{"data":{"skill":{"slug":"jadeyingwah-gpt-series-reasoning-style","name":"gpt-series-reasoning-style","icon":"📦","repo":"https://github.com/jadeyingwah/gpt-series-reasoning-style/tree/a8ee3c963ce3bd97d9e2076d54cd0f3334d45d39/","status":"approved","author":"jadeyingwah","authorVersion":"1.5.6","skillstoreRevision":4},"audit":{"id":"2ffb61c5-5713-483d-b29b-19304c66574e","skill_id":"c9fba04a-df13-40ec-8200-a01f2109b730","version":4,"content_hash":"v3:f81f2227133630e3d863194444a2b91c3ec90b19:5051659bb5e33f82c2119beb682113ec8c13ac426e79428ca9974e13697f3a77:bb476cb116c522647594da4bb26a22d1375c2250e75143ab327e174b24588c21:736b696c6c732f6a61646579696e677761682f6770742d7365726965732d726561736f6e696e672d7374796c65:2129dfd27d14507df8c6b9364937e516","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"58 个静态命中均对应文档中的安装示例、代码围栏、正则字面量或纯文本熵启发式，未发现相应的运行时攻击行为。AGENTS.md 与 SKILL.md 仍包含控制代理加载顺序和执行规则的高风险提示注入式文本，安装前应由宿主策略和用户明确同意进行约束。","remediation":[{"issue":"AGENTS.md 与 SKILL.md 使用“强制门禁”、读取禁令和“严格按其中内容执行任务”等措辞控制代理行为。","severity":"high","suggestion":"将这些文件明确标为可选的建议性工作流，并声明宿主系统策略、用户指令和沙箱规则始终优先；避免使用可改变指令层级的强制措辞。"},{"issue":"README.md 与 REFERENCE.md 建议把 AGENTS.md 放入项目入口，或创建指向它的软链。","severity":"high","suggestion":"安装时要求用户显式审查项目级指令文件，默认使用隔离的 skills 目录，并警告项目级文件可能影响代理行为。"},{"issue":"静态扫描把文档示例、代码围栏和正则中的反引号误识别为外部命令。","severity":"low","suggestion":"扫描器应区分 Markdown 代码围栏、字符串字面量和实际命令执行调用，减少文档型技能的误报。"}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"README.md","line_end":384,"line_start":384},{"file":"README.md","line_end":386,"line_start":386},{"file":"REFERENCE.md","line_end":330,"line_start":330},{"file":"REFERENCE.md","line_end":331,"line_start":331},{"file":"scripts/selfcheck.py","line_end":76,"line_start":9},{"file":"scripts/selfcheck.py","line_end":77,"line_start":76},{"file":"scripts/selfcheck.py","line_end":77,"line_start":77},{"file":"SKILL.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":20,"line_start":20}]},{"factor":"network","evidence":[{"file":"README.md","line_end":379,"line_start":379},{"file":"README.md","line_end":387,"line_start":387},{"file":"README.md","line_end":402,"line_start":402},{"file":"REFERENCE.md","line_end":326,"line_start":326},{"file":"REFERENCE.md","line_end":332,"line_start":332},{"file":"REFERENCE.md","line_end":342,"line_start":342}]},{"factor":"filesystem","evidence":[{"file":"README.md","line_end":368,"line_start":368},{"file":"README.md","line_end":369,"line_start":369},{"file":"README.md","line_end":370,"line_start":370},{"file":"README.md","line_end":371,"line_start":371},{"file":"README.md","line_end":374,"line_start":374},{"file":"README.md","line_end":380,"line_start":380},{"file":"README.md","line_end":381,"line_start":381},{"file":"README.md","line_end":368,"line_start":368},{"file":"README.md","line_end":369,"line_start":369},{"file":"README.md","line_end":370,"line_start":370},{"file":"README.md","line_end":371,"line_start":371},{"file":"README.md","line_end":374,"line_start":374},{"file":"README.md","line_end":380,"line_start":380},{"file":"README.md","line_end":381,"line_start":381},{"file":"README.md","line_end":406,"line_start":406},{"file":"REFERENCE.md","line_end":319,"line_start":319},{"file":"REFERENCE.md","line_end":320,"line_start":320},{"file":"REFERENCE.md","line_end":321,"line_start":321},{"file":"REFERENCE.md","line_end":322,"line_start":322},{"file":"REFERENCE.md","line_end":327,"line_start":327},{"file":"REFERENCE.md","line_end":319,"line_start":319},{"file":"REFERENCE.md","line_end":320,"line_start":320},{"file":"REFERENCE.md","line_end":321,"line_start":321},{"file":"REFERENCE.md","line_end":322,"line_start":322},{"file":"REFERENCE.md","line_end":327,"line_start":327},{"file":"REFERENCE.md","line_end":346,"line_start":346}]}],"critical_findings":[],"high_findings":[{"title":"Prompt Injection Attempt Detected","locations":[{"file":"AGENTS.md","line_end":20,"line_start":11},{"file":"SKILL.md","line_end":20,"line_start":19}],"confidence":0.82,"description":"AGENTS.md 要求代理按其加载顺序读取技能文件，SKILL.md 又要求“禁止读取”规则文件并“严格按其中内容执行任务”。