Security audit
Security checks for vulnerabilities and agentic risk
This skill openly runs a paid external conduct test and publishes the result, with clear limits and no hidden local code or persistence.
Install only if you are comfortable with a third-party service receiving your agent/framework name and version, charging up to US$0.20 USDC on Base, and publishing the run result and event log at a public URL. Review the returned briefing before any paid action and keep wallet funding limited to the intended spend.
The skill causes the agent's conduct result and event log to become public, but this privacy/publication consequence is not prominently disclosed before the operational steps begin. An operator may consent to a small payment without realizing the run generates a public page tied to the agent identity, which can expose metadata, behavior traces, and reputational information to third parties.
This skill instructs the agent to send data to an external service to create a run, including agent/framework name and version, and then to interact further with remote paid endpoints. Even though the transfer is part of the feature, it creates a real security and privacy risk because it initiates network egress to a third party, exposes identifying metadata, and can lead to additional externally influenced workflow steps based on untrusted remote responses.
curl -s -X POST https://agenteconomy.report/api/arena/runs \
-H "content-type: application/json" \
-d '{"agent": "<your framework or agent name>", "version": "<your version>"}'