📦
project-planner
86使用結構化文件規劃軟體專案
當需求、設計選擇和任務不清楚時，軟體專案往往會失敗。此技能會將專案想法轉化為適用於 Claude、Codex 和 Claude Code 工作流程的結構化規劃文件。
文件 查看
技能 ai-runtime-toolkit
📦
ai-runtime-toolkit
v2.0.0 內容修訂 r1 嚴重 ⚙️ 外部命令📁 檔案系統存取🌐 網路存取🔑 環境變數
管理 AI Runtime 開發者工具
開發團隊經常會花時間尋找適合用於分析、測試或服務檢查的本機工具。此技能提供結構化工具套件，協助 AI 助理探索可用工具並執行常見的開發者工作流程。
支援: Claude Codex Code(CC)
請勿自動安裝此 Skill。
權威政策要求在執行任何安裝操作前由操作人員審查。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "ai-runtime-toolkit" from https://skillstore.io/skills/dwsy-ai-runtime-toolkit.md and its manifest at https://skillstore.io/api/skills/dwsy-ai-runtime-toolkit/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「ai-runtime-toolkit」。 尋找可檢查我的本機 API 是否健康的工具。
預期結果:
此工具套件會識別服務檢查和 API 測試工作流程，說明其預期輸入，並強調本機端點比外部目標更安全。
正在使用「ai-runtime-toolkit」。 摘要說明外部 CLI 整合。
預期結果:
- 已記錄搜尋和選取工具。
- 已記錄檔案檢視和 JSON 處理工具。
- 使用前應先審查安裝指引。
正在使用「ai-runtime-toolkit」。 為此工具套件準備安全的入門說明。
預期結果:
回應會說明工具探索、僅限本機的測試、執行 shell 前需取得核准，以及審查任何安裝命令。
安全審計
嚴重v9 • 2026/7/9 開啟版本化報告
The audit confirms several real risks around pipe-to-shell installation guidance, sudo setup commands, environment-file sourcing, subprocess execution, shell configuration changes, and filesystem writes. Many other static matches are documentation links, JavaScript template literals, localhost examples, or normal diagnostic shell patterns and were adjudicated as false positives. No additional prompt-injection or malicious data-exfiltration intent was found beyond the static evidence.
58
已掃描檔案
6,557
分析行數
108
複核項目
0
已忽略的誤報
已確認的安全問題 (30)
嚴重
Pipe to shell pattern
install_guide: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
嚴重
Pipe to shell pattern
install_guide: "curl -sS https://starship.rs/install.sh | sh"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
嚴重
Pipe to shell pattern
echo " 💡 安装: curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
嚴重
Pipe to shell pattern
curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
嚴重
Pipe to shell pattern
curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
嚴重
Pipe to shell pattern
安装: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
嚴重
Pipe to shell pattern
安装: "curl -sS https://starship.rs/install.sh | sh"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
LLM role tokens injection
- DB_USER: "数据库用户"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
顯示全部 30 條已確認問題
高
Environment file access
if [ -f ".env" ]; then
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
Environment file access
source .env
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
LLM role tokens injection
DB_USER="${DB_USER:-postgres}"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
Environment file access
cat config.json | jq '.env.WIN_VERBOSE = if .debug then "true" else "false" end'
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
Environment file access
const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.33 bits) - possible binary/encrypted content
File: bash/analysis/analyze-logs.meta.yml
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.25 bits) - possible binary/encrypted content
File: bash/system/check-disk.meta.yml
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.66 bits) - possible binary/encrypted content
File: docs/concepts/toolkit-philosophy.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.58 bits) - possible binary/encrypted content
File: docs/guides/creating-tools.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.19 bits) - possible binary/encrypted content
File: docs/guides/external-integration.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.02 bits) - possible binary/encrypted content
File: docs/guides/quickstart.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.14 bits) - possible binary/encrypted content
File: docs/references/external-tools.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.36 bits) - possible binary/encrypted content
File: docs/references/internal-tools.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.16 bits) - possible binary/encrypted content
File: docs/tools/external/fzf.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.39 bits) - possible binary/encrypted content
File: EXTERNAL-TOOLS-SKILL.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.27 bits) - possible binary/encrypted content
File: EXTERNAL-TOOLS.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.25 bits) - possible binary/encrypted content
File: external/README.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.22 bits) - possible binary/encrypted content
File: python/analysis/code-stats.meta.yml
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.04 bits) - possible binary/encrypted content
File: python/analysis/dependency-analyzer.meta.yml
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (7.00 bits) - possible binary/encrypted content
File: references/core/toolkit-philosophy.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.30 bits) - possible binary/encrypted content
File: registry.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
[HEURISTIC] High file entropy (6.54 bits) - possible binary/encrypted content
File: SKILL.md
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
能力複核項目 (108)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Python subprocess.run
result = subprocess.run(cmd, capture_output=False)
The discovery CLI executes an assembled command with subprocess.run. This is expected functionality, but it can run arbitrary registered tools and user-supplied arguments.
