Scan Report
5 /100
Spell
Log anything fast and find it later with search and export. A simple offline logging utility.
Spell is a straightforward local logging utility with no network calls, credential access, or obfuscation — its behavior matches its documentation.
Safe to install
No action needed. The skill is a simple bash logger that stores timestamped user inputs in ~/.local/share/spell/ and exports to json/csv/txt.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Shell | WRITE | WRITE | ✓ Aligned | scripts/script.sh — all commands are bash-builtin operations (echo, date, cat, g… |
| Filesystem | WRITE | WRITE | ✓ Aligned | scripts/script.sh — mkdir -p $DATA_DIR, echo >> log files in ~/.local/share/spel… |
| Network | NONE | NONE | — | scripts/script.sh — zero curl, wget, nc, or any outbound network calls detected |
| Environment | NONE | NONE | — | scripts/script.sh — only reads $HOME to build DATA_DIR; no iteration over os.env… |
| credential_access | NONE | NONE | — | scripts/script.sh — no access to ~/.ssh, ~/.aws, .env, or similar sensitive path… |
3 findings
Medium External URL 外部 URL
https://bytesagain.com SKILL.md:6 Medium External URL 外部 URL
https://bytesagain.com/feedback/ SKILL.md:98 Info Email 邮箱地址
[email protected] SKILL.md:101 File Tree
2 files · 14.0 KB · 414 lines Shell 1f · 313L
Markdown 1f · 101L
├─
▾
scripts
│ └─
script.sh
Shell
└─
SKILL.md
Markdown
Security Positives
✓ No network calls — script is fully offline as documented
✓ No credential harvesting — does not read SSH keys, AWS tokens, or .env files
✓ No obfuscation — entire script is readable plaintext bash
✓ No remote script download — no curl|bash, wget|sh, or equivalent patterns
✓ No base64, eval, or dynamic code execution
✓ No sensitive path access — operates exclusively in ~/.local/share/spell/
✓ No supply chain risk — no external dependencies, pure POSIX bash
✓ No persistence mechanisms — no cron, systemd units, or startup hooks
✓ Behavior matches documentation: offline logging utility with local export