What security grade does nekro-agent have?

nekro-agent is graded SAFE by AgentSkillsHub's rule-based security scan (SlowMist 11 red-flag categories). Reviewed, no blocking issues found — reasonable for general use. Still confirm credential handling before production use.

Is nekro-agent safe to install?

Security audit of KroMiose/nekro-agent · MCP Server by KroMiose · ★ 900

✓ SAFE Basic audit · rule-based scan · SlowMist 11 red-flag categories

Yes — nekro-agent passed AgentSkillsHub's rule-based security scan with no dangerous patterns detected. As with any third-party skill, confirm what credentials it requests before production use.

What it is: NekroAgent 是一个面向多人互动场景的跨平台 Agent 框架，集 Claude Code 沙盒执行、工作区编排、长期记忆、结构化 MCP 管理与可视化控制台于一体，兼具高扩展性、多模态交互、实时状态推送和自动化运行能力。项目支持 QQ、Discord、Telegram、Minecraft、BilibiliLive、WeChat、Email、SSE(SDK) 等多种平台接入，应用于构建高智能聊天机器人，可扩展为具备代码执行、工具调用、插件协作和复杂任务处理能力的通用 Agent 系统

Red flags detected (1)

🚩 sudo usage

Audit summary

Security grade	✓ SAFE
Quality score	62/100
GitHub stars	900
Language	Python
License	NOASSERTION
Last updated	2026-06-25

Check before you install

What credentials does it ask for, and where are they stored?
Is the maintainer identifiable and the repo actively maintained?
Read the install scripts and network calls before trusting it.

Run a live scan → Full details & install 5-dimension deep audit

This is AgentSkillsHub's free basic audit: an automated rule-based scan covering SlowMist's 11 red-flag categories (credential exfiltration, obfuscated payloads, sandbox escape, prompt injection, and more) across 117,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A SAFE grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-07-03.