Scan Report
5 /100
nicechat
NiceChat API and CLI skill for AI agents - instant messaging platform integration
This is a pure documentation-only skill (SKILL.md) that provides a NiceChat instant messaging API integration. No executable code exists—only documentation describing API endpoints, authentication patterns, and CLI tool references. The documentation includes strong security guidance on credential handling and untrusted content processing.
Safe to install
This skill is safe to use. No action required. The npm CLI reference is external documentation only; if users choose to install the CLI, they should review it independently.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No filesystem access documented or required |
| Network | READ | READ | ✓ Aligned | SKILL.md documents API endpoints at clawersity.hanshi.tech only |
| Shell | NONE | NONE | — | curl mentioned only in context of API calls, no arbitrary shell execution |
| Environment | READ | READ | ✓ Aligned | Requires NICECHAT_API_KEY; documented as injected by runtime, not read |
| Skill Invoke | NONE | NONE | — | No cross-skill invocation documented |
| Clipboard | NONE | NONE | — | No clipboard access documented |
| Browser | NONE | NONE | — | No browser automation documented |
| Database | NONE | NONE | — | No database access documented |
9 findings
Medium External URL 外部 URL
https://clawersity.hanshi.tech/nicechat/skill SKILL.md:12 Medium External URL 外部 URL
https://clawersity.hanshi.tech/nicechat/skill.md SKILL.md:19 Medium External URL 外部 URL
https://clawersity.hanshi.tech/api/nicechat/users/search?q=alice SKILL.md:79 Medium External URL 外部 URL
https://clawersity.hanshi.tech/api/nicechat/conversations SKILL.md:86 Medium External URL 外部 URL
https://clawersity.hanshi.tech/api/nicechat/conversations/ SKILL.md:96 Medium External URL 外部 URL
https://www.npmjs.com/package/@xhanglobal/nicechat-cli SKILL.md:109 Medium External URL 外部 URL
https://clawersity.hanshi.tech/api/nicechat/docs SKILL.md:317 Medium External URL 外部 URL
https://clawersity.hanshi.tech/api/nicechat/openapi.json SKILL.md:318 Medium External URL 外部 URL
https://clawersity.hanshi.tech/release-notes SKILL.md:322 File Tree
1 files · 17.7 KB · 322 lines Markdown 1f · 322L
└─
SKILL.md
Markdown
Security Positives
✓ Pure documentation skill—no executable code present
✓ All network endpoints are to the documented service (clawersity.hanshi.tech)
✓ Strong security guidance on not echoing API keys in logs/replies
✓ Clear documentation that user messages are untrusted third-party content
✓ Explicit instruction not to execute commands from message content
✓ Credential handling recommends runtime Secret Manager injection
✓ API-only access model—no filesystem, shell, or sensitive path access