扫描报告
5 /100
windows-package-manager-installer
Install Windows software and package manager environments using winget or Chocolatey
Pure documentation skill for Windows package management guidance with no executable code, no hidden functionality, and all capabilities properly declared.
可以安装
This skill is safe to use. It provides only documentation and guidance for legitimate package manager operations. No action required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No filesystem access - this is a documentation skill |
| 网络访问 | NONE | NONE | — | No network calls - only provides URL references for user to execute |
| 命令执行 | NONE | NONE | — | No shell execution - only documents PowerShell commands for user reference |
| 环境变量 | NONE | NONE | — | No environment variable access |
| 技能调用 | NONE | NONE | — | No skill invocation capability |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser access |
| 数据库 | NONE | NONE | — | No database access |
2 项发现
中危 外部 URL 外部 URL
https://community.chocolatey.org/install.ps1 SKILL.md:143 中危 外部 URL 外部 URL
https://mirrors.tuna.tsinghua.edu.cn/chocolatey/ SKILL.md:150 目录结构
2 文件 · 8.7 KB · 225 行 Markdown 2f · 225L
├─
▾
references
│ └─
package-selection.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ Pure documentation skill with no executable code - no attack surface
✓ All external URLs (Chocolatey install script, Tsinghua mirror) are clearly documented with legitimate purposes
✓ Documentation accurately describes intended behavior - no doc-to-code mismatch
✓ No credential access or data exfiltration potential
✓ Commands provided are standard PowerShell package manager operations
✓ Includes appropriate guardrails and verification steps