reminders

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的功能目标与“提醒事项管理”基本一致,但其唯一核心执行体是不可验证的本地脚本 `./reminders_cli.sh`。未见明显凭据窃取或数据外传证据,因此更像高风险且不透明的技能,而非已确认恶意;应归类为 SUSPICIOUS。

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Apr 11, 2026, 10:49 AM
Package URL
pkg:socket/skills-sh/DotNetAge%2Fmindx%2Freminders%2F@dc67def0c04f892df4e6d933e6a06d7a42c0359c