扫描报告
5 /100
create-aptos-project
Scaffolds new Aptos projects using npx create-aptos-dapp
This is a legitimate project scaffolding skill for Aptos that uses standard CLI tools (npx, git, npm) without any malicious behavior.
可以安装
No action required. The skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | npx create-aptos-dapp, git, npm run commands |
| 文件系统 | READ | READ | ✓ 一致 | Reads .gitignore to verify .env protection |
| 网络访问 | READ | READ | ✓ 一致 | npx downloads from npm registry only |
| 环境变量 | NONE | NONE | — | No environment variable access beyond project creation |
1 项发现
中危 外部 URL 外部 URL
https://geomi.dev SKILL.md:74 目录结构
1 文件 · 6.1 KB · 172 行 Markdown 1f · 172L
└─
SKILL.md
Markdown
安全亮点
✓ Explicitly warns NOT to display or read private keys (uses placeholder 0x...)
✓ Requires verification that .env is in .gitignore before git operations
✓ No arbitrary code execution - only scaffolding commands
✓ Uses only official, documented tools (npx, git, npm, aptos CLI)
✓ API key is optional and user-provided
✓ All behavior is fully declared in SKILL.md