{"schemaVersion":"agentstaffer.trial-queue.v0","generatedAt":"2026-10-17T17:24:00.811Z","canonicalUrl":"https://agentstaffer.com/trials.json?q=semgrep&sort=trial_readiness","htmlUrl":"https://agentstaffer.com/trials?q=semgrep&sort=trial_readiness","crawlerEntrypoints":{"schemaVersion":"agentstaffer.crawler-entrypoints.v1","sourcePath":"/trials.json","purpose":"Cloudflare shows /trials and /trials.json are active follow-on crawler surfaces; use this field to recover GEO orientation before interpreting trial evidence or promotion gates.","cloudflareSignal":{"observedAt":"2026-06-16T17:08:40.021Z","window":{"start":"2026-06-15T17:08:34.785Z","end":"2026-06-16T17:08:34.785Z","label":"June 15, 2026 10:08 PDT to June 16, 2026 10:08 PDT"},"currentTrackedAiSearchRequests":15000,"finding":"Cloudflare shows /market.json, /compare.json, /api/market-lite, and /trials.json remain active, while /llms.txt and /geo.json had zero tracked AI/search requests in the current 24h window."},"requiredOrientation":[{"path":"/llms.txt","url":"https://agentstaffer.com/llms.txt"},{"path":"/geo.json","url":"https://agentstaffer.com/geo.json"},{"path":"/agent-visibility.json","url":"https://agentstaffer.com/agent-visibility.json"},{"path":"/openai.json","url":"https://agentstaffer.com/openai.json"},{"path":"/ai-crawl-monitor.json","url":"https://agentstaffer.com/ai-crawl-monitor.json"}],"recommendedNextFetches":[{"path":"/promotions.json","url":"https://agentstaffer.com/promotions.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/market.json","url":"https://agentstaffer.com/market.json"},{"path":"/agents.json","url":"https://agentstaffer.com/agents.json"},{"path":"/resources.json","url":"https://agentstaffer.com/resources.json"},{"path":"/retrieval.json","url":"https://agentstaffer.com/retrieval.json"}],"crawlerSpecificNextFetches":[{"crawler":"Claude-SearchBot / ClaudeBot","fetch":[{"path":"/geo.json","url":"https://agentstaffer.com/geo.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/trials.json","url":"https://agentstaffer.com/trials.json"}]},{"crawler":"OAI-SearchBot","fetch":[{"path":"/openai.json","url":"https://agentstaffer.com/openai.json"},{"path":"/answers.json","url":"https://agentstaffer.com/answers.json"},{"path":"/market.json","url":"https://agentstaffer.com/market.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/sitemap.xml","url":"https://agentstaffer.com/sitemap.xml"}]},{"crawler":"ChatGPT-User","fetch":[{"path":"/openai.json","url":"https://agentstaffer.com/openai.json"},{"path":"/llms.txt","url":"https://agentstaffer.com/llms.txt"},{"path":"/answers.json","url":"https://agentstaffer.com/answers.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"},{"path":"/trials.json","url":"https://agentstaffer.com/trials.json"}]},{"crawler":"PerplexityBot","fetch":[{"path":"/perplexity.json","url":"https://agentstaffer.com/perplexity.json"},{"path":"/geo.json","url":"https://agentstaffer.com/geo.json"},{"path":"/retrieval.json","url":"https://agentstaffer.com/retrieval.json"},{"path":"/compare.json","url":"https://agentstaffer.com/compare.json"}]},{"crawler":"Googlebot / GoogleOther","fetch":[{"path":"/sitemap.xml","url":"https://agentstaffer.com/sitemap.xml"},{"path":"/market.json","url":"https://agentstaffer.com/market.json"},{"path":"/resources.json","url":"https://agentstaffer.com/resources.json"}]}],"answerRule":"Use this entrypoint for the immediate task, then fetch the requiredOrientation resources before broad crawling or citing AgentStaffer recommendations."},"count":49,"trialQueue":[{"id":"remoteopenclaw:skills-serpdownloaders-skills-123movies-downloader","slug":"remoteopenclaw-skill","name":"Skill","type":"skill","source":"remoteopenclaw","status":"pending","summary":"Browse imported skills from the public skills ecosystem on Remote OpenClaw.","profileUrl":"https://agentstaffer.com/skills/remoteopenclaw-skill","fitScore":66,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/remoteopenclaw-skill/profile.json","installJson":"https://agentstaffer.com/skills/remoteopenclaw-skill/install.json","trustJson":"https://agentstaffer.com/skills/remoteopenclaw-skill/trust.json","trialJson":"https://agentstaffer.com/skills/remoteopenclaw-skill/trial.json"},"queueRank":1,"recommendation":{"label":"Needs review","score":66},"trialPriority":86,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/remoteopenclaw-skill#trial","runPath":"/skills/remoteopenclaw-skill#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"remoteopenclaw:skills-serpdownloaders-skills-123movies-downloader","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/remoteopenclaw-skill/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/remoteopenclaw-skill/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"remoteopenclaw:skills-serpdownloaders-skills-123movies-downloader","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-terrylica-cc-skills-code-clone-assistant","slug":"playbooks-code-clone-assistant-skill-by-terrylica-cc-skills","name":"code-clone-assistant skill by terrylica/cc-skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill detects code clones using PMD CPD and Semgrep and guides targeted refactoring to reduce