Skip to main content

hitl-protocol

Enables human-in-the-loop decision-making for autonomous agents, ensuring critical choices are made with human oversight.

Install this skill

or
59/100

Security score

The hitl-protocol skill was audited on May 23, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 209

Template literal with variable interpolation in command context

SourceSKILL.md
209const caseId = `review_${crypto.randomBytes(16).toString('hex')}`;
medium line 223

Template literal with variable interpolation in command context

SourceSKILL.md
223message: `${results.length} jobs found. Please select which ones to apply for.`,
medium line 227

Template literal with variable interpolation in command context

SourceSKILL.md
227review_url: `https://yourservice.com/review/${caseId}?token=${token}`,
medium line 228

Template literal with variable interpolation in command context

SourceSKILL.md
228poll_url: `https://api.yourservice.com/v1/reviews/${caseId}/status`,
medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md
3description: "HITL Protocol — the open standard for human decisions in autonomous agent workflows. When a website or API needs human input, it returns HTTP 202 with a review URL. Autonomous agents lik
medium line 73

Webhook reference - potential data exfiltration

SourceSKILL.md
73| **Transport** | Polling (required), SSE (optional), Callback/Webhook (optional) |
low line 31

External URL reference

SourceSKILL.md
31**[Interactive Playground](https://rotorstar.github.io/hitl-protocol/playground/index.html)** — try all review types, transports, and inline actions live in your browser.
low line 105

External URL reference

SourceSKILL.md
105"review_url": "https://service.example.com/review/abc123?token=K7xR2mN4pQ...",
low line 106

External URL reference

SourceSKILL.md
106"poll_url": "https://api.service.example.com/v1/reviews/abc123/status",
low line 227

External URL reference

SourceSKILL.md
227review_url: `https://yourservice.com/review/${caseId}?token=${token}`,
low line 228

External URL reference

SourceSKILL.md
228poll_url: `https://api.yourservice.com/v1/reviews/${caseId}/status`,
low line 249

External URL reference

SourceSKILL.md
249response = httpx.post("https://api.jobboard.com/search", json=query)
low line 325

External URL reference

SourceSKILL.md
325review_base_url: "https://yourservice.com/review"
low line 424

External URL reference

SourceSKILL.md
424- [RFC 9110](https://www.rfc-editor.org/rfc/rfc9110) — HTTP semantics (`202 Accepted`, conditional requests, retry behavior)
low line 425

External URL reference

SourceSKILL.md
425- [RFC 2119](https://www.rfc-editor.org/rfc/rfc2119) + [RFC 8174](https://www.rfc-editor.org/rfc/rfc8174) — normative terms (`MUST`, `SHOULD`, `MAY`)
low line 426

External URL reference

SourceSKILL.md
426- [RFC 3339](https://www.rfc-editor.org/rfc/rfc3339) — timestamp formats used by HITL case lifecycle fields
low line 427

External URL reference

SourceSKILL.md
427- [RFC 6750](https://www.rfc-editor.org/rfc/rfc6750) — bearer token usage for review and inline submit authorization
Scanned on May 23, 2026
View Security Dashboard
Installation guide →