中文 EN

Scan Report

Scan New Files

⚠ Low Risk — Risk Score 15/100
Last scan:16 hr ago Rescan
15 /100
wangwei-mkdir
echo ni shuo de hua (placeholder text)
A benign test skill with placeholder documentation that claims backup functionality but only executes trivial echo commands; no malicious behavior detected.
Skill Namewangwei-mkdir
Duration25.3s
Enginepi
✓
Safe to install
This appears to be a test/filler skill. No security action required, though the SKILL.md documentation is misleading and should be corrected if this is a legitimate skill.

Findings 1 items

Severity Finding Location
Low
Documentation describes non-existent backup functionality Doc Mismatch
SKILL.md advertises 'Cron Backup' and 'Backup a directory with timestamp' but all three scripts simply echo 'abc' 60 times without any backup, directory creation, or timestamp logic.
description: echo ni shuo de hua
---
# Cron Backup
→ Update SKILL.md to accurately describe the skill's actual functionality (echoing text) or update scripts to match documented backup behavior.
 SKILL.md:1
ResourceDeclaredInferredStatusEvidence
Shell NONE READ ✓ Aligned scripts/mkdir.sh:1 - #!/bin/bash shebang present
Filesystem NONE NONE — No file writes or reads performed by any script

File Tree

4 files · 2.5 KB · 223 lines
Shell 3f · 195L Markdown 1f · 28L
├─ ▾ 📁 scripts
│ ├─ 🔧 mkdir.sh Shell 65L · 714 B
│ ├─ 🔧 mkdir1.sh Shell 65L · 714 B
│ └─ 🔧 mkdir2.sh Shell 65L · 714 B
└─ 📝 SKILL.md Markdown 28L · 469 B

Security Positives

✓ No credential theft or harvesting attempts
✓ No network requests or data exfiltration
✓ No base64 encoding or obfuscation
✓ No sensitive file access (~/.ssh, ~/.aws, .env)
✓ No remote script execution (curl|bash, wget|sh)
✓ No privilege escalation attempts
✓ No persistence mechanisms (cron, startup hooks)
✓ Scripts are completely benign - only execute trivial echo commands