技能 sent-contacts

📦

sent-contacts

Name: sent-contacts
Author: sentdm

内容修订 r1 安全 ⚙️ 外部命令

Manage Sent Contacts Safely

Contact searches, bulk imports, and deletions can expose private data or modify the wrong records. This skill applies scoped lookups, minimal disclosure, and confirmation gates.

支持: Claude Codex Code(CC)

🥉 78 青铜

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "sent-contacts" from https://skillstore.io/skills/sentdm-sent-contacts.md and its manifest at https://skillstore.io/api/skills/sentdm-sent-contacts/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/sentdm-sent-contacts.md 已签名 manifest GET /api/skills/sentdm-sent-contacts/manifest 已签名 lockfile GET /api/skills/sentdm-sent-contacts/lockfile

测试它

正在使用“sent-contacts”。 Find contacts named Priya and show only what I need to identify them.

预期结果:

Found two matching contacts. Contact ct_104 is Priya S. ending in 0182. Contact ct_221 is Priya N. ending in 7740.

正在使用“sent-contacts”。 Import these 25 contacts after removing duplicates.

预期结果:

Preview: 23 unique records and 2 duplicates removed.
Scope: organization North Region, Sender Profile Support.
No contacts have been created. Confirm this exact batch to continue.

正在使用“sent-contacts”。 Delete contact ct_104.

预期结果:

Delete preview: ct_104, Priya S., phone ending in 0182. This action is destructive. Confirm deletion of this exact contact.

安全审计

安全

v1 • 2026/9/2 打开版本化报告

All 11 static findings are false positives caused by Markdown backticks around Sent MCP tool names, not Ruby or shell execution. The skill contains no executable commands, prompt injection, or other semantic security findings, and it requires explicit confirmation before mutations.

已扫描文件

分析行数

复核项

已忽略误报

风险因素

⚙️ 外部命令 (11)

SKILL.md:8 SKILL.md:12 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:27 SKILL.md:30 SKILL.md:32 SKILL.md:37 SKILL.md:40 SKILL.md:42

最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/sentdm-sent-contacts/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/sentdm-sent-contacts/security.svg)](https://skillstore.io/skills/sentdm-sent-contacts?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/sentdm-sent-contacts?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sentdm-sent-contacts/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/sentdm-sent-contacts.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

sentdm. (2026). sent-contacts security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sentdm-sent-contacts/audits/1

BibTeX 引用

@techreport{sentdm-sentdm-sent-contacts-2026,
  author = {sentdm},
  title = {sent-contacts security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/sentdm-sent-contacts/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sent-contacts security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "sentdm"
date-released: "2026-09-02"
url: "https://skillstore.io/skills/sentdm-sent-contacts/audits/1"
identifiers:
  - type: other
    value: "skillstore:sentdm-sent-contacts:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Find a customer contact

Search a narrow contact set and retrieve the exact record needed for support.

Prepare a contact import

Validate, deduplicate, preview, and confirm a controlled batch before creation.

Remove an obsolete contact

Resolve, fetch, preview, and confirm one exact record before deletion.

试试这些提示

Search contacts

Find Sent contacts matching [name or phone fragment]. Return only identifiers, labels, and masked phone numbers.

Inspect one contact

Retrieve contact [contact ID] and summarize only the fields needed for [task]. Include its messaging summary without inferring consent.

Prepare a bulk import

Validate and deduplicate these contacts: [records]. Preview the exact batch, scope, duplicate handling, and masked targets before asking for confirmation.

Verify and delete a contact

Resolve contact [identifier], fetch the exact record, and show a destructive-action preview. Ask for explicit confirmation immediately before deletion.

最佳实践

Use the narrowest filter and return only fields required for the task.
Verify the active organization and Sender Profile before every mutation.
Require a fresh preview and explicit confirmation for each create, delete, or retry.

避免

Do not expose tokens, credentials, authorization headers, or unnecessary contact data.
Do not treat messaging history or number presence as proof of consent.
Do not delete from guessed identifiers, broad filters, or stale results.

常见问题

Does this skill require a Sent account?

Yes. It requires an authorized Sent MCP connection using client-managed OAuth 2.1 and PKCE.

Can it search my entire contact book?

It can page through contacts, but it should use narrow filters and avoid unnecessary full exports.

Can it create many contacts at once?

Yes. It validates, deduplicates, previews, and requests explicit confirmation before creating the exact batch.

Can it delete contacts automatically?

No. It must fetch the exact contact, show a deletion preview, and receive fresh explicit confirmation.

Does a messaging summary prove consent?

No. Messaging history and number presence do not establish consent or current reachability.

What happens when a mutation result is unclear?

The skill reports uncertainty, avoids automatic retries, and rechecks the target before requesting another confirmation.

开发者详情

作者

sentdm

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/sentdm/sent-plugin/tree/bfc21e75db359a9c4022b4654055b04830342cbc/skills/sent-contacts

引用

096c7daa4d0d974771dad12d81c3d0d4688617b9

维护新鲜度

2026/9/8

使用量

1 次下载 · 0 次浏览

文件结构

📁 agents/

📄 openai.yaml

📄 SKILL.md