扫描报告
5 /100
habit-tracker-companion
习惯养成打卡助手，连续激励、数据统计、陪你养成好习惯。
This is a documentation-only skill with a single SKILL.md file describing a habit tracker CLI. No code, scripts, or executable content exists in the package.
可以安装
No action needed. The skill consists solely of a Markdown documentation file describing a habit tracking tool. If this skill is adopted, actual implementation code should be reviewed for security issues before use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ/WRITE | NONE | ✓ 一致 | SKILL.md:40 declares ~/.memory/habits/habits.json but no code exists to verify |
| 网络访问 | NONE | NONE | — | No network activity described or present |
| 命令执行 | NONE | NONE | — | No shell commands described beyond python invocation |
| 环境变量 | NONE | NONE | — | No environment variable access described |
| 技能调用 | NONE | NONE | — | No cross-skill invocation described |
| 剪贴板 | NONE | NONE | — | No clipboard access described |
| 浏览器 | NONE | NONE | — | No browser access described |
| 数据库 | NONE | NONE | — | No database access described |
目录结构
1 文件 · 951 B · 44 行 Markdown 1f · 44L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code present — only a Markdown documentation file
✓ No sensitive file access patterns (no ~/.ssh, ~/.aws, .env references)
✓ No network requests, external IPs, or data exfiltration indicators
✓ No obfuscation, base64 encoding, or anti-analysis techniques
✓ No credential harvesting or environment variable enumeration
✓ No remote script execution patterns (curl|bash, wget|sh)
✓ No supply chain risks — no dependency files present
✓ No persistence mechanisms (no cron, startup hooks, backdoors)
✓ All described functionality is benign and within expected scope for a habit tracker