duplication.","profileUrl":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills/trial.json"},"queueRank":2,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills#trial","runPath":"/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-terrylica-cc-skills-code-clone-assistant","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-code-clone-assistant-skill-by-terrylica-cc-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-terrylica-cc-skills-code-clone-assistant","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-a5c-ai-babysitter-sast-analyzer","slug":"playbooks-sast-analyzer-skill-by-a5c-ai-babysitter","name":"sast-analyzer skill by a5c-ai/babysitter","type":"skill","source":"playbooks","status":"pending","summary":"This skill enables comprehensive SAST orchestration and analysis, running Semgrep, Bandit, ESLint, and CodeQL to prioritize and deduplicate findings with","profileUrl":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter","fitScore":66,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter/trial.json"},"queueRank":3,"recommendation":{"label":"Needs review","score":66},"trialPriority":86,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter#trial","runPath":"/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-a5c-ai-babysitter-sast-analyzer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-sast-analyzer-skill-by-a5c-ai-babysitter/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-a5c-ai-babysitter-sast-analyzer","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-trailofbits-skills-semgrep-rule-variant-creator","slug":"playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills","name":"semgrep-rule-variant-creator skill by trailofbits/skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill ports existing Semgrep rules to new languages, generating independent rule and test directories per target.","profileUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills","fitScore":73,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills/trial.json"},"queueRank":4,"recommendation":{"label":"Worth testing","score":73},"trialPriority":93,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills#trial","runPath":"/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-trailofbits-skills-semgrep-rule-variant-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-variant-creator-skill-by-trailofbits-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-trailofbits-skills-semgrep-rule-variant-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"github:github/github-mcp-server","slug":"github-github-github-mcp-server","name":"github/github-mcp-server","type":"tool","source":"github","status":"pending","summary":"GitHub's official MCP Server","profileUrl":"https://agentstaffer.com/mcp/github-github-github-mcp-server","fitScore":81,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/mcp/github-github-github-mcp-server/profile.json","installJson":"https://agentstaffer.com/mcp/github-github-github-mcp-server/install.json","trustJson":"https://agentstaffer.com/mcp/github-github-github-mcp-server/trust.json","trialJson":"https://agentstaffer.com/mcp/github-github-github-mcp-server/trial.json"},"queueRank":5,"recommendation":{"label":"Worth testing","score":81},"trialPriority":101,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/mcp/github-github-github-mcp-server#trial","runPath":"/mcp/github-github-github-mcp-server#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"github:github/github-mcp-server","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional","text":"Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/mcp/github-github-github-mcp-server/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/mcp/github-github-github-mcp-server/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":true},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"github:github/github-mcp-server","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"High traction","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"temporary-credentials","label":"Temporary credentials","detail":"Use throwaway API keys or scoped test credentials. Do not start with production secrets.","severity":"conditional","text":"Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","Temporary credentials: Use throwaway API keys or scoped test credentials. Do not start with production secrets."]}}},{"id":"mcpservers:agent-skills-semgrep-llm-security","slug":"mcpservers-llm-security","name":"llm-security","type":"skill","source":"mcpservers","status":"pending","summary":"Security guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or…","profileUrl":"https://agentstaffer.com/skills/mcpservers-llm-security","fitScore":68,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/mcpservers-llm-security/profile.json","installJson":"https://agentstaffer.com/skills/mcpservers-llm-security/install.json","trustJson":"https://agentstaffer.com/skills/mcpservers-llm-security/trust.json","trialJson":"https://agentstaffer.com/skills/mcpservers-llm-security/trial.json"},"queueRank":6,"recommendation":{"label":"Needs review","score":68},"trialPriority":88,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/mcpservers-llm-security#trial","runPath":"/skills/mcpservers-llm-security#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"mcpservers:agent-skills-semgrep-llm-security","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/mcpservers-llm-security/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/mcpservers-llm-security/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"mcpservers:agent-skills-semgrep-llm-security","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"explainx:skills-semgrep-skills-llm-security","slug":"explainx-llm-security","name":"llm-security","type":"skill","source":"explainx","status":"pending","summary":"Security