Навыки me-featured-events

📦

me-featured-events

Name: me-featured-events
Author: me-news

Ревизия содержимого r1 Средний риск 📁 Доступ к файловой системе🌐 Доступ к сети⚙️ Внешние команды🔑 Переменные окружения

Track AI and Web3 Events with ME News

Finding relevant events across dates and regions takes repeated work. This skill filters ME News events and supports confirmed recurring reminders.

Поддерживает: Claude Codex Code(CC)

📊 70 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "me-featured-events" from https://skillstore.io/skills/me-news-me-featured-events.md and its manifest at https://skillstore.io/api/skills/me-news-me-featured-events/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/me-news-me-featured-events.md Подписанный manifest GET /api/skills/me-news-me-featured-events/manifest Подписанный lockfile GET /api/skills/me-news-me-featured-events/lockfile

Протестировать

Использование «me-featured-events». Show AI events in Hong Kong during the next week.

Ожидаемый результат:

Today

AI Product Forum
A practical forum on current AI product development.
August 24, 14:00-18:00 (UTC+8) | Hong Kong
ME News event link

Использование «me-featured-events». Tell me when a new Web3 event appears in Singapore.

Ожидаемый результат:

New event

Web3 Infrastructure Meetup
A meetup covering infrastructure and developer tools.
August 28, 19:00-21:00 (UTC+8) | Singapore
ME News event link

Использование «me-featured-events». Find events next month with no region filter.

Ожидаемый результат:

Results are grouped by start date.
Each entry includes an excerpt, full time range, location, and returned event link.
The result set uses the requested month and all available regions.

Аудит безопасности

Средний риск

v1 • 20.08.2026 Открыть версионный отчет

The static alerts are lexical false positives caused by Markdown code spans, JavaScript template literals, fixed read-only API calls, and isolated test helpers. Two medium concerns remain: caller-controlled state paths can overwrite writable files, and imported event links are forwarded without validation.

Просканировано файлов

1,064

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Средний

scripts/init-subscription.mjs:10-11 scripts/lib.mjs:108-112

Unrestricted State Path Can Overwrite Files

The --state argument and ME_FEATURED_EVENTS_STATE value become a write target without containment checks. A crafted path can replace any writable file with subscription state.

The state path is accepted directly and saveState renames a generated file over that destination. The risk requires an attacker or unsafe caller to control the argument or environment value.

Средний

scripts/lib.mjs:188-198 references/api.md:80-84

Untrusted Event Links Are Forwarded to Users

Event URLs from the remote API are included in reminders without an origin or protocol check. Imported events may therefore deliver misleading or unsafe links.

The formatter appends event.url as a string, and the API reference states that activity_import entries can use spreadsheet-provided links. No scheme or host validation is present.

Факторы риска

📁 Доступ к файловой системе (13)

references/agent-compatibility.md:59 references/agent-compatibility.md:60 references/agent-compatibility.md:61 references/agent-compatibility.md:59 references/agent-compatibility.md:60 references/agent-compatibility.md:61 scripts/delivery.test.mjs:2 scripts/delivery.test.mjs:16 scripts/initialization.test.mjs:2 scripts/initialization.test.mjs:12 scripts/lib.mjs:35 scripts/lib.mjs:45 scripts/lib.test.mjs:52

🌐 Доступ к сети (11)

references/api.md:76 scripts/daily-upcoming.mjs:23 scripts/init-subscription.mjs:28 scripts/init-subscription.mjs:36 scripts/init-subscription.mjs:52 scripts/lib.mjs:77 scripts/lib.mjs:67 scripts/lib.mjs:4 scripts/poll-new-events.mjs:25 SKILL.md:27 SKILL.md:122

