📦

ai-runtime-toolkit

Name: ai-runtime-toolkit
Author: Dwsy

v2.0.0 مراجعة المحتوى r1 حرج ⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات🌐 الوصول إلى الشبكة🔑 متغيرات البيئة

إدارة أدوات المطور في AI Runtime

غالبًا ما تفقد فرق التطوير وقتًا في العثور على الأداة المحلية المناسبة للتحليل أو الاختبار أو فحوصات الخدمات. توفر هذه المهارة مجموعة أدوات منظمة تساعد مساعدي الذكاء الاصطناعي على اكتشاف الأدوات المتاحة وتشغيل سير عمل المطورين الشائعة.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

لا تثبّت هذا Skill تلقائيًا.

تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "ai-runtime-toolkit" from https://skillstore.io/skills/dwsy-ai-runtime-toolkit.md and its manifest at https://skillstore.io/api/skills/dwsy-ai-runtime-toolkit/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/dwsy-ai-runtime-toolkit.md manifest موقَّع GET /api/skills/dwsy-ai-runtime-toolkit/manifest lockfile موقَّع GET /api/skills/dwsy-ai-runtime-toolkit/lockfile

اختبرها

جارٍ استخدام "ai-runtime-toolkit". اعثر على أدوات للتحقق مما إذا كان API المحلي لدي يعمل بشكل سليم.

النتيجة المتوقعة:

تحدد مجموعة الأدوات سير عمل فحص الخدمة واختبار API، وتشرح المدخلات المتوقعة لكل منهما، وتبرز أن نقاط النهاية المحلية أكثر أمانًا من الأهداف الخارجية.

جارٍ استخدام "ai-runtime-toolkit". لخص تكاملات CLI الخارجية.

النتيجة المتوقعة:

تم توثيق أدوات البحث والاختيار.
تم توثيق أدوات عرض الملفات ومعالجة JSON.
يجب مراجعة إرشادات التثبيت قبل الاستخدام.

جارٍ استخدام "ai-runtime-toolkit". حضّر ملاحظة تهيئة آمنة لهذه المجموعة من الأدوات.

النتيجة المتوقعة:

تشرح الاستجابة اكتشاف الأدوات، والاختبار المحلي فقط، والموافقة قبل تنفيذ shell، ومراجعة أي أمر تثبيت.

التدقيق الأمني

حرج

v9 • ٩‏/٧‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

The audit confirms several real risks around pipe-to-shell installation guidance, sudo setup commands, environment-file sourcing, subprocess execution, shell configuration changes, and filesystem writes. Many other static matches are documentation links, JavaScript template literals, localhost examples, or normal diagnostic shell patterns and were adjudicated as false positives. No additional prompt-injection or malicious data-exfiltration intent was found beyond the static evidence.

الملفات التي تم فحصها

6,557

الأسطر التي تم تحليلها

108

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (30)

حرج

discover/config/external_tools.yaml:35

Pipe to shell pattern

install_guide: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

حرج

discover/config/external_tools.yaml:113

Pipe to shell pattern

install_guide: "curl -sS https://starship.rs/install.sh | sh"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

حرج

docs/guides/external-integration.md:221

Pipe to shell pattern

echo " 💡 安装: curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

حرج

docs/references/external-tools.md:65

Pipe to shell pattern

curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

حرج

docs/tools/external/zoxide.md:17

Pipe to shell pattern

curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

حرج

external/navigation/zoxide.meta.yml:19

Pipe to shell pattern

安装: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

حرج

external/shell-enhancement/starship.meta.yml:20

Pipe to shell pattern

安装: "curl -sS https://starship.rs/install.sh | sh"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

bash/system/check-service.meta.yml:52

LLM role tokens injection

- DB_USER: "数据库用户"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

عرض جميع النتائج المؤكدة البالغة 30

مرتفع

bash/system/check-service.sh:34

Environment file access

if [ -f ".env" ]; then

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

bash/system/check-service.sh:35

Environment file access

source .env

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

bash/system/check-service.sh:41

LLM role tokens injection

DB_USER="${DB_USER:-postgres}"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/tools/external/jq.md:87

