Unverified50% confidenceCautionExact time
直接在宿主环境执行来自网络下载或智能体自主生成的Skill代码存在安全隐患，可能包含删除文件、访问敏感目录或发起网络攻击等危险操作
1
Sources
50%
Confidence
Long-term
Relevance
7/14/2026
First Seen
Sources
Harness架构实战：企业级Agent项目全解析
Related Claims
Unverified使用他人打包的Skill文件存在安全风险，可能引入恶意指令81% similarUnverifiedDuring installation, the Kuaima client needs to modify system network configurations and Cursor's internal files, and such behavior is easily flagged as malicious by the active defense mechanisms of security software80% similarUnverified计算机使用能力的核心安全风险包括Prompt Injection攻击和未经授权访问敏感本地数据78% similarUnverified组合多个各自安全的技能模块可能产生意料之外的安全缺口，例如文件读取技能与网络通信技能结合可被利用实现数据外泄78% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/503860API
curl https://kongchang.com/api/v1/knowledge/claims/503860MCP
get_claim(id=503860)