中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 5/100
Last scan:18 hr ago Rescan
5 /100
hello
没有任何实际意义的skill，用于测试
A minimal test skill containing only SKILL.md with no executable code, scripts, or dependencies — body content is internal development notes with no malicious behavior.
Skill Namehello
Duration17.5s
Enginepi
✓
Safe to install
No action needed. The skill is purely informational and safe to use.

Findings 1 items

Severity Finding Location
Low
SKILL.md body contains unrelated development notes Doc Mismatch
The SKILL.md frontmatter declares 'hello' as a test skill with no practical purpose, but the body contains internal development notes about Phabricator bootstrapping, Microsoft OAuth, and database redesign. This is a content mismatch, though in this case the 'deception' is clearly benign (it is a test/placeholder skill).
name: hello
description: 没有任何实际意义的skill，用于测试
→ If this is intended as a real skill, clean up SKILL.md to remove internal notes. If it is truly a test placeholder, this finding can be ignored.
 SKILL.md:1

File Tree

1 files · 2.0 KB · 24 lines
Markdown 1f · 24L
└─ 📝 SKILL.md Markdown 24L · 2.0 KB

Security Positives

✓ No executable scripts or code files present
✓ No dependencies or package files
✓ No credential access or environment variable reading
✓ No network requests or external communications
✓ No obfuscated code or base64 payloads
✓ No filesystem write operations
✓ No shell or command execution