📦
Audit-Verlauf
instrument-app - 1 Audit
Audit-Version 1 Neueste
27. Okt. 2026, 11:31
Most static matches are Markdown, SDK configuration, or safe secret-handling guidance. The Rails key export can expose a secret in shell history, and the workflow should validate install commands and review existing logs before forwarding them.
3
Gescannte Dateien
520
Analysierte Zeilen
7
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (2)
Mittel
Unreviewed generated install command
The instructions execute the CLI-provided install command without requiring validation of its executable, arguments, or package source. A compromised CLI or manipulated output could cause unintended command execution.
The instructions explicitly use and run the generated command, but exploitation depends on compromised or manipulated CLI output.
Mittel
Existing logs may expose sensitive data
Connecting the existing logger can send current logs to an external service without first checking their contents. Existing records may contain sensitive data despite the rules for newly added logs.
The skill forwards current logs while applying logging rules to added events; exposure depends on the existing application logs and SDK privacy settings.
Elemente der Fähigkeitsprüfung (1)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Hoch
Generic API/secret keys
export LOGBREW_SERVER_API_KEY="your project-scoped server ingest key"
The shell export example invites entry of an actual ingest key in a command, which can persist in shell history.
Risikofaktoren
⚡ Enthält Skripte (1)
⚙️ Externe Befehle (31)
references/frameworks.md:123-134 SKILL.md:18 SKILL.md:38-40 SKILL.md:40-42 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:49 SKILL.md:54-56 SKILL.md:56-58 SKILL.md:58-62 SKILL.md:62-66 SKILL.md:66-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:79-82 SKILL.md:82 SKILL.md:83-84 SKILL.md:84-91 SKILL.md:91-92 SKILL.md:92 SKILL.md:96-101 SKILL.md:101-104 SKILL.md:104-106 SKILL.md:106-107 SKILL.md:107 SKILL.md:108 SKILL.md:118-129 SKILL.md:129 SKILL.md:130
🔑 Umgebungsvariablen (17)
references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:198 references/frameworks.md:230 references/frameworks.md:282 references/frameworks.md:286 references/frameworks.md:292 SKILL.md:79 SKILL.md:129
📁 Dateisystemzugriff (3)
Geprüft von: codex