SkillSpector · face-reading-cn

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/face_image_analysis.py

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

SKILL.md

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/face_image_analysis.py

Overly Broad Trigger: '面相' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '看相' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '五官' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '痣相' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '痣' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '泪痣' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '吉痣' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '凶痣' is too short and may match unintended inputs

SKILL.md

Overly Broad Trigger: '改相' is too short and may match unintended inputs

SKILL.md