⚙️ Внешние команды (50)

scripts/args.test.mjs:2 scripts/args.test.mjs:9 scripts/daily-upcoming.mjs:19 scripts/daily-upcoming.mjs:31 scripts/daily-upcoming.mjs:33 scripts/delivery.test.mjs:5 scripts/delivery.test.mjs:12 scripts/init-subscription.mjs:31 scripts/init-subscription.mjs:32 scripts/init-subscription.mjs:57 scripts/init-subscription.mjs:59 scripts/initialization.test.mjs:5 scripts/initialization.test.mjs:34 scripts/initialization.test.mjs:15-32 scripts/lib.mjs:12 scripts/lib.mjs:21 scripts/lib.mjs:23 scripts/lib.mjs:24 scripts/lib.mjs:26 scripts/lib.mjs:35 scripts/lib.mjs:38 scripts/lib.mjs:45 scripts/lib.mjs:46 scripts/lib.mjs:48 scripts/lib.mjs:68 scripts/lib.mjs:78 scripts/lib.mjs:84 scripts/lib.mjs:86 scripts/lib.mjs:94 scripts/lib.mjs:110 scripts/lib.mjs:111 scripts/lib.mjs:129 scripts/lib.mjs:131 scripts/lib.mjs:153 scripts/lib.mjs:157 scripts/lib.mjs:172 scripts/lib.mjs:177 scripts/lib.mjs:180 scripts/lib.mjs:185 scripts/lib.mjs:192 scripts/lib.mjs:213 scripts/lib.mjs:217 scripts/lib.mjs:222 scripts/lib.test.mjs:48 scripts/lib.test.mjs:52 scripts/poll-new-events.mjs:57 scripts/poll-new-events.mjs:59 scripts/record-delivery.mjs:32 SKILL.md:12 SKILL.md:13

🔑 Переменные окружения (13)

scripts/daily-upcoming.mjs:11 scripts/daily-upcoming.mjs:11 scripts/init-subscription.mjs:11 scripts/init-subscription.mjs:11 scripts/initialization.test.mjs:20 scripts/initialization.test.mjs:24 scripts/initialization.test.mjs:20 scripts/initialization.test.mjs:24 scripts/initialization.test.mjs:40 scripts/poll-new-events.mjs:8 scripts/poll-new-events.mjs:8 scripts/record-delivery.mjs:7 scripts/record-delivery.mjs:7

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/me-news-me-featured-events/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/me-news-me-featured-events/security.svg)](https://skillstore.io/skills/me-news-me-featured-events?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/me-news-me-featured-events?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/me-news-me-featured-events/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/me-news-me-featured-events.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

me-news. (2026). me-featured-events security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/me-news-me-featured-events/audits/1

Цитата BibTeX

@techreport{me-news-me-news-me-featured-events-2026,
  author = {me-news},
  title = {me-featured-events security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/me-news-me-featured-events/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "me-featured-events security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "me-news"
date-released: "2026-08-20"
url: "https://skillstore.io/skills/me-news-me-featured-events/audits/1"
identifiers:
  - type: other
    value: "skillstore:me-news-me-featured-events:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Plan Industry Attendance

Review upcoming AI and Web3 events by region and date before planning travel or meetings.

Monitor New Listings

Receive updates when ME News adds events matching selected topics and regions.

Prepare Event Briefings

Generate a concise schedule with event times, locations, descriptions, and source links.

Попробуйте эти промпты

Browse Upcoming Events

Show AI and Web3 events in the next seven days. Do not create a subscription.

Filter by Region

Find AI events in [region] from [start date] through [end date]. Show times, locations, and links.

Create a Daily Reminder

Set up a daily reminder for [event types] in [regions]. Show the schedule and delivery target before creating it.

Configure Reliable New Event Alerts

Create new-event alerts every five minutes for [types] in [regions]. Use delivery feedback and retain pending messages after uncertain results.

Лучшие практики

Confirm event types, regions, schedule, delivery channel, and recipient before enabling reminders.
Use explicit date ranges when a month or calendar period matters.
Verify event details and external links before registration or travel.