扫描报告
70 /100
Unknown (E-SafeNet LOCK visible in binary)
Cannot be verified - SKILL.md contains binary data
SKILL.md contains binary/corrupted content instead of readable documentation, preventing any verification of skill behavior or declared capabilities.
不要安装此技能
Do not use this skill. The binary SKILL.md file prevents any security audit or verification of intended functionality. Request a clean, readable SKILL.md from the skill publisher.
攻击链 3 步
◎
入口 Skill distributed with binary SKILL.md that appears legitimate but contains no verifiable documentation
SKILL.md:1⬡
提权 Binary content hides true skill functionality from security audits
SKILL.md:1◉
影响 Potential for undeclared sensitive behavior (credential access, data exfiltration, shell execution) cannot be ruled out
SKILL.md:1安全发现 2 项
| 严重性 | 安全发现 | 位置 |
|---|---|---|
| 严重 | Binary content in SKILL.md 代码混淆 | SKILL.md:1 |
| 高危 | No verifiable documentation 文档欺骗 | SKILL.md:1 |
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | UNKNOWN | UNKNOWN | ✓ 一致 | Cannot read SKILL.md to verify declared permissions |
| 网络访问 | UNKNOWN | UNKNOWN | ✓ 一致 | Cannot read SKILL.md to verify network access |
| 命令执行 | UNKNOWN | UNKNOWN | ✓ 一致 | Cannot read SKILL.md to verify shell access |
| 环境变量 | UNKNOWN | UNKNOWN | ✓ 一致 | Cannot read SKILL.md to verify environment access |
目录结构
1 文件 · 6.3 KB · 11 行 Markdown 1f · 11L
└─
SKILL.md
Markdown