中文 EN

Scan Report

Scan New Files

✓ Low Risk — Risk Score 5/100
Last scan:19 hr ago Rescan
5 /100
readme-maker
Design beautiful GitHub profile READMEs with templates. CLI for checking, validating, generating, and formatting README files and documentation.
readme-maker is a straightforward bash-based README CLI with purely local file logging — no network calls, credential access, obfuscation, or external dependencies.
Skill Namereadme-maker
Duration31.0s
Enginepi
✓
Safe to install
No blocking action needed. The skill is safe for use as described.

Findings 1 items

Severity Finding Location
Low
Logging behavior is mentioned but not detailed in SKILL.md Doc Mismatch
SKILL.md states 'persistent local logging' in the command description but does not enumerate the log files or the pipe-delimited storage format. This is a minor documentation gap with no security impact.
All from the command line with persistent local logging
→ Consider adding a 'Data Storage' section that details the log file names and format, as documented in the script's DATA_DIR behavior.
 SKILL.md:1
ResourceDeclaredInferredStatusEvidence
Shell WRITE WRITE ✓ Aligned Bash shebang, set -euo pipefail, date/wc/du/tail/grep/sed/cat commands — all app…
Filesystem READ+WRITE WRITE ✓ Aligned Writes exclusively to ~/.local/share/readme-maker/ for logging; no sensitive pat…
Network NONE NONE — Zero network calls in script.sh.
Environment NONE NONE — No access to os.environ or environment variables beyond HOME.
credential NONE NONE — No credential paths (~/.ssh, ~/.aws, .env) accessed.
1 findings
📧
Info Email 邮箱地址
[email protected]
SKILL.md:112

File Tree

2 files · 15.4 KB · 425 lines
Shell 1f · 313L Markdown 1f · 112L
├─ ▾ 📁 scripts
│ └─ 🔧 script.sh Shell 313L · 11.0 KB
└─ 📝 SKILL.md Markdown 112L · 4.4 KB

Security Positives

✓ No network requests — zero outbound connectivity
✓ No credential or sensitive path access (~/.ssh, ~/.aws, .env, etc.)
✓ No obfuscation (no base64, eval, atob, or encoded payloads)
✓ No external dependencies or API calls
✓ Uses strict bash mode (set -euo pipefail)
✓ All file I/O is confined to a dedicated user-local directory (~/.local/share/readme-maker/)
✓ No remote script execution (curl|bash, wget|sh, etc.)
✓ No supply-chain risk — pure standard Unix utilities only
✓ Script content is clear, readable, and auditable