arrow_backAI Skill ShieldpublicDefault-branch GitHub scan
Trust report
HKUDS/nanobot
Ultra-lightweight, open-source, self-hosted personal AI agent framework in Python with WebUI, tools, memory, MCP, multi-agent workflows, automation, and chat apps
View scanned commit on GitHubopen_in_new0%Static score
74% score26% score gap
Highest finding: High severityLatest scan
high severity
Static analysis score
Install decision
Do Not Install
Automatic execution surfaces were detected with critical or compounding risk. Hold installation until a reviewer clears the repo.
Scan identity
- Scanned
- 2026-08-08
- Commit
- bd8d3ad5b6db
- License
- MIT
- Repository
- Active
Repository scan summary
- policyFindings
- 74
- terminalInstall surface
- 5
- Repository reach
- 46,758
Validation findings detected
Execution paths reviewed
GitHub stars
Highest-priority findings
The latest default-branch scan, ordered by severity.
- highCopying files to external/network locationnanobot/skills/tmux/SKILL.md:81
- highCopying files to external/network locationnanobot/skills/weather/SKILL.md:38
- highcurl to external hostnanobot/skills/weather/SKILL.md:16
- mediumping to external hostnanobot/skills/clawhub/SKILL.md:4
- mediumNo agent compatibility detectednanobot/skills/clawhub/SKILL.md
Share this trust result
The badge stays linked to the latest default-branch scan for this skill path.
Do you consider this skill safe to use?
Community signals help prioritize human review; they do not change the scan verdict.
AI Skill Shield is an automated pre-install review, not a guarantee of safety. Confirm sensitive permissions and execution paths before installation.