Environment file access

cat config.json | jq '.env.WIN_VERBOSE = if .debug then "true" else "false" end'

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

node/api/test-api.js:238

Environment file access

const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

bash/analysis/analyze-logs.meta.yml:1

[HEURISTIC] High file entropy (6.33 bits) - possible binary/encrypted content

File: bash/analysis/analyze-logs.meta.yml

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

bash/system/check-disk.meta.yml:1

[HEURISTIC] High file entropy (6.25 bits) - possible binary/encrypted content

File: bash/system/check-disk.meta.yml

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/concepts/toolkit-philosophy.md:1

[HEURISTIC] High file entropy (6.66 bits) - possible binary/encrypted content

File: docs/concepts/toolkit-philosophy.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/guides/creating-tools.md:1

[HEURISTIC] High file entropy (6.58 bits) - possible binary/encrypted content

File: docs/guides/creating-tools.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/guides/external-integration.md:1

[HEURISTIC] High file entropy (6.19 bits) - possible binary/encrypted content

File: docs/guides/external-integration.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/guides/quickstart.md:1

[HEURISTIC] High file entropy (6.02 bits) - possible binary/encrypted content

File: docs/guides/quickstart.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/references/external-tools.md:1

[HEURISTIC] High file entropy (6.14 bits) - possible binary/encrypted content

File: docs/references/external-tools.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/references/internal-tools.md:1

[HEURISTIC] High file entropy (6.36 bits) - possible binary/encrypted content

File: docs/references/internal-tools.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/tools/external/fzf.md:1

[HEURISTIC] High file entropy (6.16 bits) - possible binary/encrypted content

File: docs/tools/external/fzf.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

EXTERNAL-TOOLS-SKILL.md:1

[HEURISTIC] High file entropy (6.39 bits) - possible binary/encrypted content

File: EXTERNAL-TOOLS-SKILL.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

EXTERNAL-TOOLS.md:1

[HEURISTIC] High file entropy (6.27 bits) - possible binary/encrypted content

File: EXTERNAL-TOOLS.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

external/README.md:1

[HEURISTIC] High file entropy (6.25 bits) - possible binary/encrypted content

File: external/README.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

python/analysis/code-stats.meta.yml:1

[HEURISTIC] High file entropy (6.22 bits) - possible binary/encrypted content

File: python/analysis/code-stats.meta.yml

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

python/analysis/dependency-analyzer.meta.yml:1

[HEURISTIC] High file entropy (6.04 bits) - possible binary/encrypted content

File: python/analysis/dependency-analyzer.meta.yml

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

references/core/toolkit-philosophy.md:1

[HEURISTIC] High file entropy (7.00 bits) - possible binary/encrypted content

File: references/core/toolkit-philosophy.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

registry.md:1

[HEURISTIC] High file entropy (6.30 bits) - possible binary/encrypted content

File: registry.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

SKILL.md:1

[HEURISTIC] High file entropy (6.54 bits) - possible binary/encrypted content

File: SKILL.md

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

عناصر مراجعة القدرات (108)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

مرتفع

discover/cli.py:178

Python subprocess.run

result = subprocess.run(cmd, capture_output=False)

The discovery CLI executes an assembled command with subprocess.run. This is expected functionality, but it can run arbitrary registered tools and user-supplied arguments.

