技能 baoyu-danger-gemini-web

📦

baoyu-danger-gemini-web

Name: baoyu-danger-gemini-web
Author: jimliu

v1.56.2 内容修订 r2 高风险 🌐 网络访问📁 文件系统访问⚙️ 外部命令🔑 环境变量

生成 Gemini Web 图像和文本

团队需要快速生成图像和文本，而不必构建单独的 UI。此技能为 Gemini Web 提示、图像、参考和会话提供 CLI 工作流。

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "baoyu-danger-gemini-web" from https://skillstore.io/skills/jimliu-baoyu-danger-gemini-web.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-danger-gemini-web/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/jimliu-baoyu-danger-gemini-web.md 已签名 manifest GET /api/skills/jimliu-baoyu-danger-gemini-web/manifest 已签名 lockfile GET /api/skills/jimliu-baoyu-danger-gemini-web/lockfile

测试它

正在使用“baoyu-danger-gemini-web”。 Generate a clean product mockup image for a compact desk lamp.

预期结果:

返回已保存的图像路径，以及来自 Gemini Web 的可选描述性文本。

正在使用“baoyu-danger-gemini-web”。 Explain a technical topic using a prompt file and plain text output.

预期结果:

返回适合评审或复用的简洁文本响应。

正在使用“baoyu-danger-gemini-web”。 Use a reference image to create a new visual variation.

预期结果:

上传参考图像，请求生成变体，并将生成结果保存到本地。

安全审计

高风险

v5 • 2026/8/7 打开版本化报告

Most low and medium static matches are false positives from documented Google endpoints, relative imports, template literals, configuration reads, and normal session storage. Confirmed risks include cached authentication-cookie access, shell process execution for WSL detection, browser cookie reuse, and an output filename path escape; the skill should not be published until these are addressed.

已扫描文件

2,970

分析行数

复核项

已忽略误报

已确认安全问题 (4)

高

scripts/gemini-webapi/utils/cookie-file.ts:46

Certificate/key files

return Object.keys(out).length > 0 ? out : null;

The code reads and returns persisted authentication cookie values from a local file. These cookies can authorize Google sessions, so compromise of the file exposes credentials even though the scanner label is imprecise.

高

scripts/gemini-webapi/utils/cookie-file.ts:55

Certificate/key files

return Object.keys(out).length > 0 ? out : null;

高

scripts/gemini-webapi/utils/load-browser-cookies.ts:105-119 scripts/gemini-webapi/utils/load-browser-cookies.ts:150-158

Authenticated Browser Session Reuse

The client discovers an existing Chrome debugging session, retrieves Google cookies through CDP, and persists them for authenticated Gemini requests. This can grant the skill access to an active Google account session.

The source directly discovers a running browser, calls Network.getCookies for Google domains, and returns the cookie values for later authenticated requests.

高

scripts/gemini-webapi/types/image.ts:73-78

Output Filename Path Escape

Image.save joins the resolved output directory with a filename without constraining the filename to a basename. A caller-supplied filename containing traversal segments could write outside the intended directory.

The destination is built with path.join from a caller-influenced filename, and no basename check or resolved-path containment check is present before writeFile.

能力复核项 (8)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

scripts/gemini-webapi/utils/paths.ts:1

Node.js child_process module

import { execSync } from 'node:child_process';

The code invokes a system process through execSync for WSL and Windows path detection. The wslpath command interpolates command output into a shell string, creating a genuine process-execution and injection surface.

高

scripts/gemini-webapi/utils/paths.ts:38

Synchronous process execution

const raw = execSync('cmd.exe /C "echo %USERPROFILE%"', { encoding: 'utf-8', timeout: 5000 }).trim()

高

scripts/gemini-webapi/utils/paths.ts:39

Synchronous process execution

_wslHome = execSync(`wslpath -u "${raw}"`, { encoding: 'utf-8', timeout: 5000 }).trim() || null;

高

scripts/gemini-webapi/utils/paths.ts:38

Windows cmd.exe

const raw = execSync('cmd.exe /C "echo %USERPROFILE%"', { encoding: 'utf-8', timeout: 5000 }).trim()

中

scripts/gemini-webapi/utils/get-access-token.ts:44

Node.js fs operations

const v = fs.readFileSync(p, 'utf8').trim();

The code reads cached authentication material from local files and enumerates cached token files. These values can authorize a Google session, so local credential access is a real security risk.

中

scripts/gemini-webapi/utils/get-access-token.ts:55

Node.js fs operations

for (const f of fs.readdirSync(dir)) {

The code reads cached authentication material from local files and enumerates cached token files. These values can authorize a Google session, so local credential access is a real security risk.

中

scripts/gemini-webapi/utils/get-access-token.ts:44

Synchronous file operations

const v = fs.readFileSync(p, 'utf8').trim();

The code reads cached authentication material from local files and enumerates cached token files. These values can authorize a Google session, so local credential access is a real security risk.

