中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 5/100
上次扫描：2 天前 重新扫描
5 /100
yaoyaoya-memory
Universal Memory System for AI Assistants with IMA sync
Legitimate memory management skill with standard file operations and documented IMA sync functionality. No malicious indicators detected.
技能名称yaoyaoya-memory
分析耗时33.9s
引擎pi
✓
可以安装
No action required. The skill operates as documented with appropriate scope.

安全发现 2 项

严重性 安全发现 位置
提示
No security concerns identified
This skill performs standard file operations for memory management and documented IMA API sync. All functionality is declared in SKILL.md.
Universal Memory System for AI Assistants
→ This is a legitimate skill with no security issues.
 SKILL.md:1
提示
Standard urllib usage for IMA sync
sync_ima.py uses urllib.request to call ima.qq.com API. This is expected behavior for knowledge synchronization.
IMA_API_BASE = 'https://ima.qq.com/'
→ No action required - this is documented functionality.
 scripts/sync_ima.py:57
资源类型声明权限推断权限状态证据
文件系统 READ,WRITE READ,WRITE ✓ 一致 memory_search.py reads workspace files; sync_ima.py reads/writes memory files
网络访问 READ READ ✓ 一致 sync_ima.py makes HTTP POST to ima.qq.com for knowledge sync (documented in SKIL…
命令执行 NONE NONE — No subprocess or shell execution found
1 项发现
🔗
中危 外部 URL 外部 URL
https://ima.qq.com/
scripts/sync_ima.py:40

目录结构

5 文件 · 17.6 KB · 669 行
Markdown 2f · 353L Python 2f · 287L JSON 1f · 29L
├─ ▾ 📁 scripts
│ ├─ 🐍 memory_search.py Python 94L · 2.6 KB
│ └─ 🐍 sync_ima.py Python 193L · 5.9 KB
├─ 📋 config.example.json JSON 29L · 834 B
├─ 📝 README.md Markdown 110L · 2.2 KB
└─ 📝 SKILL.md Markdown 243L · 6.1 KB

安全亮点

✓ No shell execution (subprocess, os.system, etc.)
✓ No obfuscation techniques (base64, eval, atob)
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ No credential harvesting or exfiltration
✓ No reverse shell or C2 indicators
✓ All network calls target documented endpoint (ima.qq.com)
✓ Clean, readable Python code with no hidden functionality
✓ API credentials sourced only from environment variables or user config
✓ File operations scoped to workspace directory only