跳转到正文
报告库
用途分类 / 其他用途

Teach Skill 安全审计

作者说它能做什么(原文)

Teach the user a new skill or concept, within this workspace.

第三方安全检查结论

发现安全风险

已检查文件
6
发现的风险
3
会不会运行危险命令?检查是否下载程序后直接运行、让他人远程控制电脑,或藏起要运行的命令。发现 1 项风险
中风险

建议通过未指定的 CLI 命令打开生成的 HTML

原文依据:4 处
发现了什么

Skill 指示代理尽可能运行命令打开课程文件,但没有限定允许的命令、浏览器或确认流程。课程还可能包含交互式脚本和共享组件。

为什么需要注意

代理可能调用系统默认处理程序并执行生成页面中的脚本;若工作区已有被篡改的共享资产,打开页面会使其在本地浏览器环境中运行。现有证据没有表明这种滥用必然发生。

这段证据能说明什么

来源确实建议通过 CLI 打开生成的课程,并允许课程使用交互式组件;打开本地 HTML 时,其中的脚本可能运行。不过没有提供具体命令、脚本实现、外部程序参数或自动执行要求,因此无法从现有证据判断会调用不安全命令或执行恶意内容。这也是展示用户请求课程的正常操作。用户可要求仅生成文件而不自动打开,或在运行任何命令前显示完整命令并确认。

这项判断针对展示的代码和适用条件,不表示风险已经实际发生。
SKILL.md:55来自说明文档打开原文件
If possible, open the lesson file for the user by running a CLI command.
查看另外 3 个位置
SKILL.md:65来自说明文档打开原文件
Lessons are built from reusable **components**, stored in `./assets/`: stylesheets, quiz widgets, simulators, diagram helpers, and anything else a second lesson could reuse.Reuse is the default, not the exception. Before authoring a lesson, read `./assets/` and build from the components already there. When a lesson needs something new and reusable, write it as a component in `./assets/` and link to it; never inline code a future lesson would duplicate.
SKILL.md:103来自说明文档打开原文件
For skill acquisition, difficulty is the tool. Effortful retrieval is what builds storage strength. Skills should be taught through interactive lessons. There are several tools at your disposal:- Interactive lessons, using quizzes and light in-browser tasks- Lessons which guide the user through a list of real-world steps to take (for instance, yoga poses)
SKILL.md:105来自说明文档打开原文件
- Interactive lessons, using quizzes and light in-browser tasks- Lessons which guide the user through a list of real-world steps to take (for instance, yoga poses)
会不会泄露文件和密钥?检查是否发送含密码或密钥的文件,以及代码里是否直接写了密钥。发现 1 项风险
中风险

会把用户目标、偏好、能力和误解长期记录到工作区

原文依据:7 处
发现了什么

Skill 明确要求记录用户的现实目标、限制、教学偏好、既有知识、理解证据和曾有的误解。这些信息可能涉及工作、健康、预算或个人处境,并会保存在普通 Markdown 文件中。

为什么需要注意

若工作区被提交到版本库、同步到云端或与他人共享,这些个人画像和学习历史可能被无意披露。旧记录即使被取代也不会删除。

该 Skill 会把用户的教学偏好、现实目标、限制、既有知识、理解证据和被纠正的误解持久写入普通工作区文件。这些字段可能包含预算、工作、健康或其他个人信息,而来源没有规定敏感信息最小化、保存期限或访问控制。风险取决于用户披露的内容以及工作区是否会同步或共享;证据不表明数据会自动上传。用户可要求只记录必要信息、排除敏感细节并说明文件保存位置。

SKILL.md:20来自说明文档打开原文件
- `./assets/*`: Reusable **components** shared across lessons. See [Assets](#assets).- `NOTES.md`: A scratchpad for you to jot down user preferences, or working notes.
查看另外 6 个位置
MISSION-FORMAT.md:10来自说明文档打开原文件
## Why{1-3 sentences. The concrete real-world goal the user is chasing. What changes in their life or work when they have this skill? Avoid abstract framings like "to understand X"; push for the underlying outcome.}## Success looks like- {A specific, observable thing the user will be able to do}- {Another specific thing}- {…}## Constraints- {Time, budget, prior commitments, learning preferences, anything that bounds the approach}
LEARNING-RECORD-FORMAT.md:33来自说明文档打开原文件
1. **The user demonstrated genuine understanding of something non-trivial**: not just exposure, but evidence they can use the concept correctly. This sets a new floor for what to teach next.2. **The user disclosed prior knowledge**: "I already know X." Record it so future sessions don't re-teach it. Also record the _depth_ claimed.3. **A misconception was corrected**: the user previously believed something wrong and now sees why. These are high-value: they predict future stumbling blocks for related topics.4. **The mission shifted in response to learning**: the user discovered they cared about something different than they thought. Cross-link to [[MISSION.md]] and update it.
LEARNING-RECORD-FORMAT.md:46来自说明文档打开原文件
When a later record contradicts an earlier one (the user's understanding deepened or corrected), mark the old record `Status: superseded by LR-NNNN` rather than deleting it. The history of how understanding evolved is itself useful signal.
SKILL.md:140来自说明文档打开原文件
The user will sometimes express preferences of how they want to be taught, or things you should keep in mind. This is the place to record those preferences, so you can refer back to them when designing lessons or working with the user.
MISSION-FORMAT.md:11来自说明文档打开原文件
## Why{1-3 sentences. The concrete real-world goal the user is chasing. What changes in their life or work when they have this skill? Avoid abstract framings like "to understand X"; push for the underlying outcome.}
MISSION-FORMAT.md:19来自说明文档打开原文件
## Constraints- {Time, budget, prior commitments, learning preferences, anything that bounds the approach}
会不会删除文件或一直在后台运行?检查是否大范围删除文件、改写磁盘,或设置自动启动。发现 1 项风险
中风险

