📦

Audit-Verlauf

html-slides - 1 Audit

7. Nov. 2026, 14:36

The 23 shell-execution matches are Markdown formatting, and three resource links are benign references. Eleven CDN asset references present low-severity supply-chain exposure through mutable version aliases without integrity checks. No evidence found of prompt injection, credential access, or intentional data exfiltration.

1
Gescannte Dateien
344
Analysierte Zeilen
13
Prüfelemente
0
Falschmeldungen ignoriert
Elemente der Fähigkeitsprüfung (11)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Niedrig
Hardcoded URL · 3 Vorkommen
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/reveal.css">
The core stylesheet loads from a mutable reveal.js@4 CDN URL without integrity verification. A compromised dependency could alter presentation appearance or introduce tracking.
Niedrig
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/black.css">
The black theme loads external CSS through a mutable major-version alias without integrity verification. Dependency compromise could alter displayed content or introduce tracking.
Niedrig
Hardcoded URL · 3 Vorkommen
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/reveal.js"></script>
The browser executes CDN JavaScript from a mutable reveal.js@4 alias without integrity verification. Compromised upstream code could access presentation content.
Niedrig
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/night.css">
The night theme uses a mutable reveal.js@4 CDN alias without integrity verification. A compromised stylesheet could modify displayed content or introduce tracking.
Niedrig
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/plugin/highlight/monokai.css">
The highlighting stylesheet loads from a mutable CDN alias without integrity verification. Dependency compromise could change code presentation or introduce tracking.
Niedrig
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4/plugin/highlight/highlight.js"></script>
The highlighting plugin executes external JavaScript through a mutable major-version alias without integrity verification. Compromised upstream code could access slide content.
Niedrig
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/white.css">
The white theme loads external CSS from a mutable major-version alias without integrity verification. Compromised styles could modify presentation content or introduce tracking.
Geprüft von: codex