← back to doubao-product-qa

Skill Scanner · doubao-product-qa

independent scanner by Cisco AI Defense · skill by ahang1598 · how it works ↗

FAILmax severity: CRITICAL

Undeclared network usage; Skill does not specify a license; Outbound network request primitives in JavaScript/TypeScript; +4 more

scanned 2026-08-22

Findings (20)

MEDIUMunauthorized_tool_use

Undeclared network usage

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\23258\SKILL.md

INFOpolicy_violation

Skill does not specify a license

SKILL.md

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

assets\k6-starter\flows\api-flow.js:16

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

assets\mobile-starter\appium-preflight.cjs:6

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\appium-preflight.cjs:134

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\appium-smoke.cjs:65

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\appium-smoke.cjs:85

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\appium-smoke.cjs:89

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\appium-smoke.cjs:90

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\appium-smoke.cjs:95

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\business-flow.cjs:20

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\business-flow.cjs:118

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\business-flow.cjs:121

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\business-flow.cjs:124

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\fallline-analysis-flow.cjs:42

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\fallline-analysis-flow.cjs:45

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\fallline-analysis-flow.cjs:236

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\fallline-analysis-flow.cjs:251

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\miniprogram-smoke.cjs:46

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

assets\mobile-starter\miniprogram-smoke.cjs:51

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete