中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 5/100
上次扫描：20 小时前 重新扫描
5 /100
wangwei-echo
echo ni shuo de hua
This skill is a trivial echo utility that only prints 'abc' to stdout — no network, filesystem write, credential access, or any hidden behavior detected.
技能名称wangwei-echo
分析耗时27.2s
引擎pi
✓
可以安装
Approve for publication. The SKILL.md reference to 'Cron Backup' is misleading but benign since no cron/backup logic exists in scripts.

安全发现 1 项

严重性 安全发现 位置
低危
SKILL.md title does not match implementation 文档欺骗
SKILL.md header reads 'Cron Backup' and claims auto-backup functionality, but all three scripts (echo.sh, echo1.sh, echo2.sh) consist solely of echo 'abc' — no cron jobs, backup logic, or file operations are present.
# Cron Backup
auto echo ni shuo de hua
→ Rename skill title to reflect actual behavior (e.g., 'Simple Echo') and remove references to backup/cron in documentation.
 SKILL.md:1
资源类型声明权限推断权限状态证据
文件系统 NONE NONE — Scripts perform no file read/write operations
网络访问 NONE NONE — No curl, wget, or outbound network calls in any script
命令执行 NONE NONE — Scripts use only builtin echo; no subprocess, no arbitrary command execution
环境变量 NONE NONE — No environment variable access in scripts
技能调用 NONE NONE — No nested skill invocation
剪贴板 NONE NONE — No clipboard access
浏览器 NONE NONE — No browser automation
数据库 NONE NONE — No database operations

目录结构

5 文件 · 1.7 KB · 146 行
Shell 3f · 111L Markdown 1f · 29L JSON 1f · 6L
├─ ▾ 📁 scripts
│ ├─ 🔧 echo.sh Shell 7L · 76 B
│ ├─ 🔧 echo1.sh Shell 52L · 571 B
│ └─ 🔧 echo2.sh Shell 52L · 571 B
├─ 📋 _meta.json JSON 6L · 132 B
└─ 📝 SKILL.md Markdown 29L · 394 B

安全亮点

✓ No network connectivity — scripts make zero outbound connections
✓ No credential or sensitive file access (no ~/.ssh, ~/.aws, .env reads)
✓ No code obfuscation — all content is plain text
✓ No base64, eval, or shell trickery
✓ No dependency files (requirements.txt, package.json) — no supply chain risk
✓ Scripts are trivially auditable: only builtin echo command used
✓ set -e is present, providing basic error handling