技能可以访问你的文件、运行命令并读取环境变量，这使得安全性评估变得尤为重要。,在使用或开发 SKILL.md 技能时，务必仔细检查权限和潜在风险。,通过遵循最佳实践，你可以编写既强大又安全的技能，保护你的数据和环境。
TL;DRQuick answer
技能可以读取你的文件、运行命令并访问环境变量。这里介绍如何评估技能的安全性以及如何自己编写安全的技能。
Evidence & editorial standards
- Author: Shahrukh — Creator of PromptSpace, AI researcher & prompt engineer since 2024. 159+ articles published.
- Methodology: Claims are based on hands-on testing with live AI models, publicly available benchmarks, and official model documentation.
- Last reviewed: by our editorial team.
- Corrections: Spotted an error? Email [email protected] — we credit reporters.
- Disclosure: PromptSpace publishes original, non-sponsored content. Tools linked are ones we build or personally use.