oracle-ai-research-e2e — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited oracle-ai-research-e2e (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to prove that Peter Steinberger's Oracle 0.13 layer and the local ai-research-browser CLI work together, without turning Oracle into a bypass for account, plan, model, quota, or screenshot guards.
The public-safe local harness is:
python3 skills/software-development/oracle-ai-research-e2e/scripts/oracle_ai_research_e2e_check.pyCheck all of these before claiming the integration works:
@steipete/[email protected] appears in generated commands.oracle-plan emits --browser-attach-running, --remote-chrome, --browser-research, status, reattach, and session --render.workflow-run --oracle-mode assist|runner writes Oracle evidence into the same workflow payload.runner mode blocks when local login/account/plan/feature/screenshot guards fail.From the repo root:
python3 skills/software-development/oracle-ai-research-e2e/scripts/oracle_ai_research_e2e_check.py \
--jsonThis runs only local, public-safe checks:
ai_research_browser.pyoracle-plan command generationworkflow-run --oracle-mode runner blocked-path prooforacle-e2e-smoke opt-in blocking proofOn Linux CI hosts without Brave/Comet/Chrome profiles, the browser-dependent workflow-run runner proof is reported as skipped: browser-not-discovered-on-this-host; on the local macOS Hermes machine it should run and prove blocked-by-local-guards.
Run real E2E only when the browser CDP session and paid-quota use are intentional:
AI_RESEARCH_BROWSER_E2E=1 \
python3 skills/software-development/oracle-ai-research-e2e/scripts/oracle_ai_research_e2e_check.py \
--live \
--browser brave \
--profile work \
--provider chatgpt \
--mode thinking \
--cdp-port 9223 \
--jsonUse one flow first. Do not start a broad matrix until the single target has status=verified or an equally strong captured output plus screenshot evidence.
To install this skill into Hermes:
mkdir -p ~/.hermes/skills/software-development
cp -R skills/software-development/oracle-ai-research-e2e ~/.hermes/skills/software-development/After install, restart or refresh the agent if the skill list is cached.
From a Hermes skill copy, pass the repo root when the current directory is not the public skills repo:
python3 ~/.hermes/skills/software-development/oracle-ai-research-e2e/scripts/oracle_ai_research_e2e_check.py \
--repo-root /path/to/martins-awesome-skills \
--quick \
--jsonoracle-plan alone as a live E2E result. It proves command integration only.AI_RESEARCH_BROWSER_E2E=1.blocked-by-local-guards.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.