Unverified50% confidenceTradeoffExact time
组合多个各自安全的技能模块可能产生意料之外的安全缺口，例如文件读取技能与网络通信技能结合可被利用实现数据外泄
1
Sources
50%
Confidence
Long-term
Relevance
8/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.78% similarUnverifiedUsing Skill files packaged by others carries security risks and may introduce malicious instructions.77% similarVerifiedCybersecurity capabilities have a dual-use nature: they can be used to automate vulnerability discovery and harden system security, but they may also enable people without technical backgrounds to launch sophisticated attacks (democratization of attack).72% similarUnverifiedCybersecurity capability can be seen as a byproduct of strong coding ability; models that can understand complex code logic and locate bugs inherently have the potential to discover security vulnerabilities.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/787234API
curl https://kongchang.com/api/v1/knowledge/claims/787234MCP
get_claim(id=787234)