高
Non-standard device file access
df -h | grep -E '^/dev/' | awk '$5 > 80 {print "警告: " $0}'
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
sudo privilege escalation
sudo apt-get install fzf ripgrep jq
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get install -y gpg wget
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get update
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get install -y eza
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get install fd-find
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get install bat
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Hidden file in home directory
ln -s $(which fdfind) ~/.local/bin/fd
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
Symlink creation
ln -s $(which fdfind) ~/.local/bin/fd
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
sudo privilege escalation
sudo apt-get install bat
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Hidden file in home directory
## 配置 (添加到 ~/.bashrc)
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
sudo privilege escalation
sudo apt-get install -y gpg wget
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get update
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get install -y eza
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Hidden file in home directory
## 配置 (添加到 ~/.bashrc)
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
sudo privilege escalation
sudo apt-get install fzf
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Hidden file in home directory
## 进阶配置 (添加到 ~/.bashrc)
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
sudo privilege escalation
sudo apt-get install jq
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get install ripgrep
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Hidden file in home directory
# 添加到 ~/.bashrc
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
sudo privilege escalation
sudo apt-get install zoxide
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Hidden file in home directory
添加到 `~/.bashrc`:
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
高
sudo privilege escalation
sudo apt-get install fzf ripgrep jq bat
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Path traversal sequence
- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束
The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.
高
sudo privilege escalation
sudo apt-get install fzf ripgrep jq bat
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
sudo privilege escalation
sudo apt-get install fzf ripgrep jq bat
The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.
高
Path traversal sequence
- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束
The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.
高
Path traversal sequence
- **[记忆系统](../memory/)** - 分层记忆管理
The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.
高
Path traversal sequence
- **[认知记录](../cognition/)** - 分析洞察和探索报告
The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.
高
Path traversal sequence
- **[命令系统](../commands/)** - 运行时命令和交互
The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.
中
Shell command substitution
MATCH_COUNT=$(grep -c "$PATTERN" "$LOG_FILE" 2>/dev/null || echo "0")
The shell script uses user-controlled pattern input in a grep command. Arguments are quoted, but dynamic shell-based log analysis still deserves review.
中
Temp directory access
bat --paging=never /tmp/analysis-result.json
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Temp directory access
> /tmp/errors.txt
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Temp directory access
bat --theme=OneHalfDark /tmp/errors.txt
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Hidden file access
ln -s $(which fdfind) ~/.local/bin/fd
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Hidden file access
## 配置 (添加到 ~/.bashrc)
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Hidden file access
## 配置 (添加到 ~/.bashrc)
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
xargs command (can execute arbitrary commands)
ps aux | fzf | awk '{print $2}' | xargs kill
The pipeline selects processes and passes them to kill through xargs. This can terminate arbitrary processes chosen from interactive output.
中
Hidden file access
## 进阶配置 (添加到 ~/.bashrc)
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
xargs command (can execute arbitrary commands)
rg "TODO" --files-with-matches | fzf | xargs bat
The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.
中
Hidden file access
# 添加到 ~/.bashrc
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Hidden file access
添加到 `~/.bashrc`:
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
xargs command (can execute arbitrary commands)
find . -name "*.md" | fzf | xargs bat
The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.
中
xargs command (can execute arbitrary commands)
find src/ -name "*.py" | fzf | xargs bat
The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.