这些文本试图控制代理的指令加载和执行顺序，项目级安装时可能与宿主策略或用户指令竞争；未发现直接数据窃取或代码执行载荷。","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"文件直接使用“强制门禁”、读取禁令和“严格按其中内容执行任务”等代理控制措辞，属于强提示注入信号；但内容未要求窃取数据或执行危险命令，因此风险判断低于确定性恶意载荷。"}],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":21,"total_lines":1653,"audit_model":"codex","audited_at":"2026-09-17T20:05:19.059+00:00","created_at":"2026-09-18T04:36:22.535144+00:00","static_findings":[{"id":"sensitive:.gitignore:2:sqlite-database-file","file":".gitignore","pattern":"SQLite database file","snippet":"Thumbs.db","category":"sensitive","line_end":2,"severity":"medium","line_start":2},{"id":"external_commands:README.md:384:powershell-invocation","file":"README.md","pattern":"PowerShell invocation","snippet":"**Windows(PowerShell)**:","category":"external_commands","line_end":384,"severity":"high","line_start":384},{"id":"external_commands:README.md:386:powershell-invocation","file":"README.md","pattern":"PowerShell invocation","snippet":"```powershell","category":"external_commands","line_end":386,"severity":"high","line_start":386},{"id":"network:README.md:379:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":379,"severity":"low","line_start":379},{"id":"network:README.md:387:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":387,"severity":"low","line_start":387},{"id":"network:README.md:402:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":402,"severity":"low","line_start":402},{"id":"filesystem:README.md:368:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":368,"severity":"high","line_start":368},{"id":"filesystem:README.md:369:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Cursor(2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":369,"severity":"high","line_start":369},{"id":"filesystem:README.md:370:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":370,"severity":"high","line_start":370},{"id":"filesystem:README.md:371:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":371,"severity":"high","line_start":371},{"id":"filesystem:README.md:374:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"> **一个位置喂两个客户端**:Cursor 会兼容加载 `.claude/skills/` 与 `~/.claude/skills/`(Codex 目录同理)。同时用 Claude Code 和 ","category":"filesystem","line_end":374,"severity":"high","line_start":374},{"id":"filesystem:README.md:380:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":380,"severity":"high","line_start":380},{"id":"filesystem:README.md:381:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"# Cursor 改目标为 ~/.cursor/skills/ ;Codex 改 ~/.codex/skills/ ;WorkBuddy 改 ~/.workbuddy/skills/","category":"filesystem","line_end":381,"severity":"high","line_start":381},{"id":"filesystem:README.md:368:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":368,"severity":"medium","line_start":368},{"id":"filesystem:README.md:369:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Cursor(2.4+) | `~/.cursor/skills/` | `.cursor/skills/` |","category":"filesystem","line_end":369,"severity":"medium","line_start":369},{"id":"filesystem:README.md:370:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":370,"severity":"medium","line_start":370},{"id":"filesystem:README.md:371:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":371,"severity":"medium","line_start":371},{"id":"filesystem:README.md:374:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"> **一个位置喂两个客户端**:Cursor 会兼容加载 `.claude/skills/` 与 `~/.claude/skills/`(Codex 目录同理)。