📦
Audit-Verlauf
rsi-skill - 1 Audit
Audit-Version 1 Neueste
28. Okt. 2026, 06:48
Most static alerts concern harmless formatting, arithmetic examples, documentation links, or intended backend configuration. Four HTTP request findings expose credentials through unrestricted redirects; a separate model-grading weakness can undermine evaluation integrity. No evidence found of malicious instructions, embedded credentials, or intentional data theft.
6
Gescannte Dateien
520
Analysierte Zeilen
9
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (1)
Mittel
Untrusted content can influence model-based grading
Judge mode concatenates task input and generated answers into a grading message. Attacker-controlled content can request PASS verdicts and undermine prompt selection.
The grader receives untrusted answer text without explicit data-only instructions and accepts a PASS prefix. Exploit success depends on the selected model.
Elemente der Fähigkeitsprüfung (4)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Hoch
Python HTTP libraries
req = urllib.request.Request(url, headers={"Authorization": f"Bearer {key}"} if key else {})
Authorization is attached as an ordinary request header before default urllib redirect handling. Cross-origin redirects can forward this bearer credential to another host.
Hoch
Python HTTP libraries
with urllib.request.urlopen(req, timeout=timeout) as r:
Default urlopen follows redirects without restricting the credential-bearing request to its original origin. A local redirect-handler check confirmed Authorization forwarding.
Hoch
Python HTTP libraries
req = urllib.request.Request(be["base"] + "/chat/completions", data=body, headers=headers)
The completion request includes Authorization in ordinary headers. A redirect accepted by urllib can send that credential to a different origin.
Hoch
Python HTTP libraries
with urllib.request.urlopen(req, timeout=300) as r:
The completion request uses default redirect handling without an origin check. Accepted redirects can carry the bearer credential to an unintended host.
Risikofaktoren
📁 Dateisystemzugriff (3)
⚙️ Externe Befehle (28)
scripts/rsi.py:12 scripts/rsi.py:121 scripts/rsi.py:190 SKILL.md:10 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:38 SKILL.md:39 SKILL.md:41-43 SKILL.md:43-47 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:54-61 SKILL.md:61-63 SKILL.md:63-67 SKILL.md:67-68 SKILL.md:68 SKILL.md:75-91
🌐 Netzwerkzugriff (19)
Geprüft von: codex