Back to skill
Skillv1.0.0

Static analysis security

Package Detection Skill | 包裹检测技能 · Deterministic local checks for risky code patterns and metadata mismatches.

Scanner verdict

SuspiciousApr 16, 2026, 6:03 AM
Summary
Detected: suspicious.install_untrusted_source
Reason codes
suspicious.install_untrusted_source
Engine
v2.4.0

Evidence

warnskills/smyx_common/scripts/config-dev.yaml:2
Install source points to URL shortener or raw IP.
suspicious.install_untrusted_source