スキル me-featured-events
📦
me-featured-events
コンテンツリビジョン r1 中リスク 📁 ファイルシステムへのアクセス🌐 ネットワークアクセス⚙️ 外部コマンド🔑 環境変数
Track AI and Web3 Events with ME News
Finding relevant events across dates and regions takes repeated work. This skill filters ME News events and supports confirmed recurring reminders.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "me-featured-events" from https://skillstore.io/skills/me-news-me-featured-events.md and its manifest at https://skillstore.io/api/skills/me-news-me-featured-events/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「me-featured-events」を使用しています。 Show AI events in Hong Kong during the next week.
期待される結果:
Today
AI Product Forum
A practical forum on current AI product development.
August 24, 14:00-18:00 (UTC+8) | Hong Kong
ME News event link
「me-featured-events」を使用しています。 Tell me when a new Web3 event appears in Singapore.
期待される結果:
New event
Web3 Infrastructure Meetup
A meetup covering infrastructure and developer tools.
August 28, 19:00-21:00 (UTC+8) | Singapore
ME News event link
「me-featured-events」を使用しています。 Find events next month with no region filter.
期待される結果:
- Results are grouped by start date.
- Each entry includes an excerpt, full time range, location, and returned event link.
- The result set uses the requested month and all available regions.
セキュリティ監査
中リスクv1 • 2026/8/20 バージョン別レポートを開く
The static alerts are lexical false positives caused by Markdown code spans, JavaScript template literals, fixed read-only API calls, and isolated test helpers. Two medium concerns remain: caller-controlled state paths can overwrite writable files, and imported event links are forwarded without validation.
17
スキャンされたファイル
1,064
解析済み行数
0
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (2)
中
Unrestricted State Path Can Overwrite Files
The --state argument and ME_FEATURED_EVENTS_STATE value become a write target without containment checks. A crafted path can replace any writable file with subscription state.
The state path is accepted directly and saveState renames a generated file over that destination. The risk requires an attacker or unsafe caller to control the argument or environment value.
中
Untrusted Event Links Are Forwarded to Users
Event URLs from the remote API are included in reminders without an origin or protocol check. Imported events may therefore deliver misleading or unsafe links.
The formatter appends event.url as a string, and the API reference states that activity_import entries can use spreadsheet-provided links. No scheme or host validation is present.
リスク要因
📁 ファイルシステムへのアクセス (13)
references/agent-compatibility.md:59 references/agent-compatibility.md:60 references/agent-compatibility.md:61 references/agent-compatibility.md:59 references/agent-compatibility.md:60 references/agent-compatibility.md:61 scripts/delivery.test.mjs:2 scripts/delivery.test.mjs:16 scripts/initialization.test.mjs:2 scripts/initialization.test.mjs:12 scripts/lib.mjs:35 scripts/lib.mjs:45 scripts/lib.test.mjs:52
🌐 ネットワークアクセス (11)
⚙️ 外部コマンド (50)
scripts/args.test.mjs:2 scripts/args.test.mjs:9 scripts/daily-upcoming.mjs:19 scripts/daily-upcoming.mjs:31 scripts/daily-upcoming.mjs:33 scripts/delivery.test.mjs:5 scripts/delivery.test.mjs:12 scripts/init-subscription.mjs:31 scripts/init-subscription.mjs:32 scripts/init-subscription.mjs:57 scripts/init-subscription.mjs:59 scripts/initialization.test.mjs:5 scripts/initialization.test.mjs:34 scripts/initialization.test.mjs:15-32 scripts/lib.mjs:12 scripts/lib.mjs:21 scripts/lib.mjs:23 scripts/lib.mjs:24 scripts/lib.mjs:26 scripts/lib.mjs:35 scripts/lib.mjs:38 scripts/lib.mjs:45 scripts/lib.mjs:46 scripts/lib.mjs:48 scripts/lib.mjs:68 scripts/lib.mjs:78 scripts/lib.mjs:84 scripts/lib.mjs:86 scripts/lib.mjs:94 scripts/lib.mjs:110 scripts/lib.mjs:111 scripts/lib.mjs:129 scripts/lib.mjs:131 scripts/lib.mjs:153 scripts/lib.mjs:157 scripts/lib.mjs:172 scripts/lib.mjs:177 scripts/lib.mjs:180 scripts/lib.mjs:185 scripts/lib.mjs:192 scripts/lib.mjs:213 scripts/lib.mjs:217 scripts/lib.mjs:222 scripts/lib.test.mjs:48 scripts/lib.test.mjs:52 scripts/poll-new-events.mjs:57 scripts/poll-new-events.mjs:59 scripts/record-delivery.mjs:32 SKILL.md:12 SKILL.md:13
🔑 環境変数 (13)
scripts/daily-upcoming.mjs:11 scripts/daily-upcoming.mjs:11 scripts/init-subscription.mjs:11 scripts/init-subscription.mjs:11 scripts/initialization.test.mjs:20 scripts/initialization.test.mjs:24 scripts/initialization.test.mjs:20 scripts/initialization.test.mjs:24 scripts/initialization.test.mjs:40 scripts/poll-new-events.mjs:8 scripts/poll-new-events.mjs:8 scripts/record-delivery.mjs:7 scripts/record-delivery.mjs:7
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/me-news-me-featured-events/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/me-news-me-featured-events?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/me-news-me-featured-events?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/me-news-me-featured-events/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/me-news-me-featured-events.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
me-news. (2026). me-featured-events security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/me-news-me-featured-events/audits/1BibTeX形式の引用
@techreport{me-news-me-news-me-featured-events-2026,
author = {me-news},
title = {me-featured-events security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/me-news-me-featured-events/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "me-featured-events security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "me-news"
date-released: "2026-08-20"
url: "https://skillstore.io/skills/me-news-me-featured-events/audits/1"
identifiers:
- type: other
value: "skillstore:me-news-me-featured-events:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 64
アーキテクチャ
85
保守性
85
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
Plan Industry Attendance
Review upcoming AI and Web3 events by region and date before planning travel or meetings.
Monitor New Listings
Receive updates when ME News adds events matching selected topics and regions.
Prepare Event Briefings
Generate a concise schedule with event times, locations, descriptions, and source links.
これらのプロンプトを試す
Browse Upcoming Events
Show AI and Web3 events in the next seven days. Do not create a subscription.
Filter by Region
Find AI events in [region] from [start date] through [end date]. Show times, locations, and links.
Create a Daily Reminder
Set up a daily reminder for [event types] in [regions]. Show the schedule and delivery target before creating it.
Configure Reliable New Event Alerts
Create new-event alerts every five minutes for [types] in [regions]. Use delivery feedback and retain pending messages after uncertain results.
ベストプラクティス
- Confirm event types, regions, schedule, delivery channel, and recipient before enabling reminders.
- Use explicit date ranges when a month or calendar period matters.
- Verify event details and external links before registration or travel.
回避
- Do not create recurring tasks for a one-time event search.
- Do not mark delivery successful unless the delivery tool confirms it.
- Do not store channel credentials in the skill directory or state file.
よくある質問
Which events can this skill find?
It finds AI and Web3 events available through the ME News event API.
Can I filter events by location?
Yes. You can select one or more regions returned by the API.
Can I search a specific date range?
Yes. Provide both start and end dates for a range of up to 366 days.
Does a one-time search create reminders?
No. The skill creates reminders only after an explicit subscription request and confirmation.
What is required for recurring notifications?
You need Node.js 18 or newer, a supported scheduler, and a configured delivery channel.
How does the skill avoid missing new events?
It advances the event cursor only after confirmed delivery and retries messages with uncertain results.