Pilot Receipt
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requested tools and instructions largely match its stated purpose (sending/subscribing to receipts via pilotctl); the only notable mismatch is an undeclared dependency on jq and a reference to a separate pilot-protocol skill — otherwise there are no disproportionate credential or install demands.
This skill appears to do what it says: it runs pilotctl to send, subscribe to, and publish receipts. Before installing, verify you trust the pilotctl binary and the Pilot Protocol implementation (check the https://pilotprotocol.network homepage and official releases). Note the SKILL.md examples require jq even though jq is not declared in the registry metadata — install jq or the examples will fail. Be aware of privacy implications: read/receipt tracking removes anonymity and can reveal when recipients read messages. Finally, because the skill spawns subscriber processes (background subscribe loop), make sure you understand and control any long-running processes the skill may start on your system.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.