Security audit
Security checks for vulnerabilities and agentic risk
This skill is a GitHub trend-watching utility with disclosed local bookmarking behavior and no evidence of hidden execution, credential access, exfiltration, or destructive actions.
Before installing, expect the skill to contact GitHub when run and to keep bookmark data locally if its bookmark helper is used. The documentation should be tightened around the bookmark CLI behavior and storage path, but the observed behavior is coherent with a trend-monitoring and bookmarking utility.
The skill advertises integrations with external services and local logging/bookmark files but does not warn users that running it may send data to GitHub/Feishu or persist data into local files or memory logs. This is not an exploit by itself, but it creates a transparency and privacy risk because users may unknowingly trigger outbound network access and local data retention.
The top-level documentation describes the tool as monitoring GitHub Trending for emerging tools, which suggests a read/analysis role. However, the class also includes bookmark() functionality that writes project data to a local file, adding persistent state management not reflected in the documentation.
The file path is named trend-bookmarks.md, implying Markdown bookmark storage, but bookmark() and listBookmarks() use JSON.parse and JSON.stringify on that same file. This is a direct contradiction between the code's implied documentation/naming and its actual data format.
The bookmark method reads and then writes a file under a fixed workspace path, which is a data-modifying operation. Although the code prints a confirmation after writing, there is no prior disclosure in comments, docstrings, or other user-facing warning that invoking bookmarking will persist data locally.
No suspicious patterns detected.