会在当前目录中持续创建和修改多类文件

原文依据:6 处
发现了什么

Skill 将“当前目录”直接认定为教学工作区,并要求生成固定名称的根目录文件、目录、HTML、样式和学习记录。它没有要求先确认目录专用于教学,也没有规定遇到同名文件时停止或备份。

为什么需要注意

如果在已有项目或包含同名文件的目录中调用,可能混入大量教学文件,或修改现有的 MISSION.md、RESOURCES.md、NOTES.md 和共享资产。

该 Skill 明确把当前目录当作教学工作区,并要求在其中持续保存课程、记录和共享组件。若用户从已有项目目录调用,它可能新建或更新多个固定路径;来源没有说明写入前确认目录、备份同名文件或避免覆盖。因此存在影响用户现有文件的合理风险,但证据不表明已经发生覆盖。用户可要求作者限定专用子目录,并在修改已有文件前确认。

SKILL.md:12来自说明文档打开原文件
Treat the current directory as a teaching workspace. The state of their learning is captured in this directory in several files:
查看另外 5 个位置
SKILL.md:49来自说明文档打开原文件
A lesson is the main thing you produce: the unit in which knowledge and skills reach the user. Each lesson is one self-contained HTML file, saved to `./lessons/` and titled `0001-<dash-case-name>.html` where the number increments each time.
SKILL.md:65来自说明文档打开原文件
Lessons are built from reusable **components**, stored in `./assets/`: stylesheets, quiz widgets, simulators, diagram helpers, and anything else a second lesson could reuse.Reuse is the default, not the exception. Before authoring a lesson, read `./assets/` and build from the components already there. When a lesson needs something new and reusable, write it as a component in `./assets/` and link to it; never inline code a future lesson would duplicate.A shared stylesheet is the first component every workspace earns: every lesson links it, so the lessons look like one consistent course rather than a pile of one-offs. As the workspace grows, so should the component library.
MISSION-FORMAT.md:30来自说明文档打开原文件
- **Push back on vagueness.** If the user cannot articulate why, interview them before writing anything. A bad mission is worse than no mission.- **Revise when reality shifts.** Missions change. When the user's goal moves, update this file: don't leave a stale mission steering future sessions.- **Keep it short.** If `MISSION.md` runs past a screen, it has stopped being a compass and started being a plan.
SKILL.md:67来自说明文档打开原文件
Reuse is the default, not the exception. Before authoring a lesson, read `./assets/` and build from the components already there. When a lesson needs something new and reusable, write it as a component in `./assets/` and link to it; never inline code a future lesson would duplicate.
SKILL.md:79来自说明文档打开原文件
Missions may change as the user develops more skills and knowledge. This is normal - make sure to update the `MISSION.md` and add a learning record to capture the change. Confirm with the user before changing the mission.
会不会绕过安全保护?检查是否跳过网站安全验证、开放过多文件权限,或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容?检查工作说明是否要求 AI 忽略你的指令、干扰检查结果,或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方?检查是否强制替换推广链接或收款对象,同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

8 个说明模块

该 Skill 把当前目录作为长期教学工作区,并在其中维护任务、资源、笔记、课程、参考资料和学习记录。

查看原文
SKILL.md:12来自说明文档打开原文件
Treat the current directory as a teaching workspace. The state of their learning is captured in this directory in several files:
SKILL.md:14来自说明文档打开原文件
- `MISSION.md`: A document capturing the _reason_ the user is interested in the topic. This should be used to ground all teaching. Use the format in [MISSION-FORMAT.md](./MISSION-FORMAT.md).- `./reference/*.html`: A directory of reference materials. These are the compressed learnings from the lessons - cheat sheets, reference algorithms, syntax, yoga poses, glossaries. They are the raw units of learning. They should be beautiful documents which print out well, and are designed for quick reference.- `RESOURCES.md`: A list of resources which can be explored to ground your teaching in contextual knowledge, or to acquire knowledge and wisdom. Use the format in [RESOURCES-FORMAT.md](./RESOURCES-FORMAT.md).- `./learning-records/*.md`: A directory of learning records, which capture what the user has learned. These are loosely equivalent to architectural decision records in software development - they capture non-obvious lessons and key insights that may need to be revised later, or drive future sessions. These should be used to calculate the zone of proximal development. They are titled `0001-<dash-case-name>.md`, where the number increments each time. Use the format in [LEARNING-RECORD-FORMAT.md](./LEARNING-RECORD-FORMAT.md).- `./lessons/*.html`: A directory of lessons. A **lesson** is a single, self-contained HTML output that teaches one tightly-scoped thing tied to the mission. This is the primary unit of teaching in this workspace.- `./assets/*`: Reusable **components** shared across lessons. See [Assets](#assets).- `NOTES.md`: A scratchpad for you to jot down user preferences, or working notes.