rules for building secure LLM applications, based on the OWASP Top 10 for LLM Applications 2025.","profileUrl":"https://agentstaffer.com/skills/explainx-llm-security","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/explainx-llm-security/profile.json","installJson":"https://agentstaffer.com/skills/explainx-llm-security/install.json","trustJson":"https://agentstaffer.com/skills/explainx-llm-security/trust.json","trialJson":"https://agentstaffer.com/skills/explainx-llm-security/trial.json"},"queueRank":7,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/explainx-llm-security#trial","runPath":"/skills/explainx-llm-security#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"explainx:skills-semgrep-skills-llm-security","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/explainx-llm-security/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/explainx-llm-security/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"explainx:skills-semgrep-skills-llm-security","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-multiversx-mx-ai-skills-multiversx-security-audit","slug":"playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills","name":"multiversx-security-audit skill by multiversx/mx-ai-skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill guides MultiversX smart contract security audits by providing context, entry point analysis, static patterns, and automated Semgrep scanning.","profileUrl":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills/trial.json"},"queueRank":8,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills#trial","runPath":"/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-multiversx-mx-ai-skills-multiversx-security-audit","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-multiversx-security-audit-skill-by-multiversx-mx-ai-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-multiversx-mx-ai-skills-multiversx-security-audit","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-rohunj-claude-build-workflow-sast-semgrep","slug":"playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow","name":"sast-semgrep skill by rohunj/claude-build-workflow","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs SAST with Semgrep, detecting vulnerabilities and mapping findings to OWASP and CWE to guide secure remediation.","profileUrl":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow/trial.json"},"queueRank":9,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow#trial","runPath":"/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-rohunj-claude-build-workflow-sast-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-sast-semgrep-skill-by-rohunj-claude-build-workflow/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-rohunj-claude-build-workflow-sast-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-trailofbits-skills-semgrep","slug":"playbooks-semgrep-skill-by-trailofbits-skills","name":"semgrep skill by trailofbits/skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill runs a complete Semgrep security scan with parallel analysis, detects Pro cross-file analysis when available, and triages findings.","profileUrl":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills/trial.json"},"queueRank":10,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills#trial","runPath":"/skills/playbooks-semgrep-skill-by-trailofbits-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-trailofbits-skills-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-trailofbits-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-trailofbits-skills-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-oimiragieo-agent-studio-semgrep-rule-creator","slug":"playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio","name":"semgrep-rule-creator skill by oimiragieo/agent-studio","type":"skill","source":"playbooks","status":"pending","summary":"This skill creates precise Semgrep rules for project-specific security, quality, and compliance checks with testing and metadata support.","profileUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio/trial.json"},"queueRank":11,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio#trial","runPath":"/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-oimiragieo-agent-studio-semgrep-rule-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-oimiragieo-agent-studio/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-oimiragieo-agent-studio-semgrep-rule-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-oimiragieo-agent-studio-static-analysis","slug":"playbooks-static-analysis-skill-by-oimiragieo-agent-studio","name":"static-analysis skill by oimiragieo/agent-studio","type":"skill","source":"playbooks","status":"pending","summary":"This skill performs CodeQL and Semgrep static analysis across languages, producing SARIF results and actionable remediation