Security audit
Security checks for vulnerabilities and agentic risk
This research skill needs review because it requests secret keys through chat and automatically updates external code before running it.
Configure the API key locally without pasting it into chat, and rotate any key already shared there. Use a reviewed runner revision and disable automatic updates before execution. Consider which query details you send to Cue, report-link access, and credit costs. Install optional export tools only when needed.
Document export could support a broader research workflow, but the supplied chunk contains only format-conversion commands. It does not use Cue, obtain industry information, analyze market conditions, or produce substantive investment research. Its demonstrated primary purpose therefore materially differs from the declared purpose.
Installing a research runner is consistent with this skill's purpose, so repository synchronization alone is not a description-behavior mismatch. However, the instructions automatically clone or update an unpinned repository and subsequently execute its Python code; compromise of the repository or either distribution source could therefore execute attacker-controlled code with the agent's filesystem and credential access.
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
CUE_KEY=$(python3 -c "import json;print(json.load(open('$HOME/.cue/config.json'))['api_key'])" 2>/dev/null || echo "$CUE_API_KEY") echo "=== 1/3 API Key ===" && [ -n "$CUE_KEY" ] && echo "已配置" || echo "未配置！" echo "=== 2/3 Cue 服务 ===" && curl -sS --max-time 10 "https://cuecue.cn/api/health" -H "Authorization: Bearer $CUE_KEY" echo "=== 3/3 搭子 ===" && curl -sS --max-time 10 "https://cuecue.cn/api/playbook" -H "Authorization: Bearer $CUE_KEY" | python3 -c "import sys,json;scenes=json.load(sys.stdin).get('data',{}).get('scenes',[]);buddy=[b for s in scenes if s.get('secondary_category')=='行业研究' for b in s.get('buddies',[]) if b.get('title')=='行业景气与竞争格局研判'];print(f'可用:{len(buddy)}个') if buddy else print('暂不可用')"
| 检查 | 预期 | 异常处理 |
The skill repeatedly instructs users to paste an API key into the conversation, unnecessarily exposing a reusable secret to conversation storage, logging, and anyone with access to that history. Statements that the agent cannot view the key do not protect it when the prescribed workflow explicitly sends the key to the agent.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
| 目标格式 | 依赖 | macOS | Ubuntu |
|----------|------|-------|--------|
| Word (.docx) | pandoc | `brew install pandoc` | `sudo apt install pandoc` |
| PDF (.pdf) | pandoc + LaTeX | `brew install --cask basictex` | `sudo apt install texlive-xetex` |
---
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
| 目标格式 | 依赖 | macOS | Ubuntu |
|----------|------|-------|--------|
| Word (.docx) | pandoc | `brew install pandoc` | `sudo apt install pandoc` |
| PDF (.pdf) | pandoc + LaTeX | `brew install --cask basictex` | `sudo apt install texlive-xetex` |
---
No suspicious patterns detected.