[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6H24TSY2X2WE5KXGGR7XVZ9":3,"skill-same:01M6H24TSY2X2WE5KXGGR7XVZ9":94},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":52,"linkOnly":53,"markdownContent":54,"markdownBody":55,"frontMatter":56,"refName":57,"commitSha":58,"skillDirectory":59,"forksCount":60,"repositoryHtmlUrl":61,"repositoryHomepageUrl":6,"ownerHtmlUrl":62,"ownerBlogUrl":63,"ownerDescription":64,"updatedAt":65,"install":66,"resources":79},"01M6H24TSY2X2WE5KXGGR7XVZ9","aeon-skill-security-scan",null,"Audit installed Bankr skills before you run them — scan SKILL.md and companion scripts for\nshell injection, secret exfiltration, path traversal, prompt-override payloads, destructive\ncommands, and 2026-era obfuscation (zero-width Unicode, bidi override, base64-decode pipes,\nwebhook SSRF hosts). Designed to integrate with Bankr Safety Scores. Silent on no-op runs;\nsurfaces only NEW or RESOLVED findings vs prior scans.\nTriggers: \"audit this skill\", \"is this skill safe to install\", \"security scan my skills\",\n\"check skill X for injection\".","jiayaoqijia\u002Fcryptoskill","jiayaoqijia","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1453879?v=4","01M6GMYTX7Q7S504VC6E756ENR","YQ","01M6GMYV1QKJ1CC75MTTGT9PR0",81,"AGPL-3.0","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-aeon-skill-security-scan\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"security scan","skill security","aeon","aeon skill security scan","scan","security","bankr","new","2026","decode","for","hosts","you","with","Unicode","scripts","webhook","triggers","path traversal","only","payloads","check","prompt","base64","ZeRO","exfiltration","audit","run","2026-11-10 10:12:30",false,"---\nname: aeon-skill-security-scan\ndescription: |\n  Audit installed Bankr skills before you run them — scan SKILL.md and companion scripts for\n  shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive\n  commands, and 2026-era obfuscation (zero-width Unicode, bidi override, base64-decode pipes,\n  webhook SSRF hosts). Designed to integrate with Bankr Safety Scores. Silent on no-op runs;\n  surfaces only NEW or RESOLVED findings vs prior scans.\n  Triggers: \"audit this skill\", \"is this skill safe to install\", \"security scan my skills\",\n  \"check skill X for injection\".\n---\n\n# aeon-skill-security-scan\n\nSkills tell agents what to do. A malicious or sloppy skill can shell-inject, exfiltrate secrets, override instructions, or run destructive commands. This skill scans every installed SKILL.md and companion script and surfaces the risks before they execute.\n\n## Scope\n\n- `\u003Cskills-dir>\u002F*\u002FSKILL.md` — primary.\n- `\u003Cskills-dir>\u002F*\u002Fscripts\u002F*.sh` and `*.py` — companion scripts.\n- `\u003Cskills-dir>\u002F*\u002Freferences\u002F*` — documents loaded at runtime.\n\nDefault `\u003Cskills-dir>` is the current working directory.\n\n## Threat patterns\n\n| Category | What it looks like |\n|---|---|\n| Shell injection | Unquoted variable expansion, `eval`, backticks, `$(...)` with user data. |\n| Secret exfiltration | Env vars or file contents piped to outbound HTTP. |\n| Path traversal | `..\u002F..` chains, absolute paths reaching outside the skill dir. |\n| Prompt override | \"Ignore previous instructions\", persona swaps, instructions inside fetched content. |\n| Destructive commands | Recursive deletes rooted at `\u002F` or `~`, device writes. |\n| Obfuscation | U+200B \u002F U+FEFF \u002F U+202E (Trojan Source), base64-decode-into-shell, SSRF hosts (ngrok, interact.sh, webhook.site, pipedream). |\n\n## Processing\n\n1. Pattern scanner produces matches `{file, line, pattern, severity}`.\n2. Code-fence downgrade — matches inside fenced code blocks drop one tier. Real `run:` blocks are never downgraded.\n3. Baseline suppression — drop (file, pattern, line) tuples in `scan-baseline.yml`.\n4. Trusted-publisher filter — entries in `trusted-publishers.txt` get format-only validation. Opt-in only.\n5. Delta vs `scan-state.json` — fingerprint by `sha256(file + line_content + pattern)`. Classify NEW \u002F RESOLVED \u002F PERSISTENT.\n\n## Per-finding remediation\n\n| Pattern | Fix |\n|---|---|\n| `eval` \u002F backticks \u002F `$(...)` with variable | Quote the variable; replace `eval` with a function. |\n| `curl` with secret in URL | Move secret into prefetch script; never interpolate into shell. |\n| Path traversal | Allow-list validation; reject absolute paths. |\n| Prompt override phrasing | Documentation → baseline suppression; payload → delete the skill. |\n| Recursive delete rooted at `\u002F` or `~` | Scope to the skill's own working directory. |\n| Obfuscation | Delete unless documented and reviewed. |\n\n## Output\n\nVerdict `CLEAN` \u002F `ATTENTION` \u002F `DEGRADED`. Needs-attention section per NEW HIGH with one-line remediation. Resolved-since-last-scan section. Per-skill PASS \u002F WARN \u002F FAIL.