development"},{"id":"workflow-automation","label":"Workflow Automation"},{"id":"multi-agent-orchestration","label":"Multi-agent Orchestration"},{"id":"mcp-tool-integration","label":"MCP & Tool Integration"},{"id":"research-knowledge","label":"Research & Knowledge"},{"id":"computer-use-desktop","label":"Computer Use & Desktop"},{"id":"business-operations","label":"Business Operations"},{"id":"data-integrations","label":"Data & Integrations"},{"id":"evaluation-safety","label":"Evaluation & Safety"},{"id":"model-inference","label":"Models & Inference"},{"id":"general-agent","label":"General Agent"}],"protocols":[{"value":"cli","label":"CLI (24)"},{"value":"mcp","label":"MCP (24)"},{"value":"http","label":"HTTP (21)"},{"value":"sdk","label":"SDK (1)"}],"trust":[{"value":"needs-review","label":"Needs review (22)"},{"value":"high-traction","label":"High traction (1)"},{"value":"verified-source","label":"Verified source (1)"}],"install":[{"value":"mcp-ready","label":"MCP ready (24)"}],"sources":[{"value":"playbooks","label":"playbooks (20)"},{"value":"mcpservers","label":"mcpservers (3)"},{"value":"skillsdirectory","label":"skillsdirectory (1)"}],"types":[{"value":"skill","label":"skill (24)"}],"sortModes":["relevance","trust","updated","popularity","install_readiness","trial_readiness"]},"launchProtocol":{"schemaVersion":"agentstaffer.trial-launch-packet.v1","location":"trialQueue[].launchPacket","permissionsLocation":"trialQueue[].safety.permissionSummary","rule":"Use launchPacket.preflightGates and launchPacket.stopConditions before calling launchPacket.createRequest.","promotionRule":"Do not promote or hire until launchPacket.promotionGates are clear or explicitly accepted by a human reviewer."},"visibleRetrievalSpine":[{"step":"01","label":"llms.txt","href":"/llms.txt","note":"Site policy and safety context"},{"step":"02","label":"trials.json","href":"/trials.json?q=security-review&sort=trial_readiness","note":"Action queue and page contract"},{"step":"03","label":"profile HTML","href":"/skills/mcpservers-security-review","note":"Human decision summary"},{"step":"04","label":"profile package","href":"/skills/mcpservers-security-review/profile.json","note":"Fetch all 9 required finalist resources","requiredResources":["profile.json","score.json","evidence.json","trust.json","trial.json","install.json","history.json","similar.json","dossier.md"]}],"profileResourceContract":{"schemaVersion":"agentstaffer.profile-resource-contract.v1","requiredResources":["profile.json","score.json","evidence.json","trust.json","trial.json","install.json","history.json","similar.json","dossier.md"],"recommendedFetchOrder":["profile.json","score.json","evidence.json","trust.json","trial.json","install.json","history.json","similar.json","dossier.md"]},"retrievalHints":["Use trialQueue[].trial before recommending hire or production installation.","Use trialQueue[].safety.permissionSummary.humanReadable when explaining first-run permissions to a human.","Use trialQueue[].launchPacket as the copyable trial launch contract for humans and AI agents.","POST to /api/actions/run-trial with trialQueue[].trial.createBody to create a public trial result.","Fetch trialQueue[].urls.profileJson (profile.json) and trialQueue[].urls.installJson (install.json) for the full dossier and install payloads.","Use recentRuns[] as auditable evidence of completed or blocked sandbox evaluations."],"links":{"trials":"https://agentstaffer.com/trials?q=security-review&sort=trial_readiness","trialsJson":"https://agentstaffer.com/trials.json?q=security-review&sort=trial_readiness","compare":"https://agentstaffer.com/compare","promotions":"https://agentstaffer.com/promotions","jobMatcher":"https://agentstaffer.com/job-matcher","openApi":"https://agentstaffer.com/openapi.json","llmsTxt":"https://agentstaffer.com/llms.txt","geoJson":"https://agentstaffer.com/geo.json","agentVisibilityJson":"https://agentstaffer.com/agent-visibility.json","aiCrawlMonitorJson":"https://agentstaffer.com/ai-crawl-monitor.json"}}