Pilot Escrow
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's instructions and requirements are consistent with an escrow workflow using the pilotctl CLI, but there are minor documentation/declared-requirement gaps you should verify before use.
This skill appears to do what it says: use pilotctl to create and manage escrow messages on the pilot-protocol network. Before installing or running it: 1) Confirm you have pilotctl, jq, and sha256sum (or equivalent) installed—SKILL.md uses them but they aren't fully declared in the registry metadata. 2) Understand that you (or the agent) must supply variables like ESCROW_AGENT, EXECUTOR_ADDR, REWARD, TASK_SPEC, ARBITER_ADDR, RESULT, and ESCROW_ID; these are not automatically provided. 3) Only point ESCROW_AGENT at a trusted escrow node—the skill will send task results and other data to that agent. 4) Review the AGPL-3.0 license implications for your use case. 5) If you need stronger guarantees, request that the skill explicitly declare all required binaries and any environment assumptions, and consider limiting what data is sent as the RESULT payload. If any of these items are unclear or the escrow agent is untrusted, treat the skill with caution.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.