中

scripts/gemini-webapi/utils/paths.ts:39

Ruby/shell backtick execution

_wslHome = execSync(`wslpath -u "${raw}"`, { encoding: 'utf-8', timeout: 5000 }).trim() || null;

The template literal is passed directly to execSync for shell execution, and it interpolates the result of another command into the wslpath string. This creates a genuine process-execution and injection surface.

风险因素

🌐 网络访问 (23)

📁 文件系统访问 (34)

⚙️ 外部命令 (50)

🔑 环境变量 (26)

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/jimliu-baoyu-danger-gemini-web/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/jimliu-baoyu-danger-gemini-web/security.svg)](https://skillstore.io/skills/jimliu-baoyu-danger-gemini-web?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/jimliu-baoyu-danger-gemini-web?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-danger-gemini-web/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-danger-gemini-web.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

jimliu. (2026). baoyu-danger-gemini-web security audit report (audit version 5) [Author version 1.56.2]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-danger-gemini-web/audits/5

BibTeX 引用

@techreport{jimliu-jimliu-baoyu-danger-gemini-web-2026,
  author = {jimliu},
  title = {baoyu-danger-gemini-web security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/jimliu-baoyu-danger-gemini-web/audits/5},
  note = {Author version 1.56.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-danger-gemini-web security audit report (audit version 5)"
version: "1.56.2"
type: report
authors:
  - name: "jimliu"
date-released: "2026-08-07"
url: "https://skillstore.io/skills/jimliu-baoyu-danger-gemini-web/audits/5"
identifiers:
  - type: other
    value: "skillstore:jimliu-baoyu-danger-gemini-web:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 高

架构

100

可维护性

内容

社区

规范符合性

你能构建什么

创建视觉草稿

根据书面提示快速生成概念图像，并保存以供评审或迭代。

生成辅助文案

将提示文件或简短请求发送到 Gemini Web，并从 CLI 收集文本输出。

自动化视觉变体

使用参考图像和会话 ID 运行可重复的图像变体工作流。

试试这些提示

生成一张图像

Generate an image of [subject] in [style]. Save it to [file name].

请求文本

Use Gemini Web to answer this request: [question or writing task].

使用参考图像

Use [reference image paths] as visual references. Generate a new image that changes [specific elements] and keeps [specific elements].

继续会话

Continue session [session id]. Use the previous context and produce the next output for [task].

最佳实践

使用专用 Google 账号，因为该技能会处理浏览器会话 Cookie。
在发送到 Gemini Web 之前，检查提示文件和参考图像。
将生成的图像和会话文件存储在项目专用目录中。

避免

不要将此技能用于敏感 Google 账号或受监管数据。
未经检查，不要将私有源文件作为参考图像或提示文件传入。
不要允许不受信任的 EXTEND.md 文件修改工作流。

常见问题

这是否使用官方 Gemini API？

不是。它使用逆向工程的 Gemini Web 端点，可能会在无通知的情况下失效。

为什么它需要 Chrome？

登录流程会启动 Chrome，并通过 Chrome DevTools Protocol 读取会话 Cookie。

Cookie 存储在哪里？

除非提供 Cookie 路径覆盖，否则 Cookie 会存储在技能数据目录中。

它可以根据参考文件生成图像吗？

可以。它会将本地参考文件上传到 Google，并在 Gemini 请求中使用它们。

它可以保留对话上下文吗？

可以。它会将会话元数据和消息历史记录存储在本地会话文件中。

这对于 marketplace 发布安全吗？

风险很高。由于它会处理 Google 会话 Cookie，发布时应要求明确警告和审查。

开发者详情

作者

jimliu

许可证

MIT

作者版本

v1.56.2

Skillstore 修订

仓库

https://github.com/jimliu/baoyu-skills/tree/main/skills/baoyu-danger-gemini-web/

引用

1c2ebded2116f8124f45dba86a2e567f56e64d8e

维护新鲜度

2026/8/7

使用量

8 次下载 · 224 次浏览

文件结构

📁 scripts/

📄 bun.lock

📁 gemini-webapi/

📄 client.test.ts

📄 client.ts

📁 components/

📄 gem-mixin.ts

📄 index.ts

📄 constants.ts

📄 exceptions.ts

📄 index.ts

📁 types/

📄 candidate.ts

📄 gem.ts

📄 grpc.ts

📄 image.ts

📄 index.ts

📄 modeloutput.ts

📁 utils/

📄 cookie-file.ts

📄 decorators.ts

📄 get-access-token.ts

📄 http.ts

📄 index.ts

📄 load-browser-cookies.ts

📄 logger.ts

📄 parsing.ts

📄 paths.ts

📄 rotate-1psidts.ts

📄 upload-file.ts

📄 main.ts

📄 package.json

📄 SKILL.md