📦
Historial de auditorías
rsi-skill - 1 auditoría
Versión de auditoría 1 Más reciente
28 oct 2026, 06:48
Most static alerts concern harmless formatting, arithmetic examples, documentation links, or intended backend configuration. Four HTTP request findings expose credentials through unrestricted redirects; a separate model-grading weakness can undermine evaluation integrity. No evidence found of malicious instructions, embedded credentials, or intentional data theft.
6
Archivos escaneados
520
Líneas analizadas
9
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (1)
Medio
Untrusted content can influence model-based grading
Judge mode concatenates task input and generated answers into a grading message. Attacker-controlled content can request PASS verdicts and undermine prompt selection.
The grader receives untrusted answer text without explicit data-only instructions and accepts a PASS prefix. Exploit success depends on the selected model.
Elementos de revisión de capacidades (4)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Python HTTP libraries
req = urllib.request.Request(url, headers={"Authorization": f"Bearer {key}"} if key else {})
Authorization is attached as an ordinary request header before default urllib redirect handling. Cross-origin redirects can forward this bearer credential to another host.
Alto
Python HTTP libraries
with urllib.request.urlopen(req, timeout=timeout) as r:
Default urlopen follows redirects without restricting the credential-bearing request to its original origin. A local redirect-handler check confirmed Authorization forwarding.
Alto
Python HTTP libraries
req = urllib.request.Request(be["base"] + "/chat/completions", data=body, headers=headers)
The completion request includes Authorization in ordinary headers. A redirect accepted by urllib can send that credential to a different origin.
Alto
Python HTTP libraries
with urllib.request.urlopen(req, timeout=300) as r:
The completion request uses default redirect handling without an origin check. Accepted redirects can carry the bearer credential to an unintended host.
Factores de riesgo
📁 Acceso al sistema de archivos (3)
⚙️ Comandos externos (28)
scripts/rsi.py:12 scripts/rsi.py:121 scripts/rsi.py:190 SKILL.md:10 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:38 SKILL.md:39 SKILL.md:41-43 SKILL.md:43-47 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:54-61 SKILL.md:61-63 SKILL.md:63-67 SKILL.md:67-68 SKILL.md:68 SKILL.md:75-91
🌐 Acceso a red (19)
Auditado por: codex