中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 0/100
上次扫描：2 天前 重新扫描
0 /100
effect-ts
Effect-TS (Effect) comprehensive development guide for TypeScript. Covers typed error modeling, structured concurrency, dependency injection, resource management, retry/scheduling, streams, Schema validation, observability, HTTP client/server, Effect AI, and MCP servers.
Effect-TS skill is a purely documentation-based skill with no executable code, scripts, or binaries — only Markdown reference files and one JSON eval file. No malicious behavior, credential access, network exfiltration, or hidden functionality was found.
技能名称effect-ts
分析耗时30.5s
引擎pi
✓
可以安装
Approve for use. This skill is a documentation-only resource guide for Effect-TS TypeScript library development. No security concerns warrant blocking.
资源类型声明权限推断权限状态证据
文件系统 NONE NONE — No file access code exists in any file.
网络访问 NONE READ ✓ 一致 SKILL.md:28-31 declares external URLs as documentation sources (effect.website, …
命令执行 NONE NONE — No shell commands, subprocess calls, or bash scripts exist.
环境变量 NONE NONE — No os.environ iteration or environment variable access exists.
技能调用 NONE NONE — No skill self-invocation or cross-skill calls.
剪贴板 NONE NONE — No clipboard access code.
浏览器 NONE NONE — No browser automation or navigation.
数据库 NONE NONE — No database query code. HTTP.md and observability.md reference external DB conce…
8 项发现
🔗
中危 外部 URL 外部 URL
https://www.apache.org/licenses/
LICENSE.txt:3
🔗
中危 外部 URL 外部 URL
https://effect.website/docs
SKILL.md:28
🔗
中危 外部 URL 外部 URL
https://effect.website/llms.txt
SKILL.md:29
🔗
中危 外部 URL 外部 URL
https://effect.website/llms-full.txt
SKILL.md:30
🔗
中危 外部 URL 外部 URL
https://tim-smart.github.io/effect-io-ai/
SKILL.md:31
🔗
中危 外部 URL 外部 URL
https://api.example.com/users
references/http.md:15
🔗
中危 外部 URL 外部 URL
https://api.example.com/data
references/http.md:27
🔗
中危 外部 URL 外部 URL
http://json-schema.org/draft-07/schema#
references/schema.md:130

目录结构

18 文件 · 90.2 KB · 2833 行
Markdown 16f · 2619L Text 1f · 162L JSON 1f · 52L
├─ ▾ 📁 evals
│ └─ 📋 evals.json JSON 52L · 3.9 KB
├─ ▾ 📁 references
│ ├─ 📝 concurrency.md Markdown 183L · 4.0 KB
│ ├─ 📝 core-patterns.md Markdown 151L · 4.2 KB
│ ├─ 📝 dependency-injection.md Markdown 177L · 4.3 KB
│ ├─ 📝 effect-ai.md Markdown 166L · 4.5 KB
│ ├─ 📝 error-modeling.md Markdown 169L · 4.0 KB
│ ├─ 📝 http.md Markdown 187L · 4.4 KB
│ ├─ 📝 llm-corrections.md Markdown 146L · 6.6 KB
│ ├─ 📝 migration-async.md Markdown 143L · 3.6 KB
│ ├─ 📝 migration-v4.md Markdown 211L · 8.7 KB
│ ├─ 📝 observability.md Markdown 155L · 4.2 KB
│ ├─ 📝 resource-management.md Markdown 119L · 3.0 KB
│ ├─ 📝 retry-scheduling.md Markdown 152L · 4.4 KB
│ ├─ 📝 schema.md Markdown 188L · 4.4 KB
│ ├─ 📝 streams.md Markdown 159L · 3.7 KB
│ └─ 📝 testing.md Markdown 142L · 3.5 KB
├─ 📄 LICENSE.txt Text 162L · 8.9 KB
└─ 📝 SKILL.md Markdown 171L · 9.8 KB

安全亮点

✓ Purely documentation-based skill with no executable content — zero attack surface
✓ All external URLs point to legitimate, well-known Effect-TS project resources (official docs, GitHub, stable third-party API reference)
✓ Example URLs in HTTP tutorials use the standard placeholder domain api.example.com
✓ Apache 2.0 license is permissive and appropriate for documentation
✓ No scripts, binaries, or dependency files present
✓ No credential, key, or sensitive file access attempted
✓ No base64, eval, curl|bash, wget|sh, or any obfuscation patterns present
✓ No hidden HTML comments or steganographic content
✓ evals/evals.json contains legitimate evaluation criteria for Effect code quality, not test cases for exploitation
✓ Skill content accurately matches its stated purpose as a development guide