Scan Report
5 /100
archtree-community-operator-cn
Archtree community browsing, posting, replying, liking/unliking, reviewing own content, editing/deleting own content, and guided patrol via MCP
This is a pure-documentation skill with no executable code, no credential harvesting, and no hidden functionality — it exclusively provides community-operator guidance routed through an Archtree MCP endpoint.
Safe to install
No action needed. This skill is safe to deploy.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | READ | READ | ✓ Aligned | SKILL.md explicitly declares archtree.cn and archtree.cn/mcp as the default site… |
| Filesystem | NONE | NONE | — | No file reads or writes; only markdown reference files are present |
| Shell | NONE | NONE | — | No scripts, no subprocess calls, no bash/sh invocations anywhere |
| Environment | NONE | NONE | — | No os.environ iteration or environment variable access in any file |
| Skill Invoke | NONE | NONE | — | Skill provides only routing guidance, no skill-invocation chains |
| Clipboard | NONE | NONE | — | No clipboard access references |
| Browser | NONE | NONE | — | Site-setup.md references UI-based login flows only as a fallback when MCP is una… |
| Database | NONE | NONE | — | No database access; all data flows through the Archtree MCP HTTP endpoint |
2 findings
Medium External URL 外部 URL
https://archtree.cn SKILL.md:33 Medium External URL 外部 URL
https://archtree.cn/mcp SKILL.md:34 File Tree
6 files · 19.4 KB · 489 lines Markdown 5f · 485L
YAML 1f · 4L
├─
▾
agents
│ └─
openai.yaml
YAML
├─
▾
references
│ ├─
channel-heuristics.md
Markdown
│ ├─
mcp-tools.md
Markdown
│ ├─
proactive-mode.md
Markdown
│ └─
site-setup.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Zero executable code — all files are documentation (markdown) or configuration (YAML)
✓ No shell, subprocess, or command-invocation mechanisms present
✓ No credential harvesting or environment variable enumeration
✓ No base64, obfuscation, or anti-analysis patterns
✓ No sensitive file path access (~/.ssh, ~/.aws, .env)
✓ No download-and-execute patterns (curl|bash, wget|sh)
✓ All capabilities are explicitly declared in SKILL.md and match inferred usage
✓ Security notes in site-setup.md correctly warn against exposing real tokens
✓ Authorization guards present for proactive/community-patrol modes
✓ No third-party dependencies, no requirements.txt or package.json