Security Defense Line 安全防线

Key points to consider before installing or running this skill: - Billing and credentials: _meta.json and payment.py indicate SkillPay billing is required, but the top-level 'required env vars' are empty. Confirm which environment variables you must provide (SKILLPAY_USER_ID, SKILLPAY_API_KEY?) and how billing works. Do not provide wallet/private keys to the skill. - Hard-coded secret: payment.py contains a baked-in BILLING_API_KEY token in source. This is poor practice and could be abused by the publisher. Ask the author to remove embedded keys and rely on configured environment secrets instead. Consider this an immediate red flag until explained. - Undeclared env vars and config: SKILL.md config examples reference TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID, and SMTP credentials. These are sensitive; verify where they are read and add explicit declarations before running. - Network & external tools: Some scripts call external tooling (slither, mythril) via subprocess. These tools run with your environment privileges and could execute arbitrary code if compromised. Only run in a sandbox or on a non-production machine after reviewing dependencies. - Review code before use: The bundled Python scripts are largely simulation/self-contained but should be code-reviewed for any hidden network calls, filesystem reads/writes, or attempts to read private keys from disk. Search for any uses of os.environ, open(), subprocess.run, and any http requests besides the billing endpoint. - Test safely: If you must evaluate functionality, run the skill offline or in an isolated environment (container/VM) with no real credentials or private keys. Replace or remove billing logic (or provide a test account) if you do not want automatic charging attempts. If the publisher can (1) remove embedded API keys, (2) clearly declare required env vars and why they are needed, and (3) document which scripts call external tools and what permissions they need, the inconsistencies would be resolved and the skill would be far less suspicious.