Security audit
Security checks for vulnerabilities and agentic risk
The skill is mainly a DNS/network troubleshooting helper, but its instructions are overbroad for an exec-enabled skill and include unrelated file/API/automation behavior without clear guardrails.
Review this before installing if your agent auto-selects skills: it can use shell execution, and the documentation is broad enough that it may be invoked outside DNS troubleshooting. Use it only for explicit DNS, TLS, hostname, and connectivity diagnostics, and avoid letting it run generic file, API, deployment, or command automation tasks without direct review.
The activation description is overly broad, including general coding, testing, and deployment assistance rather than narrowly scoped DNS/network debugging. Overbroad activation increases the likelihood that an agent will select this exec-capable skill for tasks outside its intended domain, enabling unnecessary system and network access.
The scenario and efficiency sections describe data parsing, file processing, and API aggregation that are unrelated to DNS/network debugging. This mismatch can mislead orchestrators or users into invoking the skill for broader automation tasks, where its exec-enabled nature could expose local files, external services, or system state unnecessarily.
The skill advertises command execution and file-writing behavior, including certificate extraction to files, without prominent safety guidance, confirmation requirements, or output-path restrictions. In an agent setting, that can lead to unreviewed execution of network commands and writes to the local filesystem, which materially raises the risk of data exposure, unintended modification, or abuse of the host environment.
The skill claims to be for DNS/network diagnostics, but these sections broaden it into generic file processing, API integration, and command execution. That scope expansion can cause an agent to apply the skill in unrelated contexts and perform higher-risk actions than a user would expect, increasing the chance of unsafe file or network operations.
The document is for the dns-networking skill and repeatedly describes DNS/network debugging as its core function, yet the paid-extension table says 'DNS & Networking调试DNS解析' is not supported in the free version. That directly conflicts with the manifest summary and the rest of the file, which present DNS/network diagnosis as the primary built-in capability.
