Scan Report
0 /100
fb-graph-proxy
尤里改 Facebook Graph API 代理服务使用指南
Pure documentation-only skill describing a Facebook Graph API proxy service. No executable code, scripts, or hidden functionality. Behavior is fully declared.
Safe to install
No action needed. This is a documentation file only. If deploying, ensure the proxy service itself is reviewed separately.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No code files present |
| Network | NONE | NONE | — | No code files present |
| Shell | NONE | NONE | — | No code files present |
| Environment | NONE | NONE | — | No code files present |
| Skill Invoke | NONE | NONE | — | No code files present |
| Clipboard | NONE | NONE | — | No code files present |
| Browser | NONE | NONE | — | No code files present |
| Database | NONE | NONE | — | No code files present |
2 findings
Medium External URL 外部 URL
https://graph.facebook.com/v25.0/act_123456/campaigns?fields=name SKILL.md:40 Medium External URL 外部 URL
https://facebook-graph.baiz.ai/v25.0/act_123456/campaigns?fields=name SKILL.md:47 File Tree
1 files · 2.0 KB · 64 lines Markdown 1f · 64L
└─
SKILL.md
Markdown
Security Positives
✓ Pure documentation-only skill with no executable code
✓ Behavior is clearly and completely declared in SKILL.md
✓ No scripts, no dependencies, no obfuscation
✓ Credential (BAIZ_API_TOKEN) is explicitly documented as user-provided, not harvested
✓ No base64, no eval, no shell execution attempts
✓ No sensitive file path access (.ssh, .aws, .env)
✓ No hidden functionality or doc-to-code mismatch