dev 审计报告.

警告

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• Skill is tightly coupled to the kendex ecosystem and requires several other skills (orch, github, decider, code-quality) to function; it may not be usable standalone.
• Relative paths to other skills (e.g., ../orch/SKILL.md) assume a specific directory layout; if installed independently, these references may break.
• The SKILL.md content provided is truncated; ensure the full document is present in the repository.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• GitHub adoption: 76 GitHub stars
• Stars/forks activity: 76 stars, 27 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

方法

本报告综合公开元数据、AI 审查输出、仓库活跃度、安装就绪度、OpenAgentSkill 事件、质量评分、信任检查和 Agent 安全门槛；它不是完整的源代码安全审计。