skill-zhihu-answer

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能与其“知乎回答发布”目的基本一致,主要风险不在恶意窃密,而在代表用户账号执行公开发帖、复用本地登录态,以及刻意绕过页面遮挡/平台检测。未见第三方凭据中转、远程下载执行或明显数据外传,因此更像高风险自动化发布技能而非恶意技能。

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Oct 16, 2026, 04:18 AM
Package URL
pkg:socket/skills-sh/zju-real%2Feasel%2Fskill-zhihu-answer%2F@ebf0fea402b0397ac6bc3f3f8d092d4c36b392856b3ce9770e9ba539093e9d02