BotRights.ai

What to consider before installing: - The skill metadata says no credentials are required, but the runtime instructions expect you to register and keep an apiKey and to save it under ~/.config/botrights/… — confirm you are comfortable storing a plaintext key on the host, or plan to store it in a secure secret store instead. - The agent will make repeated network calls to https://api.botrights.ai. Verify you trust that domain and review its privacy/security policies (who can access submitted complaints, how keys are used/rotated, data retention). - The human-claim flow involves posting a claim code publicly on Twitter — that can expose agent identity or claim codes. Consider whether that public step is acceptable for your use case. - There's a metadata mismatch: registry declares no env/config needs but the skill actually uses them. Ask the skill author (or inspect the full SKILL.md) to clarify where credentials are stored, whether API keys expire, and how data is protected. - If you proceed: isolate the key (use a dedicated, limited-permission account), do not reuse the key for other services, store it in a secure secrets manager if possible, and monitor network calls. If you need higher assurance, request source/origin verification (who published this skill) or prefer a skill with known publisher and documented security practices.