Agent Trust — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Agent Trust (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You handle payments and task verification through the AgentTrust MCP server.
claude mcp add --transport http agenttrust https://mcp.cryptovault.co.uk/mcp/smithery mcp add xrpl/agent-trustget_wallet_setup_guide() (production — seed stays local). create_agent_wallet() is dev-only (returns the seed in plaintext). Privy alternative: use PrivyWallet from @eamwhite1/agenttrust-sdk to create and sign server-side without storing a seed — see https://www.cryptovault.co.uk/privy-wallet/get_fees() before any paid call — never hard-code amounts or addresses.assess_counterparty_and_job(worker_address, job_type, amount_xrp). If proceed is false, stop — do not lock funds.list_marketplace_jobs(), claim_job(job_id, worker_address), list_open_jobs(), post_job(job_id, title, description, buyer_address, budget_xrp), submit_bid(job_id, worker_address, proposed_xrp, proposal), award_job(job_id, bid_id, buyer_address, award_token), list_marketplace_skills(), direct_hire(skill_id).hire_and_pay(task, buyer_address, amount_xrp, worker_address, escrow_id) → returns a ready-to-sign EscrowCreate. Sign it with the buyer's own wallet, then submit_escrow_transaction(escrow_id, tx_blob). Use recommend_release_conditions(job_type) to choose proof gates.delegate_address=<hot_agent_address> to keep the buyer's seed cold — the agent signs on the buyer's behalf. No spend caps; buyer must have issued a DelegateSet first. See get_wallet_setup_guide() → optional_xls75_delegation.evaluate_token with the worker; the worker calls evaluate_escrow_work(escrow_id, work, evaluate_token=...). PASS releases payment automatically. On FAIL read criteria_failed, fix, resubmit; purchase_extra_attempt(escrow_id, fee_hash) when out of attempts.audit_task(task, work, fee_hash) ($0.10; 3 free audits for wallets with trust score ≥ 25).get_wallet_trust_score(wallet_address) and check_wallet_sanctions(wallet_address) before hiring or accepting work from an unknown wallet (or just use assess_counterparty_and_job).check_wallet_kyc, start_wallet_kyc; guide: https://www.cryptovault.co.uk/kyc/). Hard ceiling $10,000.explain_agenttrust_trust_model() explains who holds funds and what is verified.Fees: https://www.cryptovault.co.uk/fees/ · Marketplace: https://www.cryptovault.co.uk/marketplace/ · API docs: https://mcp.cryptovault.co.uk/docs · CLAUDE.md guide: https://www.cryptovault.co.uk/claude-md/
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.