扫描报告
5 /100
x-cb
Interact with Codeberg using the `x cb` CLI for managing repositories, issues, PRs, organizations, teams, and users on Codeberg.
Pure documentation-only skill that describes `x cb` CLI commands for Codeberg interactions with no executable code, scripts, or hidden functionality.
可以安装
No action needed. This skill is a simple CLI usage guide with no security concerns.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in SKILL.md |
| 网络访问 | NONE | NONE | — | No network code; only documents CLI usage |
| 命令执行 | NONE | READ | ✓ 一致 | SKILL.md documents `x cb` CLI commands (Bash→shell:WRITE) but these are declared… |
| 环境变量 | NONE | NONE | — | No environment access |
| 技能调用 | NONE | NONE | — | No inter-skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No database access |
1 项发现
中危 外部 URL 外部 URL
https://codeberg.org/user/settings/applications SKILL.md:8 目录结构
1 文件 · 1.8 KB · 90 行 Markdown 1f · 90L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code or scripts present — purely a documentation file
✓ All CLI operations are fully documented with examples in SKILL.md
✓ No credential harvesting, token exfiltration, or sensitive path access
✓ No obfuscation, base64-encoded payloads, or anti-analysis techniques
✓ No supply chain dependencies or dependency files
✓ No persistence mechanisms (cron, startup hooks, backdoors)
✓ No prompt injection or hidden instructions detected
✓ Skill purpose (Codeberg CLI interaction) is clearly stated and matches all documented behavior