workbuddy-marketBLOCK
Local-first plugin marketplace for WorkBuddy: package Skills, discover community plugins, and install with hash verification and recoverable transactions.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
简体中文 · English
[](https://github.com/zjs105910/workbuddy-market/actions/workflows/ci.yml) [](pyproject.toml) [](LICENSE)
给 WorkBuddy 用的本机优先插件市场。 将本机 Skills 打包成插件,在精选社区目录或 GitHub 中查找技能;安装前查看来源、权限声明和兼容性,再通过哈希校验与可恢复事务完成安装、更新和卸载。
A local-first plugin marketplace for WorkBuddy: package local Skills, explore community and GitHub sources, review declared permissions and compatibility, and manage installs through hash verification and recoverable transactions.
30 秒了解它
- 管理自己的 Skills:将本机技能打包、同步,并注册到 WorkBuddy 插件面板。
- 发现社区技能:浏览精选目录,也可以搜索 GitHub 上的公开仓库。
- 安装过程更可追溯:安装前有来源与风险预览;支持内容校验、事务恢复和回收站。
- 本机优先:网页服务只监听
127.0.0.1;你的私有市场配置和本机技能内容不随仓库提交。
快速上手(Windows)
没有 Git?三步免安装 ✅
1. 下载:打开 Releases 最新版(认准标题为WorkBuddy Market vX.Y.Z的条目;registry-artifacts-*是插件产物 Pre-release,不是本体),点 Source code (zip)(或直接下 main 分支 ZIP); 2. 解压:右键解压到任意目录(路径不要含特殊字符); 3. 双击:双击安全模式-只开网页.cmd先浏览市场;准备好接入 WorkBuddy 时再双击一键启动.cmd。
需要 Python 3.10+(首次启动向导会检测并给出明确提示)。配置文件不需要手工创建——首次启动自动初始化。
已经在用 WorkBuddy?零安装直连市场 ✅
不想跑任何工具,只想装社区精选技能:下载 精选市场 zip,在 WorkBuddy 插件面板 → 添加自定义市场 里选这个 zip 即可。内容每日由 CI 从人工审核的注册表自动重建。
这是精选目录的轻量子集:仓库体积超 30MB、含符号链接或没有标准 skill 结构的收录条目不会进包(搜不到某技能多半是这个原因)。完整清单见 zip 内.codebuddy-plugin/marketplace.json的included/excluded字段,或 Release 附件里的 manifest。
取舍说明:这条路拿到的是技能分发——没有安装前四问、所有权分级和可恢复卸载。要完整的安全链路,请用上面的完整版。
会用命令行?一条命令安装 ✅
pipx install workbuddy-market workbuddy-market doctor
1892a133dc73OBSERVED · 2026-10-12Install
Commands as the repository documents them. They are shown, not run.
git clone https://github.com/zjs105910/workbuddy-market.git
git clone https://github.com/zjs105910/workbuddy-market.git
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- UNDECLARED (10 observation(s))
- Network
- declared (8 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- found
Findings (22)
dict(os.environ) ... urllib.request
shutil.rmtree(staging, ignore_errors=True)
shutil.rmtree(tmp, ignore_errors=True)
shutil.rmtree(staging)
shutil.rmtree(dest, ignore_errors=True)
shutil.rmtree(staging.parent / f".mkext-{i}", ignore_errors=True)"请从 http://127.0.0.1:%d/ 打开界面" % self._port()}, 403)
base = f"http://127.0.0.1:{port}"token = "demo-recording-token"
bad_ids = ["../evil", "../../evil", "foo/../bar", "a/b", "a\\b", "..", ".",
["../TRAVERSAL-VICTIM", "../../TRAVERSAL-VICTIM2", "..", ".", "a/b",
"../../TRAVERSAL-VICTIM2": {"bytes": 7, "at": time.time(), "reason": "evil"},for v in ["../../x", "foo", "owner/", "-x/y", "a/b/c"]:
_rewrite(d, lambda m: m.update(skills=["skills/../../.."]))
跑完会自动用浏览器打开一个本地网页(地址形如 `http://127.0.0.1:8777/`),
启动后打开本机地址(默认 `http://127.0.0.1:8777/`)。**请保持启动窗口打开**;结束时回到窗口按 `Ctrl+C`。
The local web UI uses `http://127.0.0.1:8777/` by default. Keep the terminal window open while using it; press `Ctrl+C` in that window to stop the server.
sudo apt-get update
sudo apt-get install -y ffmpeg espeak-ng fonts-noto-cjk
sudo apt-get update
sudo apt-get install -y ffmpeg espeak-ng fonts-noto-cjk
Gates applied: no_behavioural_pass.
1892a133dc73full audit observations/trust-audit/skill/zjs105910__workbuddy-market.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 1892a133dc73 | BLOCK | D | 69 | first audit |
Questions
What does the workbuddy-market skill do?
Local-first plugin marketplace for WorkBuddy: package Skills, discover community plugins, and install with hash verification and recoverable transactions.
Is workbuddy-market safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What can workbuddy-market access on my machine?
The audit observed that it reaches the network and reads or writes files. At least one of those is not mentioned in its own description, which is itself a finding. Secrets in the source: found — see the findings.
How current is this page?
The grade is for one exact copy of the source (1892a133dc73), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.