漫播技能

• Risk level: Low
• Analyzed: Apr 20, 2026, 1:18 AM
• Findings: 0
• Version: 1.0.2

Overview

The skill's instructions (install and run an npm CLI to view kilamanbo.com hot list) match its stated purpose and it requests no credentials or unusual permissions.

This skill appears coherent: it simply points the agent to install and run an npm CLI that shows kilamanbo.com hot items and asks for no secrets. Before installing: (1) Inspect the npm package page (manbo-cli) — check the author, repository link, and recent publish activity; (2) prefer installing in a sandbox or without -g (local install) if you don't trust the package; (3) review the package source code or repository if available; (4) avoid running as an admin/root user when installing global packages. If you can't find a trustworthy package page or source, treat the npm install step as the main risk and decline installation.