中文 EN
Start Review
Skill Trust Decision

skill-seekers

Legitimate documentation scraping and AI skill generation tool with no malicious behavior. All flagged IOCs are benign documentation examples or standard CLI operations.

Install decision first Source: GitHub Scanned: Aug 22, 2026
Files 2998
Artifacts 644
Violations 0
Findings 3

Why this conclusion was reached

1/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block
Hidden execution and egress

11 high-risk artifacts or egress signals were extracted.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

2 dependency or supply-chain issues need attention.

What drove the risk score up

Documented API key examples +0

All flagged API keys (sk-xxxxxxxx, AKIAIOSFODNN7EXAMPLE, ghp_xxx) are clearly placeholder examples in documentation - not real credentials

Shell command patterns in docs +0

rm -rf commands are legitimate cleanup instructions in troubleshooting guides. The Dockerfile rm -rf /var/lib/apt/lists/* is standard package manager cleanup

subprocess usage +0

Shell execution is limited to spawning documented local AI agents (Claude Code, Codex, etc.) for skill enhancement - declared and necessary for core functionality

Environment variable API key access +0

API keys are read from environment variables and used exclusively for calling the intended LLM APIs - no exfiltration observed

Minor: broad documentation scope +5

Extensive documentation includes many shell examples that could be misidentified as dangerous by automated scanners

Minor: S3 storage example with hardcoded credentials +5

s3_storage.py docstring contains AWS example credentials (AKIAIOSFODNN7EXAMPLE) - legitimate AWS documentation example, not actual credentials

Most important evidence

Low Doc Mismatch

Placeholder API keys in documentation

Documentation files contain example API key patterns (sk-xxxxxxxx, ghp_xxx, AKIAIOSFODNN7EXAMPLE) which are clearly placeholder examples. The AWS example key AKIAIOSFODNN7EXAMPLE is AWS's official documented example key, not a real credential.

docs/reference/ENVIRONMENT_VARIABLES.md:90
No action needed - these are documented placeholder examples
Low Doc Mismatch

AWS example credentials in docstring

S3StorageAdaptor docstring includes AWS example credentials (AKIAIOSFODNN7EXAMPLE) which are the official AWS documentation example credentials.

src/skill_seekers/cli/storage/s3_storage.py:43
No action needed - legitimate AWS documentation example
Low RCE

curl|sh installer pattern in CI

GitHub Actions workflow uses 'curl -LsSf https://astral.sh/uv/install.sh | sh' for installing the uv package manager. This is the official installation method for a legitimate tool.

.github/workflows/release.yml:28
No action needed - standard industry practice for CLI tool installation

Declared capability vs actual capability

Filesystem Pass
Declared WRITE
→
Inferred WRITE
Tool creates output directories and skill files for documentation output
Network Pass
Declared READ
→
Inferred READ
Scrapes documentation websites and calls LLM APIs as declared
Shell Pass
Declared WRITE
→
Inferred WRITE
Spawns local AI agents (Claude Code, Codex) for enhancement - documented behavior
Environment Pass
Declared READ
→
Inferred READ
Reads API keys from env vars (ANTHROPIC_API_KEY, etc.) for legitimate API calls

Suspicious artifacts and egress

Critical Dangerous Command
curl -LsSf https://astral.sh/uv/install.sh | sh

.github/workflows/release.yml:28

Critical Dangerous Command
rm -rf /

Dockerfile:14

Critical Dangerous Command
curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash

docs/KUBERNETES_DEPLOYMENT.md:44

Critical Dangerous Command
rm -rf ~

docs/TROUBLESHOOTING.md:629

Critical API Key
sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

docs/reference/ENVIRONMENT_VARIABLES.md:90

Critical API Key
ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

docs/reference/ENVIRONMENT_VARIABLES.md:135

Critical Dangerous Command
python -c "import os

docs/reference/ENVIRONMENT_VARIABLES.md:858

Critical API Key
AKIAIOSFODNN7EXAMPLE

src/skill_seekers/cli/storage/s3_storage.py:43

High IP Address
8.8.8.8

docs/DOCKER_DEPLOYMENT.md:665

High IP Address
4.2.6.3

docs/agents/plans/2026-03-14-epub-input-support.md:243

High API Key
api_key="your-pinecone-api-key"

docs/integrations/PINECONE.md:88

Medium External URL
https://skillseekersweb.com/

.codex-plugin/plugin.json:9

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
requests >=2.32.5 pip No Version pinned with minimum constraint
httpx >=0.28.1 pip No Core dependency for async scraping, version pinned
anthropic >=0.76.0 pip No Official Anthropic SDK for Claude API
PyGithub >=2.5.0 pip No Official PyGithub library

File composition

2998 files · 1279819 lines
HTML 1992 files · 831931 linesPython 469 files · 185278 linesMarkdown 305 files · 120989 linesOther 9 files · 113101 linesYAML 96 files · 10774 linesCSS 4 files · 10123 lines
Files of concern · 3
src/skill_seekers/workflows/secrets-management.yaml YAML · 98 lines
.env.example Other · 54 lines
https://console.anthropic.com/ · https://makersuite.google.com/app/apikey · https://platform.openai.com/api-keys · https://app.pinecone.io/
helm/skill-seekers/templates/secret.yaml YAML · 20 lines
Other files · skill_seekers.mdj · logo.png · uv.lock · navigation.html · 03_adaptors.png · 02_scrapers.png +3

Security positives

API keys are read exclusively from environment variables, never hardcoded in operational code
Docker container runs as non-root user (skillseeker:1000) for production safety
Custom command validation blocks dangerous shell characters (;, &, |, $, `, newlines)
Recursion guard prevents fork-bomb scenarios during nested enhancement calls
No data exfiltration observed - all network calls are to documented LLM APIs
No base64-encoded payloads or obfuscation techniques detected
Open source project with public repository (github.com/yusufkaraaslan/Skill_Seekers)
Security controls documented (e.g., root check prevents LOCAL mode from running as root)