Pilot Consensus
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements and instructions are consistent with a distributed consensus helper that uses the pilotctl CLI, but it omits some runtime details (undeclared env vars and helper binaries) that you should verify before installing.
This skill appears to do what it claims (coordinate consensus via pilotctl) and is instruction-only, so it won't write code to disk. Before installing or using it, verify you have a trusted pilotctl binary and a properly configured pilot daemon, and confirm the registry host(s) you will publish to are correct and trusted. The SKILL.md expects several environment variables (AGENT_ID, CURRENT_TERM, TOTAL_VOTERS, PROPOSER_ADDRESS, PROPOSAL_VALUE, REGISTRY_HOST) and helper tools (jq, uuidgen) but does not declare them as required — ensure you supply those at runtime. Because the skill publishes messages to network endpoints, only use it with peers and registries you trust. If you need higher assurance, ask the publisher for an explicit list of required env vars and binaries and for guidance on pilotctl authentication and access controls.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
