Rapport d’audit du skill
jeecg-system Rapport d’audit.
JeecgBoot 系统主数据查询与管理。Use when user asks to query/create/manage system master data, or says "查询角色", "查询用户", "查询部门", "查询字典", "创建字典", "创建角色", "查岗位", "查职务", "查租户", "查数据源", "查定时任务", "系统主数据", "query roles", "query users", "query depts", "create dict", "create role", "master data". Also triggers when other skills (desform, bpmn, codegen) need to look up or create roles, users, departments, dictionaries, or positions as dependencies — follows "先查后建" (query-first-create-later) principle.
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adoption GitHub
Info62
226 stars GitHub
Activité stars/forks
Info62
226 stars et 67 forks; l’activité des issues n’est pas disponible dans les métadonnées actuelles
Maintenance récente
Validé88
3 mois depuis le dernier push
Clarté de licence
Validé86
Apache-2.0
Complétude README/SKILL.md
Info76
Les métadonnées publiques nécessitent davantage de contexte README/SKILL.md
Risque dépendances/runtime
Échoué38
command execution surface, credential or environment access
Disponibilité de l’installation
Validé92
npx skills add jeecgboot/skills --skill jeecg-system
Sécurité de la commande d’installation
Validé92
Chemin d’installation standard de package ou runtime
Surface de permissions
Échoué24
secrets or environment access, shell or command execution
Preuve du dépôt
Validé86
https://github.com/jeecgboot/skills/tree/main/jeecg-system
État de revue
Info66
Données de revue IA disponibles
Résultats prouvés par Agent
Info54
Pas encore de données de résultats Agent
Vérifications
Revue d’installation et d’adoption
Chemin d’installation
92
npx skills add jeecgboot/skills --skill jeecg-system
Dépôt
88
https://github.com/jeecgboot/skills/tree/main/jeecg-system
Licence
86
Apache-2.0
Maintenance
88
3 mois depuis le dernier push
Revue IA
55
Hardcoded _SIGN_SECRET in system_utils.py may be a security concern if it is a real secret; should be configurable or removed.
Complétude README/SKILL.md
84
Usable description available
Risque de dépendances
38
command execution surface, credential or environment access
Sécurité de la commande d’installation
92
Chemin d’installation standard de package ou runtime
Surface de permissions
24
secrets or environment access, shell or command execution
Activité stars/forks
62
226 stars et 67 forks; l’activité des issues n’est pas disponible dans les métadonnées actuelles
Adoption
68
226 stars GitHub
Avertissements
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Hardcoded _SIGN_SECRET in system_utils.py may be a security concern if it is a real secret; should be configurable or removed.
- SKILL.md excerpt is truncated in the review, but the available content is comprehensive and clear.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- Dependency/runtime risk: command execution surface, credential or environment access
- Permission surface: secrets or environment access, shell or command execution
Méthode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Comparer les options proches
Skills associés à auditer ensuite
Echarts
Apache ECharts is a powerful, interactive charting and data visualization library for browser
67K Stars · Rapport d’audit
D3
Bring data to life with SVG, Canvas and HTML. :bar_chart::chart_with_upwards_trend::tada:
113K Stars · Rapport d’audit
Scientific Agent Skills
Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.
33K Stars · Rapport d’audit