跳转到正文
skillsafebeta
← 报告库
用途分类 / 其他用途

Investigate Without Getting Made Skill 安全审计

作者说它能做什么（原文）

>-

第三方安全检查结论

先别安装或运行

已检查文件
3
发现的风险
2
会不会运行危险命令？检查是否下载程序后直接运行、让他人远程控制电脑，或藏起要运行的命令。未发现风险
会不会泄露文件和密钥？检查是否发送含密码或密钥的文件，以及代码里是否直接写了密钥。发现 1 项风险
中风险

要求长期保存可关联调查者、虚构身份和案件活动的敏感记录

原文依据：5 处
发现了什么

运行手册要求记录每个身份标识符、创建日期、用途以及每次会话，并在身份停用后继续保留已暴露的号码或地址。虽然主指南建议使用加密存储，但这些集中记录仍会形成能够关联人员、案件、设备和行动时间的高价值资料。

为什么需要注意

如果案件目录、保险库、备份或共享报告被未授权人员取得，记录可能暴露调查目标、调查节奏、使用过的账户及组织归属，并帮助他人交叉关联原本隔离的身份。长期保留会延长泄露窗口。

手册明确要求集中保存虚构身份的标识符、创建日期、使用位置、每次会话及案件操作，并在停用后继续保留号码或地址记录。主文要求案件加密存储、按保留规则删除收集数据，这属于缓解措施；但标识符记录本身仍被保留。若存储被泄露或访问控制过宽，它可暴露案件、时间线和调查基础设施，并间接关联操作者。用户可要求作者明确加密、最小权限、审计、保留期限，以及停用后只保留不可逆指纹而非完整号码或地址。

reference/persona-runbook.md:49来自说明文档打开原文件
Every identifier gets recorded in the persona's file with its creation date andwhere it was used. An untracked persona is one you cannot safely retire.
查看另外 4 个位置
reference/persona-runbook.md:81来自说明文档打开原文件
- Let it acquire a few incidental connections organically. Do not solicit them.- Keep a log of every session, so the persona's own pattern-of-life stays  consistent when a different analyst uses it.
reference/persona-runbook.md:114来自说明文档打开原文件
Retire personas that were challenged, that touched a case that went adversarial,or that were used across cases by mistake. Retirement means: stop using it,record the retirement date and reason, keep the identifier record so a futureanalyst does not reuse a burned number or address, and delete the persona'scollected data under the case's retention rules in `write-the-intel-brief`.
SKILL.md:149来自说明文档打开原文件
One case, one environment. A dedicated VM per case is the clean answer; adedicated browser profile is the minimum. Containerised tab isolation separatescookies but not fingerprint — a convenience, not a boundary. Across setups: nopersonal accounts ever signed in; snapshot clean and roll back between cases;keep notes and downloads in the case's encrypted store; never open a target'sdocument or PDF in an environment that can reach your real identity.
reference/persona-runbook.md:99来自说明文档打开原文件
  pretext you have no authorization to make, or elicit information from people.- Log what the persona did, when, and what it saw, and archive the pages via  `read-deleted-pages` — the persona's access may not survive to be re-checked.
会不会删除文件或一直在后台运行？检查是否大范围删除文件、改写磁盘，或设置自动启动。未发现风险
会不会绕过安全保护？检查是否跳过网站安全验证、开放过多文件权限，或取消操作前的确认。发现 1 项风险
高风险

指导建立长期虚假账户并规避平台的关联和风控检测

原文依据：6 处
发现了什么

指南不仅建议使用虚构身份，还给出隔离邮箱、预付费 SIM 和支付工具、避免 Tor/数据中心出口、模拟普通用户填写资料、分散注册以及长期“养号”的具体做法。这些步骤共同降低平台识别虚假账户和关联操作者的能力，即使指南同时限制其只能观察。

为什么需要注意

照做可能违反平台真实身份及反滥用规则，导致账户、证据或相关账户被封禁；还可能使用户或其组织面临合同、隐私、冒充或未经授权行为方面的调查和法律责任。隐蔽性也会使目标难以识别和应对持续观察。