同时用 Claude Code 和 ","category":"filesystem","line_end":374,"severity":"medium","line_start":374},{"id":"filesystem:README.md:380:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":380,"severity":"medium","line_start":380},{"id":"filesystem:README.md:381:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"# Cursor 改目标为 ~/.cursor/skills/ ;Codex 改 ~/.codex/skills/ ;WorkBuddy 改 ~/.workbuddy/skills/","category":"filesystem","line_end":381,"severity":"medium","line_start":381},{"id":"filesystem:README.md:406:symlink-creation","file":"README.md","pattern":"Symlink creation","snippet":"这不是 skill 注册,而是 agent 把 `AGENTS.md` 当项目指令、按其指路走 `SKILL.md`(门禁)→ `DISCIPLINE.md`(五阶段)→ 按需读 references","category":"filesystem","line_end":406,"severity":"high","line_start":406},{"id":"blocker:README.md:83:system-reconnaissance","file":"README.md","pattern":"System reconnaissance","snippet":"In our tests, more rules did not mean better results: turning the discipline into hard metrics broug","category":"blocker","line_end":83,"severity":"low","line_start":83},{"id":"external_commands:REFERENCE.md:330:powershell-invocation","file":"REFERENCE.md","pattern":"PowerShell invocation","snippet":"```powershell","category":"external_commands","line_end":330,"severity":"high","line_start":330},{"id":"external_commands:REFERENCE.md:331:powershell-invocation","file":"REFERENCE.md","pattern":"PowerShell invocation","snippet":"# Windows PowerShell","category":"external_commands","line_end":331,"severity":"high","line_start":331},{"id":"network:REFERENCE.md:326:hardcoded-url","file":"REFERENCE.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":326,"severity":"low","line_start":326},{"id":"network:REFERENCE.md:332:hardcoded-url","file":"REFERENCE.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":332,"severity":"low","line_start":332},{"id":"network:REFERENCE.md:342:hardcoded-url","file":"REFERENCE.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/JadeYingWah/gpt-series-reasoning-style","category":"network","line_end":342,"severity":"low","line_start":342},{"id":"filesystem:REFERENCE.md:319:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":319,"severity":"high","line_start":319},{"id":"filesystem:REFERENCE.md:320:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| Cursor(2.4+) | `~/.cursor/skills/`(也兼容读 `.claude/skills/`、`.codex/skills/`) | `.cursor/skills/` |","category":"filesystem","line_end":320,"severity":"high","line_start":320},{"id":"filesystem:REFERENCE.md:321:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":321,"severity":"high","line_start":321},{"id":"filesystem:REFERENCE.md:322:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":322,"severity":"high","line_start":322},{"id":"filesystem:REFERENCE.md:327:hidden-file-in-home-directory","file":"REFERENCE.md","pattern":"Hidden file in home directory","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":327,"severity":"high","line_start":327},{"id":"filesystem:REFERENCE.md:319:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| Claude Code | `~/.claude/skills/` | `.claude/skills/` |","category":"filesystem","line_end":319,"severity":"medium","line_start":319},{"id":"filesystem:REFERENCE.md:320:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| Cursor(2.4+) | `~/.cursor/skills/`(也兼容读 `.claude/skills/`、`.codex/skills/`) | `.cursor/skills/` |","category":"filesystem","line_end":320,"severity":"medium","line_start":320},{"id":"filesystem:REFERENCE.md:321:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| Codex CLI | `~/.codex/skills/` | `.codex/skills/`(或 `.agents/skills/`) |","category":"filesystem","line_end":321,"severity":"medium","line_start":321},{"id":"filesystem:REFERENCE.md:322:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"| WorkBuddy | `~/.workbuddy/skills/` | — |","category":"filesystem","line_end":322,"severity":"medium","line_start":322},{"id":"filesystem:REFERENCE.md:327:hidden-file-access","file":"REFERENCE.md","pattern":"Hidden file access","snippet":"mkdir -p ~/.claude/skills && cp -r gpt-series-reasoning-style ~/.claude/skills/","category":"filesystem","line_end":327,"severity":"medium","line_start":327},{"id":"filesystem:REFERENCE.md:346:symlink-creation","file":"REFERENCE.md","pattern":"Symlink creation","snippet":"客户端只读特定文件名时,在仓库根加软链指向 `AGENTS.md`(`ln -s AGENTS.md CLAUDE.md`、`ln -s AGENTS.md GEMINI.md`;Windows 用 ","category":"filesystem","line_end":346,"severity":"high","line_start":346},{"id":"external_commands:scripts/selfcheck.py:9:ruby-shell-backtick-execution","file":"scripts/selfcheck.py","pattern":"Ruby/shell backtick execution","snippet":"5. 