技能 skywork-document
📦
skywork-document
內容修訂 r1 高風險 🌐 網路存取🔑 環境變數📁 檔案系統存取⚙️ 外部命令
從檔案建立 Skywork 文件
長篇文件請求通常需要結構、參考檔案和格式化交付。此技能使用 Skywork 文件服務，根據提示和上傳的素材建立精緻的檔案。
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "skywork-document" from https://skillstore.io/skills/skyworkai-skywork-document.md and its manifest at https://skillstore.io/api/skills/skyworkai-skywork-document/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「skywork-document」。 使用者要求根據簡短商業簡報建立 DOCX 提案。
預期結果:
可下載的 DOCX 提案，包含目標、範圍、時程、定價註記和建議後續步驟等章節。
正在使用「skywork-document」。 使用者提供 PDF 研究論文並要求摘要報告。
預期結果:
PDF 報告，包含執行摘要、主要發現、證據註記、限制，以及本機儲存的檔案路徑。
正在使用「skywork-document」。 使用者要求根據數個來源檔案建立德文 Markdown 專案計畫。
預期結果:
Markdown 文件，包含從上傳素材衍生出的里程碑、職責、風險、假設和參考資料。
安全審計
高風險v5 • 2026/7/7 開啟版本化報告
The skill is a cloud document generator with real network, file upload, credential storage, and browser-login behavior. I confirmed the substantive risks around external processing, token caching, endpoint overrides, and Windows shell use, while marking Markdown backtick detections as false positives. No prompt injection attempt was found in the reviewed files.
4
已掃描檔案
923
分析行數
21
複核項目
0
已忽略的誤報
已確認的安全問題 (3)
高
scripts/parse_file.py:40-41scripts/parse_file.py:85-91scripts/create_doc.py:65-85scripts/create_doc.py:95
External Processing of User Files and Prompts
The skill reads local reference files, uploads them to Skywork, and sends document prompts to Skywork APIs. This is expected functionality, but users must understand that their content leaves the local environment.
The code directly reads file bytes, posts them to a remote API, and sends document content in the request payload. The behavior is central to the skill and clearly evidenced.
高
Credential Cache Lacks Permission Hardening
The authentication module saves Skywork token data to ~/.skywork_token using a normal file write. No chmod, secure file creation, or platform credential store is used around the token cache.
The token cache path and write operation are explicit, and there is no nearby permission hardening. This makes the credential storage concern high confidence.
中
Environment-Controlled Endpoints Can Redirect Sensitive Data
Several API base URLs can be overridden by environment variables before files, prompts, or token checks are sent. This is useful for configuration but risky in shared or compromised environments.
The endpoint overrides are explicit and are used by network calls that process sensitive data. The risk depends on environment trust, so confidence is high but not absolute.
能力複核項目 (21)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Python subprocess.Popen
subprocess.Popen(["start", url], shell=True, start_new_session=True,
The Windows branch uses subprocess.Popen with shell=True to open a login URL. The URL is partly environment-derived, so shell interpretation creates command-injection risk.
高
Hidden file in home directory
Token is stored in user home directory as ~/.skywork_token (JSON format).
The module documentation states that the Skywork token is stored in ~/.skywork_token. Persisting an authentication token in a hidden home file is a real credential-storage risk.
高
Hidden file in home directory
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
TOKEN_FILE is explicitly set to ~/.skywork_token. This stores a reusable authentication token in a hidden file under the user home directory.
高
Python file write/append
with open(TOKEN_FILE, "w", encoding="utf-8") as f:
The code writes token data to the token cache file. Because the file stores credentials, the write is security sensitive and should be permission-hardened.
高
Hidden file in home directory
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The skill instructions explicitly tell the agent to use a cached token file at ~/.skywork_token. That documents and enables persistent credential storage in a hidden home file.
中
Python file write/append
with open(args.output, "w", encoding="utf-8") as f:
The script writes parsed content to a user-supplied output path when requested. This is useful but can overwrite local files if the caller chooses an unsafe path.
中
Hidden file access
Token is stored in user home directory as ~/.skywork_token (JSON format).
The documentation describes reading and writing a hidden token file. That file contains credential material, so hidden-file access is security relevant.
中
Hidden file access
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The code defines ~/.skywork_token as the token cache path. Access to this hidden file can expose or modify an authentication token.
中
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The code reads SKYBOT_TOKEN from the environment and returns it as the credential. Environment token access is legitimate but handles sensitive authentication material.
中
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The command-line path reads SKYBOT_TOKEN and validates it through the Skywork API. This is legitimate authentication behavior but still accesses a sensitive environment token.
中
Hidden file access
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The instructions direct use of ~/.skywork_token as part of authentication. The referenced hidden file contains credential data, so access to it is security relevant.
低
Python HTTP libraries
from urllib.request import Request, urlopen, urlretrieve
The imported urllib functions are used to call the Skywork document API and download generated files. This is intentional network behavior that sends document prompts and receives remote file URLs.
低
Hardcoded URL
base_url = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gateway").rstri
The default gateway URL points to a production Skywork endpoint used for document creation. This is a real external network dependency for user content.
低
Python environment access
base_url = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gateway").rstri
SKYWORK_GATEWAY_URL can override the endpoint that receives document prompts and file references. This is legitimate configuration but can redirect sensitive data if the environment is untrusted.
低
Python HTTP libraries
from urllib.request import Request, urlopen
The imported urllib functions are used to upload reference files to the Skywork parse API. That creates a real external data transfer path.
低
Hardcoded URL
base_url = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gateway").rstri
The default gateway URL is the production Skywork endpoint used for parsing uploaded files. This is a real network dependency for user-provided documents.
