Historial de auditorías

geo-sleuth - 1 auditoría

11 oct 2026, 14:34

Most static matches are false positives from Python identifiers, documentation, lookup tables, tests, and standard model operations. Confirmed risks include curl option injection, unvalidated thumbnail destinations, photo uploads without explicit consent, and inadequate safeguards for precise private-location identification. The static catalog covers 400 of 486 matches; 86 omitted matches still require manual review before automatic publication. Static review was capped at 400/486 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Archivos escaneados

44,220

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (2)

Alto

SKILL.md:40-47 scripts/intake.py:130-132 scripts/intake.py:194-209 scripts/revimg.py:148-154 scripts/revimg.py:195-201

Photo Uploads Lack Explicit Consent

Default intake uploads the original photo and generated variants to Baidu and Yandex. No explicit upload consent or mandatory redaction step protects private image content.

The default engines and file-upload calls directly establish third-party transmission. Uploads can be disabled, but the documented first command does not require informed consent.

Alto

SKILL.md:24 SKILL.md:131-148

Private-Location Precision Has Inadequate Safeguards

The privacy rule says to 'go to the finest level as usual' when a source or purpose is already stated. This exception can expose residences or locations associated with minors without establishing authorization.

The explicit exception bypasses the purpose question for sensitive images, while the output requirements support coordinates and building or floor precision. Harmful intent is not established.

Elementos de revisión de capacidades (2)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

scripts/_net.py:26

Python subprocess.run

result = subprocess.run(cmd + [url], capture_output=True, timeout=timeout + 5)

Remote thumbnail values reach curl arguments without URL validation or '--'. Option-shaped input can load curl configuration files; argument lists prevent shell injection, not option injection.

Medio

scripts/revimg.py:104

Hardcoded URL

data = fetch_bytes(url, proxy, 15, {"User-Agent": UA, "Referer": "https://graph.baidu.com/"})

The download URL comes from remote thumbUrl fields, not the fixed Referer header. Unrestricted destinations and redirects can trigger requests to internal services.

Factores de riesgo

🌐 Acceso a red (50)

data/calling_codes.json:4 data/driving_side.json:4 data/territories.json:4 regions/cn/data/admin.json:4 regions/cn/data/area_codes.json:11 regions/cn/data/plates.json:13 regions/README.md:63 scripts/_browser.py:12 scripts/_net.py:35 scripts/_net.py:36 scripts/_net.py:39 scripts/baidu_pano.py:40 scripts/doctor.py:35 scripts/doctor.py:36 scripts/doctor.py:37 scripts/doctor.py:38 scripts/doctor.py:39 scripts/doctor.py:40 scripts/doctor.py:41 scripts/doctor.py:46 scripts/evidence.py:10 scripts/gsv.py:39 scripts/gsv.py:40 scripts/gsv.py:36 scripts/osm.py:58 scripts/osm.py:59 scripts/osm.py:60 scripts/osm.py:63 scripts/poi.py:59 scripts/poi.py:82 scripts/poi.py:95 scripts/refresh.py:35 scripts/refresh.py:36 scripts/refresh.py:37 scripts/refresh.py:38 scripts/refresh.py:39 scripts/refresh.py:40 scripts/revimg.py:102 scripts/revimg.py:53 scripts/revimg.py:54 scripts/revimg.py:104 scripts/revimg.py:148 scripts/revimg.py:195 scripts/terrain.py:60 scripts/tiles.py:54 scripts/tiles.py:265 scripts/tiles.py:295 scripts/tiles.py:40 scripts/tiles.py:41 SKILL.md:157

⚙️ Comandos externos (50)

regions/cn/region.json:22 regions/cn/region.json:23 scripts/_browser.py:25 scripts/_browser.py:26 scripts/_net.py:26 scripts/board.py:126 scripts/board.py:9 scripts/board.py:80 scripts/board.py:81 scripts/board.py:83 scripts/board.py:84 scripts/board.py:100 scripts/board.py:244 scripts/board.py:245 scripts/board.py:484 scripts/board.py:494 scripts/board.py:518 scripts/board.py:578 scripts/board.py:611 scripts/board.py:628 scripts/board.py:629 scripts/board.py:630 scripts/board.py:631 scripts/board.py:653 scripts/board.py:655 scripts/board.py:657 scripts/board.py:658 scripts/board.py:665 scripts/board.py:678 scripts/board.py:766 scripts/board.py:767 scripts/board.py:768 scripts/board.py:1068 scripts/board.py:1170 scripts/clues.py:10 scripts/clues.py:11 scripts/clues.py:12 scripts/clues.py:16 scripts/clues.py:73 scripts/clues.py:196 scripts/clues.py:234 scripts/doctor.py:58 scripts/doctor.py:78 scripts/doctor.py:119 scripts/doctor.py:110 scripts/doctor.py:149 scripts/gsv.py:52 scripts/imgprep.py:14 scripts/intake.py:52 scripts/intake.py:223

🔑 Variables de entorno (38)

📁 Acceso al sistema de archivos (37)

scripts/board.py:657 scripts/doctor.py:26 scripts/doctor.py:126 scripts/evidence.py:52 scripts/geo.py:522 scripts/geo.py:747 scripts/geo.py:948 scripts/geo.py:953 scripts/geo.py:955 scripts/geo.py:1005 scripts/geo.py:1034 scripts/geo.py:1050 scripts/intake.py:296 scripts/match.py:26 scripts/match.py:26 scripts/match.py:212 scripts/match.py:323 scripts/osm.py:532 scripts/pose.py:196 scripts/regions.py:347 scripts/revimg.py:64 scripts/revimg.py:323 scripts/revimg.py:326 scripts/tiles.py:120 tests/test_board.py:13 tests/test_board.py:23 tests/test_board.py:137 tests/test_regions.py:14 tests/test_regions.py:91 tests/test_runtime.py:17 tests/test_runtime.py:102 tests/test_runtime.py:152 tests/test_runtime.py:167 tests/test_runtime.py:193 tests/test_terrain.py:15 tests/test_terrain.py:75 tests/test_terrain.py:162

⚡ Contiene scripts (2)

scripts/match.py:99 scripts/sat_scan.py:128

Auditado por: codex

← Volver a la habilidad