مرتفع

docs/guides/creating-tools.md:58

Non-standard device file access

df -h | grep -E '^/dev/' | awk '$5 > 80 {print "警告: " $0}'

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/references/external-tools.md:55

sudo privilege escalation

sudo apt-get install fzf ripgrep jq

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:58

sudo privilege escalation

sudo apt-get install -y gpg wget

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:59

sudo privilege escalation

wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:60

sudo privilege escalation

echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:61

sudo privilege escalation

sudo apt-get update

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:62

sudo privilege escalation

sudo apt-get install -y eza

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:68

sudo privilege escalation

sudo apt-get install fd-find

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:72

sudo privilege escalation

sudo apt-get install bat

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/references/external-tools.md:69

Hidden file in home directory

ln -s $(which fdfind) ~/.local/bin/fd

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/references/external-tools.md:69

Symlink creation

ln -s $(which fdfind) ~/.local/bin/fd

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/tools/external/bat.md:22

sudo privilege escalation

sudo apt-get install bat

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/bat.md:25

Hidden file in home directory

## 配置 (添加到 ~/.bashrc)

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/tools/external/eza.md:22

sudo privilege escalation

sudo apt-get install -y gpg wget

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/eza.md:23

sudo privilege escalation

wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/eza.md:24

sudo privilege escalation

echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/eza.md:25

sudo privilege escalation

sudo apt-get update

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/eza.md:26

sudo privilege escalation

sudo apt-get install -y eza

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/eza.md:29

Hidden file in home directory

## 配置 (添加到 ~/.bashrc)

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/tools/external/fzf.md:23

sudo privilege escalation

sudo apt-get install fzf

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/fzf.md:42

Hidden file in home directory

## 进阶配置 (添加到 ~/.bashrc)

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/tools/external/jq.md:22

sudo privilege escalation

sudo apt-get install jq

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/ripgrep.md:22

sudo privilege escalation

sudo apt-get install ripgrep

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/ripgrep.md:27

Hidden file in home directory

# 添加到 ~/.bashrc

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

docs/tools/external/zoxide.md:29

sudo privilege escalation

sudo apt-get install zoxide

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

docs/tools/external/zoxide.md:34

Hidden file in home directory

添加到 `~/.bashrc`:

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

مرتفع

EXTERNAL-TOOLS-SKILL.md:38

sudo privilege escalation

sudo apt-get install fzf ripgrep jq bat

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

EXTERNAL-TOOLS-SKILL.md:164

Path traversal sequence

- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束

The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.

مرتفع

EXTERNAL-TOOLS.md:51

sudo privilege escalation

sudo apt-get install fzf ripgrep jq bat

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

references/guides/quickstart.md:18

sudo privilege escalation

sudo apt-get install fzf ripgrep jq bat

The file documents commands that run package or system changes with sudo. This is a real privilege boundary risk even when presented as setup guidance.

مرتفع

SKILL.md:125

Path traversal sequence

- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束

The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.

مرتفع

SKILL.md:126

Path traversal sequence

- **[记忆系统](../memory/)** - 分层记忆管理

The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.

مرتفع

SKILL.md:127

Path traversal sequence

- **[认知记录](../cognition/)** - 分析洞察和探索报告

The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.

مرتفع

SKILL.md:128

Path traversal sequence

- **[命令系统](../commands/)** - 运行时命令和交互

The documentation points users toward parent-directory hidden runtime areas. It may be intended navigation, but it encourages access outside the skill directory, so it is kept fail-closed.

متوسط

bash/analysis/analyze-logs.sh:84

Shell command substitution

MATCH_COUNT=$(grep -c "$PATTERN" "$LOG_FILE" 2>/dev/null || echo "0")

The shell script uses user-controlled pattern input in a grep command. Arguments are quoted, but dynamic shell-based log analysis still deserves review.

متوسط

docs/guides/external-integration.md:83

Temp directory access

bat --paging=never /tmp/analysis-result.json

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/guides/external-integration.md:173

Temp directory access

> /tmp/errors.txt

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/guides/external-integration.md:176

Temp directory access

bat --theme=OneHalfDark /tmp/errors.txt

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/references/external-tools.md:69

Hidden file access

ln -s $(which fdfind) ~/.local/bin/fd

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/tools/external/bat.md:25

Hidden file access

## 配置 (添加到 ~/.bashrc)

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/tools/external/eza.md:29

Hidden file access

## 配置 (添加到 ~/.bashrc)

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/tools/external/fzf.md:39

xargs command (can execute arbitrary commands)

ps aux | fzf | awk '{print $2}' | xargs kill

The pipeline selects processes and passes them to kill through xargs. This can terminate arbitrary processes chosen from interactive output.