低
Python environment access
base_url = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gateway").rstri
SKYWORK_GATEWAY_URL can override the endpoint that receives uploaded reference files. This is legitimate configuration but can redirect sensitive files if the environment is untrusted.
低
Hardcoded URL
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
The default API base points to Skywork and is used for login key retrieval and token validation. This is a real external authentication dependency.
低
Hardcoded URL
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
The default web base is used to build browser login URLs. This is legitimate but still causes an external authentication flow.
低
Python environment access
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
SKYWORK_API_BASE can override the authentication API endpoint. This is configuration, but it can redirect token validation traffic in an untrusted environment.
低
Python environment access
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
SKYWORK_WEB_BASE can override the login URL base. This can direct users to a different login page if the environment is manipulated.
風險因素
🌐 網路存取 (9)
🔑 環境變數 (7)
📁 檔案系統存取 (8)
⚙️ 外部命令 (59)
scripts/skywork_auth.py:87 scripts/skywork_auth.py:90 scripts/skywork_auth.py:93 SKILL.md:21-24 SKILL.md:24-27 SKILL.md:27-28 SKILL.md:28-31 SKILL.md:31-49 SKILL.md:49 SKILL.md:50-53 SKILL.md:53 SKILL.md:54-55 SKILL.md:55 SKILL.md:58-66 SKILL.md:66-68 SKILL.md:68-71 SKILL.md:71-73 SKILL.md:73-76 SKILL.md:76-85 SKILL.md:85-88 SKILL.md:88-95 SKILL.md:95-97 SKILL.md:97-98 SKILL.md:98-104 SKILL.md:104-106 SKILL.md:106 SKILL.md:111-117 SKILL.md:117-120 SKILL.md:120-127 SKILL.md:127-129 SKILL.md:129-132 SKILL.md:132-140 SKILL.md:140-144 SKILL.md:144-146 SKILL.md:146-147 SKILL.md:147-153 SKILL.md:153-155 SKILL.md:155 SKILL.md:162-163 SKILL.md:163-165 SKILL.md:165-168 SKILL.md:168-169 SKILL.md:169-172 SKILL.md:172-173 SKILL.md:173-174 SKILL.md:174 SKILL.md:175 SKILL.md:176 SKILL.md:177 SKILL.md:185 SKILL.md:186 SKILL.md:189-191 SKILL.md:191 SKILL.md:199 SKILL.md:200-201 SKILL.md:201-202 SKILL.md:202-209 SKILL.md:209-210 SKILL.md:210-213
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/skyworkai-skywork-document/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/skyworkai-skywork-document?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/skyworkai-skywork-document?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skyworkai-skywork-document/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/skyworkai-skywork-document.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
SkyworkAI. (2026). skywork-document security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skyworkai-skywork-document/audits/5BibTeX 引用
@techreport{skyworkai-skyworkai-skywork-document-2026,
author = {SkyworkAI},
title = {skywork-document security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/skyworkai-skywork-document/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skywork-document security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "SkyworkAI"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/skyworkai-skywork-document/audits/5"
identifiers:
- type: other
value: "skillstore:skyworkai-skywork-document:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 45
架構
85
可維護性
87
內容
69
社群
83
規範符合度
你可以打造什麼
準備客戶報告
根據提示和支援用的 PDF、試算表或筆記建立結構化報告。
將研究轉換成文件
將蒐集到的研究和來源檔案轉換為格式化的 DOCX、PDF、HTML 或 Markdown 文件。
撰寫商業素材草稿
依照要求的語言和格式產生精緻的計畫、簡報、摘要和提案。
試試這些提示
建立簡單文件
以英文建立一份三頁的 DOCX 概述，主題為 renewable energy trends，包含清楚標題和簡潔結論。
使用一個參考檔案
使用 attached PDF 作為來源，建立一份可交付給客戶的 PDF 摘要，包含 key findings、risks 和 next steps。
合併多個來源
從 attached files 建立一份市場分析報告。Compare sources、highlight conflicts，並 include an executive summary。
產出多語正式報告
使用 uploaded research 產生一份西班牙文正式 Markdown 報告。Include methodology、findings、recommendations 和 appendix notes。
最佳實務
- 在開始產生之前，說明所需格式、語言、受眾和文件結構。
- 上傳檔案到 Skywork 雲端服務前，先檢查檔案是否含有敏感資訊。
- 將標題傳遞給文件建立指令碼時，請使用不含空格的清楚標題。
避免
- 不要將此技能用於不需要產生檔案的簡短回答。
- 除非使用者接受由 Skywork 進行外部處理，否則不要上傳機密檔案。
- 當文件需要特定結構或語氣時，不要傳入含糊的提示。
常見問題
此技能是否需要 Skywork 帳戶？
是。它需要來自環境、權杖快取或瀏覽器登入流程的有效 Skywork 權杖。
支援哪些輸出格式？
這些指令碼支援 DOCX、PDF、HTML 和 Markdown 輸出格式。
它能使用上傳的檔案作為來源嗎？
可以。它能透過 Skywork 解析檔案，並將回傳的 file ID 傳入文件產生流程。
產生的檔案會儲存在哪裡？
當有可用的 file URL 時，產生的檔案會下載到目前工作目錄。
它會將資料傳送到外部服務嗎？
會。提示、上傳檔案和文件請求都會由 Skywork 雲端 API 處理。
它能建立英文以外語言的文件嗎？
可以。此指令碼接受語言選項，包括 English、Chinese、Japanese、Korean、French、German 和 Spanish。
開發者詳細資訊
作者
SkyworkAI授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
f93e9bb0daca99badb6a7e574b97737155d57cb3
維護新鮮度
2026/7/18
使用量
9 次下載 · 152 次瀏覽
檔案結構