Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language Buddhist study skill whose downloads, local caches, search scripts, and practice log are disclosed and aligned with its stated purpose.
Before installing, expect the first setup to download hundreds of MB of corpus/index data and optional model files, and to create local data/cache files plus a local practice log. Use it in a trusted local environment, avoid importing cache files such as bm25.idx from untrusted sources, and be aware that story material may include distressing religious narratives.
try:
if os.path.getmtime(cache_path) >= os.path.getmtime(CHUNKS_FILE):
with gzip.open(cache_path, "rb") as f:
_BM25 = pickle.load(f)
sys.stderr.write(f"[hybrid_search] 载入 BM25 缓存：{cache_path}\n")
return _BM25
except Exception as e:raise RuntimeError(f"{CHUNKS_FILE} 为空，请重新运行 setup_corpus.py")
_offsets = offs
try:
with open(CHUNKS_OFFSETS_FILE, "wb") as f:
f.write(struct.pack("<Q", len(offs)))
f.write(struct.pack(f"<{len(offs)}Q", *offs))
except OSError as e:No suspicious patterns detected.