技能 me-featured-events
📦
me-featured-events
内容修订 r1 中风险 📁 文件系统访问🌐 网络访问⚙️ 外部命令🔑 环境变量
Track AI and Web3 Events with ME News
Finding relevant events across dates and regions takes repeated work. This skill filters ME News events and supports confirmed recurring reminders.
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "me-featured-events" from https://skillstore.io/skills/me-news-me-featured-events.md and its manifest at https://skillstore.io/api/skills/me-news-me-featured-events/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“me-featured-events”。 Show AI events in Hong Kong during the next week.
预期结果:
Today
AI Product Forum
A practical forum on current AI product development.
August 24, 14:00-18:00 (UTC+8) | Hong Kong
ME News event link
正在使用“me-featured-events”。 Tell me when a new Web3 event appears in Singapore.
预期结果:
New event
Web3 Infrastructure Meetup
A meetup covering infrastructure and developer tools.
August 28, 19:00-21:00 (UTC+8) | Singapore
ME News event link
正在使用“me-featured-events”。 Find events next month with no region filter.
预期结果:
- Results are grouped by start date.
- Each entry includes an excerpt, full time range, location, and returned event link.
- The result set uses the requested month and all available regions.
安全审计
中风险v1 • 2026/8/20 打开版本化报告
The static alerts are lexical false positives caused by Markdown code spans, JavaScript template literals, fixed read-only API calls, and isolated test helpers. Two medium concerns remain: caller-controlled state paths can overwrite writable files, and imported event links are forwarded without validation.
17
已扫描文件
1,064
分析行数
0
复核项
0
已忽略误报
已确认安全问题 (2)
中
Unrestricted State Path Can Overwrite Files
The --state argument and ME_FEATURED_EVENTS_STATE value become a write target without containment checks. A crafted path can replace any writable file with subscription state.
The state path is accepted directly and saveState renames a generated file over that destination. The risk requires an attacker or unsafe caller to control the argument or environment value.
中
Untrusted Event Links Are Forwarded to Users
Event URLs from the remote API are included in reminders without an origin or protocol check. Imported events may therefore deliver misleading or unsafe links.
The formatter appends event.url as a string, and the API reference states that activity_import entries can use spreadsheet-provided links. No scheme or host validation is present.
风险因素
📁 文件系统访问 (13)
references/agent-compatibility.md:59 references/agent-compatibility.md:60 references/agent-compatibility.md:61 references/agent-compatibility.md:59 references/agent-compatibility.md:60 references/agent-compatibility.md:61 scripts/delivery.test.mjs:2 scripts/delivery.test.mjs:16 scripts/initialization.test.mjs:2 scripts/initialization.test.mjs:12 scripts/lib.mjs:35 scripts/lib.mjs:45 scripts/lib.test.mjs:52
🌐 网络访问 (11)
⚙️ 外部命令 (50)
scripts/args.test.mjs:2 scripts/args.test.mjs:9 scripts/daily-upcoming.mjs:19 scripts/daily-upcoming.mjs:31 scripts/daily-upcoming.mjs:33 scripts/delivery.test.mjs:5 scripts/delivery.test.mjs:12 scripts/init-subscription.mjs:31 scripts/init-subscription.mjs:32 scripts/init-subscription.mjs:57 scripts/init-subscription.mjs:59 scripts/initialization.test.mjs:5 scripts/initialization.test.mjs:34 scripts/initialization.test.mjs:15-32 scripts/lib.mjs:12 scripts/lib.mjs:21 scripts/lib.mjs:23 scripts/lib.mjs:24 scripts/lib.mjs:26 scripts/lib.mjs:35 scripts/lib.mjs:38 scripts/lib.mjs:45 scripts/lib.mjs:46 scripts/lib.mjs:48 scripts/lib.mjs:68 scripts/lib.mjs:78 scripts/lib.mjs:84 scripts/lib.mjs:86 scripts/lib.mjs:94 scripts/lib.mjs:110 scripts/lib.mjs:111 scripts/lib.mjs:129 scripts/lib.mjs:131 scripts/lib.mjs:153 scripts/lib.mjs:157 scripts/lib.mjs:172 scripts/lib.mjs:177 scripts/lib.mjs:180 scripts/lib.mjs:185 scripts/lib.mjs:192 scripts/lib.mjs:213 scripts/lib.mjs:217 scripts/lib.mjs:222 scripts/lib.test.mjs:48 scripts/lib.test.mjs:52 scripts/poll-new-events.mjs:57 scripts/poll-new-events.mjs:59 scripts/record-delivery.mjs:32 SKILL.md:12 SKILL.md:13
🔑 环境变量 (13)
scripts/daily-upcoming.mjs:11 scripts/daily-upcoming.mjs:11 scripts/init-subscription.mjs:11 scripts/init-subscription.mjs:11 scripts/initialization.test.mjs:20 scripts/initialization.test.mjs:24 scripts/initialization.test.mjs:20 scripts/initialization.test.mjs:24 scripts/initialization.test.mjs:40 scripts/poll-new-events.mjs:8 scripts/poll-new-events.mjs:8 scripts/record-delivery.mjs:7 scripts/record-delivery.mjs:7
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/me-news-me-featured-events/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/me-news-me-featured-events?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/me-news-me-featured-events?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/me-news-me-featured-events/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/me-news-me-featured-events.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
me-news. (2026). me-featured-events security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/me-news-me-featured-events/audits/1BibTeX 引用
@techreport{me-news-me-news-me-featured-events-2026,
author = {me-news},
title = {me-featured-events security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/me-news-me-featured-events/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "me-featured-events security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "me-news"
date-released: "2026-08-20"
url: "https://skillstore.io/skills/me-news-me-featured-events/audits/1"
identifiers:
- type: other
value: "skillstore:me-news-me-featured-events:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 64
架构
85
可维护性
85
内容
65
社区
83
规范符合性
你能构建什么
Plan Industry Attendance
Review upcoming AI and Web3 events by region and date before planning travel or meetings.
Monitor New Listings
Receive updates when ME News adds events matching selected topics and regions.
Prepare Event Briefings
Generate a concise schedule with event times, locations, descriptions, and source links.
试试这些提示
Browse Upcoming Events
Show AI and Web3 events in the next seven days. Do not create a subscription.
Filter by Region
Find AI events in [region] from [start date] through [end date]. Show times, locations, and links.
Create a Daily Reminder
Set up a daily reminder for [event types] in [regions]. Show the schedule and delivery target before creating it.
Configure Reliable New Event Alerts
Create new-event alerts every five minutes for [types] in [regions]. Use delivery feedback and retain pending messages after uncertain results.
最佳实践
- Confirm event types, regions, schedule, delivery channel, and recipient before enabling reminders.
- Use explicit date ranges when a month or calendar period matters.
- Verify event details and external links before registration or travel.
避免
- Do not create recurring tasks for a one-time event search.
- Do not mark delivery successful unless the delivery tool confirms it.
- Do not store channel credentials in the skill directory or state file.
常见问题
Which events can this skill find?
It finds AI and Web3 events available through the ME News event API.
Can I filter events by location?
Yes. You can select one or more regions returned by the API.
Can I search a specific date range?
Yes. Provide both start and end dates for a range of up to 366 days.
Does a one-time search create reminders?
No. The skill creates reminders only after an explicit subscription request and confirmation.
What is required for recurring notifications?
You need Node.js 18 or newer, a supported scheduler, and a configured delivery channel.
How does the skill avoid missing new events?
It advances the event cursor only after confirmed delivery and retries messages with uncertain results.