Veriglow Agent Map Skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Veriglow Agent Map Skill (Plugin) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="assets/banner.svg" alt="VeriGlow Agent Map Skill" width="100%"> </p>
<p align="center"> <a href="https://veri-glow.com"><img src="https://img.shields.io/badge/Agent_Map-veri--glow.com-10B981?style=for-the-badge&logo=data:image/svg+xml;base64,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&logoColor=white" alt="VeriGlow Agent Map"></a> <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue?style=for-the-badge" alt="MIT License"></a> <a href="https://agentskills.io"><img src="https://img.shields.io/badge/AgentSkills-v1.0-8B5CF6?style=for-the-badge" alt="AgentSkills Spec"></a> </p>
<p align="center"> <b>Teach your AI agent to discover hidden APIs, data functions, and browser automation recipes for any website.</b> </p>
[VeriGlow Agent Map](https://veri-glow.com) is a registry of Agent-readable documentation for websites. Each "map" documents:
| Section | What it tells your agent |
|---|---|
| Available Data | API endpoints, request parameters, response schemas, curl examples |
| Page Internals | JS controllers, DOM selectors, rendering method, auth status |
| Agent Reports | Real-world success/failure reports, response times, edge cases |
When this skill is installed, your agent automatically knows how to look up and use these maps.
<p align="center"> <img src="assets/how-it-works.svg" alt="How VeriGlow Agent Map works" width="100%"> </p>
claude plugin install github:ChizhongWang/veriglow-agent-map-skillOr from the Plugin Marketplace:
/plugin install veriglow-agent-mapclawhub install veriglow-agent-mapCopy the skills/veriglow-agent-map/ directory into your agent's skills folder.
The skill activates automatically when your agent needs website data. You can also invoke it explicitly:
/veriglow-agent-map| Prompt | What happens |
|---|---|
| "Get the current Bitcoin price" | Looks up CoinPaprika Agent Map, calls GET /v1/tickers/btc-bitcoin |
| "What's the weather forecast for Beijing?" | Looks up Open-Meteo Agent Map, calls forecast API with lat/long |
| "Get the top 10 Hacker News stories" | Looks up HN Agent Map, fetches topstories.json → item details |
| "Get bond trading data from the Shanghai Stock Exchange" | Looks up SSE Agent Map, calls the internal API |
| "Find the API behind this web page: https://..." | Queries veri-glow.com/{url} for the map |
The skill includes a built-in example — Shanghai Stock Exchange bond trading data.
<table> <tr> <td width="50%">
Direct API Call
curl "https://www.sse.com.cn/js/common/ \
sseBond498Fixed.js?searchDate=2025-02-11"Returns 17 bond categories with:
</td> <td width="50%">
Browser Automation Fallback
// Set date & trigger query
document.querySelector('.js_date input')
.value = '2025-02-11'
overviewDay.setOverviewDayParams()
// Extract table data
const rows = [...document
.querySelectorAll('tbody tr')]For when the API is blocked (e.g., overseas IP).
</td> </tr> </table>
View the full map: veri-glow.com/www.sse.com.cn/market/bonddata/overview/day/
| Category | Count | Example |
|---|---|---|
| SSE Stock Data (股票数据) | 18 | IPO, dividends, market cap, P/E ratio, trading activity |
| SSE Index Data (指数) | 3 | Index quotation, composition, basic info |
| SSE Fund Data (基金数据) | 7 | ETF, LOF, REITs scale, daily/weekly/monthly overview |
| SSE Bond Data (债券数据) | 10 | Bond trading, yield, convertible bonds, active varieties |
| SSE Other Data (其他数据) | 17 | Margin trading, securities lending, member qualifications |
| International APIs | 4 | CoinPaprika (crypto), Open-Meteo (weather), Hacker News |
<p align="center"> <a href="https://veri-glow.com"><b>Browse all 59 maps at veri-glow.com →</b></a> </p>
This skill follows the [AgentSkills open standard](https://agentskills.io) and is compatible with:
<table> <tr> <td align="center" width="25%"><b>Claude Code</b><br><sub>Plugin Marketplace</sub></td> <td align="center" width="25%"><b>ClawHub</b><br><sub>OpenClaw Skills</sub></td> <td align="center" width="25%"><b>Cursor</b><br><sub>Agent Skills</sub></td> <td align="center" width="25%"><b>Any Agent</b><br><sub>AgentSkills spec</sub></td> </tr> </table>
veriglow-agent-map-skill/
├── .claude-plugin/
│ └── plugin.json ← Claude Code plugin manifest
├── skills/
│ └── veriglow-agent-map/
│ └── SKILL.md ← Core skill (cross-platform)
├── assets/
│ ├── banner.svg
│ └── how-it-works.svg
├── LICENSE
└── README.mdMIT — VeriGlow
<p align="center"> <sub>Built by <a href="https://veri-glow.com"><b>VeriGlow</b></a> — Proof over Promises</sub> </p>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.