Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Zhihu search and topic-analysis helper whose network use is disclosed and aligned with its stated purpose.
Install this if you are comfortable with the skill sending your Zhihu search keywords to Zhihu endpoints. Expect Chinese-focused output and note that the documented --analyze example appears unsupported by the included script.
The skill invokes a network-capable script (scripts/fetch_zhida.py) but the manifest does not declare any explicit tool scope such as permissions or allowed-tools. This creates a transparency and policy-control gap: consumers or hosting platforms may not realize the skill performs outbound network access, making review, sandboxing, and least-privilege enforcement harder.
The file presents nearly all user-facing operational content in Chinese, including the name, feature descriptions, usage guidance, and cautions, but does not state that the skill is intended only for Chinese-speaking users or offer any language/locale option. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The request headers force Accept-Language to zh-CN,zh;q=0.9, which imposes a specific language/locale preference in the skill's behavior. This matches the policy category for language/locale constraints because the file does not provide an opt-in, fallback, or justification for restricting requests to Chinese.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
def get_hot_list(limit=10):
"""获取知乎热榜"""
url = "https://api.zhihu.com/topstory/hot-lists/total?limit={}".format(limit)
try:
req = Request(url, headers=HEADERS)
with _urlopen(req, timeout=10) as resp:
The skill description is written as an instruction-facing description entirely in Chinese, with no indication that other languages are supported or that Chinese is required for a justified region-specific purpose. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.