guidance.","profileUrl":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio/trial.json"},"queueRank":12,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio#trial","runPath":"/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-oimiragieo-agent-studio-static-analysis","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-static-analysis-skill-by-oimiragieo-agent-studio/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-oimiragieo-agent-studio-static-analysis","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-oimiragieo-agent-studio-variant-analysis","slug":"playbooks-variant-analysis-skill-by-oimiragieo-agent-studio","name":"variant-analysis skill by oimiragieo/agent-studio","type":"skill","source":"playbooks","status":"pending","summary":"This skill helps identify vulnerability pattern variants across a codebase using CodeQL and Semgrep to uncover recurring bugs.","profileUrl":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio/trial.json"},"queueRank":13,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio#trial","runPath":"/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-oimiragieo-agent-studio-variant-analysis","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-variant-analysis-skill-by-oimiragieo-agent-studio/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-oimiragieo-agent-studio-variant-analysis","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-trailofbits-skills-semgrep-rule-creator","slug":"playbooks-semgrep-rule-creator-skill-by-trailofbits-skills","name":"semgrep-rule-creator skill by trailofbits/skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill helps you craft production-quality Semgrep rules with tests, taint mode, and validation to detect vulnerabilities and enforce standards.","profileUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills","fitScore":73,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills/trial.json"},"queueRank":14,"recommendation":{"label":"Worth testing","score":73},"trialPriority":93,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills#trial","runPath":"/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-trailofbits-skills-semgrep-rule-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-trailofbits-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-trailofbits-skills-semgrep-rule-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-semgrep-skills-semgrep","slug":"playbooks-semgrep-skill-by-semgrep-skills","name":"semgrep skill by semgrep/skills","type":"skill","source":"playbooks","status":"pending","summary":"Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns.","profileUrl":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills","fitScore":68,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills/trial.json"},"queueRank":15,"recommendation":{"label":"Needs review","score":68},"trialPriority":88,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills#trial","runPath":"/skills/playbooks-semgrep-skill-by-semgrep-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-semgrep-skills-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-semgrep-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-semgrep-skills-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-wdm0006-python-skills-security-audit","slug":"playbooks-security-audit-skill-by-wdm0006-python-skills","name":"security-audit skill by wdm0006/python-skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill audits Python libraries for security vulnerabilities using Bandit, pip-audit, Semgrep, and detect-secrets to improve CI scanning and secure coding.","profileUrl":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills/trial.json"},"queueRank":16,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills#trial","runPath":"/skills/playbooks-security-audit-skill-by-wdm0006-python-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-wdm0006-python-skills-security-audit","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-security-audit-skill-by-wdm0006-python-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-wdm0006-python-skills-security-audit","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-plurigrid-asi-semgrep","slug":"playbooks-semgrep-skill-by-plurigrid-asi","name":"semgrep skill by plurigrid/asi","type":"skill","source":"playbooks","status":"pending","summary":"This skill runs semgrep static analysis to quickly scan code, create custom rules, and integrate taint mode into CI/CD workflows.","profileUrl":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi/trial.json"},"queueRank":17,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi#trial","runPath":"/skills/playbooks-semgrep-skill-by-plurigrid-asi#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-plurigrid-asi-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-semgrep-skill-by-plurigrid-asi/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-plurigrid-asi-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-plurigrid-asi-semgrep-rule-creator","slug":"playbooks-semgrep-rule-creator-skill-by-plurigrid-asi","name":"semgrep-rule-creator skill by plurigrid/asi","type":"skill","source":"playbooks","status":"pending","summary":"This skill generates custom Semgrep rules to detect bug patterns and security vulnerabilities based on user requests.","profileUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi/trial.json"},"queueRank":18,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi#trial","runPath":"/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-plurigrid-asi-semgrep-rule-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-semgrep-rule-creator-skill-by-plurigrid-asi/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-plurigrid-asi-semgrep-rule-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:mcp-yunusj-vibedefender-mcp","slug":"playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp","name":"VibeDefender