代码块配对:``` 数量是偶数","category":"external_commands","line_end":76,"severity":"medium","line_start":9},{"id":"external_commands:scripts/selfcheck.py:76:ruby-shell-backtick-execution","file":"scripts/selfcheck.py","pattern":"Ruby/shell backtick execution","snippet":"fence_count = len(re.findall(r\"^```\", text, re.MULTILINE))","category":"external_commands","line_end":77,"severity":"medium","line_start":76},{"id":"external_commands:scripts/selfcheck.py:77:ruby-shell-backtick-execution","file":"scripts/selfcheck.py","pattern":"Ruby/shell backtick execution","snippet":"check(\"代码块配对(``` 数量为偶数)\", fence_count % 2 == 0, f\"有 {fence_count} 个 ```\")","category":"external_commands","line_end":77,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:13:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"本文件不含交付纪律。**纪律全文在 `DISCIPLINE.md`**——它只能在**你即将动手做事或回答用户的前一刻**被读取。","category":"external_commands","line_end":13,"severity":"medium","line_start":13},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 在前一刻之前,**禁止读取** `DISCIPLINE.md`,禁止凭记忆引用它的任何内容,禁止提前预览任何流程;禁止读取 `plan-rules.md` / `review-rules.md` ","category":"external_commands","line_end":19,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- 到了前一刻,读取 `DISCIPLINE.md`,然后**严格按其中内容执行任务**。","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"obfuscation:AGENTS.md:1:heuristic-high-file-entropy-6-16-bits-possible-b","file":"AGENTS.md","pattern":"[HEURISTIC] High file entropy (6.16 bits) - possible binary/encrypted content","snippet":"File: AGENTS.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:CHANGELOG.md:1:heuristic-high-file-entropy-7-78-bits-possible-b","file":"CHANGELOG.md","pattern":"[HEURISTIC] High file entropy (7.78 bits) - possible binary/encrypted content","snippet":"File: CHANGELOG.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:DISCIPLINE.md:1:heuristic-high-file-entropy-7-15-bits-possible-b","file":"DISCIPLINE.md","pattern":"[HEURISTIC] High file entropy (7.15 bits) - possible binary/encrypted content","snippet":"File: DISCIPLINE.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:docs/README.md:1:heuristic-high-file-entropy-6-09-bits-possible-b","file":"docs/README.md","pattern":"[HEURISTIC] High file entropy (6.09 bits) - possible binary/encrypted content","snippet":"File: docs/README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-91-bits-possible-b","file":"README.md","pattern":"[HEURISTIC] High file entropy (6.91 bits) - possible binary/encrypted content","snippet":"File: README.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:REFERENCE.md:46:heuristic-very-high-entropy-string-5-56-bits-lik","file":"REFERENCE.md","pattern":"[HEURISTIC] Very high entropy string (5.56 bits) - likely encoded/encrypted payload","snippet":"——独立复查（机械判定台）仍判出大量真实缺陷。**自报 ≠ 验证**，这个 gap 既是本 skill 存在的理由，也是它的天花板：它降低","category":"obfuscation","line_end":46,"severity":"high","line_start":46},{"id":"obfuscation:REFERENCE.md:1:heuristic-high-file-entropy-7-77-bits-possible-b","file":"REFERENCE.md","pattern":"[HEURISTIC] High file entropy (7.77 bits) - possible binary/encrypted content","snippet":"File: REFERENCE.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/multi-agent.md:1:heuristic-high-file-entropy-7-76-bits-possible-b","file":"references/multi-agent.md","pattern":"[HEURISTIC] High file entropy (7.76 bits) - possible binary/encrypted content","snippet":"File: references/multi-agent.