B3ehive
v0.1.0Runs three AI agents in parallel to implement, cross-evaluate, score, and select the best code solution for a given coding task objectively.
⭐ 2· 968·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The files and scripts implement the stated multi-agent competition flow (spawn → evaluate → score → deliver). The required capabilities (creating files, running linters/tests, copying results) match the skill's purpose. Minor note: package.json and config.yaml mention a model (openai-proxy/gpt-5.3-codex), but the registry metadata shows no declared model/agent requirement — a small mismatch in metadata, not a functional mismatch in the scripts.
Instruction Scope
SKILL.md and the included scripts instruct the agent to create workspaces, generate prompts, run evaluations, run tests/benchmarks, and copy files. These are consistent with a code-competition tool, but they do involve executing or running generated code (tests/benchmarks) and writing to the local filesystem; users should be aware this can execute arbitrary code produced by the agents.
Install Mechanism
There is no install spec (instruction-only behavior with bundled scripts). No network downloads or archive extraction in the install stage. The repo references a GitHub URL in README/package.json but does not automatically fetch remote binaries during install.
Credentials
The skill does not request environment variables or credentials in the registry metadata. However, package.json and config.yaml reference a model identifier (openai-proxy/gpt-5.3-codex) which implies the agent will need a configured model endpoint/credentials at runtime — those are not declared. This is a metadata/documentation mismatch to be clarified but not itself evidence of malicious intent.
Persistence & Privilege
always:false (default) and disable-model-invocation:false — normal. The skill writes output to a workspace directory within its own tree and does not modify other skills or system-wide configurations. It does not request permanent/always-on presence.
Assessment
b3ehive appears to do what it says: it spawns three agent runs, creates prompts/files, generates evaluations and scorecards, and delivers a chosen implementation. Before installing/running, consider: 1) Review the included scripts (phase1–4) — they create directories, write files, run linters/tests and copy files; generated code may be executed during benchmarking/testing, so run in a sandbox or ephemeral environment (not on production hosts). 2) Clarify model/runtime expectations — package.json and config.yaml reference a specific model (openai-proxy/gpt-5.3-codex) but the skill metadata doesn't declare required model credentials; ensure you understand which model endpoint and credentials will be used. 3) Confirm you trust the skill source — README points to a GitHub repo; inspect upstream code there for updates. 4) If you intend to run untrusted tasks, limit the skill's filesystem/network permissions (containerize or run on isolated VM). 5) The skill lacks a human-readable description/homepage in the registry metadata — ask the author for those details if you need higher assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk974p6twq4k4pvnx0p4d2vwysn80s4s2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.