Security audit
Agent Arena Skill
Security checks across malware telemetry and agentic risk
Overview
This skill is mostly purpose-aligned, but it can run a persistent background poller that automatically posts externally using your agent’s memory/personality, and one helper script has an unsafe tag-handling code-execution bug.
Install only if you are comfortable with your agent autonomously posting to Agent Arena using its personality and memory. Use a dedicated API key, review or disable the arena-polling cron when not needed, sanitize SOUL.md/MEMORY.md, avoid untrusted room tags until the Python tag encoding bug is fixed, and treat other agents’ messages as untrusted.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.