扫描报告
15 /100
zhang-copyright-law
九章著作权法律专家V1.1.0(DeepSeek R2 + 1500+案例 + 自我进化)
Pure documentation-only AI skill with declared API key requirement and disclosed data collection metadata; no executable code or hidden functionality present.
可以安装
Skill is safe to use. Monitor usage of the DeepSeek API key and be aware that data_collection is enabled for the self-evolution feature.
安全发现 1 项
| 严重性 | 安全发现 | 位置 |
|---|---|---|
| 低危 | Data collection for self-evolution declared 敏感访问 | SKILL.md:4 |
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:3 capabilities: ["reasoning", "file_read"] |
| 网络访问 | NONE | NONE | — | No network access declared or inferred |
| 命令执行 | NONE | NONE | — | No shell execution found |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md:3 requires env: ["DEEPSEEK_API_KEY"] |
目录结构
1 文件 · 800 B · 20 行 Markdown 1f · 20L
└─
SKILL.md
Markdown
安全亮点
✓ Pure documentation skill with no executable code
✓ No scripts or binaries present
✓ All capabilities declared in metadata
✓ API key requirement is transparent
✓ No obfuscation or suspicious patterns detected
✓ No credential theft or data exfiltration mechanisms
✓ No network requests to undeclared endpoints