What did polygraph check?

Three static checks: S-01 prompt-injection and context-poisoning, S-03 data-exfiltration instructions, and S-04 dangerous bundled commands.

How do I reproduce this grade?

Run: npx -p @polygraphso/litmus polygraphso-litmus-skill . The scan is open and deterministic, anchored to the skill's content hash, so the same directory yields the same grade.

§ Skill/Static safety grade

public/skills/aslaep123/bybit-agent

Q: What does the D skill grade mean for public/skills/aslaep123/bybit-agent?

It's a static safety grade (A/B/D/F) from a deterministic scan of the skill's SKILL.md and bundled files. An A means static-clean — not behavioral proof, since a skill's instructions are interpreted by an agent at runtime.

github/Demerzels-lab/elsamultiskillagent#public/skills/aslaep123/bybit-agent

litmus-skill-v3 · 2026-07-05

graded at commit f45fcb5 · 2026-05-14

A static safety grade — a deterministic scan of the skill’s SKILL.md and bundled files. An A means static-clean, not behavioral proof: a skill’s instructions are interpreted by an agent at runtime.

Share on X

S-01 Prompt-injection / context-poisoningpass

S-03 Data-exfiltration instructionspass

S-04 Dangerous bundled commandsfail

dangerous-command· high· SKILL.md
base64 -D | bash
dangerous-command· high· SKILL.md
base64-decoded: bash -c "$(curl
dangerous-command· high· SKILL.md
base64-decoded: bash -c "$(curl
dangerous-command· high· SKILL.md
base64-decoded: bash -c "$(curl
dangerous-command· high· SKILL.md
base64-decoded: bash -c "$(curl

content hash · 0x4ee3ed02c3…576e

How to fix this →

Guided remediation — the specific changes that clear this grade.

Source · github.com/Demerzels-lab/elsamultiskillagent/tree/main/public/skills/aslaep123/bybit-agent

Watch for changes

This grade is a snapshot of the skill’s files at one commit. Get an email when a new commit changes public/skills/aslaep123/bybit-agent and polygraph re-runs the litmus — one message per change, one-click unsubscribe.

Monitor this skill

Reproduce this grade

The skill litmus is open and deterministic. Point it at the skill directory and compare the grade and content hash — a false grade is falsifiable, not merely disputable.

npx -p @polygraphso/litmus polygraphso-litmus-skill <skill-dir>

Embed this badge

Drop it in the skill’s README, docs, or listing. It always shows the current grade and links back here.

Markdown — badge

[![polygraph](https://polygraph.so/api/badge/skill?skill=github/Demerzels-lab/elsamultiskillagent/public/skills/aslaep123/bybit-agent)](https://polygraph.so/skill/github/Demerzels-lab/elsamultiskillagent/public/skills/aslaep123/bybit-agent)

HTML — badge

<a href="https://polygraph.so/skill/github/Demerzels-lab/elsamultiskillagent/public/skills/aslaep123/bybit-agent"><img src="https://polygraph.so/api/badge/skill?skill=github/Demerzels-lab/elsamultiskillagent/public/skills/aslaep123/bybit-agent" alt="polygraph grade"></a>

Markdown — card

[![polygraph](https://polygraph.so/api/badge/skill/card?skill=github/Demerzels-lab/elsamultiskillagent/public/skills/aslaep123/bybit-agent)](https://polygraph.so/skill/github/Demerzels-lab/elsamultiskillagent/public/skills/aslaep123/bybit-agent)

Questions

What does the D skill grade mean for public/skills/aslaep123/bybit-agent?: It’s a static safety grade(A/B/D/F) from a deterministic scan of the skill’s SKILL.md and bundled files. An A means static-clean — not behavioral proof, since a skill’s instructions are interpreted by an agent at runtime.
What did polygraph check?: Three static checks: S-01 prompt-injection and context-poisoning, S-03 data-exfiltration instructions, and S-04 dangerous bundled commands. The full battery is in the methodology.
How do I reproduce this grade?: Run npx -p @polygraphso/litmus polygraphso-litmus-skill <skill-dir>. The scan is open and deterministic, anchored to the skill’s content hash, so the same directory yields the same grade.