Security audit
Security checks for vulnerabilities and agentic risk
This skill appears low-risk, but it overstates live Hacker News monitoring because the shipped script only returns sample data.
Before installing, understand that this appears to be a lightweight demo or formatter for sample Hacker News-style data, not a real HN monitor. It does not show sensitive access or persistence, but users expecting live Hacker News results may be misled unless the publisher updates the docs or implements real retrieval.
The trigger list includes very broad terms such as "HN", "YC", and "创业", which can match many unrelated user requests and cause the skill to activate unexpectedly. While this is not directly code-execution dangerous, over-broad activation can route conversations to the wrong skill, expose unnecessary external-fetch behavior, and degrade trust or safety controls based on correct skill selection.
The manifest presents this skill as a Hacker News hot-story monitor that gets HN top content, tech discussions, and startup news. However, the code contains no network access, polling, or live data retrieval; it simply slices and formats a predefined in-memory list, so the actual behavior does not match the claimed operational purpose.
The metadata description includes a Chinese-language localized title alongside English, and the tag list explicitly includes "chinese", which suggests the skill may target or prefer a specific language/locale. There is no indication here that users can opt in to a language preference or that the locale restriction is justified as region-specific.
The file includes Chinese-only natural-language descriptions such as "获取脚本" and the function docstring "获取 HN Top Stories", with no indication that language is user-selectable or that the skill is intentionally region-specific. This can violate language/locale policy because the skill implicitly constrains its interface/documentation to a specific language without opt-in.
The function documentation says it gets HN Top Stories 'using mock data', while the skill manifest describes obtaining Hacker News hot stories as an actual monitoring/fetch capability. In practice, the function only returns a hardcoded static list and performs no real retrieval or monitoring, which creates an intent-level mismatch between the documented fetch behavior and the implemented behavior.