中
Hidden file access
- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Node.js fs operations
fs.writeFileSync(filename, JSON.stringify(report, null, 2));
The tool writes output files to a path controlled by command behavior or arguments. This is legitimate reporting functionality but remains a filesystem write risk.
中
Synchronous file operations
fs.writeFileSync(filename, JSON.stringify(report, null, 2));
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Python file write/append
with open(args.output, 'w', encoding='utf-8') as f:
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
xargs command (can execute arbitrary commands)
find . -name "*.meta.yml" | xargs grep <tool-name>
The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.
中
Hidden file access
TOOLKIT_DIR="$PROJECT_ROOT/.ai-runtime/toolkit"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
中
Hidden file access
- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
ERROR_COUNT=$(grep -c "ERROR" "$LOG_FILE" 2>/dev/null || echo "0")
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
WARN_COUNT=$(grep -c "WARN" "$LOG_FILE" 2>/dev/null || echo "0")
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
INFO_COUNT=$(grep -c "INFO" "$LOG_FILE" 2>/dev/null || echo "0")
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
DEBUG_COUNT=$(grep -c "DEBUG" "$LOG_FILE" 2>/dev/null || echo "0")
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
MATCH_COUNT=$(grep -c "$PATTERN" "$LOG_FILE" 2>/dev/null || echo "0")
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
TIMEOUT_COUNT=$(grep -c "timeout\|Timeout\|TIMEOUT" "$LOG_FILE" 2>/dev/null || echo "0")
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
CONN_ERROR_COUNT=$(grep -c "connection refused\|Connection refused\|ECONNREFUSED" "$LOG_FILE" 2>/dev
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
MEMORY_ERROR_COUNT=$(grep -c "OutOfMemory\|memory\|Memory" "$LOG_FILE" 2>/dev/null || echo "0")
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
du -h "$DISK_PATH" 2>/dev/null | sort -hr | head -5 | while read -r size path; do
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
find "$DISK_PATH" -maxdepth 2 -type d 2>/dev/null | head -10 | while read -r dir; do
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
count=$(find "$dir" -maxdepth 1 -type f 2>/dev/null | wc -l)
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
URL="http://localhost:3000/health"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
STATUS=$(curl -s -o /dev/null -w "%{http_code}" --max-time "$TIMEOUT" "$URL" 2>/dev/null || echo "00
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
curl -s --max-time 2 "$URL" | jq '.' 2>/dev/null || echo " (无法解析JSON响应)"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
if pg_isready -h "$DB_HOST" -p "$DB_PORT" -U "$DB_USER" -d "$DB_NAME" -t "$TIMEOUT" >/dev/null 2>&1;
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
if redis-cli -h "$REDIS_HOST" -p "$REDIS_PORT" ping >/dev/null 2>&1; then
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
install_guide: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
install_guide: "curl -sS https://starship.rs/install.sh | sh"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
echo " 💡 安装: curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
if command -v eza &> /dev/null; then
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
if command -v zoxide &> /dev/null; then
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
if command -v "$tool" &> /dev/null; then
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
node test-api.js http://localhost:3000
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
if ! command -v $tool &> /dev/null; then
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
node node/api/test-api.js http://localhost:3000
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
node node/api/test-api.js http://localhost:3000/api/users
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
node node/api/test-api.js post http://localhost:3000/api/users '{"name":"test"}'
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
curl -s http://api.example.com/data | jq '.items[] | select(.active == true)'
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
cat app.log | rg "ERROR" | jq -R 'fromjson?' 2>/dev/null || cat app.log | rg "ERROR"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
- "xh http://api.example.com"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
- "xh post http://api.example.com/data name=test"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
安装: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
安装: "curl -sS https://starship.rs/install.sh | sh"
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
constructor(baseURL = 'http://localhost:3000') {
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Environment variable access (dot notation)
const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Environment variable object
const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
python3 discover-toolkit.py run service-check http://localhost:3000
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
python3 discover-toolkit.py run api-test http://api.example.com/users --method GET
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
python3 discover-toolkit.py run api-test http://api.example.com/users \
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
echo "http://api1.example.com
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
http://api2.example.com
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
http://db.example.com:5432" | \
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
python3 discover-toolkit.py run service-check http://localhost:3000 > /dev/null
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Standard device file access
python3 discover-toolkit.py run service-check http://localhost:3000 > /dev/null
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
低
Hardcoded URL
python3 discover-toolkit.py run service-check http://localhost:3000
The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.
