proagentstore-mcp-operator-0897fe — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited proagentstore-mcp-operator-0897fe (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user asks you to operate ProAgentStore through their account.
Requires an MCP client that supports OAuth or browser sign-in and access to https://mcp.proagentstore.online/mcp.
All live ProAgentStore account operations must go through the deployed MCP server:
https://mcp.proagentstore.online/mcpDo not bypass MCP with direct database writes, private API calls, local secrets, or browser-only shortcuts unless the user explicitly overrides this rule.
Allowed without MCP:
Requires MCP:
Use the platform MCP endpoint:
npx mcp-remote https://mcp.proagentstore.online/mcpIf the MCP client opens a browser authorization flow, wait for the user to approve it. Do not try to extract, print, or reuse OAuth tokens manually.
Use public trial chat only for discovery:
list_agents -> chat_with_agentUse private instance chat for the real user runtime:
list_agents -> subscribe_agent -> my_instances -> add_instance_knowledge -> chat_with_instance -> instance_messagesThe private instance flow is the product path because it keeps user state, knowledge, memory, and billing credentials separate from the creator's template agent.
Use browser-capable private instances through FAGS runtime tools:
subscribe_agent -> register_instance_runtime -> instance_runtime_status -> run_instance_task -> approve_instance_task -> instance_task_eventsPAGS is the MCP/account control plane. FAGS is the browser runtime that executes Playwright, local file uploads, screenshots, and approval-gated browser actions.
If chat_with_instance returns:
Add your Cloudflare Workers AI account ID and API token before running this agent.the private runtime is working. The instance is correctly refusing to spend platform-owned AI credentials.
Creator tools:
create_agentscaffold_agentupdate_agentmy_agentslist_agent_filesread_agent_filewrite_agent_filebatch_write_agent_filestrigger_agent_deployagent_deploy_statusadd_knowledgelist_knowledgeagent_analyticsUser runtime tools:
subscribe_agentmy_instanceschat_with_instanceinstance_messagesadd_instance_knowledgelist_instance_knowledgedelete_instance_knowledgecancel_instanceFAGS browser runtime tools:
register_instance_runtimeinstance_runtime_statusunregister_instance_runtimerun_instance_taskapprove_instance_taskcancel_instance_taskinstance_task_eventsDiscovery/reference tools:
list_agentsagent_infochat_with_agentplatform_guidesdk_referenceWhen operating through MCP:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.