متوسط

docs/tools/external/fzf.md:42

Hidden file access

## 进阶配置 (添加到 ~/.bashrc)

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/tools/external/ripgrep.md:44

xargs command (can execute arbitrary commands)

rg "TODO" --files-with-matches | fzf | xargs bat

The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.

متوسط

docs/tools/external/ripgrep.md:27

Hidden file access

# 添加到 ~/.bashrc

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

docs/tools/external/zoxide.md:34

Hidden file access

添加到 `~/.bashrc`:

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

EXTERNAL-TOOLS-SKILL.md:82

xargs command (can execute arbitrary commands)

find . -name "*.md" | fzf | xargs bat

The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.

متوسط

EXTERNAL-TOOLS-SKILL.md:133

xargs command (can execute arbitrary commands)

find src/ -name "*.py" | fzf | xargs bat

The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.

متوسط

EXTERNAL-TOOLS-SKILL.md:164

Hidden file access

- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

node/api/test-api.js:230

Node.js fs operations

fs.writeFileSync(filename, JSON.stringify(report, null, 2));

The tool writes output files to a path controlled by command behavior or arguments. This is legitimate reporting functionality but remains a filesystem write risk.

متوسط

node/api/test-api.js:230

Synchronous file operations

fs.writeFileSync(filename, JSON.stringify(report, null, 2));

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

python/analysis/code-stats.py:348

Python file write/append

with open(args.output, 'w', encoding='utf-8') as f:

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

references/guides/quickstart.md:250

xargs command (can execute arbitrary commands)

find . -name "*.meta.yml" | xargs grep <tool-name>

The pipeline passes command output into xargs, which can execute tools on a dynamic set of arguments. The examples are developer-oriented but still need review.

متوسط

references/guides/quickstart.md:205

Hidden file access

TOOLKIT_DIR="$PROJECT_ROOT/.ai-runtime/toolkit"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

متوسط

SKILL.md:125

Hidden file access

- **[宪法文档](../.ai-runtime/constitution.md)** - 治理原则和约束

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:61

Standard device file access

ERROR_COUNT=$(grep -c "ERROR" "$LOG_FILE" 2>/dev/null || echo "0")

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:62

Standard device file access

WARN_COUNT=$(grep -c "WARN" "$LOG_FILE" 2>/dev/null || echo "0")

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:63

Standard device file access

INFO_COUNT=$(grep -c "INFO" "$LOG_FILE" 2>/dev/null || echo "0")

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:64

Standard device file access

DEBUG_COUNT=$(grep -c "DEBUG" "$LOG_FILE" 2>/dev/null || echo "0")

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:84

Standard device file access

MATCH_COUNT=$(grep -c "$PATTERN" "$LOG_FILE" 2>/dev/null || echo "0")

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:119

Standard device file access

TIMEOUT_COUNT=$(grep -c "timeout\|Timeout\|TIMEOUT" "$LOG_FILE" 2>/dev/null || echo "0")

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:125

Standard device file access

CONN_ERROR_COUNT=$(grep -c "connection refused\|Connection refused\|ECONNREFUSED" "$LOG_FILE" 2>/dev

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/analysis/analyze-logs.sh:131

Standard device file access

MEMORY_ERROR_COUNT=$(grep -c "OutOfMemory\|memory\|Memory" "$LOG_FILE" 2>/dev/null || echo "0")

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-disk.sh:179

Standard device file access

du -h "$DISK_PATH" 2>/dev/null | sort -hr | head -5 | while read -r size path; do

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-disk.sh:185

Standard device file access

find "$DISK_PATH" -maxdepth 2 -type d 2>/dev/null | head -10 | while read -r dir; do

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-disk.sh:186

Standard device file access

count=$(find "$dir" -maxdepth 1 -type f 2>/dev/null | wc -l)

