europe-anz市场政策查询Skill

• Risk level: Low
• Analyzed: Apr 24, 2026, 5:13 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and requirements are internally consistent with a configurable policy-query library; it does not request credentials or perform network installs, but it contains implementation bugs and placeholders and comes from an unknown source, so review before use.

This skill appears to be a local policy-query library and does not itself phone home or require credentials, but it contains many placeholder dataSource values and small implementation bugs — e.g., fetchFromDataSource returns strings with '${name}' placeholders that are never replaced, and the browser export line uses an invalid identifier (window.EuropeAnzPolicyQuery = Europe-anzPolicyQuery) which will break in browsers. The README suggests using environment variables for API keys; only provide real API keys after you (1) inspect/understand the code that will use them, (2) confirm the skill will call your intended data sources, and (3) run it in a sandboxed environment first. Because the package author/homepage is unknown, consider: run npm test in an isolated environment, fix the placeholder/template bugs if you intend to use it, and only configure sensitive API keys after confirming network endpoints and code paths that will use them. If you need a higher assurance level, obtain the skill from a trusted maintainer or a repository with maintainer contact and verifiable release history.