How OROBO checks

OROBO aims to be the place in the AI universe you can trust. That is why we disclose what we check, what we don’t, how we sort and what is not allowed.

What OROBO checks

Every work is checked automatically when it is submitted and daily after that. The result is public on every work page. Where applicable, we check:

• Reachability and response time of the given link
• The website’s security headers (HSTS, CSP, nosniff, frame protection, referrer and permissions policy)
• Repository: public, not archived, detected licence, latest maintenance
• Ownership: does the repository belong to the verified member who submitted the work?
• Code patterns in instructions and skill files: scripts started directly from third-party sources, access to credentials and wallets, suspicious download addresses, password-protected archives — for skills and prompts also hidden instructions (prompt injection) and obfuscated code
• The member’s identity (GitHub, own domain, ID check by Stripe)
• Price information and seller details for paid works

The weighted results make up the trust score (0–100). If a check fails, the score is at most 40. Works by verified members with at least 70 points and no failed check go live automatically; the OROBO team reviews all others by hand. The levels have the same names everywhere: “Automatically checked” — applies to all works. “Reviewed by hand” — also looked at by a person. “Deep audit” — passed a manual audit requested by the member (€149 or as a Founding benefit).

The trust score is a guide, not a guarantee. It checks public signals — origin, code patterns, maintenance, reachability — not whether a work is effective. Claims about the protection offered by security tools come from the maker. For known risks, OROBO adds a public risk notice; the trust score is then at most 79. Check for yourself before use whether a work fits your purpose.

What we don’t check

Our checks have limits. We do not check:

• whether a work is effective or keeps its promises — nor how well security tools protect;
• whether a work suits your purpose;
• the quality or lawfulness of products we include from public sources;
• the scientific validity of studies and results. OROBO reports name their sources but do not replace peer review;
• whether a work, project or company is a suitable investment. OROBO does not give investment advice.

How OROBO sorts

The default sort, “Recommended”, takes into account, in this order:

1. Editorial highlighting by the OROBO team
2. Human review (“Reviewed by hand”)
3. Trust score
4. Popularity based on GitHub stars, capped so that large projects don’t push out small ones

Ads (Spotlight, €19 for 7 days) appear separately above the results, are labelled “Ad” and do not change the order. They never appear in Angel’s recommendations or in packages.

Other sorts: “Trust”, “New” (time of publication) and “A–Z”. Angel uses the same catalogue: a set of rules orders works by your goal, and a language model words the recommendation. Payment does not influence Angel’s recommendations.

Works by the operator (Oroboros Design) are labelled “By OROBO itself” and are not favoured in the ranking. Differences you should know about: no OROBO fee applies to the operator’s own works; in the package path “Set up for you” only the operator is currently listed; Angel shows operator offers at most once, marked separately and never as the first recommendation; in packages they are never the main recommendation, only an alternative.

Curated entries

So that the universe is useful from day one, OROBO adds well-known works from their official public sources. They are labelled “Curated”. For them:

• There is no connection between OROBO and the maker — except for works marked “Partner”: then OROBO receives a commission or has agreed an offer. This changes neither the trust score nor the order. The name is only used to identify the work.
• OROBO uses its own short descriptions — no copied texts or screenshots from the maker. To identify a work clearly, we show its public icon (favicon, app icon or GitHub profile picture), as search engines and browsers do. Trademarks and logos belong to their owners; their use does not imply a connection with or endorsement by the maker. On request we remove them immediately.
• The trust score and check results come from an automated technical check of publicly available data. They are not a judgement on the quality or lawfulness of the product.
• Rights holders can claim a work at any time or object to its inclusion via “Request removal” on the work page. We review every request promptly and remove the entry if there is a legitimate interest.

OROBO reports

OROBO reports are created with AI. Every report carries a visible AI notice at the top and is also marked as AI content in machine-readable form.

• Existing reports that have not been editorially reviewed yet carry the notice “Written with AI from the sources listed, not yet editorially reviewed.” If such a report has not been reviewed by 1 December 2026, we take it offline.
• New reports are published only after editorial review. They carry the notice “Created with AI assistance. Reviewed and approved by [name] on [date].”
• Changes to reviewed statements go online only after a new review. Until then, the reviewed version stays up.

Corrections by severity

• S1 · Minor error: Typo or broken link. We fix it quietly and update the modification date. No entry in the list of corrections.
• S2 · Wrong detail: A detail is wrong; the core statement holds. A note at the affected paragraph and an entry in the list of corrections. Deadline: 72 hours from when we learn of it.
• S3 · Serious error: The core statement is wrong, or a person or company is affected. A box at the top of the report, an entry in the list of corrections and a notice in the next issue. If we also spread the error elsewhere, for example on social media, we correct it there too. We inform those affected and publish a reply if one is requested (§ 20 MStV, German media law). Deadline for the box in the report: 24 hours from when we learn of it.

All corrections from S2 upwards are listed on the Corrections page.

Translations

Japanese and Chinese texts are machine-translated and labelled as AI translations. The German legal texts are binding.

Angel acts in plain sight

Angel can guide you through the site, set filters, pre-fill forms and read content aloud. Every step is visible on screen and logged; any input of your own stops Angel immediately. Angel never triggers purchases, submissions or consents itself — the last click is always yours.

Reviews

OROBO currently shows no user reviews. Figures such as stars come from public sources (GitHub) and are named as such.

Not allowed

• Malware, data theft, hidden data transfers
• Deception about features, origin, prices or check status
• Unlawful content, infringement of copyright, trademark or personality rights
• Software that deliberately spies on or harasses people, or imitates them deceptively without consent
• Bought or fabricated recommendations, mass submissions without value of their own

Reports and decisions

Every work page has a “Report” button — with a separate reason for rights holders (“Removal / objection”). We see reports immediately. In case of security risks we pause works as a precaution. Members are told why a work was paused or rejected and can object.

Fees

Listing is free. Fees apply only when you sell: 4% via your own link, 7% via OROBO, plus payment processing at cost. The OROBO checkout is not switched on yet; until then you sell with your own payment link, with no OROBO fee. All details · How OROBO makes money

Version and changes

Current version: 1, dated 30 October 2026.

We announce changes to this page here 14 days in advance. Business members are notified of changes by email at least 15 days in advance (terms § 9b).

Announced changes: none at present.

Change log

• Correction · 4 November 2026 — Editorial, no change to the rules: the “Translations” section now also names Chinese, which was already machine-translated and labelled before.
• Version 1 · 30 October 2026 — New address /methodik (previously /regeln, as of 15 October 2026; old links redirect). New sections “What we don’t check” and “OROBO reports”, plus version information and this log. The “Fees” section now states that the OROBO checkout is not switched on yet. “Member” replaces “creator”. Checking rules and sorting are unchanged.