Fähigkeiten nature-statistics Audit-Verlauf
📦

Audit-Verlauf

nature-statistics - 2 Audits

Versionsvergleich

Änderungen an Fähigkeiten und Befunden über geprüfte Versionen hinweg, neueste zuerst.

VersionDatumErgebnisPrüfelementeÄnderung ggü. vorheriger
v2 Neueste18. Aug. 2026, 08:32 Keine bestätigten Befunde5Keine Änderung der Fähigkeiten
v1 18. Aug. 2026, 08:32 Keine bestätigten Befunde5Ausgangsbasis
Audit-Version 2 Neueste

18. Aug. 2026, 08:32

Five parent-directory references direct the agent beyond the audited skill bundle to unaudited sibling files. The command and reconnaissance detections are markdown or statistical guidance, while the entropy alert is readable Chinese documentation. No prompt injection, executable command, network action, or obfuscated payload was found in the reviewed files.

11
Gescannte Dateien
815
Analysierte Zeilen
7
Prüfelemente
0
Falschmeldungen ignoriert
Elemente der Fähigkeitsprüfung (5)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Hoch
manifest.yaml:23
Path traversal sequence
path: ../nature-shared/journal-formats/nature-machine-intelligence.md
The on-demand path deliberately resolves outside the audited skill directory. Its fixed target limits scope, but unaudited sibling content can influence agent behavior.
Hoch
manifest.yaml:31
Path traversal sequence
path: ../nature-shared/core/consistency-sweep.md
The manifest loads a consistency guide through a parent-directory path outside the audited bundle. This bypasses package-local content boundaries.
Hoch
SKILL.md:46
Path traversal sequence
`../nature-shared/journal-formats/nature-machine-intelligence.md` for its
The workflow explicitly directs the agent to read a parent-directory file outside the audited skill bundle. That content was not included in this audit.
Hoch
SKILL.md:108
Path traversal sequence
| [../nature-shared/journal-formats/nature-machine-intelligence.md](../nature-shared/journal-formats
The related-files table links outside the skill root to an unaudited sibling guide. Opening it crosses the audited package boundary.
Hoch
SKILL.md:113
Path traversal sequence
| [../nature-shared/core/consistency-sweep.md](../nature-shared/core/consistency-sweep.md) | The sam
The documentation instructs access to a parent-directory consistency guide. The fixed path reduces traversal scope but still imports unaudited instructions.

Risikofaktoren

📁 Dateisystemzugriff (5)
manifest.yaml:23 manifest.yaml:31 SKILL.md:46 SKILL.md:108 SKILL.md:113
⚙️ Externe Befehle (15)
SKILL.md:15 SKILL.md:17 SKILL.md:38 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:46 SKILL.md:48 SKILL.md:50 SKILL.md:56-77 SKILL.md:77-81 SKILL.md:81-91 SKILL.md:91-97 SKILL.md:97-113 SKILL.md:113
Geprüft von: codex
Audit-Version 1

18. Aug. 2026, 08:32

Five parent-directory references direct the agent beyond the audited skill bundle to unaudited sibling files. The command and reconnaissance detections are markdown or statistical guidance, while the entropy alert is readable Chinese documentation. No prompt injection, executable command, network action, or obfuscated payload was found in the reviewed files.

11
Gescannte Dateien
815
Analysierte Zeilen
7
Prüfelemente
0
Falschmeldungen ignoriert
Elemente der Fähigkeitsprüfung (5)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Hoch
manifest.yaml:23
Path traversal sequence
path: ../nature-shared/journal-formats/nature-machine-intelligence.md
The on-demand path deliberately resolves outside the audited skill directory. Its fixed target limits scope, but unaudited sibling content can influence agent behavior.
Hoch
manifest.yaml:31
Path traversal sequence
path: ../nature-shared/core/consistency-sweep.md
The manifest loads a consistency guide through a parent-directory path outside the audited bundle. This bypasses package-local content boundaries.
Hoch
SKILL.md:46
Path traversal sequence
`../nature-shared/journal-formats/nature-machine-intelligence.md` for its
The workflow explicitly directs the agent to read a parent-directory file outside the audited skill bundle. That content was not included in this audit.
Hoch
SKILL.md:108
Path traversal sequence
| [../nature-shared/journal-formats/nature-machine-intelligence.md](../nature-shared/journal-formats
The related-files table links outside the skill root to an unaudited sibling guide. Opening it crosses the audited package boundary.
Hoch
SKILL.md:113
Path traversal sequence
| [../nature-shared/core/consistency-sweep.md](../nature-shared/core/consistency-sweep.md) | The sam
The documentation instructs access to a parent-directory consistency guide. The fixed path reduces traversal scope but still imports unaudited instructions.

Risikofaktoren

📁 Dateisystemzugriff (5)
manifest.yaml:23 manifest.yaml:31 SKILL.md:46 SKILL.md:108 SKILL.md:113
⚙️ Externe Befehle (15)
SKILL.md:15 SKILL.md:17 SKILL.md:38 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:46 SKILL.md:48 SKILL.md:50 SKILL.md:56-77 SKILL.md:77-81 SKILL.md:81-91 SKILL.md:91-97 SKILL.md:97-113 SKILL.md:113
Geprüft von: codex
← Zurück zum Skill