skills-manager — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skills-manager (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
运行时检测: 优先 npx skills，备选 $CHERRY_STUDIO_BUN_PATH x skills，都没有则提示安装 Node.js
搜索: 理解需求→提取关键词→npx skills find [query]→展示名称/功能/来源
安装: Skills 是第三方代码有完整权限，必须: 展示安全警告→提供源码链接→用户确认→npx skills add <owner/repo@skill> -y。位置: 项目级 .claude/skills/ 或用户级 ~/.claude/skills/
无结果: 告知→提议直接完成→建议创建自定义Skill
目录结构: skill-name/ 下 SKILL.md(必需) + scripts/(可选) + references/(可选) + assets/(可选)
流程:
原则: 解释why不堆MUST, 通用指令不绑特定示例, 多领域按variant组织references/
参考: https://skills.sh/ | npx skills find/add/init
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.