Skip to main content

ensue

Facilitates coordination and memory management for AI agents in Delibera, enabling efficient state sharing and debugging.

Install this skill

or
6/100

Security score

The ensue skill was audited on Jun 6, 2026 and we found 30 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 30

Template literal with variable interpolation in command context

SourceSKILL.md
30Authorization: `Bearer ${process.env.ENSUE_API_KEY}`,
medium line 41

Template literal with variable interpolation in command context

SourceSKILL.md
41if (data.error) throw new Error(`Ensue error: ${data.error.message}`)
medium line 121

Template literal with variable interpolation in command context

SourceSKILL.md
121{ key_name: `coordination/tasks/${did}/status`, description: 'Worker task status', value: 'pending' },
medium line 122

Template literal with variable interpolation in command context

SourceSKILL.md
122{ key_name: `coordination/tasks/${did}/timestamp`, description: 'Worker task timestamp', value: Date.now().toString() },
medium line 164

Template literal with variable interpolation in command context

SourceSKILL.md
164{ key_name: `coordination/tasks/${workerDID}/status`, description: 'Task status', value: 'pending' },
medium line 165

Template literal with variable interpolation in command context

SourceSKILL.md
165{ key_name: `coordination/tasks/${workerDID}/timestamp`, description: 'Assigned at', value: Date.now().toString() },
medium line 174

Template literal with variable interpolation in command context

SourceSKILL.md
174const status = await ensue.get(`coordination/tasks/${workerDID}/status`)
medium line 180

Template literal with variable interpolation in command context

SourceSKILL.md
180const keys = snapshot.map(did => `coordination/tasks/${did}/status`)
medium line 191

Template literal with variable interpolation in command context

SourceSKILL.md
191`worker/reasoning/${proposalId}`,
medium line 218

Template literal with variable interpolation in command context

SourceSKILL.md
218name: `delibera-coord-${coordinatorDid.slice(-8)}`, // max 64 chars, alphanumeric + hyphens/underscores
medium line 296

Template literal with variable interpolation in command context

SourceSKILL.md
296key_names: [`@${coordinatorOrgName}/coordination/tasks/${workerDID}/status`]
medium line 317

Template literal with variable interpolation in command context

SourceSKILL.md
317await ensue.set(`public/proposals/${proposalId}/tally`, JSON.stringify(tally))
medium line 348

Template literal with variable interpolation in command context

SourceSKILL.md
348key_name: `coordination/tasks/${workerDID}/status`,
medium line 354

Template literal with variable interpolation in command context

SourceSKILL.md
354{ headers: { Authorization: `Bearer ${process.env.ENSUE_API_KEY}` } }
medium line 358

Template literal with variable interpolation in command context

SourceSKILL.md
358if (data.key_name === `coordination/tasks/${workerDID}/status`) {
medium line 375

Template literal with variable interpolation in command context

SourceSKILL.md
375console.warn(`Ensue key not found or error: ${key}`)
low line 27

Fetch to external URL

SourceSKILL.md
27const res = await fetch('https://api.ensue-network.ai/', {
low line 214

Fetch to external URL

SourceSKILL.md
214const res = await fetch('https://api.ensue-network.ai/auth/agent-register', {
low line 322

Fetch to external URL

SourceSKILL.md
322const result = await fetch('https://api.ensue-network.ai/public', {
low line 30

Access to .env file

SourceSKILL.md
30Authorization: `Bearer ${process.env.ENSUE_API_KEY}`,
low line 173

Access to .env file

SourceSKILL.md
173const workerDID = deriveDidFromPrivateKey(process.env.WORKER_STORACHA_PRIVATE_KEY!)
low line 294

Access to .env file

SourceSKILL.md
294const coordinatorOrgName = process.env.COORDINATOR_ENSUE_ORG! // e.g. 'delibera-coord-x7k2'
low line 354

Access to .env file

SourceSKILL.md
354{ headers: { Authorization: `Bearer ${process.env.ENSUE_API_KEY}` } }
low line 14

External URL reference

SourceSKILL.md
14**Base URL:** `https://api.ensue-network.ai/`
low line 15

External URL reference

SourceSKILL.md
15**Public URL (unauthenticated reads):** `https://api.ensue-network.ai/public`
low line 27

External URL reference

SourceSKILL.md
27const res = await fetch('https://api.ensue-network.ai/', {
low line 214

External URL reference

SourceSKILL.md
214const res = await fetch('https://api.ensue-network.ai/auth/agent-register', {
low line 239

External URL reference

SourceSKILL.md
239// Claim URL: https://www.ensue-network.ai/claim?token=...
low line 322

External URL reference

SourceSKILL.md
322const result = await fetch('https://api.ensue-network.ai/public', {
low line 353

External URL reference

SourceSKILL.md
353`https://events.ensue-network.ai/mcp`,
Scanned on Jun 6, 2026
View Security Dashboard
Installation guide →
GitHub Stars 1
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
leomanza/delibera.xyz