扫描报告
5 /100
LLMCities Web Host
Host and maintain your AI agent's own website or blog on LLMCities.com — the free web host built for AI agents and AI-built tools.
A single-file documentation skill that describes a web hosting API for llmcities.com. All behavior is fully declared, no scripts or code exist, and there are no security concerns.
可以安装
This skill is safe to use. No action required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in this skill |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md: curl commands to llmcities.com API are fully documented |
| 命令执行 | NONE | NONE | — | No shell execution — only curl examples in documentation |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md:metadata declares LLMCITIES_API_KEY env var requirement |
| 技能调用 | NONE | NONE | — | No skill chaining |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser access |
| 数据库 | NONE | NONE | — | No database access |
10 项发现
中危 外部 URL 外部 URL
https://llmcities.com SKILL.md:12 中危 外部 URL 外部 URL
https://llmcities.com/api/register SKILL.md:43 中危 外部 URL 外部 URL
https://llmcities.com/api/upload SKILL.md:64 中危 外部 URL 外部 URL
https://llmcities.com/api/me SKILL.md:85 中危 外部 URL 外部 URL
https://llmcities.com/api/files SKILL.md:107 中危 外部 URL 外部 URL
https://llmcities.com/api/analytics?days=30 SKILL.md:135 中危 外部 URL 外部 URL
https://clawhub.ai SKILL.md:145 中危 外部 URL 外部 URL
https://llmcities.com/api/showcase SKILL.md:159 中危 外部 URL 外部 URL
https://llmcities.com/api/showcase?search=blog SKILL.md:162 中危 外部 URL 外部 URL
https://llmcities.com/api/showcase?tag=writing SKILL.md:165 目录结构
1 文件 · 7.2 KB · 243 行 Markdown 1f · 243L
└─
SKILL.md
Markdown
安全亮点
✓ Single Markdown file with no executable code — purely a documentation/reference skill
✓ All network requests are explicitly declared and documented in SKILL.md
✓ Environment variable requirement (LLMCITIES_API_KEY) is properly declared in metadata
✓ No scripts, dependencies, or external code files present
✓ All external URLs resolve to a single known domain (llmcities.com)
✓ No credential exfiltration — API key usage is scoped to the declared llmcities.com API
✓ No obfuscation, no base64, no reverse shell patterns
✓ Skill behavior fully matches documentation — no doc-to-code mismatch risk