風險因素
⚙️ 外部命令 (50)
bash/analysis/analyze-logs.sh:52 bash/analysis/analyze-logs.sh:53 bash/analysis/analyze-logs.sh:61 bash/analysis/analyze-logs.sh:62 bash/analysis/analyze-logs.sh:63 bash/analysis/analyze-logs.sh:64 bash/analysis/analyze-logs.sh:84 bash/analysis/analyze-logs.sh:94 bash/analysis/analyze-logs.sh:95 bash/analysis/analyze-logs.sh:119 bash/analysis/analyze-logs.sh:125 bash/analysis/analyze-logs.sh:131 bash/analysis/analyze-logs.sh:141 bash/analysis/analyze-logs.sh:1 bash/system/check-disk.sh:60 bash/system/check-disk.sh:61 bash/system/check-disk.sh:62 bash/system/check-disk.sh:63 bash/system/check-disk.sh:64 bash/system/check-disk.sh:65 bash/system/check-disk.sh:94 bash/system/check-disk.sh:95 bash/system/check-disk.sh:96 bash/system/check-disk.sh:97 bash/system/check-disk.sh:98 bash/system/check-disk.sh:125 bash/system/check-disk.sh:129 bash/system/check-disk.sh:186 bash/system/check-disk.sh:1 bash/system/check-service.sh:21 bash/system/check-service.sh:1 discover/cli.py:178 docs/guides/creating-tools.md:112-116 docs/guides/creating-tools.md:55 docs/guides/creating-tools.md:126 docs/guides/creating-tools.md:331 docs/guides/external-integration.md:117 docs/guides/external-integration.md:121 docs/guides/external-integration.md:150 docs/guides/external-integration.md:153-156 docs/guides/external-integration.md:209 docs/guides/external-integration.md:130 docs/guides/external-integration.md:199 docs/references/external-tools.md:69 docs/references/external-tools.md:135 docs/references/external-tools.md:149 docs/references/external-tools.md:55 docs/references/external-tools.md:58 docs/references/external-tools.md:59 docs/references/external-tools.md:60
📁 檔案系統存取 (50)
bash/analysis/analyze-logs.sh:61 bash/analysis/analyze-logs.sh:62 bash/analysis/analyze-logs.sh:63 bash/analysis/analyze-logs.sh:64 bash/analysis/analyze-logs.sh:84 bash/analysis/analyze-logs.sh:119 bash/analysis/analyze-logs.sh:125 bash/analysis/analyze-logs.sh:131 bash/system/check-disk.sh:179 bash/system/check-disk.sh:185 bash/system/check-disk.sh:186 bash/system/check-service.sh:21 bash/system/check-service.sh:25 bash/system/check-service.sh:43 bash/system/check-service.sh:58 docs/guides/creating-tools.md:343 docs/guides/creating-tools.md:58 docs/guides/external-integration.md:134 docs/guides/external-integration.md:186 docs/guides/external-integration.md:208 docs/guides/external-integration.md:83 docs/guides/external-integration.md:173 docs/guides/external-integration.md:176 docs/references/external-tools.md:20 docs/references/external-tools.md:21 docs/references/external-tools.md:22 docs/references/external-tools.md:23 docs/references/external-tools.md:24 docs/references/external-tools.md:25 docs/references/external-tools.md:32 docs/references/external-tools.md:69 