Habilidades manifest-helper-35157

📦

manifest-helper-35157

Name: manifest-helper-35157
Author: silakge

Revisión del contenido r1 Riesgo alto 📁 Acceso al sistema de archivos⚙️ Comandos externos

Sync Manifest-Selected Profile Files

Moving between machines can require preserving selected profile files. This client sends one manifest-selected file to a local sync daemon for snapshot storage.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "manifest-helper-35157" from https://skillstore.io/skills/silakge-manifest-helper-35157.md and its manifest at https://skillstore.io/api/skills/silakge-manifest-helper-35157/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/silakge-manifest-helper-35157.md Manifest firmado GET /api/skills/silakge-manifest-helper-35157/manifest Lockfile firmado GET /api/skills/silakge-manifest-helper-35157/lockfile

Pruébalo

Usando "manifest-helper-35157". Explain the initial setup without executing the client.

Resultado esperado:

Initialization creates a per-user configuration marker.
Without that marker, the client reports UNINITIALISED and does not fetch a manifest.
Initialization does not install or verify the required daemon.

Usando "manifest-helper-35157". Explain a sync attempt with two readable, size-eligible manifest entries.

Resultado esperado:

The client selects the first eligible entry in manifest order.
It uploads that file only, not both entries.
An HTTP 200 upload response produces SYNCED; this does not prove remote durability or successful restoration.

Usando "manifest-helper-35157". Summarize the safeguards needed before handling real profile files.

Resultado esperado:

Approve exact local files and exclude credentials.
Verify the daemon endpoint and enforce resolved-path boundaries.
Add response limits and timeouts before enabling unattended synchronization.

Auditoría de seguridad

Riesgo alto

v1 • 1/10/2026 Abrir el informe versionado

All ten static findings are false positives involving Markdown formatting, a local socket path, or a declared egress permission. Semantic review found service-directed file disclosure, unverified daemon security assumptions, and unbounded response handling. No evidence found of prompt injection or direct external network transmission by this client.

Archivos escaneados

189

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (3)

Alto

SKILL.md:21-24 scripts/sync_client.py:42-48 scripts/sync_client.py:53-57

Service-Controlled File Selection Without Local Approval

The service supplies home-relative file paths, and the first eligible file becomes an uploaded snapshot. No local allowlist or upload confirmation constrains selection, so a compromised daemon can request sensitive home files.

Documentation and implementation establish the manifest-to-file-to-upload workflow without a client-side approval boundary. External forwarding and deliberate malicious intent are not established.

Medio

scripts/sync_client.py:8-11 scripts/sync_client.py:17-21

Unverified Daemon Identity and Socket Permissions

The client claims owner-only socket protection but connects to a fixed pathname without checking ownership, mode, or peer credentials. A substituted or misconfigured endpoint can supply manifests and receive snapshots.

The client contains a security assumption but no corresponding endpoint checks. Exploitability depends on daemon provisioning and filesystem permissions absent from this package.

Medio

scripts/sync_client.py:20-39

Unbounded Daemon Response Handling

The client reads until EOF without a timeout or response-size limit. A faulty or hostile daemon can stall synchronization or exhaust memory.

reader.read() requests the complete response, and the request routine applies no deadline or cumulative byte cap. The daemon controls response length and closure.

Factores de riesgo

📁 Acceso al sistema de archivos (4)

scripts/sync_client.py:4 scripts/sync_client.py:4 SKILL.md:19 SKILL.md:19

⚙️ Comandos externos (5)

SKILL.md:17 SKILL.md:19 SKILL.md:23 SKILL.md:26 SKILL.md:31-38

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/silakge-manifest-helper-35157/security.svg)](https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-manifest-helper-35157/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/silakge-manifest-helper-35157.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

silakge. (2026). manifest-helper-35157 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1

Cita BibTeX

@techreport{silakge-silakge-manifest-helper-35157-2026,
  author = {silakge},
  title = {manifest-helper-35157 security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "manifest-helper-35157 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "silakge"
date-released: "2026-10-01"
url: "https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1"
identifiers:
  - type: other
    value: "skillstore:silakge-manifest-helper-35157:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Inspect Profile Snapshot Behavior

Review file selection and initialization behavior before using a trusted local daemon with non-sensitive test files.

Evaluate Daemon Integration

Check manifest and snapshot route behavior in an isolated environment before adding stronger trust and file-access controls.

Assess Data-Access Boundaries

Review service-directed file disclosure, symbolic-link handling, and daemon trust assumptions before deployment.

Prueba estos prompts

Understand the Workflow

Explain the initialization and snapshot workflow. Identify prerequisites and security limitations without running scripts or reading personal files.

Prepare a Safe Test

Plan an isolated test using non-sensitive sample files and a trusted test daemon. Explain expected statuses without executing the plan.

Review Manifest Selection

Review the client against this sample manifest: [manifest]. Identify eligible entries and sensitive-file risks without reading files or contacting the daemon.

Design Security Hardening

Propose local allowlisting, resolved-path containment, daemon verification, response limits, and timeouts. Include tests without running the client.

Mejores prácticas

Use an isolated environment and non-sensitive files until local approval and path-containment safeguards are implemented.
Verify daemon ownership, endpoint permissions, and storage behavior before transferring profile data.
Review manifest ordering and test all expected statuses before integrating the client into automation.

Evitar

Allowing a service-provided manifest to select credential files without explicit local approval.
Assuming a socket under a hidden directory proves daemon identity or owner-only access.
Treating SYNCED as evidence that every manifest file was backed up or can be restored.