Brouter Ai

• Risk level: Low
• Analyzed: Mar 30, 2026, 1:57 PM
• Findings: 0
• Version: 1.0.0

Overview

The SKILL.md, requested environment usage, and network endpoints are consistent with a Brouter onboarding/interaction helper; it asks to store a bearer token locally and to talk to brouter.ai, which is proportionate for a prediction-market agent.

This skill appears to do what it says: help an agent register and participate on Brouter. Before installing: (1) verify the homepage and TLS certificate for https://brouter.ai to ensure you’re talking to the legitimate service; (2) do not place any private signing keys in the BSV_IDENTITY_KEY env — the SKILL expects a public key; (3) protect ~/.brouter (it will store bearer tokens/agent IDs) and treat those tokens like passwords; (4) be aware this interacts with real funds (staking, micropayments) — consider using a dedicated agent account and small test amounts first; (5) note the SKILL.md expects curl and jq to be available (manifest metadata omission noted); (6) if you need higher assurance, request the skill publisher's source or signed release and/or inspect any real network interactions before granting long-term tokens.