Security audit
Security checks for vulnerabilities and agentic risk
This security-check skill is mostly purpose-aligned, but it handles passwords and automatically sends a password-derived HIBP hash prefix while some CLI text says the password is only analyzed locally.
Review this before installing if you have strict privacy or offline-only requirements. The raw password is not sent to HIBP, but a SHA-1 prefix derived from it is sent during password checks, and the current CLI wording does not make that consistently clear.
The skill description and guiding principle are presented entirely in Chinese, and the sample outputs later in the file also assume Chinese responses. There is no indication that the skill is region-specific or that users may opt into another language, which creates a language/locale policy issue under the natural-language policy rule.
The skill transmits derived sensitive data to an external service: the first 5 characters of the SHA-1 hash of a user password are sent to HIBP. Although this uses the standard k-anonymity design and is far safer than sending the raw password, it still performs external disclosure of password-derived material and may violate strict privacy, compliance, or offline-only expectations if users are not clearly warned and consent is not obtained.
try:
r = requests.get(
f"https://api.pwnedpasswords.com/range/{prefix}",
headers={"Add-Padding": "true"},
timeout=10
)
This code file includes natural-language descriptions and output text that force a specific language/locale for the tool experience. The policy only permits this when the skill offers a language choice or clearly justifies the locale constraint, which is not present here.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
try:
r = requests.get(
f"https://api.pwnedpasswords.com/range/{prefix}",
headers={"Add-Padding": "true"},
timeout=15
)
The CLI help text says the password is used for '仅本地分析' ('local-only analysis'), but the password-check flow calls the HIBP API with a SHA-1 prefix derived from the password. Even though this uses k-anonymity and does not send the full password, it is still external transmission of password-derived data, so the claim is misleading and can cause users to disclose secrets under false assumptions.
No suspicious patterns detected.