Trusted — Risk Score 0/100
Last scan:1 day ago Rescan
0 /100
tmtpost-daily
钛媒体每日资讯聚合技能 - News aggregation for tmtpost.com
Purely documentation-based skill with no executable code; only uses web_fetch to aggregate public news content from tmtpost.com.
Skill Nametmtpost-daily
Duration21.9s
Enginepi
Safe to install
No action needed. Skill is safe to use.
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE No filesystem access declared or inferred; skill is purely documentation
Network READ READ ✓ Aligned SKILL.md:47-51 - Only web_fetch to tmtpost.com domains declared
Shell NONE NONE No shell/bash execution described or implemented
Environment NONE NONE No environment variable access described
Skill Invoke NONE NONE No nested skill invocations declared
Clipboard NONE NONE No clipboard access described
Browser NONE NONE No browser automation described
Database NONE NONE No database access described
7 findings
🔗
Medium External URL 外部 URL
https://www.tmtpost.com/
SKILL.md:47
🔗
Medium External URL 外部 URL
https://www.tmtpost.com/nictation
SKILL.md:48
🔗
Medium External URL 外部 URL
https://www.tmtpost.com/hot
SKILL.md:49
🔗
Medium External URL 外部 URL
https://www.tmtpost.com/search?q=关键词
SKILL.md:50
🔗
Medium External URL 外部 URL
https://www.tmtpost.com/数字.html
SKILL.md:51
🔗
Medium External URL 外部 URL
https://www.tmtpost.com/nictation/7941080.html
SKILL.md:92
🔗
Medium External URL 外部 URL
https://www.tmtpost.com/search?q=AI手机
SKILL.md:119

File Tree

1 files · 6.0 KB · 270 lines
Markdown 1f · 270L
└─ 📝 SKILL.md Markdown 270L · 6.0 KB

Security Positives

✓ No executable code - skill is purely documentation
✓ Only declared tool is web_fetch to tmtpost.com (legitimate news site)
✓ No credential harvesting or sensitive path access
✓ No shell/bash execution
✓ No subprocess or eval patterns
✓ No external data exfiltration
✓ No dependency files with unpinned versions
✓ All functionality clearly documented in SKILL.md