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/plan-rules.md:1:heuristic-high-file-entropy-7-70-bits-possible-b","file":"references/plan-rules.md","pattern":"[HEURISTIC] High file entropy (7.70 bits) - possible binary/encrypted content","snippet":"File: references/plan-rules.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:references/review-rules.md:1:heuristic-high-file-entropy-7-74-bits-possible-b","file":"references/review-rules.md","pattern":"[HEURISTIC] High file entropy (7.74 bits) - possible binary/encrypted content","snippet":"File: references/review-rules.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-05-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (7.05 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:templates/commander.md:1:heuristic-high-file-entropy-7-46-bits-possible-b","file":"templates/commander.md","pattern":"[HEURISTIC] High file entropy (7.46 bits) - possible binary/encrypted content","snippet":"File: templates/commander.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:templates/executor.md:1:heuristic-high-file-entropy-7-22-bits-possible-b","file":"templates/executor.md","pattern":"[HEURISTIC] High file entropy (7.22 bits) - possible binary/encrypted content","snippet":"File: templates/executor.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:templates/reviewer.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","file":"templates/reviewer.md","pattern":"[HEURISTIC] High file entropy (7.06 bits) - possible binary/encrypted content","snippet":"File: templates/reviewer.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"sensitive:.gitignore:2:sqlite-database-file","reason":".gitignore 中的 Thumbs.db 是操作系统缩略图缓存文件名，不是 SQLite 数据库或敏感数据内容。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:README.md:384:powershell-invocation","reason":"该行只是 README.md 中标记 Windows PowerShell 安装示例的标题，没有执行命令。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:README.md:386:powershell-invocation","reason":"该行是 Markdown 的 powershell 代码围栏标签，不是运行时调用或用户可控命令。","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:379:hardcoded-url","reason":"URL 出现在 README.md 的 git clone 安装示例中，文档展示不会由技能运行网络请求。","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:387:hardcoded-url","reason":"URL 是 Windows 安装说明中的仓库地址，未发现自动执行或数据上传行为。","verdict":"false_positive","confidence":0.99},{"id":"network:README.md:402:hardcoded-url","reason":"URL 位于项目级安装文档的 git clone 示例中，仅供用户查看和执行。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:368:hidden-file-in-home-directory","reason":"该路径是 Claude Code 技能目录的安装文档，不是技能加载时访问用户家目录的代码。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:369:hidden-file-in-home-directory","reason":"该路径是 Cursor 技能目录的文档配置位置，没有自动创建或读取行为。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:370:hidden-file-in-home-directory","reason":"该路径是 Codex CLI 技能目录的安装说明，不表示运行时文件系统操作。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:371:hidden-file-in-home-directory","reason":"该路径仅列出 WorkBuddy 的安装位置，文档本身不会访问用户家目录。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:374:hidden-file-in-home-directory","reason":"该行解释客户端兼容的技能目录，属于安装说明，没有隐藏文件读取或持久化代码。","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:380:hidden-file-in-home-directory","reason":"这是用户手动安装技能时使用的 cp 示例，README.md 不会自行执行或访问该目录。","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:381:hidden-file-in-home-directory","reason":"该行只是列出不同客户端的目标目录，未发现自动文件操作或隐藏数据处理。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:368:hidden-file-access","reason":"该路径是 Claude Code 技能目录的安装文档，不是技能加载时访问用户家目录的代码。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:369:hidden-file-access","reason":"该路径是 Cursor 技能目录的文档配置位置，没有自动创建或读取行为。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:370:hidden-file-access","reason":"该路径是 Codex CLI 技能目录的安装说明，不表示运行时文件系统操作。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:371:hidden-file-access","reason":"该路径仅列出 WorkBuddy 的安装位置，文档本身不会访问用户家目录。