Laporan audit skill

hv-analysis Laporan audit.

横纵分析法(Horizontal-Vertical Analysis)深度研究Skill。由数字生命卡兹克提出,融合了索绪尔的历时-共时分析、社会科学的纵向-横截面研究设计、商学院案例研究法与竞争战略分析的核心思想。 当用户想要系统性研究一个产品、公司、概念、技术或人物时使用。核心是双轴分析:纵轴追踪从诞生到当下的完整生命历程(以叙事故事呈现),横轴在当下时间截面上与竞品/同类进行系统性横向对比,最后交叉两条轴产出独到洞察。最终产出一份排版精美的PDF研究报告。 触发词包括但不限于:横纵分析、研究一下、帮我分析、深度研究、做个研究、调研一下、竞品分析、帮我看看这个东西怎么样、这个产品/公司/概念是怎么回事、帮我摸清楚、帮我搞懂、帮我做个deep research。 即使用户只是说"帮我了解一下XX"或"XX是什么来头",只要上下文暗示需要系统性的深度研究(而非简单的概念解释),都应该触发。也适用于用户丢来一个产品名、公司名、技术名词说"帮我研究一下这个"的场景。 不要用于简单的名词解释(用户只是问"XX是什么")、不要用于公众号写作(那个用khazix-writer)、不要用于纯标题摘要生成(用wechat-title)。

Eksperimental · TinjauPerlu ditinjauDihasilkan 13 Okt 2026Audit metadata heuristik
81
Audit
72
Kepercayaan
87
Kualitas
75
Keamanan
88
Maintain
92
Pasang

Trust Score OpenAgentSkill

72
Shortlist kuat

Trust Score OpenAgentSkill

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

Adopsi GitHub

Lulus

100

20K star GitHub

Aktivitas star/fork

Lulus

97

20K star dan 2.2K fork; aktivitas issue tidak tersedia dalam metadata saat ini

Pemeliharaan terbaru

Lulus

88

2 bulan sejak push

Kejelasan lisensi

Lulus

86

MIT

Kelengkapan README/SKILL.md

Lulus

86

Metadata memuat konteks penggunaan dan alur kerja yang cukup

Risiko dependensi/runtime

Peringatan

54

command execution surface, external package install surface

Ketersediaan pemasangan

Lulus

92

npx skills add KKKKhazix/khazix-skills --skill hv-analysis

Keamanan perintah pemasangan

Lulus

92

Jalur pemasangan paket atau runtime standar

Cakupan izin

Peringatan

48

shell or command execution, filesystem or document access

Bukti repositori

Lulus

86

https://github.com/KKKKhazix/khazix-skills/tree/main/hv-analysis

Status peninjauan

Info

66

Data tinjauan AI tersedia

Hasil terbukti Agent

Info

54

Belum ada data hasil Agent

Pemeriksaan

Tinjauan pemasangan dan adopsi

8 Lulus · 12 Perlu ditinjau

Jalur pemasangan

92

Lulus

npx skills add KKKKhazix/khazix-skills --skill hv-analysis

Repositori

88

Lulus

https://github.com/KKKKhazix/khazix-skills/tree/main/hv-analysis

Lisensi

86

Lulus

MIT

Pemeliharaan

88

Lulus

2 bulan sejak push

Tinjauan AI

55

Periksa

The skill instructs to install Python dependencies with --break-system-packages, which may override system packages and pose a minor system stability risk, but it's a common practice in containerized environments and not inherently destructive.

Kelengkapan README/SKILL.md

86

Lulus

Usable description available

Risiko dependensi

54

Perbaiki

command execution surface, external package install surface

Keamanan perintah pemasangan

92

Lulus

Jalur pemasangan paket atau runtime standar

Cakupan izin

48

Perbaiki

shell or command execution, filesystem or document access

Aktivitas star/fork

97

Lulus

20K star dan 2.2K fork; aktivitas issue tidak tersedia dalam metadata saat ini

Adopsi

88

Lulus

20K star GitHub

Peringatan

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • The skill instructs to install Python dependencies with --break-system-packages, which may override system packages and pose a minor system stability risk, but it's a common practice in containerized environments and not inherently destructive.
  • The skill relies heavily on sub-agent web search capabilities, which could potentially be misused if the agent environment lacks proper sandboxing, but no explicit dangerous commands or exfiltration paths are present.
  • The SKILL.md does not explicitly mention the MIT license, but the repository license is MIT, so compliance is acceptable.
  • Quality score needs review
  • Permission surface needs review: shell or command execution, filesystem or document access
  • Dependency/runtime risk: command execution surface, external package install surface
  • Permission surface: shell or command execution, filesystem or document access

Metode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Bandingkan opsi sekitar

Skill terkait untuk diaudit berikutnya