yichen-unified-search

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的搜索与候选核验目的基本自洽,且多数限制条款试图约束只读公开内容;但它要求使用未验证来源的外部 Zhihu 预编译运行时,并允许多处登录态/本地密钥参与对外请求,显著扩大信任边界。整体应判定为 SUSPICIOUS/高风险脆弱技能,而非确认恶意。

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Sep 8, 2026, 01:44 AM
Package URL
pkg:socket/skills-sh/mcncarl%2Fyichen-skills%2Fyichen-unified-search%2F@da242715b344d3c41e497301ce85d9e4eeac4beab40bcc3697b1db3152e2fba9
Security Audit — socket — yichen-unified-search