\n\nWritten only when NEW, RESOLVED, or any current HIGH findings.\n\n## Rules\n\n- Never auto-deletes a baseline suppression.\n- Never edits the pattern library from inside the skill.\n- Never notifies on a pure no-op week.\n- Read-only scanning.\n","# aeon-skill-security-scan\n\nSkills tell agents what to do. A malicious or sloppy skill can shell-inject, exfiltrate secrets, override instructions, or run destructive commands. This skill scans every installed SKILL.md and companion script and surfaces the risks before they execute.\n\n## Scope\n\n- `\u003Cskills-dir>\u002F*\u002FSKILL.md` — primary.\n- `\u003Cskills-dir>\u002F*\u002Fscripts\u002F*.sh` and `*.py` — companion scripts.\n- `\u003Cskills-dir>\u002F*\u002Freferences\u002F*` — documents loaded at runtime.\n\nDefault `\u003Cskills-dir>` is the current working directory.\n\n## Threat patterns\n\n| Category | What it looks like |\n|---|---|\n| Shell injection | Unquoted variable expansion, `eval`, backticks, `$(...)` with user data. |\n| Secret exfiltration | Env vars or file contents piped to outbound HTTP. |\n| Path traversal | `..\u002F..` chains, absolute paths reaching outside the skill dir. |\n| Prompt override | \"Ignore previous instructions\", persona swaps, instructions inside fetched content. |\n| Destructive commands | Recursive deletes rooted at `\u002F` or `~`, device writes. |\n| Obfuscation | U+200B \u002F U+FEFF \u002F U+202E (Trojan Source), base64-decode-into-shell, SSRF hosts (ngrok, interact.sh, webhook.site, pipedream). |\n\n## Processing\n\n1. Pattern scanner produces matches `{file, line, pattern, severity}`.\n2. Code-fence downgrade — matches inside fenced code blocks drop one tier. Real `run:` blocks are never downgraded.\n3. Baseline suppression — drop (file, pattern, line) tuples in `scan-baseline.yml`.\n4. Trusted-publisher filter — entries in `trusted-publishers.txt` get format-only validation. Opt-in only.\n5. Delta vs `scan-state.json` — fingerprint by `sha256(file + line_content + pattern)`. Classify NEW \u002F RESOLVED \u002F PERSISTENT.\n\n## Per-finding remediation\n\n| Pattern | Fix |\n|---|---|\n| `eval` \u002F backticks \u002F `$(...)` with variable | Quote the variable; replace `eval` with a function. |\n| `curl` with secret in URL | Move secret into prefetch script; never interpolate into shell. |\n| Path traversal | Allow-list validation; reject absolute paths. |\n| Prompt override phrasing | Documentation → baseline suppression; payload → delete the skill. |\n| Recursive delete rooted at `\u002F` or `~` | Scope to the skill's own working directory. |\n| Obfuscation | Delete unless documented and reviewed. |\n\n## Output\n\nVerdict `CLEAN` \u002F `ATTENTION` \u002F `DEGRADED`. Needs-attention section per NEW HIGH with one-line remediation. Resolved-since-last-scan section. Per-skill PASS \u002F WARN \u002F FAIL.\n\nWritten only when NEW, RESOLVED, or any current HIGH findings.\n\n## Rules\n\n- Never auto-deletes a baseline suppression.\n- Never edits the pattern library from inside the skill.\n- Never notifies on a pure no-op week.\n- Read-only scanning.\n",{"name":5,"description":7},"main","3df1d0d67b30ff15236561f8c0f9f06d33f42dfd","skills\u002Ftrading\u002Fbankrbot-official-aeon-skill-security-scan",17,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia","https:\u002F\u002Feth2030.com","Hardcore infra. Building @alt-research and applied cryptography.","2026-11-14 02:27:51",{"source":8,"skillName":5,"commands":67,"prompt":77,"zipAvailable":78},[68,71,74],{"tool":69,"command":70},"npx","npx skills add jiayaoqijia\u002Fcryptoskill --skill aeon-skill-security-scan",{"tool":72,"command":73},"bunx","bunx skills add jiayaoqijia\u002Fcryptoskill --skill aeon-skill-security-scan",{"tool":75,"command":76},"pnpm","pnpm dlx skills add jiayaoqijia\u002Fcryptoskill --skill aeon-skill-security-scan","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-aeon-skill-security-scan\u002FSKILL.md",true,[80,86,90],{"path":81,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":84,"sourceHtmlUrl":85},"catalog.json","REFERENCE","参考文档",958,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-aeon-skill-security-scan\u002Fcatalog.json",{"path":87,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":88,"sourceHtmlUrl":89},"SOURCE.md",334,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-aeon-skill-security-scan\u002FSOURCE.md",{"path":91,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":92,"sourceHtmlUrl":93},"TRUST.auto.yaml",2196,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-aeon-skill-security-scan\u002FTRUST.auto.yaml",[95,124,146,164,177,187],{"skillNo":96,"name":97,"nameZh":6,"description":98,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":99,"licenseFileUrl":100,"sourceHtmlUrl":101,"categories":102,"keywords":103,"publishedAt":52},"01M712C436EQYE43342Q4E7GG1","recipe-performance","Diagnose