designing-data-intensive-applications 审计报告.

警告

• No critical security risks found; the skill contains static reference material and does not instruct code execution, downloads, secret access, or destructive actions.
• SKILL.md is quite thin and mostly points to supporting files; the core workflow, expected output format, and limitations are not fully stated in SKILL.md itself.
• The relationship between the .mini.md, .md, and .nano.md files could be clearer, especially regarding when to escalate from one to another.
• The imperative 'OBEY' framing is unusual and could be mistaken for an injection-style instruction, though the content itself is benign.
• Quality score needs review

方法

本报告综合公开元数据、AI 审查输出、仓库活跃度、安装就绪度、OpenAgentSkill 事件、质量评分、信任检查和 Agent 安全门槛；它不是完整的源代码安全审计。