Scan Report
0 /100
tech-news-daily
科技新闻日报技能。每日科技新闻热榜整理与报告生成。
This is a pure-documentation skill with no executable code, scripts, or dependencies — it only describes a news aggregation workflow using Tavily search and Feishu doc sync, with no security risks.
Safe to install
No action needed. The skill is safe to use as described.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md: writes to memory/YYYY-MM-DD-tech-news.md |
| Network | READ | READ | ✓ Aligned | SKILL.md: tavily_search + Feishu API calls |
| Shell | NONE | NONE | — | No shell commands found |
| Environment | NONE | NONE | — | No environment access |
| Skill Invoke | NONE | NONE | — | No inter-skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser usage |
| Database | NONE | NONE | — | No database access |
1 findings
Medium External URL 外部 URL
https://feishu.cn/docx/xxxxx SKILL.md:75 File Tree
2 files · 5.9 KB · 216 lines Markdown 2f · 216L
├─
▾
references
│ └─
feishu-doc.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ No executable code files — only Markdown documentation present
✓ No scripts, dependencies, or package files to audit
✓ All capabilities (filesystem:WRITE, network:READ) are fully declared in SKILL.md
✓ No credential harvesting, data exfiltration, or obfuscation
✓ No sensitive path access (~/.ssh, ~/.aws, .env, etc.)
✓ No high-risk indicators (base64, eval, curl|bash, etc.)
✓ Workflow is straightforward: search → write local file → sync Feishu doc