The skill lacks a license and a descriptive purpose, but it does not exhibit any malicious behavior or security vulnerabilities.
npx skills add https://github.com/zy-zmc/tianming-skillSkill does not specify a license field. Specifying a license helps users understand usage terms.
Skill description is empty or too short. A clear description helps users evaluate the skill's purpose.
[](https://mondoo.com/ai-agent-security/skills/github/zy-zmc/tianming-skill)<a href="https://mondoo.com/ai-agent-security/skills/github/zy-zmc/tianming-skill"><img src="https://mondoo.com/ai-agent-security/api/badge/github/zy-zmc/tianming-skill.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/zy-zmc/tianming-skill.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.