扫描报告
5 /100
colin-huang
Information assistant for Colin Huang 黄峥. Get biography, latest news, career highlights, and social media updates.
Documentation-only skill with no executable code or scripts. Declared behavior (celebrity information retrieval via web search) is straightforward and poses no security risk.
可以安装
No action needed. This is a simple SKILL.md-only package with no executable components.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations found |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md line 24: 'Uses web search to fetch real-time information' |
| 命令执行 | NONE | NONE | — | No shell access detected |
| 环境变量 | NONE | NONE | — | No environment access detected |
| 技能调用 | NONE | NONE | — | No nested skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access detected |
| 浏览器 | NONE | NONE | — | No browser automation detected |
| 数据库 | NONE | NONE | — | No database access detected |
目录结构
1 文件 · 1.2 KB · 38 行 Markdown 1f · 38L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code, scripts, or binaries present
✓ All declared functionality is clearly documented in SKILL.md
✓ No sensitive file paths accessed (no ~/.ssh, ~/.aws, .env)
✓ No credential harvesting or environment variable iteration
✓ No base64-encoded payloads or obfuscated code
✓ No network connections to external IPs beyond declared web search
✓ No supply chain risks (no dependencies to audit)
✓ MIT license provided, indicating open and transparent authorship