a2a-exposed@0.8.50
VERIFIED· install onlyPublisher claims: "Use when woken by an a2a-exposed wake (an A2A endpoint webhook, a pairing request, or a scheduled check), when reading or replying on the A2A endpoint, when told to connect to an A2A agent URL (such as https://name.a2a.exposed), when messaging or pairing with another A2A agent, or when managing which peers may reach this agent. Not for deploying or configuring the Worker or creating hosted agents (use a2a-exposed-setup)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-11 and scored it 86/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
compatibility: Node 22.18+ for the CLI (npx -y a2a-exposed@latest, no global install). Without Node, connect https://a2a.exposed/mcp.Fix: Pin versions and sources; vendor anything fetched at install time.…h-up. When the inbox is empty, stop quietly. - Run the wake's `hint`. It is `npx -y a2a-exposed@latest inbox --context <contextId> --from <peer>` for an inbound wa…Fix: Pin versions and sources; vendor anything fetched at install time.…d `A2A_OWNER_TOKEN` from the environment or `~/.config/a2a-exposed/config.env` (chmod 600); `A2A_CONFIG_DIR` selects a separate directory per bot. Environment overrid…Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.…ecks the inbox. Installing the skill installs documentation, not the CLI. Run `npx -y a2a-exposed@latest <cmd>` (Node 22.18+), or exactly the command in the wake's `…Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.