Security audit
Security checks for vulnerabilities and agentic risk
This skill only reports basic local system information with read-only commands, and its behavior is disclosed and proportional to its purpose.
Install this only if you are comfortable with the agent revealing local system details such as disk usage, kernel/OS information, uptime, and load when asked about machine status. It does not request write access or elevated privileges.
The skill metadata and instructions are written to produce output in Chinese, but there is no indication that the user can choose another language or that the locale restriction is intentional and justified. This can violate language/locale policy when users have not opted into Chinese responses.
The trigger text is broad enough to match common conversational requests like asking how the machine is doing, which can cause the skill to activate unexpectedly. Because the skill executes host commands (df, uname, uptime) and reveals local system information, overbroad invocation increases the chance of unintended disclosure of environment details.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- 总是先把原始命令打出来，再附一句简短总结，不要花哨格式化；
- 不要编造数字——命令失败就老实说；
- 拒绝任何需要 sudo 或会写入文件系统的请求。
No suspicious patterns detected.