Scan Report
5 /100
colin-huang
Information assistant for Colin Huang 黄峥. Get biography, latest news, career highlights, and social media updates.
Documentation-only skill with no executable code or scripts. Declared behavior (celebrity information retrieval via web search) is straightforward and poses no security risk.
Safe to install
No action needed. This is a simple SKILL.md-only package with no executable components.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations found |
| Network | READ | READ | ✓ Aligned | SKILL.md line 24: 'Uses web search to fetch real-time information' |
| Shell | NONE | NONE | — | No shell access detected |
| Environment | NONE | NONE | — | No environment access detected |
| Skill Invoke | NONE | NONE | — | No nested skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access detected |
| Browser | NONE | NONE | — | No browser automation detected |
| Database | NONE | NONE | — | No database access detected |
File Tree
1 files · 1.2 KB · 38 lines Markdown 1f · 38L
└─
SKILL.md
Markdown
Security Positives
✓ No executable code, scripts, or binaries present
✓ All declared functionality is clearly documented in SKILL.md
✓ No sensitive file paths accessed (no ~/.ssh, ~/.aws, .env)
✓ No credential harvesting or environment variable iteration
✓ No base64-encoded payloads or obfuscated code
✓ No network connections to external IPs beyond declared web search
✓ No supply chain risks (no dependencies to audit)
✓ MIT license provided, indicating open and transparent authorship