Security audit
Security checks for vulnerabilities and agentic risk
This local-search skill is not malicious, but it needs review because it can expose and change the scope of locally indexed files without clear consent guidance.
Install only if you expect the agent to search local indexed files. Before allowing connector add or remove commands, confirm the exact folder or connector ID and understand that this can change what private local content Gety indexes in future searches.
The trigger description is broad enough to match generic requests like '帮我搜索' or 'search' that may not actually be about local files. That increases the risk of unintended invocation, causing the agent to search local indexed content when the user may have meant web search or another safer/non-local action, potentially exposing private file metadata or contents.
The skill is described as a local file search/retrieval capability, but its documentation also exposes connector management commands that can change what directories are indexed or remove existing indexed sources. This expands the skill from read-oriented search into state-changing local system configuration, increasing the chance an agent modifies the user's indexing scope without clear authorization or necessity.
The connector add/remove instructions modify the set of local directories being indexed, but the skill provides no warning that these are persistent, privacy-relevant changes. Without explicit caution and consent requirements, an agent could silently broaden surveillance of the filesystem or disable expected access by removing connectors.
Including gety connector add and gety connector remove in a search-focused skill gives the agent unjustified authority to alter which local directories are indexed. An unintended invocation or prompt-driven misuse could cause privacy-impacting expansion of indexed data or disruption by removing connectors, which is outside the user's likely expectation for a simple search skill.
This is a markdown file, so SQP-2 applies to user-facing descriptions of actions that could affect user data or system state. The '移除连接器' section states that a connector can be deleted but does not include any caution about what removal means for existing indexing, access, or whether the action is reversible.
No suspicious patterns detected.
