Security audit
Security checks for vulnerabilities and agentic risk
The skill’s basic Tavily-based briefing script is straightforward, but the package overstates missing RSS and scheduled push capabilities and under-explains persistent external delivery behavior.
Review carefully before installing. The included script appears limited to Tavily searches and writing a local Markdown briefing, but do not rely on the advertised RSS or scheduled push features as shipped. If you add scheduling or enterprise messaging yourself, require explicit confirmation, tightly control recipients, document credentials, and provide a clear way to disable recurring delivery.
该代码的核心行为是：接收逗号分隔的关键词，使用 Tavily API 搜索，去重后拼接为结构化简报文本，并输出到 stdout 或保存到文件。它确实属于“简报生成”范畴，但声明中强调了“自动聚合多个信息源（RSS、网页、Tavily搜索）”以及“支持定时推送”，而当前代码只实现了 Tavily 搜索这一单一来源，没有任何 RSS 解析、网页抓取、调度任务、消息发送或团队推送逻辑。因此描述相较实际能力存在明显夸大，属于描述与代码行为不一致。
Without declared permissions the skill's intent is opaque and cannot be validated.
The skill advertises scheduled delivery to enterprise messaging platforms without warning that generated content may be transmitted to external services or internal group channels automatically. This can lead to unintended disclosure of sensitive or proprietary information, especially when briefings aggregate internal or user-provided sources and run unattended.
The scheduling instructions normalize creation of a persistent cron-based task and external channel delivery without warning about ongoing autonomous behavior. Users may unknowingly set up recurring outbound transmissions that continue after the initial session, causing repeated leaks, spam, or policy violations if the briefing content or recipients are not carefully controlled.
The function signature sets the default language to "zh", establishing a Chinese-language default in natural-language behavior. Under the stated policy, forcing a specific language without user opt-in is a locale/language policy violation, especially since the script does not prompt the user to choose a language and the default is reinforced elsewhere.
The command-line interface defines --language with a default of zh, which causes the skill to prefer a specific language when the user provides no preference. The policy allows locale constraints only when users are given a choice or the limitation is clearly justified; neither is present here.
The natural-language description and usage cues are presented exclusively in Chinese, which can amount to a language policy violation when no user opt-in or locale justification is provided. The file does not indicate that the skill is region-specific or that users may choose another language.
