中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 10/100
上次扫描：2 天前 重新扫描
10 /100
ze-ri-skill
择日学技能。支持查询吉日凶日、建除十二神、黄道黑道、神煞吉凶，提供婚嫁、开业、动土、出行等择日建议。
A legitimate Chinese calendar auspicious date selection skill with pure algorithmic implementation and no security concerns.
技能名称ze-ri-skill
分析耗时22.7s
引擎pi
✓
可以安装
No action needed. The skill is safe to use.

安全发现 1 项

严重性 安全发现 位置
提示
Documentation references non-existent Python script
SKILL.md shows usage examples with 'python3 scripts/ze_ri.py' but the implementation is in index.js (JavaScript). This is a documentation inconsistency with no security impact.
python3 scripts/ze_ri.py --date "2026-04-15"
→ Update SKILL.md to reference the JavaScript implementation or add a scripts/ze_ri.py wrapper if Python is desired.
 SKILL.md:15
资源类型声明权限推断权限状态证据
文件系统 NONE NONE — No file operations in code
网络访问 NONE NONE — No network requests in code
命令执行 NONE NONE — No shell execution in code
环境变量 NONE NONE — No env access in code
技能调用 NONE NONE — No skill invocation in code
剪贴板 NONE NONE — No clipboard access in code
浏览器 NONE NONE — No browser access in code
数据库 NONE NONE — No database access in code

目录结构

2 文件 · 7.9 KB · 273 行
JavaScript 1f · 242L Markdown 1f · 31L
├─ 📜 index.js JavaScript 242L · 7.1 KB
└─ 📝 SKILL.md Markdown 31L · 735 B

安全亮点

✓ No shell execution or subprocess calls
✓ No network requests or external IP communications
✓ No credential harvesting or environment variable access
✓ No sensitive file system access (~/.ssh, ~/.aws, .env)
✓ No base64 encoding/decoding or eval() usage
✓ Pure algorithmic implementation for Chinese calendar calculations
✓ No remote script execution (curl|bash, wget|sh)
✓ No data exfiltration mechanisms