技能 skywork-search
📦
skywork-search
內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數
使用 Skywork 搜尋網路
最新研究請求需要模型訓練資料以外的來源。此技能使用 Skywork API 搜尋網路，並儲存有來源支持的結果。
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "skywork-search" from https://skillstore.io/skills/skyworkai-skywork-search.md and its manifest at https://skillstore.io/api/skills/skyworkai-skywork-search/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「skywork-search」。 搜尋近期電池回收政策更新。
預期結果:
包含來源 URL、政策日期，以及需要驗證的聲稱備註的簡短摘要。
正在使用「skywork-search」。 尋找新 API 發行版本的最新文件。
預期結果:
- 官方文件 URL 和版本備註。
- 相關變更記錄項目。
- 支援頁面中的已知限制備註。
正在使用「skywork-search」。 研究氣候科技的資金趨勢。
預期結果:
包含近期資金數字、主要投資者和發布連結的有來源依據概覽。
安全審計
高風險v5 • 2026/7/7 開啟版本化報告
The skill implements legitimate Skywork web search, but it has significant security exposure from token caching, outbound network requests, and external browser launch commands. I found no prompt injection language, but the search script builds output filenames from raw query text and can write outside the intended temporary directory.
3
已掃描檔案
477
分析行數
21
複核項目
0
已忽略的誤報
已確認的安全問題 (3)
高
Path Traversal in Search Result Filename
The search result path is built from the raw query string before writing the output file. A query containing slashes or an absolute path can write outside the temporary directory.
The command-line query is directly embedded in the output filename and then opened for writing. I found no sanitization, basename check, or path containment check.
高
Credential Cache Lacks Permission Hardening
The authentication module writes token data to a hidden home-directory file without visible permission restrictions. Default file permissions may allow unintended local access to the token.
The token save function opens the cache file and writes JSON token data. I found no chmod, opener mode control, or operating-system credential store use near the write.
中
Environment-Controlled Endpoints Receive Tokens
Environment variables can replace the authentication or search gateway endpoints. If misconfigured, token validation or search requests can send credentials to a non-default host.
The API base and gateway URL are read from the environment, and later requests include token data. This can be legitimate configuration, so confidence is high enough to flag but not absolute.
能力複核項目 (21)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Python subprocess.Popen
subprocess.Popen(["open", url], start_new_session=True,
The macOS branch starts an external browser opener with a login URL built from the configured base URL. It uses an argument list, but it still executes a local process and can direct the user to an external site.
高
Python subprocess.Popen
subprocess.Popen(["start", url], shell=True, start_new_session=True,
The Windows branch invokes subprocess.Popen with shell=True while passing a URL influenced by the login base configuration. That creates a higher command-injection and unsafe browser-launch risk.
高
Python subprocess.Popen
subprocess.Popen(["xdg-open", url], start_new_session=True,
The Linux branch starts xdg-open with a login URL built from the configured base URL. It is intended browser behavior, but it is still external process execution from a skill script.
高
Hidden file in home directory
Token is stored in user home directory as ~/.skywork_token (JSON format).
The docstring states that the token is stored as ~/.skywork_token. A hidden home-directory credential cache is a real sensitive-file persistence risk.
高
Hidden file in home directory
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
TOKEN_FILE expands to ~/.skywork_token, which stores authentication material outside the skill directory. This is a real credential storage location in the user home directory.
高
Hidden file access
Token is stored in user home directory as ~/.skywork_token (JSON format).
The file described on this line is a hidden token cache, not ordinary application output. Access to this file can expose a Skywork bearer token.
高
Hidden file access
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The code defines a hidden home-directory token file used by later load and save operations. That creates persistent access to sensitive authentication data.
高
Python file write/append
with open(TOKEN_FILE, "w", encoding="utf-8") as f:
The code writes token data to the hidden token cache. I did not see permission hardening around this write, so the credential file may be created with default process permissions.
高
Python file write/append
with open(out_path, "w", encoding="utf-8") as f:
The file write uses a path derived from the raw query string on the previous line. Queries containing path separators or absolute paths can escape the intended temporary directory.
高
Hidden file in home directory
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The skill documentation instructs use of a cached token file at ~/.skywork_token. That is a hidden credential file in the user home directory.
高
Hidden file access
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The documented cached token is sensitive authentication material stored in a hidden file. Access to that file can expose the Skywork token.
