Snyk 技能安全扫描报告

扫描时间: Fri Jul 31 09:00:54 PM CST 2026 | 范围: ~/.hermes/skills/ ~/.claude/ ~/.codex/


Snyk Agent Scan v0.5.15

--dangerously-run-mcp-servers is set: starting every stdio MCP server listed in 
the scanned configs without prompting.
Tip: set --suppress-mcpserver-io=true to hide server stderr output.

[codebase-memory-mcp] level=info msg=mem.init budget_mb=930 total_ram_mb=3723
[codebase-memory-mcp] level=info msg=server.start version=0.9.0
[codebase-memory-mcp] level=info msg=watcher.start interval_ms=multi-sec
[codebase-memory-mcp] level=info msg=session.root.cwd 
path=/home/agentuser/.hermes/scripts
[codebase-memory-mcp] level=info msg=autoindex.skip reason=disabled 
hint=run:_codebase-memory-mcp_config_set_auto_index_true
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=initialize status=ok duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=prompts/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/templates/list status=error duration_ms=0
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=tools/list status=ok duration_ms=0
[codebase-memory-mcp] level=info msg=server.shutdown
[codebase-memory-mcp] level=info msg=watcher.stop
[codebase-memory-mcp] level=info msg=mem.init budget_mb=930 total_ram_mb=3723
[codebase-memory-mcp] level=info msg=server.start version=0.9.0
[codebase-memory-mcp] level=info msg=watcher.start interval_ms=multi-sec
[codebase-memory-mcp] level=info msg=session.root.cwd 
path=/home/agentuser/.hermes/scripts
[codebase-memory-mcp] level=info msg=autoindex.skip reason=disabled 
hint=run:_codebase-memory-mcp_config_set_auto_index_true
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=initialize status=ok duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=prompts/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/list status=error duration_ms=0
[codebase-memory-mcp] level=warn msg=mcp.request protocol=jsonrpc 
method=resources/templates/list status=error duration_ms=0
[codebase-memory-mcp] level=info msg=mcp.request protocol=jsonrpc 
method=tools/list status=ok duration_ms=0
[codebase-memory-mcp] level=info msg=server.shutdown
[codebase-memory-mcp] level=info msg=watcher.stop
● Scanning /home/agentuser/.claude ● [X007 info]: Tried calling verification api
3 times. Could not reach analysis server. Last error: API timeout while scanning
discovered servers:  found 1 mcp server
│
└── codebase-memory-mcp
    ├── tool        index_repository           
    ├── tool        search_graph               
    ├── tool        query_graph                
    ├── tool        trace_path                 
    ├── tool        get_code_snippet           
    ├── tool        get_graph_schema           
    ├── tool        get_architecture           
    └── tool        search_code                

● Scanning /home/agentuser/.codex ● [X007 info]: Tried calling verification api 
3 times. Could not reach analysis server. Last error: API timeout while scanning
discovered servers:  found 1 mcp server and 2 skills
│
├── codebase-memory-mcp
│   ├── tool        index_repository           
│   ├── tool        search_graph               
│   ├── tool        query_graph                
│   ├── tool        trace_path                 
│   ├── tool        get_code_snippet           
│   ├── tool        get_graph_schema           
│   ├── tool        get_architecture           
│   └── tool        search_code                
├── find-skill-skillhub
│   ├── instruction SKILL.md                             
│   ├── instruction references/office-efficiency.md      
│   ├── instruction references/professional.md           
│   ├── instruction references/life-service.md           
│   ├── instruction references/api.md                    
│   ├── instruction references/education.md              
│   ├── instruction references/knowledge-management.md   
│   ├── instruction references/design-media.md           
│   ├── instruction references/ai-agent.md               
│   ├── instruction references/categories.md             
│   ├── instruction references/data-analysis.md          
│   ├── instruction references/business-ops.md           
│   ├── instruction references/content-creation.md       
│   ├── instruction references/dev-programming.md        
│   ├── instruction references/it-ops-security.md        
│   └── asset       _meta.json                           
└── agent-reach
    ├── instruction SKILL.md                             
    ├── instruction references/xiaohongshu-login.md      
    ├── instruction references/channel-setup.md          
    ├── instruction references/video.md                  
    ├── instruction references/complementary-tools.md    
    ├── instruction references/web.md                    
    ├── instruction references/dev.md                    
    ├── instruction references/social.md                 
    ├── instruction references/career.md                 
    ├── instruction references/twitter-xurl.md           
    ├── instruction references/xiaohongshu-login-issue.md  
    └── instruction references/search.md                 
CI (--ci): exiting with code 1 (issue codes: X007).

扫描完成 — 发现问题(见上方详情)