技能 webask-account-audit
📦
webask-account-audit
内容修订 r1 安全 📁 文件系统访问⚙️ 外部命令
Audit Your WebAsk Account
Inactive surveys, missing notifications, and account limits can leave important responses unnoticed. This skill guides a read-only WebAsk review with prioritized findings and concrete recommendations.
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "webask-account-audit" from https://skillstore.io/skills/webaskio-webask-account-audit.md and its manifest at https://skillstore.io/api/skills/webaskio-webask-account-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“webask-account-audit”。 Illustrative request: Check whether recent survey responses have notification recipients.
预期结果:
- Example finding: Delivery Feedback received 47 responses this month, with no email recipients or enabled integrations.
- Priority: Review these responses and confirm who should receive future notifications.
- The settings alone do not establish whether anyone has read the responses.
- No account settings were changed.
正在使用“webask-account-audit”。 Illustrative request: Review account maintenance priorities.
预期结果:
- Example inventory: 34 surveys against a limit of 50, including 11 older drafts.
- Storage: 82% used, totaling 3.4 GB, mainly respondent uploads.
- Activity: Two published surveys have no responses since April; confirm whether they are seasonal.
- Access: One invitation remains unaccepted; confirm whether access is still needed.
- Next steps: Review draft owners, storage growth, and the pending invitation. No changes were made.
安全审计
安全v1 • 2026/9/29 打开版本化报告
All seven static findings are false positives: relative documentation links and Markdown formatting around MCP tool names. The skill requests account inspection and explicitly prohibits changes or deletions during the audit. No evidence found of prompt injection, unauthorized data export, or executable commands; external MCP implementations are outside the supplied files.
3
已扫描文件
166
分析行数
0
复核项
0
已忽略误报
风险因素
📁 文件系统访问 (1)
⚙️ 外部命令 (6)
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/webaskio-webask-account-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/webaskio-webask-account-audit?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/webaskio-webask-account-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/webaskio-webask-account-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/webaskio-webask-account-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
webaskio. (2026). webask-account-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/webaskio-webask-account-audit/audits/1BibTeX 引用
@techreport{webaskio-webaskio-webask-account-audit-2026,
author = {webaskio},
title = {webask-account-audit security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/webaskio-webask-account-audit/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "webask-account-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "webaskio"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/webaskio-webask-account-audit/audits/1"
identifiers:
- type: other
value: "skillstore:webaskio-webask-account-audit:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
65
社区
83
规范符合性
你能构建什么
Find Missing Response Notifications
Review active surveys for missing email recipients or integrations that could leave incoming responses unnoticed.
Prepare Account Maintenance
Identify old drafts, inactive surveys, and storage pressure before planning approved cleanup work.
Review Workspace Access
Summarize pending invitations and potentially excessive permissions for review with team owners.
试试这些提示
Get an Account Overview
Audit my WebAsk account and summarize the most urgent findings. Do not change or delete anything.
Check Response Notifications
Find published surveys with recent responses but no email recipients or enabled integrations. Report the affected surveys and recommended next steps without changing settings.
Review Capacity and Inactivity
Review storage, hidden files, plan limits, old drafts, and inactive published surveys. Ask about seasonal surveys before labeling them abandoned. Report counts without recommending upgrades.
Create a Prioritized Audit
Audit notifications, survey activity, capacity, invitations, and member access. Prioritize current operational impact, include affected counts, and propose specific actions. Flag uncertain access needs for confirmation. Make no changes.
最佳实践
- Confirm the workspace and use authorized access to the WebAsk MCP tools.
- Provide seasonal schedules and member responsibilities before judging survey inactivity or permission needs.
- Review findings with account owners and approve any follow-up changes separately.
避免
- Treating the audit as permission to delete surveys or change account settings.
- Assuming missing notifications prove that responses were lost or unread.
- Labeling seasonal surveys abandoned or recommending plan upgrades instead of reporting observed limits.
常见问题
What does the audit inspect?
It reviews surveys, notification settings, integrations, storage, plan limits, invitations, and member access.
Does the skill change my account?
The instructions explicitly prohibit changes and deletions during the audit. The output is a report with recommended actions.
What setup is required?
Your assistant needs a configured WebAsk MCP connection exposing the listed tools and authorized access to the workspace.
Does it check every survey integration?
No. It prioritizes surveys with recent responses when reviewing integrations and email settings.
How does it handle seasonal surveys?
It should ask about seasonal use before treating an inactive survey as abandoned.
Will it recommend a more expensive plan?
No. The instructions require reporting reached or approaching limits without recommending a plan change.
开发者详情
作者
webaskio许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
bad9dafc37d1638cd29cb9bab06d5f8dbcd0f6c2
维护新鲜度
2026/9/30
使用量
0 次下载 · 0 次浏览
文件结构