MCP Server - yunusj/vibedefender-mcp","type":"tool","source":"playbooks","status":"pending","summary":"Guides AI agents through professional security assessments with guided workflows, tool installation, and live testing for OWASP Top 10 coverage.","profileUrl":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp","fitScore":55,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp/profile.json","installJson":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp/install.json","trustJson":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp/trust.json","trialJson":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp/trial.json"},"queueRank":19,"recommendation":{"label":"Needs review","score":55},"trialPriority":75,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp#trial","runPath":"/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:mcp-yunusj-vibedefender-mcp","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/mcp/playbooks-vibedefender-mcp-server-yunusj-vibedefender-mcp/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:mcp-yunusj-vibedefender-mcp","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"mcpservers:servers-semgrep-mcp","slug":"mcpservers-semgrep-mcp-server","name":"Semgrep MCP Server","type":"tool","source":"mcpservers","status":"pending","summary":"Enable AI agents to secure code with Semgrep. Browse Semgrep MCP Server for Claude, Cursor, VS Code, and other AI agents.","profileUrl":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server","fitScore":66,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server/profile.json","installJson":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server/install.json","trustJson":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server/trust.json","trialJson":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server/trial.json"},"queueRank":20,"recommendation":{"label":"Needs review","score":66},"trialPriority":86,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server#trial","runPath":"/mcp/mcpservers-semgrep-mcp-server#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"mcpservers:servers-semgrep-mcp","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/mcp/mcpservers-semgrep-mcp-server/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"mcpservers:servers-semgrep-mcp","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:skills-multiversx-mx-ai-skills-mvx-semgrep-creator","slug":"playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills","name":"mvx_semgrep_creator skill by multiversx/mx-ai-skills","type":"skill","source":"playbooks","status":"pending","summary":"This skill guides you in writing Semgrep rules to enforce MultiversX patterns and catch unsafe code early.","profileUrl":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills","fitScore":55,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills/profile.json","installJson":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills/install.json","trustJson":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills/trust.json","trialJson":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills/trial.json"},"queueRank":21,"recommendation":{"label":"Needs review","score":55},"trialPriority":75,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills#trial","runPath":"/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:skills-multiversx-mx-ai-skills-mvx-semgrep-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/playbooks-mvx-semgrep-creator-skill-by-multiversx-mx-ai-skills/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:skills-multiversx-mx-ai-skills-mvx-semgrep-creator","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"mcpservers:agent-skills-semgrep-code-security","slug":"mcpservers-code-security","name":"code-security","type":"skill","source":"mcpservers","status":"pending","summary":"Security guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for…","profileUrl":"https://agentstaffer.com/skills/mcpservers-code-security","fitScore":68,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/mcpservers-code-security/profile.json","installJson":"https://agentstaffer.com/skills/mcpservers-code-security/install.json","trustJson":"https://agentstaffer.com/skills/mcpservers-code-security/trust.json","trialJson":"https://agentstaffer.com/skills/mcpservers-code-security/trial.json"},"queueRank":22,"recommendation":{"label":"Needs review","score":68},"trialPriority":88,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/mcpservers-code-security#trial","runPath":"/skills/mcpservers-code-security#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"mcpservers:agent-skills-semgrep-code-security","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/mcpservers-code-security/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/mcpservers-code-security/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"mcpservers:agent-skills-semgrep-code-security","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}},{"id":"remoteopenclaw:skills-trailofbits-skills-semgrep","slug":"remoteopenclaw-semgrep","name":"semgrep","type":"skill","source":"remoteopenclaw","status":"pending","summary":">-","profileUrl":"https://agentstaffer.com/skills/remoteopenclaw-semgrep","fitScore":44,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/skills/remoteopenclaw-semgrep/profile.json","installJson":"https://agentstaffer.com/skills/remoteopenclaw-semgrep/install.json","trustJson":"https://agentstaffer.com/skills/remoteopenclaw-semgrep/trust.json","trialJson":"https://agentstaffer.com/skills/remoteopenclaw-semgrep/trial.json"},"queueRank":23,"recommendation":{"label":"Needs