Scan Report
0 /100
short-play-writer
专业短剧/AI漫剧剧本创作助手,包含爆款规律、标准模板、爽点设计和分镜规范
Pure prompt-driven writing skill with no executable code, scripts, or sensitive file access. All 14 files are documentation and templates with no security concerns.
Safe to install
No action needed. This is a safe, content-only skill.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file read/write operations — skill is entirely prompt-driven |
| Network | NONE | NONE | — | No network requests — one benign external URL in CHANGELOG.md |
| Shell | NONE | NONE | — | No shell execution — no scripts directory present |
| Environment | NONE | NONE | — | No environment variable access |
| Skill Invoke | NONE | NONE | — | No skill invocation patterns found |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser automation |
| Database | NONE | NONE | — | No database access |
1 findings
Medium External URL 外部 URL
https://keepachangelog.com/zh-CN/1.0.0/ CHANGELOG.md:5 File Tree
14 files · 56.6 KB · 915 lines Markdown 12f · 893L
JSON 1f · 17L
Text 1f · 5L
├─
▾
examples
│ ├─
case-studies.md
Markdown
│ ├─
demo-longyin.md
Markdown
│ ├─
hook-templates.md
Markdown
│ ├─
manju_example.md
Markdown
│ ├─
nanpin_example.md
Markdown
│ └─
nvpin_example.md
Markdown
├─
▾
references
│ ├─
market-rules.md
Markdown
│ ├─
production-process.md
Markdown
│ ├─
structure-templates.md
Markdown
│ └─
writing-skills.md
Markdown
├─
_meta.json
JSON
├─
CHANGELOG.md
Markdown
├─
requirements.txt
Text
└─
SKILL.md
Markdown
Security Positives
✓ No executable scripts present — skill is entirely markdown documentation
✓ No sensitive file access (no .ssh, .aws, .env, credentials paths)
✓ No external dependencies required (requirements.txt explicitly states no pip dependencies)
✓ No obfuscation, base64, or shell command execution patterns
✓ No credential harvesting or data exfiltration mechanisms
✓ No hidden functionality — all content matches stated purpose (short drama script writing)
✓ MIT-0 License with transparent author attribution (Kenz1117)
✓ One external URL (keepachangelog.com) is benign and industry-standard
✓ No supply chain risks — no unpinned dependencies