Security audit
Security checks for vulnerabilities and agentic risk
This skill is a broad frontend automation guide with command access and unsupported security claims, so users should review its scope before installing.
Install only if you are comfortable with a broad, template-like skill that may use read and exec for frontend work. Treat its security claims as unverified, keep API keys in environment variables rather than prompts, review commands before execution, and avoid using it on sensitive repositories or credentials without additional safeguards.
The activation/usage description is extremely broad, covering generic efficiency, automation, batch processing, and workflow optimization. In agent ecosystems, such overbroad wording can cause the skill to be invoked for unrelated or higher-risk tasks than intended, especially since the skill also lists powerful capabilities like exec.
The skill claims built-in data encryption and access control, but the provided content contains only marketing/documentation text and no concrete implementation, configuration, or enforcement details. In an agent skill that may handle user data, this can mislead operators into trusting protections that do not actually exist, increasing the risk of unsafe data handling or disclosure.
The document advertises '内置安全检查' and stronger security/compliance properties without any corresponding logic, policy, or validation steps in the skill content. This creates a false sense of safety around automated processing and may cause users to submit sensitive data or allow risky operations under the assumption that safeguards are present.
This section instructs users to configure API keys, establish API connections, execute commands, and handle files/outputs, but it lacks clear warnings about secret exposure, destructive command risk, file overwrite, privilege misuse, or external data exfiltration. Given that the skill declares tools including exec and read, the absence of strong safety boundaries makes misuse more dangerous in context.
No suspicious patterns detected.