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-service.sh:20

Hardcoded URL

URL="http://localhost:3000/health"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-service.sh:21

Standard device file access

STATUS=$(curl -s -o /dev/null -w "%{http_code}" --max-time "$TIMEOUT" "$URL" 2>/dev/null || echo "00

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-service.sh:25

Standard device file access

curl -s --max-time 2 "$URL" | jq '.' 2>/dev/null || echo " (无法解析JSON响应)"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-service.sh:43

Standard device file access

if pg_isready -h "$DB_HOST" -p "$DB_PORT" -U "$DB_USER" -d "$DB_NAME" -t "$TIMEOUT" >/dev/null 2>&1;

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

bash/system/check-service.sh:58

Standard device file access

if redis-cli -h "$REDIS_HOST" -p "$REDIS_PORT" ping >/dev/null 2>&1; then

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

discover/config/external_tools.yaml:35

Hardcoded URL

install_guide: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

discover/config/external_tools.yaml:113

Hardcoded URL

install_guide: "curl -sS https://starship.rs/install.sh | sh"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/guides/external-integration.md:221

Hardcoded URL

echo " 💡 安装: curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/guides/external-integration.md:134

Standard device file access

if command -v eza &> /dev/null; then

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/guides/external-integration.md:186

Standard device file access

if command -v zoxide &> /dev/null; then

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/guides/external-integration.md:208

Standard device file access

if command -v "$tool" &> /dev/null; then

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/guides/quickstart.md:83

Hardcoded URL

node test-api.js http://localhost:3000

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/references/external-tools.md:59

Hardcoded URL

wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/references/external-tools.md:60

Hardcoded URL

echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/references/external-tools.md:65

Hardcoded URL

curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/references/external-tools.md:146

Standard device file access

if ! command -v $tool &> /dev/null; then

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/references/internal-tools.md:237

Hardcoded URL

node node/api/test-api.js http://localhost:3000

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/references/internal-tools.md:240

Hardcoded URL

node node/api/test-api.js http://localhost:3000/api/users

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/references/internal-tools.md:243

Hardcoded URL

node node/api/test-api.js post http://localhost:3000/api/users '{"name":"test"}'

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/tools/external/eza.md:23

Hardcoded URL

wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/tools/external/eza.md:24

Hardcoded URL

echo "deb http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

docs/tools/external/zoxide.md:17

Hardcoded URL

curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

EXTERNAL-TOOLS-SKILL.md:142

Hardcoded URL

curl -s http://api.example.com/data | jq '.items[] | select(.active == true)'

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

EXTERNAL-TOOLS-SKILL.md:145

Standard device file access

cat app.log | rg "ERROR" | jq -R 'fromjson?' 2>/dev/null || cat app.log | rg "ERROR"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

external/api-testing/xh.meta.yml:22

Hardcoded URL

- "xh http://api.example.com"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

external/api-testing/xh.meta.yml:23

Hardcoded URL

- "xh post http://api.example.com/data name=test"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

external/navigation/zoxide.meta.yml:19

Hardcoded URL

安装: "curl -sSfL https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh | sh"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

external/shell-enhancement/starship.meta.yml:20

Hardcoded URL

安装: "curl -sS https://starship.rs/install.sh | sh"

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

node/api/test-api.js:13

Hardcoded URL

constructor(baseURL = 'http://localhost:3000') {

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

node/api/test-api.js:238

Hardcoded URL

const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

node/api/test-api.js:238

Environment variable access (dot notation)

const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

node/api/test-api.js:238

Environment variable object

const baseURL = args[0] || process.env.API_BASE_URL || 'http://localhost:3000';

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:56

Hardcoded URL

python3 discover-toolkit.py run service-check http://localhost:3000

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:85

Hardcoded URL

python3 discover-toolkit.py run api-test http://api.example.com/users --method GET

