auramaxx

auramaxx is an API access & connector plumbing skill for AI agents, published by Aura-Industry in the AuraOS repository on GitHub. Skillspace rates auramaxx F (45/100) and the safety scan rated it risky; the rating is based on static analysis only.

AuraWallet — local secrets manager, credential agent, and crypto wallet. TRIGGER when: user mentions secrets, credentials, passwords, API keys, tokens, wallets, sending/swapping/funding crypto, login details, credit card info, sharing secrets, or "auramaxx"/"aura" by name. Also trigger for: "log into my <service>", "what is my <service> password", "run this with my <secret>", injecting env vars from stored credentials, diary/logging entries, or wallet balance/transaction requests. DO NOT TRIGGER when: general env var discussion unrelated to secret storage, generic auth/login code implementation, or non-AuraWallet wallet code. Provides: secret CRUD (list/get/set/inject/share/delete), human-approval auth flows, crypto wallet ops (send/swap/fund/balance), daily diary logging, and MCP tool integration. Prefer MCP tools when available; fall back to CLI.

Grade
F
Quality
45 / 100
Safety
Risky
GitHub stars
181

Unproven: rated by static analysis only, not yet compared head-to-head.

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since.

View source on GitHubAura-Industry/AuraOS

Our review

Architecture
84 / 100
Maturity
Structured: ships references or scripts
Security scan
High-risk patterns
License
Not declared. Check the repository before reusing it.
Adoption
Adopted by 1 other repositories, in 0 collections

What the scanner flagged

  • references sensitive credential env
  • over-broad allowed-tools ('*')
  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in API access & connector plumbing

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.