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:374:hidden-file-access","reason":"该行解释客户端兼容的技能目录，属于安装说明，没有隐藏文件读取或持久化代码。","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:380:hidden-file-access","reason":"这是用户手动安装技能时使用的 cp 示例，README.md 不会自行执行或访问该目录。","verdict":"false_positive","confidence":0.98},{"id":"filesystem:README.md:381:hidden-file-access","reason":"该行只是列出不同客户端的目标目录，未发现自动文件操作或隐藏数据处理。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:406:symlink-creation","reason":"该行是在安装文档中说明软链命令，技能没有创建软链的执行入口。","verdict":"false_positive","confidence":0.98},{"id":"blocker:README.md:83:system-reconnaissance","reason":"该行是关于历史测试结果的英文说明，没有枚举主机、环境或用户系统信息的操作。","verdict":"false_positive","confidence":0.98},{"id":"external_commands:REFERENCE.md:330:powershell-invocation","reason":"该行只是 REFERENCE.md 的 PowerShell Markdown 代码围栏标签，不会触发命令执行。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:REFERENCE.md:331:powershell-invocation","reason":"该行是安装说明的注释文本，不是被技能调用的 PowerShell 命令。","verdict":"false_positive","confidence":0.99},{"id":"network:REFERENCE.md:326:hardcoded-url","reason":"URL 位于 REFERENCE.md 的 git clone 示例中，文档展示不会产生网络请求。","verdict":"false_positive","confidence":0.99},{"id":"network:REFERENCE.md:332:hardcoded-url","reason":"URL 是 Windows 安装说明中的仓库地址，未发现自动执行或数据上传行为。","verdict":"false_positive","confidence":0.99},{"id":"network:REFERENCE.md:342:hardcoded-url","reason":"URL 位于项目级安装文档的 git clone 示例中，仅供用户查看和执行。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:319:hidden-file-in-home-directory","reason":"该路径是 Claude Code 技能目录的安装文档，不是技能加载时访问用户家目录的代码。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:320:hidden-file-in-home-directory","reason":"该路径是 Cursor 技能目录的文档配置位置，没有自动创建或读取行为。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:321:hidden-file-in-home-directory","reason":"该路径是 Codex CLI 技能目录的安装说明，不表示运行时文件系统操作。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:322:hidden-file-in-home-directory","reason":"该路径仅列出 WorkBuddy 的安装位置，文档本身不会访问用户家目录。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:327:hidden-file-in-home-directory","reason":"这是用户手动安装技能时使用的 cp 示例，REFERENCE.md 不会自行执行或访问该目录。","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:319:hidden-file-access","reason":"该路径是 Claude Code 技能目录的安装文档，不是技能加载时访问用户家目录的代码。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:320:hidden-file-access","reason":"该路径是 Cursor 技能目录的文档配置位置，没有自动创建或读取行为。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:321:hidden-file-access","reason":"该路径是 Codex CLI 技能目录的安装说明，不表示运行时文件系统操作。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:322:hidden-file-access","reason":"该路径仅列出 WorkBuddy 的安装位置，文档本身不会访问用户家目录。","verdict":"false_positive","confidence":0.99},{"id":"filesystem:REFERENCE.md:327:hidden-file-access","reason":"这是用户手动安装技能时使用的 cp 示例，REFERENCE.md 不会自行执行或访问该目录。","verdict":"false_positive","confidence":0.98},{"id":"filesystem:REFERENCE.md:346:symlink-creation","reason":"该行是在安装文档中说明软链命令，技能没有创建软链的执行入口。","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/selfcheck.py:9:ruby-shell-backtick-execution","reason":"脚本第 9 行只在文档字符串中描述反引号数量检查，不是 Ruby 或 shell 执行。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:scripts/selfcheck.py:76:ruby-shell-backtick-execution","reason":"该行使用 Python 正则匹配 Markdown 代码围栏文本，没有执行匹配内容。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:scripts/selfcheck.py:77:ruby-shell-backtick-execution","reason":"该行只把反引号计数放入检查消息和格式化字符串，不会调用外部解释器。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:13:ruby-shell-backtick-execution","reason":"该行的反引号是 Markdown 文件路径标记，SKILL.md 没有 shell 或 Ruby 执行代码。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"该行只是文字化的文件加载规则，不包含可执行的反引号命令。","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"该行描述读取规则并非程序执行；反引号仅标记文件名。","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:AGENTS.md:1:heuristic-high-file-entropy-6-16-bits-possible-b","reason":"AGENTS.md 是可读的中英文本文件，熵启发式没有提供编码、加密或二进制载荷证据。