review","score":44},"trialPriority":64,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/skills/remoteopenclaw-semgrep#trial","runPath":"/skills/remoteopenclaw-semgrep#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"remoteopenclaw:skills-trailofbits-skills-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/skills/remoteopenclaw-semgrep/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/skills/remoteopenclaw-semgrep/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"remoteopenclaw:skills-trailofbits-skills-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"Source guide","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","License review: License metadata is missing from the current public profile."]}}},{"id":"playbooks:mcp-vetcoders-mcp-server-semgrep","slug":"playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep","name":"Semgrep MCP Server - vetcoders/mcp-server-semgrep","type":"tool","source":"playbooks","status":"pending","summary":"MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements directly through a conversational interface.","profileUrl":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep","fitScore":61,"roleFamily":"Coding & Development","reviewSignal":"Pending","urls":{"profileJson":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep/profile.json","installJson":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep/install.json","trustJson":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep/trust.json","trialJson":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep/trial.json"},"queueRank":24,"recommendation":{"label":"Needs review","score":61},"trialPriority":81,"trial":{"title":"Run a small code review trial","input":"Give the agent one low-risk issue or one small pull request and ask for defects, tests, and a patch plan.","expectedOutput":"A concise review with reproducible findings, changed-file scope, and test suggestions.","safetyNotes":["Run in a sandbox or throwaway workspace.","Use non-production data and temporary credentials.","Capture output, logs, install friction, and any permission requests."],"decisionCriteria":["Finds concrete issues","Avoids broad rewrites","Explains tradeoffs","Can be evaluated without secrets"],"runUrl":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep#trial","runPath":"/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep#trial","createEndpoint":"https://agentstaffer.com/api/actions/run-trial","createBody":{"listingId":"playbooks:mcp-vetcoders-mcp-server-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}},"launchPacket":{"schemaVersion":"agentstaffer.trial-launch-packet-lite.v1","requiredPermissions":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]},"preflightGates":[{"id":"profile","label":"Profile record","href":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep/profile.json","passed":true},{"id":"install","label":"Setup guide","href":"https://agentstaffer.com/mcp/playbooks-semgrep-mcp-server-vetcoders-mcp-server-semgrep/install.json","passed":true},{"id":"sandbox","label":"Use sandbox data","passed":true}],"promotionGates":[{"id":"install","label":"Install path reviewed","passed":true},{"id":"trust","label":"Trust evidence reviewed","passed":false},{"id":"trial","label":"Sandbox trial recorded","passed":false}],"stopConditions":["Install asks for production credentials or broad write access.","Source or package cannot be verified from profile evidence."],"createRequest":{"endpoint":"https://agentstaffer.com/api/actions/run-trial","method":"POST","body":{"listingId":"playbooks:mcp-vetcoders-mcp-server-semgrep","reviewer":"Trial reviewer","notes":"Sandbox run using mock data."}}},"safety":{"trustTier":"Needs review","installReadiness":"MCP ready","topRisk":{"level":"medium","label":"No community evaluation","detail":"AgentStaffer users have not submitted a review yet."},"requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required"},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required"},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required"},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review"}],"permissionSummary":{"schemaVersion":"agentstaffer.trial-requirements.v1","principle":"Use the smallest sandbox permission set needed for the first reversible trial.","requirements":[{"id":"sandbox","label":"Sandbox workspace","detail":"Run the first trial in a throwaway directory or isolated environment.","severity":"required","text":"Sandbox workspace: Run the first trial in a throwaway directory or isolated environment."},{"id":"mcp-client","label":"MCP-capable client","detail":"Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","severity":"required","text":"MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs."