Snyk 技能安全扫描报告

扫描时间: Sat Jul 25 08:57:12 PM CST 2026 | 范围: ~/.hermes/skills/ ~/.claude/ ~/.codex/


Snyk Agent Scan v0.5.15

--dangerously-run-mcp-servers is set: starting every stdio MCP server listed in 
the scanned configs without prompting.
Tip: set --suppress-mcpserver-io=true to hide server stderr output.

[codebase-memory-mcp] level=info msg=mem.init budget_mb=930 total_ram_mb=3723
[codebase-memory-mcp] level=info msg=server.start version=0.9.0
[codebase-memory-mcp] level=info msg=watcher.start interval_ms=multi-sec
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=initialize status=ok duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=prompts/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/templates/list status=error duration_ms=0
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=tools/list status=ok duration_ms=0
[codebase-memory-mcp] level=info msg=server.shutdown
[codebase-memory-mcp] level=info msg=watcher.stop
[codebase-memory-mcp] level=info msg=mem.init budget_mb=930 total_ram_mb=3723
[codebase-memory-mcp] level=info msg=server.start version=0.9.0
[codebase-memory-mcp] level=info msg=watcher.start interval_ms=multi-sec
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=initialize status=ok duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=prompts/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/templates/list status=error duration_ms=0
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=tools/list status=ok duration_ms=0
[codebase-memory-mcp] level=info msg=server.shutdown
[codebase-memory-mcp] level=info msg=watcher.stop
● Scanning /home/agentuser/.claude ● [X007 info]: Tried calling verification api
3 times. Could not reach analysis server. Last error: API timeout while scanning
discovered servers:  found 2 mcp servers and 17 skills
│
├── codebase-memory-mcp
│   ├── tool        index_repository           
│   ├── tool        search_graph               
│   ├── tool        query_graph                
│   ├── tool        trace_path                 
│   ├── tool        get_code_snippet           
│   ├── tool        get_graph_schema           
│   ├── tool        get_architecture           
│   └── tool        search_code                
├── mcp-search
│   ├── tool        __IMPORTANT                
│   ├── tool        search                     
│   ├── tool        timeline                   
│   ├── tool        get_observations           
│   ├── tool        observation_add            
│   ├── tool        observation_record_event   
│   ├── tool        observation_search         
│   ├── tool        observation_context        
│   ├── tool        observation_generation_status  
│   ├── tool        memory_add                 
│   ├── tool        memory_search              
│   ├── tool        memory_context             
│   ├── tool        smart_search               
│   ├── tool        smart_unfold               
│   ├── tool        smart_outline              
│   ├── tool        build_corpus               
│   ├── tool        list_corpora               
│   ├── tool        prime_corpus               
│   ├── tool        query_corpus               
│   ├── tool        rebuild_corpus             
│   └── tool        reprime_corpus             
├── codebase-memory
│   ● [X002 info]: could not inspect skill
├── learn-codebase
│   └── instruction SKILL.md                             
├── babysit
│   └── instruction SKILL.md                             
├── timeline-report
│   └── instruction SKILL.md                             
├── version-bump
│   ├── instruction SKILL.md                             
│   └── script      scripts/generate_changelog.js        
├── standup
│   ├── instruction SKILL.md                             
│   ├── instruction agent-brief.md                       
│   └── asset       standup.mjs                          
├── how-it-works
│   ├── instruction SKILL.md                             
│   └── instruction onboarding-explainer.md              
├── wowerpoint
│   └── instruction SKILL.md                             
├── pathfinder
│   └── instruction SKILL.md                             
├── oh-my-issues
│   └── instruction SKILL.md                             
├── smart-explore
│   └── instruction SKILL.md                             
├── knowledge-agent
│   └── instruction SKILL.md                             
├── do
│   └── instruction SKILL.md                             
├── make-plan
│   └── instruction SKILL.md                             
├── mem-search
│   └── instruction SKILL.md                             
├── design-is
│   └── instruction SKILL.md                             
└── weekly-digests
    └── instruction SKILL.md                             

● Scanning /home/agentuser/.codex ● [X007 info]: Tried calling verification api 
3 times. Could not reach analysis server. Last error: API timeout while scanning
discovered servers:  found 1 mcp server and 2 skills
│
├── codebase-memory-mcp
│   ├── tool        index_repository           
│   ├── tool        search_graph               
│   ├── tool        query_graph                
│   ├── tool        trace_path                 
│   ├── tool        get_code_snippet           
│   ├── tool        get_graph_schema           
│   ├── tool        get_architecture           
│   └── tool        search_code                
├── find-skill-skillhub
│   ├── instruction SKILL.md                             
│   ├── instruction references/office-efficiency.md      
│   ├── instruction references/professional.md           
│   ├── instruction references/life-service.md           
│   ├── instruction references/api.md                    
│   ├── instruction references/education.md              
│   ├── instruction references/knowledge-management.md   
│   ├── instruction references/design-media.md           
│   ├── instruction references/ai-agent.md               
│   ├── instruction references/categories.md             
│   ├── instruction references/data-analysis.md          
│   ├── instruction references/business-ops.md           
│   ├── instruction references/content-creation.md       
│   ├── instruction references/dev-programming.md        
│   ├── instruction references/it-ops-security.md        
│   └── asset       _meta.json                           
└── agent-reach
    ├── instruction SKILL.md                             
    ├── instruction references/xiaohongshu-login.md      
    ├── instruction references/channel-setup.md          
    ├── instruction references/video.md                  
    ├── instruction references/complementary-tools.md    
    ├── instruction references/web.md                    
    ├── instruction references/dev.md                    
    ├── instruction references/social.md                 
    ├── instruction references/career.md                 
    ├── instruction references/twitter-xurl.md           
    ├── instruction references/xiaohongshu-login-issue.md  
    └── instruction references/search.md                 
CI (--ci): exiting with code 1 (issue codes: X002, X007).

扫描完成 — 发现问题(见上方详情)