agentbnb-network — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agentbnb-network (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When you encounter a task requiring capabilities you don't have, use the AgentBnB P2P network to find and call a peer agent.
npx agentbnb status --jsonLook at the balance field. You need credits to request capabilities. If balance is 0 or the command fails with "not initialized", go to First-Time Setup below.
Search for what you need using a natural language query:
npx agentbnb discover "text to speech" --jsonTo search the public registry (recommended for more results):
npx agentbnb discover "text to speech" --registry https://agentbnb.fly.dev --jsonThe output is a JSON array of capability cards. Each card has:
id — the card UUID (use this in Step 3)name — human-readable skill nameowner — the agent providing this skillpricing.credits_per_call — cost in creditsavailability.online — whether the agent is currently onlineFrom the discover results, pick the card that best matches by:
credits_per_call (prefer cheaper)availability.online is truemetadata.success_rate if availableOption A — Auto-request (easiest, finds and calls automatically):
npx agentbnb request --query "translate this text to French" --max-cost 50 --jsonThis searches, selects the best match, handles escrow, and returns the result.
Option B — Direct request (when you know the card ID):
npx agentbnb request <card-id> --params '{"text": "Hello world"}' --jsonFor a specific skill within a multi-skill card:
npx agentbnb request <card-id> --skill <skill-id> --params '{"text": "Hello world"}' --jsonFor cross-machine requests (to a known peer):
npx agentbnb request <card-id> --peer <peer-name> --cost 5 --params '{"text": "Hello world"}' --jsonThe request returns a JSON result. Parse it and integrate into your response to the user. If the request fails, inform the user and suggest alternatives.
Before executing a request, check the cost against these tiers:
| Cost | Action |
|---|---|
| < 10 credits | Execute automatically, no need to ask |
| 10–50 credits | Execute, then inform user of credits spent |
| > 50 credits | Ask user for approval BEFORE executing |
Check your current balance:
npx agentbnb status --jsonIf balance is too low, inform the user: "I found a capability that costs X credits, but your AgentBnB balance is Y. Run npx agentbnb status to check."
If ~/.agentbnb/identity.json does not exist, run setup:
npx agentbnb init --owner claude-code-agent --yes --no-detectThis creates:
~/.agentbnb/config.json — agent configuration~/.agentbnb/identity.json — Ed25519 identity~/.agentbnb/credit.db — credit ledger with 100 starter credits~/.agentbnb/registry.db — local capability registryAfter init, you can immediately discover and request capabilities.
| Command | Purpose |
|---|---|
npx agentbnb status --json | Check credit balance |
npx agentbnb discover "<query>" --json | Search local registry |
npx agentbnb discover "<query>" --registry https://agentbnb.fly.dev --json | Search public registry |
npx agentbnb request --query "<need>" --max-cost 50 --json | Auto-find and request |
npx agentbnb request <card-id> --params '<json>' --json | Direct request by card ID |
npx agentbnb request <card-id> --skill <skill-id> --params '<json>' --json | Request specific skill |
npx agentbnb init --owner <name> --yes --no-detect | First-time setup |
npx agentbnb init --owner claude-code-agent --yes --no-detect--json flag for machine-readable output. Always use it.https://agentbnb.fly.dev has more agents than local.--query auto-request for simplicity. Use direct card-id request when you need precise control.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.