Security audit
Security checks for vulnerabilities and agentic risk
This barcode lookup skill has a legitimate purpose, but it handles API keys unsafely and can print a key-bearing image URL.
Review before installing. Use only a dedicated TianAPI key with limited scope or quota, avoid passing the key on the command line, do not commit any .env file, and treat any printed image URL as sensitive because it may include the API key. The script should be fixed before use because it is currently syntactically invalid and inconsistent about the expected environment variable name.
scripts/fetch_barcode.py:94API Key Disclosed Through an Unvalidated Image URL
scripts/fetch_barcode.py:21API Key Exposed Through Command-Line Arguments
The skill instructs users to store the API key in a local .env file under the scripts directory, and nearby examples also encourage direct secret handling patterns. Without explicit guidance on file permissions, git exclusion, and safer secret-loading practices, this creates a realistic risk of accidental credential disclosure through source control, backups, or unintended file access.
# 方式一：环境变量（推荐，一次配置永久生效）
export TIANAPI_BARCODE_KEY=你的APIKey
# 方式二：.env 文件（在脚本目录创建）
echo "TIANAPI_BARCODE_KEY=你的APIKey" > scripts/.env
# 方式三：每次命令行传入
The documentation explicitly shows passing the API key on the command line, which can leak credentials via shell history, process listings, audit logs, or screenshots. This is a stronger and more immediate secret-exposure risk than environment-variable usage because many systems expose argv contents to other local users or tooling.
export TIANAPI_BARCODE_KEY=你的APIKey
# 方式二：.env 文件（在脚本目录创建）
echo "TIANAPI_BARCODE_KEY=你的APIKey" > scripts/.env
# 方式三：每次命令行传入
python3 scripts/fetch_barcode.py --key 你的APIKey --barcode 6976586902578
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
return env_key
# 检查项目根目录的.env文件
dotenv_path = os.path.join(os.path.dirname(__file__), '.env')
if os.path.exists(dotenv_path):
with open(dotenv_path, 'r') as f:
for line in f:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
print("请通过以下任一方式配置密钥：", file=sys.stderr)
print("1. 命令行: python fetch_barcode.py YOUR_KEY --barcode 6976586902578")
print("2. 环境变量: export TIANAPI_KEY=YOUR_KEY")
print("3. .env文件: 在脚本同目录创建 .env 写入 TIANAPI_KEY=YOUR_KEY")
sys.exit(1)<websource>source_group_web_1</websource>
def validate_barcode(barcode):
The skill advertises executable behavior requiring environment access, file reads, and outbound network access, but it does not declare an explicit tool scope such as permissions or allowed-tools. This weakens security boundaries by making the skill's operational capabilities implicit rather than reviewable, increasing the chance that an agent or user invokes it with broader access than expected.
The documentation instructs users to pass an API key via CLI and send barcode queries to a third-party service without warning that command-line arguments may be exposed through shell history or process listings. It also omits a privacy notice that submitted barcodes and related query metadata are transmitted to an external provider, which can surprise users and lead to credential or data exposure.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
规格: 50克
商品分类: 营养补充剂
生产商: 安徽谊康堂健康科技有限公司
商品图片: https://api.tianapi.com/goodspic/?img=qhUnfmO4bzEH (3小时内有效)
### 直接调用 API（无需脚本）
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
规格: 50克
商品分类: 营养补充剂
生产商: 安徽谊康堂健康科技有限公司
商品图片: https://api.tianapi.com/goodspic/?img=qhUnfmO4bzEH (3小时内有效)
### 直接调用 API（无需脚本）
This Python code makes a network request to a third-party API and includes the user's API key in the request parameters. While the script documents how to supply the credential, it does not clearly warn the user at the point of use that the key and barcode data will be sent to an external service.
The script accesses TIANAPI_KEY from the environment and parses a local .env file to retrieve the API credential. Although this is common behavior, the safety rule asks for some form of disclosure when sensitive environment variables or credentials are accessed, and this file lacks a clear warning beyond implementation comments.
No suspicious patterns detected.