Laporan audit skill

cherry-studio-feedback Laporan audit.

收集、脱敏、预览并提交 Cherry Studio BUG、UI/UX 或功能反馈,默认提交到飞书。可在用户同意后调用内置诊断工具整理环境、错误日志、截图和用户导出的 trace,自动提交飞书表单或生成匿名上传 ZIP;也可安全解析反馈 ZIP 为表单字段。用户说“提交问题”“提交反馈”“上报 bug”“收集/上传错误信息”“整理日志/trace”“生成反馈包”,或描述 Cherry Studio 问题并希望记录时触发。只有明确要求 GitHub Issue 时才改用 issue-reporter。

Eksperimental · TinjauPerlu ditinjauDihasilkan 13 Okt 2026Audit metadata heuristik
84
Audit
77
Kepercayaan
90
Kualitas
77
Keamanan
88
Maintain
92
Pasang

Trust Score OpenAgentSkill

77
Shortlist kuat

Trust Score OpenAgentSkill

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

Adopsi GitHub

Lulus

100

51K star GitHub

Aktivitas star/fork

Lulus

97

51K star dan 4.8K fork; aktivitas issue tidak tersedia dalam metadata saat ini

Pemeliharaan terbaru

Lulus

88

2 bulan sejak push

Kejelasan lisensi

Lulus

86

AGPL-3.0

Kelengkapan README/SKILL.md

Info

76

Metadata publik memerlukan konteks README/SKILL.md yang lebih kuat

Risiko dependensi/runtime

Peringatan

46

command execution surface, credential or environment access

Ketersediaan pemasangan

Lulus

92

npx skills add CherryHQ/cherry-studio --skill cherry-studio-feedback

Keamanan perintah pemasangan

Lulus

92

Jalur pemasangan paket atau runtime standar

Cakupan izin

Gagal

22

secrets or environment access, shell or command execution

Bukti repositori

Lulus

86

https://github.com/CherryHQ/cherry-studio/tree/main/resources/builtin-agents/cherry-assistant/.claude/skills/cherry-studio-feedback

Status peninjauan

Lulus

88

Data tinjauan AI tersedia

Hasil terbukti Agent

Info

54

Belum ada data hasil Agent

Pemeriksaan

Tinjauan pemasangan dan adopsi

9 Lulus · 7 Perlu ditinjau

Jalur pemasangan

92

Lulus

npx skills add CherryHQ/cherry-studio --skill cherry-studio-feedback

Repositori

88

Lulus

https://github.com/CherryHQ/cherry-studio/tree/main/resources/builtin-agents/cherry-assistant/.claude/skills/cherry-studio-feedback

Lisensi

86

Lulus

AGPL-3.0

Pemeliharaan

88

Lulus

2 bulan sejak push

Tinjauan AI

88

Lulus

Approved with no listed issues

Kelengkapan README/SKILL.md

84

Lulus

Usable description available

Risiko dependensi

46

Perbaiki

command execution surface, credential or environment access

Keamanan perintah pemasangan

92

Lulus

Jalur pemasangan paket atau runtime standar

Cakupan izin

22

Perbaiki

secrets or environment access, shell or command execution

Aktivitas star/fork

97

Lulus

51K star dan 4.8K fork; aktivitas issue tidak tersedia dalam metadata saat ini

Adopsi

88

Lulus

51K star GitHub

Peringatan

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • Permission surface needs review: secrets or environment access, shell or command execution
  • Dependency/runtime risk: command execution surface, credential or environment access
  • Permission surface: secrets or environment access, shell or command execution

Metode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Bandingkan opsi sekitar

Skill terkait untuk diaudit berikutnya