docs/references/external-tools.md:69 docs/references/external-tools.md:146 docs/references/external-tools.md:69 docs/tools/external/bat.md:25 docs/tools/external/bat.md:25 docs/tools/external/eza.md:29 docs/tools/external/eza.md:29 docs/tools/external/fzf.md:42 docs/tools/external/fzf.md:42 docs/tools/external/ripgrep.md:27 docs/tools/external/ripgrep.md:27 docs/tools/external/zoxide.md:34 docs/tools/external/zoxide.md:34 EXTERNAL-TOOLS-SKILL.md:115 EXTERNAL-TOOLS-SKILL.md:116 EXTERNAL-TOOLS-SKILL.md:117 EXTERNAL-TOOLS-SKILL.md:118 EXTERNAL-TOOLS-SKILL.md:119 EXTERNAL-TOOLS-SKILL.md:120
🌐 網路存取 (38)
bash/system/check-service.sh:20 discover/config/external_tools.yaml:35 discover/config/external_tools.yaml:113 docs/guides/creating-tools.md:112 docs/guides/external-integration.md:221 docs/guides/quickstart.md:83 docs/references/external-tools.md:59 docs/references/external-tools.md:60 docs/references/external-tools.md:65 docs/references/internal-tools.md:248 docs/references/internal-tools.md:237 docs/references/internal-tools.md:240 docs/references/internal-tools.md:243 docs/tools/external/eza.md:23 docs/tools/external/eza.md:24 docs/tools/external/zoxide.md:17 EXTERNAL-TOOLS-SKILL.md:142 external/api-testing/xh.meta.yml:22 external/api-testing/xh.meta.yml:23 external/navigation/zoxide.meta.yml:19 external/shell-enhancement/starship.meta.yml:20 node/api/test-api.js:28 node/api/test-api.js:8 node/api/test-api.js:23 node/api/test-api.js:72 node/api/test-api.js:79 node/api/test-api.js:86 node/api/test-api.js:93 node/api/test-api.js:13 node/api/test-api.js:238 references/guides/quickstart.md:56 references/guides/quickstart.md:85 references/guides/quickstart.md:88 references/guides/quickstart.md:189 references/guides/quickstart.md:190 references/guides/quickstart.md:191 references/guides/quickstart.md:231 SKILL.md:108
🔑 環境變數 (2)
偵測到的模式
LLM role tokens injection×2Pipe to shell pattern×7
審計單位: claude 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/dwsy-ai-runtime-toolkit?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/dwsy-ai-runtime-toolkit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dwsy-ai-runtime-toolkit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/dwsy-ai-runtime-toolkit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
Dwsy. (2026). ai-runtime-toolkit security audit report (audit version 9) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9BibTeX 引用
@techreport{dwsy-dwsy-ai-runtime-toolkit-2026,
author = {Dwsy},
title = {ai-runtime-toolkit security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9},
note = {Author version 2.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-runtime-toolkit security audit report (audit version 9)"
version: "2.0.0"
type: report
authors:
