CC shopping-price-compare
省柴柴·全平台商品比价助手：帮你跨淘宝/京东/拼多多/抖音/快手/唯品会等主流购物平台比价，找到最划算的商品和购买链接；为纸巾、猫粮等消耗品设置定期购买提醒并自动推送合适商品；记住你的购物喜好，分析商品是否值得买。
省柴柴·全平台商品比价助手：帮你跨淘宝/京东/拼多多/抖音/快手/唯品会等主流购物平台比价，找到最划算的商品和购买链接；为纸巾、猫粮等消耗品设置定期购买提醒并自动推送合适商品；记住你的购物喜好，分析商品是否值得买。
As a process C 62/100 · Has gaps — weak spots: when it triggers, inputs and preconditions, failures and branches
What is at stake
The skill contains fragments that, in the wrong hands, cost money or data. Below: what the installer risks and what the author should do.
The files contain someone else's key or token. If it is live, your agent will call third-party services under a stranger's identity; if it was revoked, the skill's scripts simply fail. Such a key often arrives with the author's whole workspace, personal data included.
The key is visible to everyone who downloaded the skill and has likely been copied by catalog-scanning bots already. Revoke it now, check bills and access logs, then reissue.
Below is the worst case for this category. The finding here is medium: the guard saw a sign, not a proof.
The instructions or scripts send data out: environment variables, keys, file contents, chat history. You may never notice, because the agent performs the upload as "part of the task".
If the upload is not needed for the task, remove it: catalogs flag such skills and delist them. If it is needed, name the destination explicitly, say what leaves the machine, and give the user a switch.
How to improve
- Address the high-severity findings: each costs 18 safety points. If one is a false positive, add the rule id to guard.allow in spec.yaml.
- Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
- Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
- A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.
Guard findings · 11
-
high Secrets in code
meta-credential-filesscripts/token.jsonCredential / dotenv files bundled with the skill (1)scripts/token.json
Medium and low: 10
-
medium Exfiltration
net-redirectable-api-keyscripts/price.js:649Helper sends the API key to a host configured by an environment variable — the key can be redirected to another serverAPI key + configurable base URL from environment
-
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_n1.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"黄铜推牌 滑块 解压","platformCount":3,"total":42,"top":{"source":"kuaishou","platform":"快手","goodsId":"21858090226480","title":"无品牌黄铜啪啪币一亿小目标指尖陀螺可拆卸手推响币陀螺解压玩具","pictUrl":"https://u1-2….codetector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_n2.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"黄铜EDC 机械 解压玩具","platformCount":4,"total":80,"top":{"source":"jd","platform":"京东","goodsId":"eu8B…4pW","title":"指玩屋 机械金属佛珠指环陀螺减压玩具指尖解压神器大舅哥EDC 不锈钢_黄detector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_n3.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"黄铜左轮 子弹 指尖陀螺","platformCount":4,"total":51,"top":{"source":"jd","platform":"京东","goodsId":"nwQ1…522","title":"何佳功指尖陀螺左轮子弹纯黄铜减压玩具金属玩具EDC可拆卸休闲手指陀螺 金色detector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_r2.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"Bastion 黄铜陀螺","platformCount":2,"total":22,"top":{"source":"taobao","platform":"淘宝","goodsId":"m5kZ…Fjn","title":"再唐指南针风水罗盘指尖陀螺罗经太极八卦周易64卦解压玩具纯黄铜","pidetector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_r3.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"黄铜推牌 手作","platformCount":3,"total":42,"top":{"source":"kuaishou","platform":"快手","goodsId":"21858090226480","title":"无品牌黄铜啪啪币一亿小目标指尖陀螺可拆卸手推响币陀螺解压玩具","pictUrl":"https://u1-2…com/bdetector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_r4.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"Flytanium 黄铜","platformCount":2,"total":40,"top":{"source":"taobao","platform":"淘宝","goodsId":"qkYw…eIy","title":"潜水艇黄铜地漏防臭卫生间通用浴室洗衣机两用芯盖官方旗舰店正品","picdetector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_x1.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"黄铜罗盘 风水 指尖陀螺","platformCount":4,"total":110,"top":{"source":"jd","platform":"京东","goodsId":"BWQ9…BsG","title":"香港正品纯铜指南针风水罗盘高精度黄铜指尖陀螺手把件双面八卦周易卦减解压detector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_x2.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"黄铜八卦 手把件 解压","platformCount":4,"total":100,"top":{"source":"jd","platform":"京东","goodsId":"5A8V…zIS","title":"黄铜八卦伞创意转转手把件解压风生水起天机伞节庆礼品摆件 黄铜八卦伞转转",detector -
low Secrets in code
secret-high-entropy-tokenscripts/__test_data__/_x3.json:1High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition){"keyword":"黄铜太极 卦 指尖玩具","platformCount":3,"total":60,"top":{"source":"jd","platform":"京东","goodsId":"1Z4O…t3Y","title":"礼加心太极八卦64卦实心黄铜指尖陀螺EDC易经罗盘玩具金属减压解压神器 黄铜detector
Files scanned: 32. Evidence is masked. Grey chips explain why severity was lowered.
Against the Agent Skills spec
- warning
description-no-whendescription does not say WHEN to use the skill (no "use when") - note
frontmatter-keyunknown frontmatter key "display_name" - note
frontmatter-keyunknown frontmatter key "homepage" - note
frontmatter-keyunknown frontmatter key "description_zh" - note
frontmatter-keyunknown frontmatter key "description_en" - note
frontmatter-keyunknown frontmatter key "visibility" - note
frontmatter-keyunknown frontmatter key "agent_created" - note
frontmatter-keyunknown frontmatter key "icon"
Process rating: all ten parameters 62/100
- 0Inputs and preconditions. Does not say what the process needs to start
- 0Failures and branches. Linear process with no failure handling
- 0Progress reporting. Says nothing while it works
- 20When it triggers. No condition that starts the skill
- 60Result and completion. Output format stated, no completion criterion
- 100Tools and files. No external tools needed
- 100Steps. 7 steps
- 100Consistency. Name and required fields are in place
- 100Execution cost. Instruction body is 104 tokens
- 100Running it twice. No mutating operations
Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.
Quality signals
- +5Description has no quoted example phrases that should trigger the skill
- +4Description does not say when NOT to use the skill (false activations)
- +3Description length 107: 120–800 characters recommended
- +4No input/output examples
- -32 of 2 scripts are never mentioned in SKILL.md
- +1No license
- +2Single-language instructions
- +4Structure: 3 headings
- +3Step-by-step instructions: 7 items
- +3Output format is stated explicitly
- +4Reference files are cited in the instructions (1 of 2)
Quality base 70; lint remarks subtract, signals add up to 100. Result: 66.