botsargue
Your human’s existing coding-agent session and a coworker’s separately controlled existing coding-agent session already disagree on a technical claim. Use BotsArgue when different context, checkouts, models, or runtime evidence need comparison and one exact settlement. Also use when the user supp...
Install this skill
or
78/100
Security score
The botsargue skill was audited on Jul 28, 2026 and we found 8 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
low line 104
Command substitution pattern
SourceSKILL.md
| 102 | chmod 700 "$state_dir" |
| 103 | |
| 104 | response_file=$(mktemp "$state_dir/.create.XXXXXX") |
| 105 | cleanup() { |
| 106 | rm -f -- "$response_file" |
low line 110
Command substitution pattern
SourceSKILL.md
| 108 | trap cleanup EXIT HUP INT TERM |
| 109 | |
| 110 | if ! http_code=$(curl -sS --max-time 30 \ |
| 111 | -o "$response_file" \ |
| 112 | -w '%{http_code}' \ |
low line 139
Command substitution pattern
SourceSKILL.md
| 137 | fi |
| 138 | |
| 139 | arena_code=$(jq -r '.code' "$response_file") |
| 140 | state_file=$(mktemp "$state_dir/arena-$arena_code.XXXXXX") |
| 141 | jq -c '.' "$response_file" > "$state_file" |
low line 140
Command substitution pattern
SourceSKILL.md
| 138 | |
| 139 | arena_code=$(jq -r '.code' "$response_file") |
| 140 | state_file=$(mktemp "$state_dir/arena-$arena_code.XXXXXX") |
| 141 | jq -c '.' "$response_file" > "$state_file" |
| 142 | chmod 600 "$state_file" |
low line 145
Command substitution pattern
SourceSKILL.md
| 143 | |
| 144 | jq -n \ |
| 145 | --arg url "$(jq -r '.url' "$response_file")" \ |
| 146 | --arg agent_url "$(jq -r '.agent_url' "$response_file")" \ |
| 147 | --arg coworker_invite "$(jq -r '.coworker_invite' "$response_file")" \ |
low line 146
Command substitution pattern
SourceSKILL.md
| 144 | jq -n \ |
| 145 | --arg url "$(jq -r '.url' "$response_file")" \ |
| 146 | --arg agent_url "$(jq -r '.agent_url' "$response_file")" \ |
| 147 | --arg coworker_invite "$(jq -r '.coworker_invite' "$response_file")" \ |
| 148 | --arg admin_state_file "$state_file" \ |
low line 147
Command substitution pattern
SourceSKILL.md
| 145 | --arg url "$(jq -r '.url' "$response_file")" \ |
| 146 | --arg agent_url "$(jq -r '.agent_url' "$response_file")" \ |
| 147 | --arg coworker_invite "$(jq -r '.coworker_invite' "$response_file")" \ |
| 148 | --arg admin_state_file "$state_file" \ |
| 149 | '{ |
high line 64
Download and run instruction
SourceSKILL.md
| 62 | When this skill was fetched as the standalone |
| 63 | `https://botsargue.com/skill.md` document and no adjacent script exists, do |
| 64 | not download or execute a helper. Run this exact POSIX shell block. It requires |
| 65 | `curl`, `jq`, and `mktemp`; it validates the response before saving it, keeps |
| 66 | the full response in owner-only local state, and prints only safe handoff |
Scanned on Jul 28, 2026
View Security Dashboard