中
Python environment access
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
SKYWORK_API_BASE can change the API endpoint used for authentication checks. Because token validation sends credentials to that base URL, endpoint control is security-sensitive.
中
Python environment access
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
SKYWORK_WEB_BASE controls the login URL that may be opened or shown to the user. This is legitimate configuration, but it can steer users to a non-default login destination.
中
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The script reads SKYBOT_TOKEN directly from the environment. That is expected credential handling, but it is access to a sensitive secret.
中
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The command-line path reads SKYBOT_TOKEN and validates it with the API. This is legitimate authentication logic, but it handles a sensitive environment token.
中
Python HTTP libraries
with urllib.request.urlopen(req, timeout=30) as resp:
The script sends the search query and token-bearing request over the network. This is the core feature, but it exposes user queries and credentials to the configured API endpoint.
中
Python environment access
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
SKYWORK_GATEWAY_URL can replace the gateway that receives token-bearing search requests. This is useful configuration, but it is security-sensitive endpoint control.
低
Hardcoded URL
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
The script contacts the Skywork API for authentication and token validation. This is expected for the skill, but it is real outbound network behavior.
低
Hardcoded URL
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
The script constructs login URLs against the Skywork web site. This is intended authentication behavior, but it sends the user to an external network service.
低
Python HTTP libraries
req = urllib.request.Request(
The code builds an HTTP POST request to the Skywork gateway and includes the token header. This is intended behavior, but it is real outbound API access.
低
Hardcoded URL
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
The default gateway points to api-tools.skywork.ai. A hardcoded external service is expected here, but it confirms the skill depends on outbound network access.
風險因素
⚙️ 外部命令 (14)
🌐 網路存取 (6)
📁 檔案系統存取 (10)
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/skyworkai-skywork-search/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/skyworkai-skywork-search?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/skyworkai-skywork-search?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skyworkai-skywork-search/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/skyworkai-skywork-search.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
SkyworkAI. (2026). skywork-search security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skyworkai-skywork-search/audits/5BibTeX 引用
@techreport{skyworkai-skyworkai-skywork-search-2026,
author = {SkyworkAI},
title = {skywork-search security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/skyworkai-skywork-search/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skywork-search security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "SkyworkAI"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/skyworkai-skywork-search/audits/5"
identifiers:
- type: other
value: "skillstore:skyworkai-skywork-search:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 45
架構
85
可維護性
85
內容
69
社群
83
規範符合度
你可以打造什麼
時事研究
在撰寫簡報前，檢查近期事實、來源 URL 和片段。
文件來源收集
為報告、投影片或研究摘要收集網路參考資料。
技術查詢
尋找最新發行說明、文件頁面或議題參考。
試試這些提示
基本搜尋
搜尋有關 [topic] 的最新資訊，並摘要最可靠的來源。
比較來源
從官方來源、新聞報導和專家分析中搜尋 [topic]。
建立簡報
研究 [question]，引用來源 URL，並將已確認事實與不確定聲稱分開。
多步驟研究
針對 [topic] 執行聚焦搜尋，識別來源衝突，並產出有來源依據的決策簡報。
最佳實務
- 使用包含時間、地點、產品或組織名稱的聚焦查詢。
- 在回答使用者前，開啟並閱讀已儲存的結果檔案。
- 呈現事實性聲稱時引用來源 URL。
避免
- 不要對複雜研究使用籠統的單字查詢。
- 不要在未檢查來源脈絡的情況下，將片段視為已驗證。
- 不要在搜尋查詢中包含敏感私人資料。
常見問題
此技能使用哪些服務？
它使用 Skywork 驗證和網路搜尋 API。
它需要認證資訊嗎？
是。它需要 SKYBOT_TOKEN、快取權杖或瀏覽器登入。
結果儲存在哪裡？
該指令碼會將結果文字檔儲存在暫存目錄中，並列印其路徑。
它可以執行多少個查詢？
它每次執行可接受一至三個查詢。
它會引用來源嗎？
結果檔案包含來源 URL，助理應在回答中引用它們。
它可以在沒有網際網路存取的情況下運作嗎？
不會。它依賴 Skywork API 可用性和網路存取。
開發者詳細資訊
作者
SkyworkAI授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
f93e9bb0daca99badb6a7e574b97737155d57cb3
維護新鮮度
2026/7/18
使用量
12 次下載 · 139 次瀏覽
檔案結構