監査履歴

This skill is a legitimate Weibo data query assistant that calls a third-party API (aconfig.cn) using a user-provided API key. Static analysis reported 676 potential issues, but nearly all are false positives: 'weak cryptographic algorithm' findings are markdown table separators (|---|---|), 'shell backtick execution' findings are curl examples in documentation code blocks, and 'system reconnaissance' findings are API parameter documentation. The skill is transparent about its credential usage and network calls. Low risk - publish with standard warnings about third-party API usage.

This is a legitimate data fetching skill that provides documentation for accessing Weibo public data through the MaxHub API. Static analysis flagged 216 potential issues but evaluation confirms these are all false positives: backticks in markdown tables were misidentified as shell commands, environment variable access is intentional for API authentication, and network access is required for data retrieval. No malicious code or intent detected. The skill explicitly prohibits platform manipulation and only accesses public data.