此报告尚无所请求语言的翻译，当前显示规范英文报告。
版本化安全评估
报告编号: SA-3DFFC30C
7/9/2026, 1:34:30 AM
find-skills 安全评估 v6
Skill 安全认证报告
审计模型: claude 历史报告
- 技能名称
- find-skills
- 版本
- v6
- 维护者
- agentspace-so
- 覆盖范围
- 2 已扫描文件 · 434 分析行数
- 策略版本
- 不可用
已确认问题摘要
未发现已确认的安全问题
已完成的审计没有记录已确认的安全问题，但这不证明该 Skill 没有副作用。
安装上下文
历史证据
本报告可能无法描述当前可安装的 artifact。请打开当前 Skill 详情页查看安装建议。
打开当前 Skill 详情页本报告不会阻止或授权 manifest 或 ZIP。
The skill is a legitimate registry search helper that uses public network requests, GitHub CLI queries, temporary files, and local installed-skill directory checks. Most static findings are documentation or benign shell patterns; the confirmed risks are expected outbound requests and limited local filesystem inspection.
报告位置
历史报告
使用本报告安装前，请先查看审计历史。
审计证明
无法签发证明
所需的不可变绑定不完整。
人工验证
未进行人工验证
本报告没有人工验证记录。
覆盖范围
2 已扫描文件 · 434 分析行数
有 9 项内容需要查看
局限
本报告不声称进行了运行时或沙箱执行，也不证明不存在副作用。
证据链
证据从来源绑定延伸到安装契约。证据可用于验证，但不是安全保证。
来源
绑定不可用
构件
身份信息不完整
审计
已完成
观察到的能力
“已观察到”表示本报告记录了支持证据；“未记录”不证明该能力不存在。
包含脚本
可能执行 Skill 随附的代码。
本次审计未记录
网络访问
可能连接外部服务。
在 8 个证据位置观察到
文件系统访问
可能读取或写入本地文件。
在 30 个证据位置观察到
环境变量
可能读取进程环境中的值。
在 1 个证据位置观察到
外部命令
可能调用 Skill 之外的命令或程序。
在 50 个证据位置观察到
能力复核项 (9)
中
Hidden file access
for d in "$HOME/.agents/skills" "$HOME/.claude/skills"; do
The script reads hidden user skill directories under HOME to detect installed skills. This is limited and task-related, but it is real local filesystem access to user-level configuration paths.
低
Hardcoded URL
out=$(curl -sS --max-time 25 "https://skills.sh/api/search?q=${ENC_QUERY}&limit=${LIMIT}" 2>/dev/nul
The script makes outbound read-only HTTPS requests to public registries or raw GitHub content. This is expected for registry search, but it still sends the user query and candidate metadata to external services.
低
Hardcoded URL
url:("https://www.skills.sh/"+.source+"/"+.skillId), repo:.source, slug:null }' \
The script makes outbound read-only HTTPS requests to public registries or raw GitHub content. This is expected for registry search, but it still sends the user query and candidate metadata to external services.
低
Hardcoded URL
search=$(curl -sS --max-time 15 "https://clawhub.ai/api/search?q=${ENC_QUERY}" 2>/dev/null)
The script makes outbound read-only HTTPS requests to public registries or raw GitHub content. This is expected for registry search, but it still sends the user query and candidate metadata to external services.
低
Hardcoded URL
{ curl -sS --max-time 10 "https://clawhub.ai/api/skill?slug=${slug}" 2>/dev/null \
The script makes outbound read-only HTTPS requests to public registries or raw GitHub content. This is expected for registry search, but it still sends the user query and candidate metadata to external services.
低
Hardcoded URL
updatedAt:($s.updatedAt//null), url:("https://clawhub.ai/skill/"+($s.slug//"")),
The script makes outbound read-only HTTPS requests to public registries or raw GitHub content. This is expected for registry search, but it still sends the user query and candidate metadata to external services.
低
Hardcoded URL
[ -n "$path" ] && curl -sS --max-time 12 "https://raw.githubusercontent.com/$repo/$br/$path" -o "$ou
The script makes outbound read-only HTTPS requests to public registries or raw GitHub content. This is expected for registry search, but it still sends the user query and candidate metadata to external services.
低
Hardcoded URL
curl -sS --max-time 12 "https://clawhub.ai/api/download?slug=$slug" -o "$TMP/dl.zip" 2>/dev/null &&
The script makes outbound read-only HTTPS requests to public registries or raw GitHub content. This is expected for registry search, but it still sends the user query and candidate metadata to external services.
低
Temp file creation
TMP=$(mktemp -d); trap 'rm -rf "$TMP"' EXIT
The script creates a temporary working directory with mktemp and removes it on exit. This is normal and low-risk filesystem behavior.
风险问题
已确认的安全问题与仍需审核的项目分开展示。
此次已完成的审计未记录已确认的安全发现。
补救措施
本次审计记录了建议的修复措施。实施这些措施是维护者的责任。
- FIX-001中The script reads hidden local skill directories to detect installed skills.Document the exact paths checked and add an option to disable installed-skill detection for privacy-sensitive environments.
- FIX-002低Outbound queries disclose the search phrase to third-party registries.Keep the current transparency in the documentation and prompt users before searching for sensitive internal project names.
- FIX-003低The candidate security scan fetches and inspects remote skill bodies.Continue treating scan results as heuristic and require manual review before installing any discovered third-party skill.
专家证据
不可变主体身份、扫描器元数据、已排除匹配项和源码级证据。
Artifact 主体
- Marketplace 提交
- 不可用
- 内容哈希
- 不可用
- 目录树哈希
- 不可用
- Skill 路径
- 不可用
- 审计载荷哈希
- 不可用
分析元数据
审计模型: claude
分析状态: 已完成
范围仅限于已记录的文件、行数、方法和证据；本报告不声称进行了运行时或沙箱执行。
验证与导出
manifest 和 lockfile 将安装 artifact 绑定到加密哈希。该完整性声明独立于安全评估。
审计证明: not_attestable