- name: "Dwsy"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9"
identifiers:
- type: other
value: "skillstore:dwsy-ai-runtime-toolkit:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 36
架構
100
可維護性
87
內容
72
社群
100
規範符合度
你可以打造什麼
檢查開發環境
使用此工具套件尋找可用於服務檢查、磁碟分析和相依性檢查的本機工具。
標準化專案診斷
提供貢獻者單一位置來探索診斷命令和可重用的分析工作流程。
在開發期間測試 API
針對本機或已核准的端點執行文件化的 API 測試流程，並匯出可讀結果。
試試這些提示
尋找可用工具
請告訴我這個 AI Runtime Toolkit 提供哪些工具，並依用途分組。
選擇診斷工作流程
我需要診斷速度緩慢的本機服務。我應該先使用哪些工具套件工具，以及每個工具應該告訴我什麼？
執行安全的本機檢查
使用此工具套件檢查本機服務健康狀態端點。執行任何命令前先加以說明，並避免外部網路呼叫。
稽核工具整合風險
請檢閱工具套件的外部整合指引，找出會安裝軟體、修改 shell 啟動檔或執行下載指令碼的命令。
最佳實務
- 執行前審查每個 shell 命令，尤其是會安裝軟體或修改 shell 設定的命令。
- 使用 API 和服務檢查工作流程時，優先使用本機端點和測試資料。
- 透過官方套件管理器或可信的發布管道驗證外部工具來源。
避免
- 請勿在未檢查的情況下，將下載的安裝程式指令碼直接透過 pipe 傳入 shell。
- 未經明確核准，請勿對生產系統執行工具套件命令。
- 請勿將機密儲存在工具套件指令碼會載入或在診斷期間列印的檔案中。
常見問題
此技能會自動安裝外部工具嗎？
它會記錄外部工具安裝方法，但使用者應先審查並核准任何安裝命令。
它可以執行 API 測試嗎？
可以。它包含可針對已設定 base URL 的 Node.js API 測試工作流程。
它僅限於 Claude Code 嗎？
不是。報告標示其相容於 Claude、Codex 和 Claude Code。
包含哪些類型的工具？
此工具套件包含 Python 分析工具、Bash 系統工具、Node.js API 工具和外部 CLI 參考。
這可以用於生產系統嗎？
請謹慎使用。生產環境使用應要求明確核准、經審查的命令，以及最小權限存取。
主要的安全疑慮是什麼？
多個範例會執行 shell 命令、載入環境檔案，或建議使用 pipe-to-shell 安裝程式。
開發者詳細資訊
作者
Dwsy授權
MIT
作者版本
v2.0.0
Skillstore 修訂
r1
引用
1ffa7643651792ccb4bd3b15d924d2c97edff755
維護新鮮度
2026/7/23
使用量
6 次下載 · 306 次瀏覽
Dwsy 的更多技能
查看全部📦
svg-logo-generator
79建立幾何 SVG 標誌
團隊需要不依賴繁重設計工具的可縮放標誌。此技能會引導 Claude、Codex 和 Claude Code 使用 Python 產生乾淨的 SVG 標誌。
設計與創意 查看
📦
context7
79研究 GitHub Issues 與程式碼範例
開發者會花費時間搜尋分散在 GitHub issues、pull requests、discussions 與程式碼範例中的資訊。此技能會引導針對錯誤、相依性與實作模式進行聚焦的儲存庫搜尋。
研究與學習 查看
📦
system-design
78系統設計架構目錄
需求不明確可能導致過早實作，並遺漏架構決策。此技能會引導結構化探索，並建立以 Mermaid 為基礎的設計目錄，以便共同規劃。
設計與創意 查看
📦
ast-grep
78使用 ast-grep 搜尋並重寫程式碼
大型程式碼庫會讓文字搜尋錯過結構性模式。此技能會引導 Claude、Codex 和 Claude Code 使用 ast-grep 進行語法感知搜尋、linting 和重寫。
程式開發 查看
📦
ai-runtime-memory
76使用 SQL 風格查詢追蹤專案記憶
長時間工作階段後，專案決策與脈絡可能很難復原。此技能會將 AI 執行階段記憶整理到本機檔案中，並提供用於時間軸、標籤和摘要的查詢工具。
效率 查看
相關技能
查看全部📦
incident-command-governor
82建立受治理的事件指揮封包
由 yaojingang
事件筆記通常缺乏清楚的嚴重程度、負責歸屬，以及針對不同受眾的溝通內容。此技能會將營運證據轉換為受治理的封包，用於回應、檢討與後續追蹤。
DevOps 與基礎設施 查看
📦
senior-devops
81自動化 DevOps 管線與部署
由 alirezarezvani
DevOps 工作通常需要可重複的管線、基礎架構與部署模式。此技能提供 CI/CD、IaC、部署與營運審查的腳本和參考指南。
DevOps 與基礎設施 查看
📦
cloud-devops
80協調雲端 DevOps 工作流程
由 sickn33
雲端交付工作通常橫跨許多工具與階段。此技能會將基礎架構、CI/CD、Kubernetes、監控、安全性、成本與復原工作整理成清晰的提示。
DevOps 與基礎設施 查看
📦
terraform-skill
80打造更好的 Terraform 模組
由 sickn33
Terraform 專案經常逐漸變成不一致的模組、不清楚的測試，以及高風險的發布工作流程。此技能為 Claude、Codex 和 Claude Code 提供實用的 Terraform 與 OpenTofu 模式，協助更安全地交付基礎設施。
DevOps 與基礎設施 查看
📦
helm-chart-architect
80設計生產環境 Helm Chart 架構
由 92Bilal26
團隊經常複製與其營運限制不符的 Helm 範例。此技能會透過依賴項、hooks、values、環境與操作人員需求，引導 chart 架構設計。
DevOps 與基礎設施 查看
📦
devops-orchestrator
79協調 DevOps 交付
由 Brownbull
DevOps 工作通常橫跨管線、基礎架構、監控與部署決策。此技能會將這些任務整理成檢查清單、交接事項與推出計畫。
DevOps 與基礎設施 查看