扫描报告
0 /100
super-train
火车票智能中转方案推荐助手
This is a legitimate train ticket booking assistant skill with no security concerns. It only stores user preferences/history in local JSON files and invokes the flyai-cli tool for train queries.
可以安装
This skill is safe to use. No security actions required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | WRITE | WRITE | ✓ 一致 | SKILL.md:assets/preferences.json and assets/history.json are declared for read/w… |
| 网络访问 | NONE | NONE | — | All network access is delegated to flyai-cli tool, not performed directly |
| 命令执行 | NONE | NONE | — | No shell commands executed; only invokes flyai-cli tool |
| 环境变量 | NONE | NONE | — | No environment variable access observed |
| 数据库 | NONE | NONE | — | No database access |
目录结构
4 文件 · 15.3 KB · 375 行 Markdown 2f · 359L
JSON 2f · 16L
├─
▾
assets
│ ├─
history.json
JSON
│ └─
preferences.json
JSON
├─
▾
references
│ └─
flyai-cli-reference.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ No shell execution or subprocess calls detected
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ No credential harvesting or environment variable enumeration
✓ No base64 encoded commands or obfuscated code
✓ No hidden functionality - SKILL.md comprehensively documents all behavior
✓ Only stores user preferences and history in local JSON files
✓ Network access delegated entirely to externally-installed flyai-cli tool
✓ No download/install of external scripts or tools
✓ No data exfiltration behavior