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:88

Hardcoded URL

python3 discover-toolkit.py run api-test http://api.example.com/users \

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:189

Hardcoded URL

echo "http://api1.example.com

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:190

Hardcoded URL

http://api2.example.com

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:191

Hardcoded URL

http://db.example.com:5432" | \

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:231

Hardcoded URL

python3 discover-toolkit.py run service-check http://localhost:3000 > /dev/null

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

references/guides/quickstart.md:231

Standard device file access

python3 discover-toolkit.py run service-check http://localhost:3000 > /dev/null

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

منخفض

SKILL.md:108

Hardcoded URL

python3 discover-toolkit.py run service-check http://localhost:3000

The static pattern could not be fully dismissed from the cited evidence, so it is kept fail-closed for reviewer attention.

عوامل الخطر

⚙️ الأوامر الخارجية (50)

📁 الوصول إلى نظام الملفات (50)

bash/analysis/analyze-logs.sh:61 bash/analysis/analyze-logs.sh:62 bash/analysis/analyze-logs.sh:63 bash/analysis/analyze-logs.sh:64 bash/analysis/analyze-logs.sh:84 bash/analysis/analyze-logs.sh:119 bash/analysis/analyze-logs.sh:125 bash/analysis/analyze-logs.sh:131 bash/system/check-disk.sh:179 bash/system/check-disk.sh:185 bash/system/check-disk.sh:186 bash/system/check-service.sh:21 bash/system/check-service.sh:25 bash/system/check-service.sh:43 bash/system/check-service.sh:58 docs/guides/creating-tools.md:343 docs/guides/creating-tools.md:58 docs/guides/external-integration.md:134 docs/guides/external-integration.md:186 docs/guides/external-integration.md:208 docs/guides/external-integration.md:83 docs/guides/external-integration.md:173 docs/guides/external-integration.md:176 docs/references/external-tools.md:20 docs/references/external-tools.md:21 docs/references/external-tools.md:22 docs/references/external-tools.md:23 docs/references/external-tools.md:24 docs/references/external-tools.md:25 docs/references/external-tools.md:32 docs/references/external-tools.md:69 docs/references/external-tools.md:69 docs/references/external-tools.md:146 docs/references/external-tools.md:69 docs/tools/external/bat.md:25 docs/tools/external/bat.md:25 docs/tools/external/eza.md:29 docs/tools/external/eza.md:29 docs/tools/external/fzf.md:42 docs/tools/external/fzf.md:42 docs/tools/external/ripgrep.md:27 docs/tools/external/ripgrep.md:27 docs/tools/external/zoxide.md:34 docs/tools/external/zoxide.md:34 EXTERNAL-TOOLS-SKILL.md:115 EXTERNAL-TOOLS-SKILL.md:116 EXTERNAL-TOOLS-SKILL.md:117 EXTERNAL-TOOLS-SKILL.md:118 EXTERNAL-TOOLS-SKILL.md:119 EXTERNAL-TOOLS-SKILL.md:120

🌐 الوصول إلى الشبكة (38)

bash/system/check-service.sh:20 discover/config/external_tools.yaml:35 discover/config/external_tools.yaml:113 docs/guides/creating-tools.md:112 docs/guides/external-integration.md:221 docs/guides/quickstart.md:83 docs/references/external-tools.md:59 docs/references/external-tools.md:60 docs/references/external-tools.md:65 docs/references/internal-tools.md:248 docs/references/internal-tools.md:237 docs/references/internal-tools.md:240 docs/references/internal-tools.md:243 docs/tools/external/eza.md:23 docs/tools/external/eza.md:24 docs/tools/external/zoxide.md:17 EXTERNAL-TOOLS-SKILL.md:142 external/api-testing/xh.meta.yml:22 external/api-testing/xh.meta.yml:23 external/navigation/zoxide.meta.yml:19 external/shell-enhancement/starship.meta.yml:20 node/api/test-api.js:28 node/api/test-api.js:8 node/api/test-api.js:23 node/api/test-api.js:72 node/api/test-api.js:79 node/api/test-api.js:86 node/api/test-api.js:93 node/api/test-api.js:13 node/api/test-api.js:238 references/guides/quickstart.md:56 references/guides/quickstart.md:85 references/guides/quickstart.md:88 references/guides/quickstart.md:189 references/guides/quickstart.md:190 references/guides/quickstart.md:191 references/guides/quickstart.md:231 SKILL.md:108