这是可执行的操作指南，而非示例：它指导用户为虚构身份准备隔离邮箱、预付费 SIM 和支付方式，避开容易触发验证的出口，并通过不规则登录和普通活动长期“养号”。这些措施会帮助虚假账户降低关联和风控识别，可能违反平台条款并导致封禁；文档虽要求书面授权、仅观察且不得诱导或进入封闭系统，但不能消除平台、法律和误用风险。用户可要求作者限定适用主体、强制法律审批，并禁止未经平台许可的账户创建。

reference/persona-runbook.md:42来自说明文档打开原文件
|---|---|| Environment | Build the persona from the same environment and egress it will always be used from. Creation-time IP and fingerprint are recorded and later compared. || Email | Provider that does not demand a phone number to register. One address per persona. Never a recovery address for another persona. || Phone | The hardest problem. Free online SMS-receive numbers are shared, are already registered on major platforms, and are widely blocklisted. VoIP numbers are frequently rejected. A dedicated prepaid SIM in a device that has never held your real SIM or contacts is the reliable option — and never your real number, not once, not "just to get through verification". || Payment | Only where unavoidable. Prepaid instrument, never a personal card, never a card shared between personas. || Avatar | Do not use a real person's photo — that is impersonation and it harms an uninvolved person. Synthetic faces avoid reverse-image hits but carry generator artefacts (fixed eye placement, distorted backgrounds, mangled jewellery and teeth) and are increasingly detected. Where the platform permits it, a non-face image is safer and less interesting to everyone. Whatever you choose, reverse-search it first with `find-the-original-image`, and strip its metadata with `secrets-in-file-metadata`. || Password | Unique, generated, stored in the case's vault. Reuse across personas clusters them the moment any one appears in a dump. |
查看另外 5 个位置
reference/persona-runbook.md:54来自说明文档打开原文件
- Register from the persona's normal egress. Registering over Tor or a flagged  datacentre range invites immediate verification.- Complete the profile the way a real, slightly lazy user would: some fields  filled, some blank. Fully populated profiles look manufactured.- Set locale, language, and timezone to match the legend.- Turn off contact syncing and contact upload. Never grant contacts access.- Where the platform offers visibility controls, restrict the persona's own  profile — a persona with a bare public profile draws less scrutiny than one  that appears to be nothing at all.- Do not create several personas in one session from one address. Platforms  cluster on registration-time signals, and one ban then takes the whole batch.
reference/persona-runbook.md:68来自说明文档打开原文件
A persona becomes usable through unremarkable activity over time, not throughvolume. There is no minimum-days rule worth trusting — what matters is that theaccount has a history that predates its purpose, and that the history looks likea person's.- Log in irregularly, in the persona's claimed waking hours, from the same  egress and device fingerprint.- Follow mainstream, high-follower accounts consistent with the legend, then  gradually narrower ones. Following only accounts relevant to your case is the  clearest possible signal of purpose.- Accumulate a small amount of low-risk activity: saved posts, joined public  groups, an occasional innocuous reaction.- Let it acquire a few incidental connections organically. Do not solicit them.- Keep a log of every session, so the persona's own pattern-of-life stays
SKILL.md:243来自说明文档打开原文件
Say this plainly: **fake accounts violate most platforms' terms of service.**Accurate-information requirements are near-universal, the accounts get banned,and the ban can take your collection with it. Terms breach is generally acontract matter rather than a crime, but the boundary between breaching termsand unauthorized access is jurisdiction-specific and has been litigated bothways. Decide with counsel whether your mandate covers it, and record it.
reference/persona-runbook.md:73来自说明文档打开原文件
- Log in irregularly, in the persona's claimed waking hours, from the same  egress and device fingerprint.- Follow mainstream, high-follower accounts consistent with the legend, then  gradually narrower ones. Following only accounts relevant to your case is the  clearest possible signal of purpose.- Accumulate a small amount of low-risk activity: saved posts, joined public  groups, an occasional innocuous reaction.- Let it acquire a few incidental connections organically. Do not solicit them.- Keep a log of every session, so the persona's own pattern-of-life stays  consistent when a different analyst uses it.Maintain a small stable of aged personas across the platforms you routinelywork. This is a standing cost, not per-case work.
reference/persona-runbook.md:93来自说明文档打开原文件
  *change*.- Observe only. No messages, no follows of the target, no comments, no reactions  on target content. Reactions are notifications.- Before viewing anything the target controls, run the pre-action check in the  attribution-surface reference.- Never use a persona to access closed systems, request access on a false  pretext you have no authorization to make, or elicit information from people.- Log what the persona did, when, and what it saw, and archive the pages via
会不会误导 AI 或隐藏内容？检查工作说明是否要求 AI 忽略你的指令、干扰检查结果，或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方？检查是否强制替换推广链接或收款对象，同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

