Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local Markdown note manager, but it contains overbroad routing language that could make an agent use file-changing commands for unrelated requests.
Review before installing. Use it only for explicit Markdown note-management tasks, keep backups of your vault, and require clear confirmation before move, frontmatter edit, delete, or any --force operation. Do not rely on this free artifact for actual synchronization, and do not allow the unrelated analytics/reporting wording to route normal analysis tasks to this skill.
The scope text includes unrelated triggers such as data analysis, reporting, statistical insight, and visualization, which can cause an agent to invoke this skill outside its real purpose. In an agentic environment with exec capability, overbroad routing increases the chance of unintended file-system actions when the user asked for something unrelated.
The skill advertises overly broad and unrelated invocation cues, which can cause an orchestration layer or user to apply it in inappropriate contexts. Because the skill allows exec and performs write operations on local notes, misrouting can translate into unintended modifications, moves, or deletions of user data.
名称与描述将该技能表述为“notes-sync/笔记同步CLI”，但全文列出的实际能力仅是本地Markdown库的搜索、创建、移动、删除和Frontmatter操作，没有实现任何真实同步逻辑。文档后部还明确把“Git自动同步”“跨设备同步配置”列为免费版未包含功能，进一步说明当前实现并不具备“同步”这一名称暗示的能力。
The documentation exposes a force-delete option but does not give a clear, explicit warning that it bypasses recoverability and may permanently destroy user notes. In a tool-enabled agent setting, such under-signposted destructive capability raises the risk of irreversible data loss from misunderstanding, prompt confusion, or accidental invocation.
依赖说明明确写出“本免费版基于本地文件操作，无需额外API Key”，主体能力也都是本地CLI文件管理；但错误处理却给出网络连通性排查和防火墙/代理建议。这会让使用者误以为核心功能依赖网络，与技能实际宣称的本地操作模式相矛盾。
The markdown explicitly states '完全中文化表达，适配中文用户工作流', indicating a fixed language/locale orientation. Because the file does not offer a language choice or explain a necessary region-specific constraint, this is a natural-language policy issue under the language/locale rule.
No suspicious patterns detected.
