扫描报告
0 /100
techsnif
Query TechSnif tech news intelligence via bundled CLI
This is a legitimate, read-only tech news CLI tool that queries a public API. No malicious behavior, credential harvesting, shell execution, or hidden functionality detected.
可以安装
This skill is safe to use. No action required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 网络访问 | READ | READ | ✓ 一致 | scripts/techsnif-cli.cjs:3563 - fetch(url.toString(), {headers: {Accept: 'applic… |
| 文件系统 | NONE | NONE | — | No filesystem access detected |
| 命令执行 | NONE | NONE | — | No shell execution detected |
| 环境变量 | NONE | NONE | — | TECHSNIF_API_URL only, not harvesting credentials |
3 项发现
中危 外部 URL 外部 URL
https://techsnif.com/ SKILL.md:4 中危 外部 URL 外部 URL
https://www.npmjs.com/package/@techsnif/cli SKILL.md:5 中危 外部 URL 外部 URL
https://api.techsnif.com SKILL.md:58 目录结构
3 文件 · 144.9 KB · 3974 行 JavaScript 1f · 3865L
Markdown 2f · 109L
├─
▾
references
│ └─
categories.md
Markdown
├─
▾
scripts
│ └─
techsnif-cli.cjs
JavaScript
└─
SKILL.md
Markdown
安全亮点
✓ Bundled CLI (no remote package downloads)
✓ Public read-only API access - no authentication required
✓ No credential harvesting or exfiltration
✓ No shell execution capabilities
✓ No file system writes
✓ Clear documentation in SKILL.md matching actual behavior
✓ Standard CLI patterns using commander.js library
✓ No sensitive path access (~/.ssh, ~/.aws, .env)