b0
Enables delegation of tasks to AI agents for code review, security checks, and data analysis, enhancing productivity through parallel execution.
Install this skill
or
81/100
Security score
The b0 skill was audited on Jun 8, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 98
Webhook reference - potential data exfiltration
SourceSKILL.md
| 98 | b0 add <name> --instructions "..." --webhook # create agent with trigger URL |
low line 99
Webhook reference - potential data exfiltration
SourceSKILL.md
| 99 | b0 add <name> --instructions "..." --webhook-secret s # create agent with HMAC secret |
medium line 158
Webhook reference - potential data exfiltration
SourceSKILL.md
| 158 | ## Webhook triggers |
medium line 160
Webhook reference - potential data exfiltration
SourceSKILL.md
| 160 | Every agent with `--webhook` has a trigger URL. Any HTTP POST to that URL runs the agent. |
low line 163
Webhook reference - potential data exfiltration
SourceSKILL.md
| 163 | b0 add notifier --instructions "Process incoming alerts." --webhook |
low line 177
Webhook reference - potential data exfiltration
SourceSKILL.md
| 177 | b0 add notifier --instructions "Process alerts." --webhook --webhook-secret mysecret |
medium line 56
Access to hidden dotfiles in home directory
SourceSKILL.md
| 56 | On first start, Box0 creates an admin account and auto-configures `~/.b0/config.toml`. |
Scanned on Jun 8, 2026
View Security DashboardGitHub Stars 78
Rate this skill
Categorysales
UpdatedJune 15, 2026
openclawapisdrcustomer-success-managertechnical-supportproduct-managerproject-managersalessupportproductproject management
risingwavelabs/box0