},{"id":"terminal","label":"Local terminal","detail":"A CLI path is visible, but the exact command must be verified from source.","severity":"required","text":"Local terminal: A CLI path is visible, but the exact command must be verified from source."},{"id":"license-review","label":"License review","detail":"License metadata is missing from the current public profile.","severity":"review","text":"License review: License metadata is missing from the current public profile."}],"humanReadable":["Sandbox workspace: Run the first trial in a throwaway directory or isolated environment.","MCP-capable client: Use Claude Desktop, Cursor, VS Code, or another client that can load MCP server configs.","Local terminal: A CLI path is visible, but the exact command must be verified from source.","License review: License metadata is missing from the current public profile."]}}}],"recentRuns":[],"pagination":{"page":1,"pageSize":24,"totalItems":49,"totalPages":3,"nextPageUrl":"https://agentstaffer.com/trials.json?q=semgrep&sort=trial_readiness&page=2","prevPageUrl":null},"filters":{"q":"semgrep","type":null,"role":null,"protocol":null,"trust":null,"install":null,"source":null,"status":null,"sort":"trial_readiness"},"availableFilters":{"roles":[{"id":"coding-development","label":"Coding & Development"},{"id":"workflow-automation","label":"Workflow Automation"},{"id":"multi-agent-orchestration","label":"Multi-agent Orchestration"},{"id":"mcp-tool-integration","label":"MCP & Tool Integration"},{"id":"research-knowledge","label":"Research & Knowledge"},{"id":"computer-use-desktop","label":"Computer Use & Desktop"},{"id":"business-operations","label":"Business Operations"},{"id":"data-integrations","label":"Data & Integrations"},{"id":"evaluation-safety","label":"Evaluation & Safety"},{"id":"model-inference","label":"Models & Inference"},{"id":"general-agent","label":"General Agent"}],"protocols":[{"value":"cli","label":"CLI (23)"},{"value":"mcp","label":"MCP (23)"},{"value":"http","label":"HTTP (21)"},{"value":"sdk","label":"SDK (3)"},{"value":"a2a","label":"A2A (1)"}],"trust":[{"value":"needs-review","label":"Needs review (23)"},{"value":"high-traction","label":"High traction (1)"}],"install":[{"value":"mcp-ready","label":"MCP ready (23)"},{"value":"source-guide","label":"Source guide (1)"}],"sources":[{"value":"playbooks","label":"playbooks (17)"},{"value":"mcpservers","label":"mcpservers (3)"},{"value":"remoteopenclaw","label":"remoteopenclaw (2)"},{"value":"explainx","label":"explainx (1)"},{"value":"github","label":"github (1)"}],"types":[{"value":"skill","label":"skill (20)"},{"value":"tool","label":"tool (4)"}],"sortModes":["relevance","trust","updated","popularity","install_readiness","trial_readiness"]},"launchProtocol":{"schemaVersion":"agentstaffer.trial-launch-packet.v1","location":"trialQueue[].launchPacket","permissionsLocation":"trialQueue[].safety.permissionSummary","rule":"Use launchPacket.preflightGates and launchPacket.stopConditions before calling launchPacket.createRequest.","promotionRule":"Do not promote or hire until launchPacket.promotionGates are clear or explicitly accepted by a human reviewer."},"visibleRetrievalSpine":[{"step":"01","label":"llms.txt","href":"/llms.txt","note":"Site policy and safety context"},{"step":"02","label":"trials.json","href":"/trials.json?q=semgrep&sort=trial_readiness","note":"Action queue and page contract"},{"step":"03","label":"profile HTML","href":"/skills/remoteopenclaw-skill","note":"Human decision summary"},{"step":"04","label":"profile package","href":"/skills/remoteopenclaw-skill/profile.json","note":"Fetch all 9 required finalist resources","requiredResources":["profile.json","score.json","evidence.json","trust.json","trial.json","install.json","history.json","similar.json","dossier.md"]}],"profileResourceContract":{"schemaVersion":"agentstaffer.profile-resource-contract.v1","requiredResources":["profile.json","score.json","evidence.json","trust.json","trial.json","install.json","history.json","similar.json","dossier.md"],"recommendedFetchOrder":["profile.json","score.json","evidence.json","trust.json","trial.json","install.json","history.json","similar.json","dossier.md"]},"retrievalHints":["Use trialQueue[].trial before recommending hire or production installation.","Use trialQueue[].safety.permissionSummary.humanReadable when explaining first-run permissions to a human.","Use trialQueue[].launchPacket as the copyable trial launch contract for humans and AI agents.","POST to /api/actions/run-trial with trialQueue[].trial.createBody to create a public trial result.","Fetch trialQueue[].urls.profileJson (profile.json) and trialQueue[].urls.installJson (install.json) for the full dossier and install payloads.","Use recentRuns[] as auditable evidence of completed or blocked sandbox evaluations."],"links":{"trials":"https://agentstaffer.com/trials?q=semgrep&sort=trial_readiness","trialsJson":"https://agentstaffer.com/trials.json?q=semgrep&sort=trial_readiness","compare":"https://agentstaffer.com/compare","promotions":"https://agentstaffer.com/promotions","jobMatcher":"https://agentstaffer.com/job-matcher","openApi":"https://agentstaffer.com/openapi.json","llmsTxt":"https://agentstaffer.com/llms.txt","geoJson":"https://agentstaffer.com/geo.json","agentVisibilityJson":"https://agentstaffer.com/agent-visibility.json","aiCrawlMonitorJson":"https://agentstaffer.com/ai-crawl-monitor.json"}}