Skills Custom ToolCAUTION
A durable process per agent, with memory that survives restarts
Overview
A durable process per agent, with memory that survives restarts
764d97e0f785OBSERVED · 2026-10-08Trust audit
CAUTIONgrade B · trust 88/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (6)
sandbox-agent/.claude/skills/agent-browser
sandbox-agent/.claude/skills/frontend-design
sandbox-agent/.claude/skills/vercel-react-best-practices
AGENTS.md
docs/AGENTS.md
Gates applied: no_behavioural_pass.
764d97e0f785full audit observations/trust-audit/skill/rivet-dev__skills-custom-tool.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 764d97e0f785 | CAUTION | B | 88 | first audit |
Questions
What does the Skills Custom Tool skill do?
A durable process per agent, with memory that survives restarts
Is Skills Custom Tool safe to install?
With care. The audit graded it B (88/100) and found 6 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Skills Custom Tool access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (764d97e0f785), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.