🔑 متغيرات البيئة (2)

node/api/test-api.js:238 node/api/test-api.js:238

الأنماط المكتشفة

LLM role tokens injection×2Pipe to shell pattern×7

دقّقه: claude عرض سجل التدقيق →

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/dwsy-ai-runtime-toolkit/security.svg)](https://skillstore.io/skills/dwsy-ai-runtime-toolkit?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/dwsy-ai-runtime-toolkit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dwsy-ai-runtime-toolkit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/dwsy-ai-runtime-toolkit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

Dwsy. (2026). ai-runtime-toolkit security audit report (audit version 9) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9

اقتباس BibTeX

@techreport{dwsy-dwsy-ai-runtime-toolkit-2026,
  author = {Dwsy},
  title = {ai-runtime-toolkit security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9},
  note = {Author version 2.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-runtime-toolkit security audit report (audit version 9)"
version: "2.0.0"
type: report
authors:
  - name: "Dwsy"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/dwsy-ai-runtime-toolkit/audits/9"
identifiers:
  - type: other
    value: "skillstore:dwsy-ai-runtime-toolkit:audit:9"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

100

قابلية الصيانة

المحتوى

المجتمع

100

الامتثال للمواصفات

ما الذي يمكنك بناؤه

فحص بيئة تطوير

استخدم مجموعة الأدوات للعثور على الأدوات المحلية المتاحة لفحوصات الخدمات، وتحليل القرص، وفحص التبعيات.

توحيد تشخيصات المشروع

امنح المساهمين مكانًا واحدًا لاكتشاف أوامر التشخيص وسير عمل التحليل القابلة لإعادة الاستخدام.

اختبار API أثناء التطوير

شغل تدفقات اختبار API موثقة مقابل نقاط نهاية محلية أو معتمدة وصدّر نتائج قابلة للقراءة.

جرّب هذه الموجّهات

العثور على الأدوات المتاحة

اعرض لي الأدوات التي توفرها مجموعة أدوات AI Runtime Toolkit هذه، وصنفها حسب الغرض.

اختيار سير عمل تشخيصي

أحتاج إلى تشخيص خدمة محلية بطيئة. ما أدوات مجموعة الأدوات التي يجب أن أستخدمها أولًا، وماذا يجب أن يخبرني كل منها؟

تشغيل فحص محلي آمن

استخدم مجموعة الأدوات للتحقق من نقطة نهاية صحة خدمة محلية. اشرح أي أمر قبل تشغيله وتجنب استدعاءات الشبكة الخارجية.

تدقيق مخاطر تكامل الأدوات

راجع إرشادات تكامل مجموعة الأدوات الخارجية بحثًا عن الأوامر التي تثبت برمجيات، أو تعدل ملفات بدء تشغيل shell، أو تنفذ سكربتات تم تنزيلها.

أفضل الممارسات

راجع كل أمر shell قبل التنفيذ، خصوصًا الأوامر التي تثبت برمجيات أو تعدل إعدادات shell.
فضل نقاط النهاية المحلية وبيانات الاختبار عند استخدام سير عمل API وفحص الخدمات.
تحقق من مصادر الأدوات الخارجية عبر مديري الحزم الرسميين أو قنوات الإصدارات الموثوقة.

تجنب

لا تمرر سكربتات التثبيت التي تم تنزيلها مباشرة إلى shell دون فحص.
لا تشغل أوامر مجموعة الأدوات على أنظمة الإنتاج دون موافقة صريحة.
لا تخزن الأسرار في ملفات تستوردها سكربتات مجموعة الأدوات أو تطبعها أثناء التشخيص.