课程以自包含 HTML 文件生成,并可包含浏览器内测验、任务以及指向外部资料的链接。

查看原文
SKILL.md:49来自说明文档打开原文件
A lesson is the main thing you produce: the unit in which knowledge and skills reach the user. Each lesson is one self-contained HTML file, saved to `./lessons/` and titled `0001-<dash-case-name>.html` where the number increments each time.
SKILL.md:59来自说明文档打开原文件
Each lesson should recommend a primary source for the user to read or watch. This should be the most high-quality, high-trust resource you found on the topic.
SKILL.md:103来自说明文档打开原文件
For skill acquisition, difficulty is the tool. Effortful retrieval is what builds storage strength. Skills should be taught through interactive lessons. There are several tools at your disposal:- Interactive lessons, using quizzes and light in-browser tasks- Lessons which guide the user through a list of real-world steps to take (for instance, yoga poses)

该 Skill 要求在用户确认前不得更改学习任务,但会根据用户表现持续增加或更新学习记录。

查看原文
SKILL.md:79来自说明文档打开原文件
Missions may change as the user develops more skills and knowledge. This is normal - make sure to update the `MISSION.md` and add a learning record to capture the change. Confirm with the user before changing the mission.
LEARNING-RECORD-FORMAT.md:31来自说明文档打开原文件
Write one when any of these is true:1. **The user demonstrated genuine understanding of something non-trivial**: not just exposure, but evidence they can use the concept correctly. This sets a new floor for what to teach next.2. **The user disclosed prior knowledge**: "I already know X." Record it so future sessions don't re-teach it. Also record the _depth_ claimed.3. **A misconception was corrected**: the user previously believed something wrong and now sees why. These are high-value: they predict future stumbling blocks for related topics.4. **The mission shifted in response to learning**: the user discovered they cared about something different than they thought. Cross-link to [[MISSION.md]] and update it.
从这里开始 · 工作说明SKILL.md
teach
连线表示工作说明包含的模块,不是实际运行顺序。点击模块可查看原文。 另有 3 个章节,可在原文件中查看。

文件引用关系图

4 处引用
哪些文件发起引用引用了什么
连线表示真实的文件引用,不是运行顺序。点击节点可高亮相关连线,并查看具体文件和原文位置。虚线表示还有文件需要定位。
文件与检查记录6 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围;纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • LEARNING-RECORD-FORMAT.md已纳入全文
  • MISSION-FORMAT.md已纳入全文
  • RESOURCES-FORMAT.md已纳入全文
  • agents/openai.yaml已纳入全文
  • GLOSSARY-FORMAT.md已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件,没有实际运行 Skill,也没有检查它另外安装的软件包。因此,这不是“保证安全”的承诺;换了版本或使用环境,结果也可能不同。

  • GLOSSARY-FORMAT.md配套文件
  • LEARNING-RECORD-FORMAT.md配套文件
  • MISSION-FORMAT.md配套文件
  • RESOURCES-FORMAT.md配套文件
  • SKILL.md工作说明
  • agents/openai.yaml配套文件

代码和说明中提到的操作

连接外部网站
RESOURCES-FORMAT.md:12来自说明文档打开原文件
- [Book: _The Science and Practice of Strength Training_ by Zatsiorsky & Kraemer](https://example.com)  Foundational text on programming and adaptation. Use for: anything to do with periodisation, recovery, intensity zones.
RESOURCES-FORMAT.md:14来自说明文档打开原文件
  Foundational text on programming and adaptation. Use for: anything to do with periodisation, recovery, intensity zones.- [Article: "How Much Should I Train?" by Greg Nuckols (Stronger By Science)](https://example.com)  Evidence-based review of volume landmarks. Use for: weekly set targets per muscle group.
RESOURCES-FORMAT.md:19来自说明文档打开原文件
- [r/weightroom](https://reddit.com/r/weightroom)  High-signal subreddit, moderated against bro-science. Use for: programme critique, plateau troubleshooting.
读取了多少行
295
文件校验值(用于核对版本)
1d19c159fb73bcd1cf47da7ad129f42c3c629f327f82437f23e065672e99f204