扫描报告
0 /100
daily-poem
Daily Poem — 每日精选诗词推送，中英古典/现代诗交替，含译文赏析朗读节奏，支持按主题/作者按需查诗和周合辑
Daily Poem skill is a legitimate poetry delivery and query service using Node.js scripts as prompt generators with minimal filesystem access and no network/shell execution.
可以安装
This skill is safe to use. No security concerns identified.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:data/push-log.json; scripts read this file only |
| 文件系统 | WRITE | WRITE | ✓ 一致 | SKILL.md declares push-log.json writes; scripts use fs.readFileSync (read-only),… |
| 网络访问 | NONE | NONE | — | No network requests in any script |
| 命令执行 | NONE | NONE | — | No shell execution, subprocess, or command invocation |
| 环境变量 | NONE | NONE | — | No env access found |
| 浏览器 | NONE | NONE | — | Not used |
目录结构
8 文件 · 19.1 KB · 542 行 JavaScript 4f · 391L
Markdown 1f · 122L
JSON 3f · 29L
├─
▾
data
│ └─
push-log.json
JSON
├─
▾
scripts
│ ├─
morning-push.js
JavaScript
│ ├─
push-toggle.js
JavaScript
│ ├─
query.js
JavaScript
│ └─
weekly-digest.js
JavaScript
├─
_meta.json
JSON
├─
package.json
JSON
└─
SKILL.md
Markdown
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
none | N/A | npm | 否 | No external dependencies — only built-in Node.js modules (fs, path, process) |
安全亮点
✓ SKILL.md documentation accurately describes all script functionality with no mismatches
✓ Scripts are simple prompt generators outputting to console only — no side effects
✓ query.js implements input sanitization (removes <>&"';&|`$ characters)
✓ No external dependencies — uses only built-in Node.js modules (fs, path, process)
✓ Filesystem access is minimal: only reads/writes push-log.json within skill directory
✓ No credential access, sensitive path access, or environment variable reading
✓ No network requests, IP connections, or data exfiltration
✓ No obfuscation, base64-encoded strings, or anti-analysis techniques
✓ Cron management is documented as openclaw CLI commands, not raw shell scripts
✓ push-toggle.js only prints instructions without executing system commands