扫描报告
0 /100
agent-analytics
Run analytics end-to-end from your agent without opening a dashboard
Pure documentation skill wrapping a legitimate npm analytics CLI with transparent behavior and no security risks.
可以安装
This skill is safe to use. No action required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md: Requires npx for CLI execution |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md: CLI calls HTTPS API at agentanalytics.sh |
| 文件系统 | NONE | NONE | — | No file operations in skill |
| 环境变量 | NONE | NONE | — | No environment access in skill |
8 项发现
中危 外部 URL 外部 URL
https://agentanalytics.sh SKILL.md:8 中危 外部 URL 外部 URL
https://www.npmjs.com/package/@agent-analytics/cli SKILL.md:35 中危 外部 URL 外部 URL
https://docs.agentanalytics.sh/api/ SKILL.md:59 中危 外部 URL 外部 URL
https://mysite.com SKILL.md:97 中危 外部 URL 外部 URL
https://api.agentanalytics.sh/tracker.js SKILL.md:204 中危 外部 URL 外部 URL
https://docs.agentanalytics.sh/ SKILL.md:258 中危 外部 URL 外部 URL
https://docs.agentanalytics.sh/reference/cli-mcp-api/ SKILL.md:260 中危 外部 URL 外部 URL
https://docs.agentanalytics.sh/installation/openclaw/ SKILL.md:261 目录结构
1 文件 · 12.3 KB · 261 行 Markdown 1f · 261L
└─
SKILL.md
Markdown
安全亮点
✓ Skill contains only documentation, no executable code
✓ Uses pinned npm package version (0.5.5) to prevent supply chain attacks
✓ Mandatory execution policy enforces official CLI path only
✓ Authentication via browser OAuth - no API key handling in chat
✓ Comprehensive documentation of all commands and behaviors
✓ Feedback mechanism for security concerns
✓ Query parameter validation documented (JSON filter validation)
✓ MIT licensed with public GitHub repository