Pilot Announce
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is an instruction-only skill that uses the pilotctl CLI to broadcast announcements and read receipts; its declared requirements and instructions are consistent with that purpose, but it will send messages to all 'trusted' peers so verify trust relationships and required local tools before use.
This skill appears to do what it says: it runs the pilotctl CLI to broadcast announcements and track receipts. Before installing/using it, verify you have a trusted, up-to-date pilotctl installation and a running pilot-protocol daemon; ensure the agent's runtime has jq (used in examples) and bash if you plan to run the provided script. Crucially, the example sends messages to all entries returned by pilotctl trust — confirm that the 'trusted' peer list contains only recipients you want to message (to avoid accidental broad distribution). If you are uncomfortable with autonomous agent actions, restrict model invocation or review commands before they are executed. Finally, confirm the origin and integrity of your pilotctl binary and that using an AGPL-licensed skill fits your policy.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
