The Grade Report: weekly grades in your inbox. Subscribe →
The Grade Report

agents

AGENTS

FDangerous

Kato-Official/joomjoo-skills

Joomjoo gives an agent three things it did not have: its own cards with a limit the person sets, the ability to clear the bank's security check (3DS) on its own, and its own browser with its own merchant logins so it can check out alone. Everything below runs against the live Joomjoo API with one API key.

AGENTS got grade F on our automated scan on 2026-10-23.

Why this grade

  • Reads keys or credentials and sends them over the network.
  • Reads keys or credentials and sends them over the network.
  • Reads keys or credentials and sends them over the network.

What grade F means · How the scan works

Details

Source

Public file: https://github.com/Kato-Official/joomjoo-skills/blob/97b3d5355a93639b2b3358fa4398670d29c7289d/AGENTS.md

Last scanned: (Oct 23, 2026, 8:15 a.m. ET)

Category: uncategorized

License: Present

View source on GitHub

Before you install

  1. Read any scripts this skill ships.
  2. Note every URL it fetches.
  3. Check allowed-tools and hooks.

Embed this grade

Add this badge to your README. It shows the current grade from CheckSkills.

CheckSkills grade F

Report this skill if the grade looks wrong, or if something slipped through.

Related

ngit

DanConwayDev/ngit-cli

Commands and workflows for NIP-34 git collaboration over Nostr with the ngit CLI and git-remote-nostr. Use in any repository with a nostr:// remote for generic collaboration requests (open an Issue, create or review a Pull Request (PR), comment, merge, clone) and whenever a task involves nostr:// URLs, ngit commands, Grasp servers, gitworkshop.dev, Nostr CI status and workflows, software releases and Zapstore publication, OCI container images, or nsite static sites published through Blossom.

Downloads a script and pipes it into a shell.

    FDangerouscursor-rule

    nextjs_api_routes

    giventadevelop/malayalees-us-site

    Rules for Next.js API route structure and security

    Reads keys or credentials and sends them over the network.

      FDangerouscursor-rule

      README

      tharsananarul/portfolio

      The First Truly Autonomous Multi-Agent Startup System

      Tells the agent to skip permissions or safety checks.

        FDangerouscursor-rule

        07_Deployment_Instructions

        theaetherai/aritisan_connect

        This application is designed for deployment on Vercel (recommended) with Hygraph as the CMS backend.

        Downloads a script and pipes it into a shell.