a specific MetaMask user flow's real-app performance and Sentry critical-user-flow telemetry with deterministic mm-harness recipes. Use for CUF boundaries, cold\u002Fwarm\u002Fbackground-resume behavior, latency regressions, lifecycle tags, duplicate or blocking network requests, long tasks, layout\u002Fpaint cost, screen redraws, React rerenders, or browser trace analysis where tests alone cannot prove the real app.","MIT","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fwallets\u002Fmetamask-official-recipe-performance\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fwallets\u002Fmetamask-official-recipe-performance\u002FSKILL.md",[],[104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123],"performance","recipe performance","recipe","mm","sentry","harness","app","deterministic","recipes","flow","cold","critical","analysis","tasks","react","browser","layout","screen","network","metamask",{"skillNo":125,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":128,"licenseFileUrl":129,"sourceHtmlUrl":130,"categories":131,"keywords":132,"publishedAt":52},"01M70XT2F8A5CQZ81JBP98KSW3","mexc-spot-websocket","MEXC Spot WebSocket workflows for public streams, protobuf handling, depth maintenance, listen keys, and private streams without exposing API keys.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-websocket\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-websocket\u002FSKILL.md",[],[133,134,135,136,137,138,139,140,141,142,34,143,144,145],"mexc spot websocket","spot","websocket","api","workflows","public","listen","streams","depth","keys","api keys","maintenance","protobuf",{"skillNo":147,"name":148,"nameZh":6,"description":149,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":128,"licenseFileUrl":150,"sourceHtmlUrl":151,"categories":152,"keywords":153,"publishedAt":52},"01M70XT0MBXN3WZY1BKN0CPNKR","mexc-spot-rest","MEXC Spot REST workflows for public data, signed account requests, orders, wallet\u002Fadmin actions, and secure signing without exposing API keys.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-rest\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-rest\u002FSKILL.md",[],[154,134,155,156,157,158,159,143,34,142,160,161,162,138,163,137,136],"mexc spot rest","REST","admin","signing","Wallet","requests","actions","secure","data","orders",{"skillNo":165,"name":166,"nameZh":6,"description":167,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":128,"licenseFileUrl":168,"sourceHtmlUrl":169,"categories":170,"keywords":171,"publishedAt":52},"01M70XSYSVZ2N0N91XCAR2CAK0","mexc-futures-websocket","MEXC Futures WebSocket workflows for public streams, private account\u002Forder\u002Fposition streams, ping\u002Fpong, subscriptions, and depth maintenance.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-futures-websocket\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-futures-websocket\u002FSKILL.md",[],[172,173,135,174,175,144,34,176,141,140,138,137],"mexc futures websocket","futures","position","ping","subscriptions",{"skillNo":178,"name":179,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":99,"licenseFileUrl":180,"sourceHtmlUrl":181,"categories":182,"keywords":183,"publishedAt":52},"01M6H0ZWHVE5W04WG2DKQE2SQC","0xklen-version-and-refresh-sanctions-lists","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-version-and-refresh-sanctions-lists\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-version-and-refresh-sanctions-lists\u002FSKILL.md",[],[184,185,186],"refresh","0xklen version and refresh sanctions lists","version",{"skillNo":188,"name":189,"nameZh":6,"description":190,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":99,"licenseFileUrl":191,"sourceHtmlUrl":192,"categories":193,"keywords":194,"publishedAt":52},"01M6H0Z28Q3R8J0S799GJQWXM3","verify-tests-cover-changed-lines","Use when a PR adds code that the existing suite may not exercise. Measures patch coverage — the share of newly changed lines hit by tests — before approving.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-verify-tests-cover-changed-lines\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-verify-tests-cover-changed-lines\u002FSKILL.md",[],[195,196,197,198,199,200,201,202,203,204,205],"tests","cover","verify tests cover changed lines","verify","coverage","pr","exercise","use","patch","code","share"]