Trusted — Risk Score 5/100
Last scan:2 days ago Rescan
5 /100
bark
Send push notifications to iOS devices via Bark app
纯文档技能,仅描述如何使用curl发送Bark通知,无可执行代码,行为与文档完全一致。
Skill Namebark
Duration18.3s
Enginepi
Safe to install
无需采取行动,可直接使用。
ResourceDeclaredInferredStatusEvidence
Filesystem READ READ ✓ Aligned SKILL.md:36 读取 ~/.bark/key
Network READ READ ✓ Aligned SKILL.md:17-18 调用 api.day.app API
Shell WRITE WRITE ✓ Aligned SKILL.md:43-52 curl命令示例
3 findings
🔗
Medium External URL 外部 URL
https://api.day.app/
SKILL.md:18
🔗
Medium External URL 外部 URL
https://api.day.app/$KEY
SKILL.md:49
🔗
Medium External URL 外部 URL
https://api.day.app/yourkey
SKILL.md:91

File Tree

1 files · 3.2 KB · 101 lines
Markdown 1f · 101L
└─ 📝 SKILL.md Markdown 101L · 3.2 KB

Security Positives

✓ 纯文档技能,无可执行代码,无隐蔽行为
✓ 文档详细说明功能,声明与实际一致
✓ API endpoint 明确(api.day.app),无隐蔽网络请求
✓ 凭证仅从本地文件读取,不存在凭证收割
✓ 无第三方依赖,无依赖供应链风险