Security audit
Security checks for vulnerabilities and agentic risk
This is a local skill-registry generator with disclosed filesystem behavior, though its manifest should not claim filesystem access is false.
Before installing, treat this as a local filesystem tool: run it only on skill directories you intend to inventory, and choose output paths carefully because existing registry.json or registry.md files may be overwritten. The publisher should correct the filesystem permission metadata.
The manifest states filesystem: false, but the documented behavior explicitly requires reading a skills directory and writing registry.json and registry.md. This mismatch can mislead reviewers, policy engines, or sandboxing layers into granting trust based on inaccurate declared capabilities, creating a governance and security blind spot.
Dynamic import() can load arbitrary modules at runtime, bypassing static analysis and potentially importing malicious code.
if not os.path.exists(sm):
continue
text = open(sm, encoding="utf-8", errors="replace").read()
m = __import__("re").match(r"^---\n(.*?)\n---", text, __import__("re").S)
fm = {}
if m:
for line in m.group(1).splitlines():
Dynamic import() can load arbitrary modules at runtime, bypassing static analysis and potentially importing malicious code.
fm = {}
if m:
for line in m.group(1).splitlines():
mm = __import__("re").match(r"^([A-Za-z_][\w-]*):\s*(.*)$", line)
if mm:
fm[mm.group(1)] = mm.group(2).strip().strip('"')
entries.append({
The file presents all key user-facing guidance in a fixed Chinese/English bilingual format, which is a language policy choice visible in natural-language content. There is no indication that users can opt into a preferred language or that the locale constraint is required for a region-specific purpose.
This file presents core descriptions and usage in both English and Chinese, and the metadata includes Chinese-only values such as the category and read_when entries. Under the policy criteria, language or locale constraints should either offer user choice or be clearly documented as region-specific; here the bilingual/mixed-language presentation is not framed as an explicit user opt-in or justified locale requirement.
The top-level natural-language description is written primarily in Chinese with no indication that users may choose another language or locale. The policy scope for SQP-3 includes language/locale constraints expressed in natural language, and this file presents the skill as Chinese-localized by default without documenting any opt-in or alternative.
No suspicious patterns detected.