8 个说明模块

这是一个操作指南型 Skill；它指导调查者评估目标可能看到的 IP、浏览器指纹、登录身份和访问时间，并按风险选择隔离环境与网络出口。所给文件中没有可执行脚本或安装步骤。

查看原文
SKILL.md:29来自说明文档打开原文件
1. **Who might notice?** A dormant shell company, a moderately technical   individual, a criminal group running monitored infrastructure, or a state   service. Their capability sets the bar.2. **What would they see?** Passive collection: a line in a server log. A   logged-in visit: your name. An interaction: your persona and its history.3. **What is the consequence?** Nothing, or evidence destroyed and accounts gone   dark, or the investigation attributed to your organisation and disclosed, or   physical risk to you or a source.
SKILL.md:41来自说明文档打开原文件
| Registries, archives, CT logs, court records | Normal browser, no persona. You are one of thousands. || Viewing a target's public website | Clean browser profile, commercial VPN, no logged-in sessions. || Any logged-in platform view of a target | Persona account, dedicated profile, and check the platform's viewer-notification behaviour first. || Target operates monitored infrastructure or is technically capable | Dedicated VM, non-datacentre egress, no reused fingerprint, timing discipline. || Organised crime, harassment risk, physical safety in play | Everything above plus compartmented hardware, and a colleague who knows what you're doing. |

指南明确要求将虚构身份限制为观察用途，禁止诱导他人、未经授权进入封闭系统，以及使用泄露凭据登录目标系统。这些是书面限制，但无法技术性阻止使用者越界。

查看原文
SKILL.md:118来自说明文档打开原文件
Hard limit, regardless of mandate: personas are for **observation** — not foreliciting private information, inducing anyone to act, or gaining entry toclosed systems or groups on a false pretext you have no authorization to make.
SKILL.md:160来自说明文档打开原文件
**Never authenticate to anything belonging to the target.** Not their portal,not their wifi, not a login with credentials found in breach data, not a"forgot password" flow to confirm an account exists. That is the line betweenopen-source research and unauthorized access, and it does not move because thepassword was easy to find.

指南承认虚假账户通常违反平台条款，并提示冒充真实个人可能带来刑事或民事责任；因此其用途声明本身不能替代平台许可、组织授权或当地法律审查。

查看原文
SKILL.md:243来自说明文档打开原文件
Say this plainly: **fake accounts violate most platforms' terms of service.**Accurate-information requirements are near-universal, the accounts get banned,and the ban can take your collection with it. Terms breach is generally acontract matter rather than a crime, but the boundary between breaching termsand unauthorized access is jurisdiction-specific and has been litigated bothways. Decide with counsel whether your mandate covers it, and record it.
SKILL.md:250来自说明文档打开原文件
Impersonating a **real, identifiable person** is a far more serious matter thanan invented persona — a number of jurisdictions criminalise online impersonationspecifically (California Penal Code § 528.5 is one example), and it exposes youto defamation and civil claims. Impersonating a **law-enforcement officer,government official, or lawyer** is a criminal offence in its own right in manyplaces, including under US federal law, and no investigative mandate covers it.
从这里开始 · 工作说明SKILL.md
investigate-without-getting-made
连线表示工作说明包含的模块，不是实际运行顺序。点击模块可查看原文。 另有 3 个章节，可在原文件中查看。

文件引用关系图

2 处引用
哪些文件发起引用引用了什么
连线表示真实的文件引用，不是运行顺序。点击节点可高亮相关连线，并查看具体文件和原文位置。虚线表示还有文件需要定位。
文件与检查记录3 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围；纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • reference/attribution-surface.md已纳入全文
  • reference/persona-runbook.md已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件，没有实际运行 Skill，也没有检查它另外安装的软件包。因此，这不是“保证安全”的承诺；换了版本或使用环境，结果也可能不同。

  • SKILL.md工作说明
  • reference/attribution-surface.md配套文件
  • reference/persona-runbook.md配套文件

代码和说明中提到的操作

读取密钥或账号配置
SKILL.md:161来自说明文档打开原文件
**Never authenticate to anything belonging to the target.** Not their portal,not their wifi, not a login with credentials found in breach data, not a"forgot password" flow to confirm an account exists. That is the line between
读取了多少行
499
文件校验值（用于核对版本）
33cf45e2c0a9cb35af7e4eced2a6c3b1029872424ee4b691c65bf1560a83730d