中文 EN
开始可信审查
安全决策报告

skill-seekers

Legitimate documentation scraping and AI skill generation tool with no malicious behavior. All flagged IOCs are benign documentation examples or standard CLI operations.

安装决策优先 来源: GitHub 扫描时间: 2026/8/22
文件 2998
IOC 644
越权项 0
发现 3

为什么得出这个结论

1/4 个维度触发
通过
声明与实际能力

声明资源与推断能力基本一致。

阻止
隐藏执行与外联

提取到 11 个高危 IOC 或外联信号。

通过
攻击链与高危发现

没有形成明确的恶意路径。

复核
依赖与供应链卫生

发现 2 项需要关注的依赖或供应链线索。

风险分是怎么被拉高的

Documented API key examples +0

All flagged API keys (sk-xxxxxxxx, AKIAIOSFODNN7EXAMPLE, ghp_xxx) are clearly placeholder examples in documentation - not real credentials

Shell command patterns in docs +0

rm -rf commands are legitimate cleanup instructions in troubleshooting guides. The Dockerfile rm -rf /var/lib/apt/lists/* is standard package manager cleanup

subprocess usage +0

Shell execution is limited to spawning documented local AI agents (Claude Code, Codex, etc.) for skill enhancement - declared and necessary for core functionality

Environment variable API key access +0

API keys are read from environment variables and used exclusively for calling the intended LLM APIs - no exfiltration observed

Minor: broad documentation scope +5

Extensive documentation includes many shell examples that could be misidentified as dangerous by automated scanners

Minor: S3 storage example with hardcoded credentials +5

s3_storage.py docstring contains AWS example credentials (AKIAIOSFODNN7EXAMPLE) - legitimate AWS documentation example, not actual credentials

最关键的证据

低危 文档欺骗

Placeholder API keys in documentation

Documentation files contain example API key patterns (sk-xxxxxxxx, ghp_xxx, AKIAIOSFODNN7EXAMPLE) which are clearly placeholder examples. The AWS example key AKIAIOSFODNN7EXAMPLE is AWS's official documented example key, not a real credential.

docs/reference/ENVIRONMENT_VARIABLES.md:90
No action needed - these are documented placeholder examples
低危 文档欺骗

AWS example credentials in docstring

S3StorageAdaptor docstring includes AWS example credentials (AKIAIOSFODNN7EXAMPLE) which are the official AWS documentation example credentials.

src/skill_seekers/cli/storage/s3_storage.py:43
No action needed - legitimate AWS documentation example
低危 代码执行

curl|sh installer pattern in CI

GitHub Actions workflow uses 'curl -LsSf https://astral.sh/uv/install.sh | sh' for installing the uv package manager. This is the official installation method for a legitimate tool.

.github/workflows/release.yml:28
No action needed - standard industry practice for CLI tool installation

声明能力 vs 实际能力

文件系统 通过
声明 WRITE
→
推断 WRITE
Tool creates output directories and skill files for documentation output
网络访问 通过
声明 READ
→
推断 READ
Scrapes documentation websites and calls LLM APIs as declared
命令执行 通过
声明 WRITE
→
推断 WRITE
Spawns local AI agents (Claude Code, Codex) for enhancement - documented behavior
环境变量 通过
声明 READ
→
推断 READ
Reads API keys from env vars (ANTHROPIC_API_KEY, etc.) for legitimate API calls

可疑产物与外联

严重 危险命令
curl -LsSf https://astral.sh/uv/install.sh | sh

.github/workflows/release.yml:28

严重 危险命令
rm -rf /

Dockerfile:14

严重 危险命令
curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash

docs/KUBERNETES_DEPLOYMENT.md:44

严重 危险命令
rm -rf ~

docs/TROUBLESHOOTING.md:629

严重 API 密钥
sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

docs/reference/ENVIRONMENT_VARIABLES.md:90

严重 API 密钥
ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

docs/reference/ENVIRONMENT_VARIABLES.md:135

严重 危险命令
python -c "import os

docs/reference/ENVIRONMENT_VARIABLES.md:858

严重 API 密钥
AKIAIOSFODNN7EXAMPLE

src/skill_seekers/cli/storage/s3_storage.py:43

高危 IP 地址
8.8.8.8

docs/DOCKER_DEPLOYMENT.md:665

高危 IP 地址
4.2.6.3

docs/agents/plans/2026-03-14-epub-input-support.md:243

高危 API 密钥
api_key="your-pinecone-api-key"

docs/integrations/PINECONE.md:88

中危 外部 URL
https://skillseekersweb.com/

.codex-plugin/plugin.json:9

依赖与供应链

包名版本来源漏洞备注
requests >=2.32.5 pip 否 Version pinned with minimum constraint
httpx >=0.28.1 pip 否 Core dependency for async scraping, version pinned
anthropic >=0.76.0 pip 否 Official Anthropic SDK for Claude API
PyGithub >=2.5.0 pip 否 Official PyGithub library

文件构成

2998 个文件 · 1279819 行
HTML 1992 个文件 · 831931 行Python 469 个文件 · 185278 行Markdown 305 个文件 · 120989 行Other 9 个文件 · 113101 行YAML 96 个文件 · 10774 行CSS 4 个文件 · 10123 行
需关注文件 · 3
src/skill_seekers/workflows/secrets-management.yaml YAML · 98 行
.env.example Other · 54 行
https://console.anthropic.com/ · https://makersuite.google.com/app/apikey · https://platform.openai.com/api-keys · https://app.pinecone.io/
helm/skill-seekers/templates/secret.yaml YAML · 20 行
其他文件 · skill_seekers.mdj · logo.png · uv.lock · navigation.html · 03_adaptors.png · 02_scrapers.png +3

安全亮点

API keys are read exclusively from environment variables, never hardcoded in operational code
Docker container runs as non-root user (skillseeker:1000) for production safety
Custom command validation blocks dangerous shell characters (;, &, |, $, `, newlines)
Recursion guard prevents fork-bomb scenarios during nested enhancement calls
No data exfiltration observed - all network calls are to documented LLM APIs
No base64-encoded payloads or obfuscation techniques detected
Open source project with public repository (github.com/yusufkaraaslan/Skill_Seekers)
Security controls documented (e.g., root check prevents LOCAL mode from running as root)