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:CHANGELOG.md:1:heuristic-high-file-entropy-7-78-bits-possible-b","reason":"CHANGELOG.md 是可读的版本记录，文件熵本身不足以证明存在混淆载荷。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:DISCIPLINE.md:1:heuristic-high-file-entropy-7-15-bits-possible-b","reason":"DISCIPLINE.md 是可读的流程说明，没有发现编码数据或隐藏二进制内容。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:docs/README.md:1:heuristic-high-file-entropy-6-09-bits-possible-b","reason":"docs/README.md 是短小的纯文本说明，熵值启发式没有显示加密或混淆内容。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:README.md:1:heuristic-high-file-entropy-6-91-bits-possible-b","reason":"README.md 是可读的项目文档，内容中没有编码或加密载荷证据。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:REFERENCE.md:46:heuristic-very-high-entropy-string-5-56-bits-lik","reason":"该行是普通实验结果叙述，数值熵启发式没有发现编码字符串或隐藏载荷。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:REFERENCE.md:1:heuristic-high-file-entropy-7-77-bits-possible-b","reason":"REFERENCE.md 是可读的参考文档，文件熵本身不足以证明存在混淆载荷。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:references/multi-agent.md:1:heuristic-high-file-entropy-7-76-bits-possible-b","reason":"references/multi-agent.md 是可读的协作规则文本，没有编码或加密内容证据。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:references/plan-rules.md:1:heuristic-high-file-entropy-7-70-bits-possible-b","reason":"references/plan-rules.md 是可读的规划规则文本，熵启发式不等于混淆检测。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:references/review-rules.md:1:heuristic-high-file-entropy-7-74-bits-possible-b","reason":"references/review-rules.md 是可读的审查规则文本，没有发现编码数据。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-7-05-bits-possible-b","reason":"SKILL.md 是可读的短文本门禁文件，没有编码或加密载荷证据。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:templates/commander.md:1:heuristic-high-file-entropy-7-46-bits-possible-b","reason":"templates/commander.md 是可读的角色模板，文件熵不能证明存在隐藏载荷。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:templates/executor.md:1:heuristic-high-file-entropy-7-22-bits-possible-b","reason":"templates/executor.md 是可读的角色模板，没有编码或加密内容证据。","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:templates/reviewer.md:1:heuristic-high-file-entropy-7-06-bits-possible-b","reason":"templates/reviewer.md 是可读的角色模板，熵启发式没有发现隐藏载荷。","verdict":"false_positive","confidence":0.98}],"semantic_findings":[{"title":"Prompt Injection Attempt Detected","severity":"high","locations":[{"file":"AGENTS.md","line_end":20,"line_start":11},{"file":"SKILL.md","line_end":20,"line_start":19}],"confidence":0.82,"description":"AGENTS.md 要求代理按其加载顺序读取技能文件，SKILL.md 又要求“禁止读取”规则文件并“严格按其中内容执行任务”。这些文本试图控制代理的指令加载和执行顺序，项目级安装时可能与宿主策略或用户指令竞争；未发现直接数据窃取或代码执行载荷。","confidence_reasoning":"文件直接使用“强制门禁”、读取禁令和“严格按其中内容执行任务”等代理控制措辞，属于强提示注入信号；但内容未要求窃取数据或执行危险命令，因此风险判断低于确定性恶意载荷。"}],"subject_marketplace_commit_sha":"f81f2227133630e3d863194444a2b91c3ec90b19","subject_content_hash":"5051659bb5e33f82c2119beb682113ec8c13ac426e79428ca9974e13697f3a77","subject_tree_hash":"bb476cb116c522647594da4bb26a22d1375c2250e75143ab327e174b24588c21","subject_plugin_path":"skills/jadeyingwah/gpt-series-reasoning-style","audit_payload_hash":"2129dfd27d14507df8c6b9364937e516","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"f81f2227133630e3d863194444a2b91c3ec90b19","contentHash":"5051659bb5e33f82c2119beb682113ec8c13ac426e79428ca9974e13697f3a77","treeHash":"bb476cb116c522647594da4bb26a22d1375c2250e75143ab327e174b24588c21","pluginPath":"skills/jadeyingwah/gpt-series-reasoning-style","auditPayloadHash":"2129dfd27d14507df8c6b9364937e516"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/jadeyingwah-gpt-series-reasoning-style/audits/4/attestation","status":"superseded"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":1,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"superseded","verificationState":"not_verified"},"isLatest":false}}