File Reader

文件读取技能。当用户需要读取文件内容、查看文件、cat 文件时激活。支持读取文本文件、配置文件、代码文件等。

Security Scan

The skill's stated purpose (reading files) matches the included code, but the runtime instructions contradict the code (it tells the user to run the shell script with 'python'), which is an incoherence that should be resolved before trusting the skill.

Purpose & Capability

The skill claims to be a simple file-reader and includes a tiny shell script (read.sh) that cats an arbitrary file—this is coherent with the description. However, SKILL.md instructs calling the script with 'python read.sh', yet no Python-specific code exists and no required binaries are declared. The script actually requires a POSIX shell and the 'cat' utility; the declared requirements omit these and the invocation command is incorrect.

Instruction Scope

The SKILL.md instructs running a command that doesn't match the included script (uses 'python' on a bash script). Aside from that mismatch, the instructions only direct reading the file path provided by the user; there are no hidden endpoints, extra env vars, or references to unrelated files. The mismatch could cause failures or unexpected behavior if an agent follows the instructions literally.

Install Mechanism

No install spec (instruction-only) and only three small files are included. Nothing is downloaded or extracted during install, which is low-risk.

Credentials

The skill requests no environment variables, no credentials, and no config paths. That is proportionate for a file-reading helper.

Persistence & Privilege

The skill is not forced always-on and uses normal agent-invocation defaults. It does not modify other skills or request elevated/persistent privileges.

What to consider before installing

This skill appears to be a minimal file-reader, but the SKILL.md contains a clear mistake: it says to run the bundled read.sh with 'python', while read.sh is a bash script that runs 'cat'. Before installing or enabling it, ask the author to fix the invocation (e.g., 'bash read.sh' or './read.sh') or update the script to be Python. Also note that the script will read any file path given to it, so avoid using it to read sensitive system files or secrets. If you plan to allow autonomous invocation, be extra cautious because the agent could read files without interactive confirmation; test the skill in a safe sandbox first and verify the corrected instructions and script behavior.

概述

文件读取技能。当用户需要读取文件内容、查看文件、cat 文件时激活。支持读取文本文件、配置文件、代码文件等。

基本使用方法

python  read.sh "<file>"

命令行参数

参数	说明
<file>	要读的文本（必填）