跳转到正文
skillsafebeta
← 报告库
用途分类 / 其他用途

Loop Me Skill 安全审计

作者说它能做什么（原文）

Grill me about specs for the workflows I want to build, within this workspace.

第三方安全检查结论

发现安全风险

已检查文件
2
发现的风险
2
会不会运行危险命令？检查是否下载程序后直接运行、让他人远程控制电脑，或藏起要运行的命令。未发现风险
会不会泄露文件和密钥？检查是否发送含密码或密钥的文件，以及代码里是否直接写了密钥。发现 1 项风险
中风险

个人与工作习惯会被长期写入工作区笔记

原文依据：2 处
发现了什么

该 Skill 主动询问职业、每周与早晨活动、使用的工具和处理的沟通渠道，并要求将这些信息记录到 `NOTES.md`。源码未指示外传，但本地持久化本身可能暴露敏感生活或工作模式。

为什么需要注意

若工作区被提交、同步或与他人共享，笔记可能泄露个人作息、内部工具、沟通渠道及业务处理方式。

源码要求在笔记不足时询问用户的工作环境，并把所用工具、处理渠道及个人术语记录到 `NOTES.md`；“loop”范围还明确涵盖职业、每周和早晨活动。这会在用户透露相关信息时，将生活与工作模式持久化到工作区，之后可被有该工作区访问权的人或工具读取。源码没有显示网络外传。用户可限制回答敏感问题，并要求作者说明保留期限、访问范围及哪些字段可以不记录。

SKILL.md:12来自说明文档打开原文件
A **loop** is a recurring pattern in the user's life: their career, their week, their morning, a single repeated activity. Picturing a life as loops within loops reveals how predictable its activities really are, which is what makes them worth **delegating**. Use the lens to find loops worth specifying, and propose ones the user hasn't noticed.
查看另外 1 个位置
SKILL.md:32来自说明文档打开原文件
- `workflows/*.md`: one spec per workflow.- `NOTES.md`: raw notes on the user's world, the tools they use, the channels they process, and their own terminology for both. When it is empty or thin, interview them about their world before specifying anything. Sharpen fuzzy terms into canonical ones as they surface, and record them here.
会不会删除文件或一直在后台运行？检查是否大范围删除文件、改写磁盘，或设置自动启动。发现 1 项风险
中风险

访谈过程可删除现有工作流规格，且未要求删除前确认

原文依据：3 处
发现了什么

指令明确允许在访谈推进时创建、编辑和删除规格，但没有限定只能删除本次新建的文件，也没有要求展示差异、备份或取得单独确认。

为什么需要注意

如果工作区已有 `workflows/*.md`，模型可能把仍有价值的规格视为已被新结论取代并删除，造成历史设计或实施依据丢失。

这是生效中的操作指令：访谈推进时可创建、编辑和删除规格，而规格目录是工作流的事实来源。文本没有把删除限制为本次会话新建的文件，也未要求逐项确认或备份。因此，启用该 Skill 后，现有 `workflows/*.md` 可能在“解决问题”的过程中被删除，造成规格丢失或后续实现依据改变。用户可要求作者明确删除范围，并限制为先展示变更、经确认后再删除。

SKILL.md:8来自说明文档打开原文件
Run a stateful `/grilling` session whose only output is **workflow** specs. Use the grilling discipline (relentless, a round of questions at a time, a recommended answer attached to each) aimed at the vocabulary and goal below. Create, edit, and delete specs as the grilling resolves things.
查看另外 2 个位置
SKILL.md:31来自说明文档打开原文件
- `workflows/*.md`: one spec per workflow.- `NOTES.md`: raw notes on the user's world, the tools they use, the channels they process, and their own terminology for both. When it is empty or thin, interview them about their world before specifying anything. Sharpen fuzzy terms into canonical ones as they surface, and record them here.
SKILL.md:14来自说明文档打开原文件
A **workflow** is the spec of one loop, made real. You run a workflow on a loop: the loop is its running instantiation. Workflows live in `workflows/*.md` and are the source of truth.
会不会绕过安全保护？检查是否跳过网站安全验证、开放过多文件权限，或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容？检查工作说明是否要求 AI 忽略你的指令、干扰检查结果，或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方？检查是否强制替换推广链接或收款对象，同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

4 个说明模块

此 Skill 是一个仅能显式调用的工作流访谈工具；它通过多轮强势提问，把结果写成 `workflows/*.md` 规格，并可能创建、编辑或删除这些规格。

查看原文
SKILL.md:8来自说明文档打开原文件
Run a stateful `/grilling` session whose only output is **workflow** specs. Use the grilling discipline (relentless, a round of questions at a time, a recommended answer attached to each) aimed at the vocabulary and goal below. Create, edit, and delete specs as the grilling resolves things.
SKILL.md:14来自说明文档打开原文件
A **workflow** is the spec of one loop, made real. You run a workflow on a loop: the loop is its running instantiation. Workflows live in `workflows/*.md` and are the source of truth.
agents/openai.yaml:4来自说明文档打开原文件
  short_description: "Spec the workflows you want to build"policy:  allow_implicit_invocation: false

该 Skill 会询问用户的职业、日常生活、工具和沟通渠道，并把整理后的信息持久记录在 `NOTES.md`；所提供内容中没有网络上传、脚本执行或安装步骤。

查看原文
SKILL.md:12来自说明文档打开原文件
A **loop** is a recurring pattern in the user's life: their career, their week, their morning, a single repeated activity. Picturing a life as loops within loops reveals how predictable its activities really are, which is what makes them worth **delegating**. Use the lens to find loops worth specifying, and propose ones the user hasn't noticed.
SKILL.md:32来自说明文档打开原文件
- `workflows/*.md`: one spec per workflow.- `NOTES.md`: raw notes on the user's world, the tools they use, the channels they process, and their own terminology for both. When it is empty or thin, interview them about their world before specifying anything. Sharpen fuzzy terms into canonical ones as they surface, and record them here.
从这里开始 · 工作说明SKILL.md
loop-me
连线表示工作说明包含的模块，不是实际运行顺序。点击模块可查看原文。
文件与检查记录2 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围；纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • agents/openai.yaml已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件，没有实际运行 Skill，也没有检查它另外安装的软件包。因此，这不是“保证安全”的承诺；换了版本或使用环境，结果也可能不同。

  • SKILL.md工作说明
  • agents/openai.yaml配套文件
读取了多少行
39
文件校验值（用于核对版本）
506dfd0e518de6774faabb2de43f89104fb63a1555c01f56d95a3d72c0f86b68