扫描报告
0 /100
polito-notes
Convert PDF lecture slides into comprehensive bilingual (IT+EN) markdown notes for Polito university courses
A pure documentation skill with no executable code — all stated capabilities (PDF text extraction, bilingual markdown generation, file writing) are explicitly declared with zero hidden functionality.
可以安装
No action needed. This skill is a plain documentation file describing a PDF-to-markdown pipeline. If deployed, ensure the Bash tool is restricted to read-only pdftotext invocations rather than unrestricted shell access.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md: reads user-provided PDFs |
| 文件系统 | WRITE | WRITE | ✓ 一致 | SKILL.md: writes notes.md and notes-en.md to course folders |
| 命令执行 | READ | READ | ✓ 一致 | SKILL.md: runs pdftotext only — documented, scoped, no arbitrary command executi… |
| 网络访问 | NONE | NONE | — | No network access detected |
| 环境变量 | NONE | NONE | — | No environment variable access detected |
| 剪贴板 | NONE | NONE | — | No clipboard access detected |
| 浏览器 | NONE | NONE | — | No browser access detected |
| 数据库 | NONE | NONE | — | No database access detected |
目录结构
2 文件 · 5.3 KB · 139 行 Markdown 1f · 134L
JSON 1f · 5L
├─
_meta.json
JSON
└─
SKILL.md
Markdown
安全亮点
✓ All capabilities (filesystem READ/WRITE, shell for pdftotext) are explicitly declared in SKILL.md
✓ No scripts or executable code present — skill is purely a specification document
✓ RAG integration references an external, named skill (lookupmark-local-rag) with a scoped query script
✓ No credential harvesting, environment variable iteration, or sensitive path access
✓ No obfuscation, base64-encoded execution, or anti-analysis patterns
✓ No outbound network calls or data exfiltration indicators
✓ Workflow is limited to: read PDF → write bilingual markdown → done