Habilidades nature-statistics Historial de auditorías
📦

Historial de auditorías

nature-statistics - 2 auditorías

Comparación de versiones

Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.

VersiónFechaResultadoElementos de revisiónCambio vs anterior
v2 Más reciente18 ago 2026, 08:32 Sin hallazgos confirmados5Sin cambios de capacidad
v1 18 ago 2026, 08:32 Sin hallazgos confirmados5Base
Versión de auditoría 2 Más reciente

18 ago 2026, 08:32

Five parent-directory references direct the agent beyond the audited skill bundle to unaudited sibling files. The command and reconnaissance detections are markdown or statistical guidance, while the entropy alert is readable Chinese documentation. No prompt injection, executable command, network action, or obfuscated payload was found in the reviewed files.

11
Archivos escaneados
815
Líneas analizadas
7
Elementos de revisión
0
Falsos positivos ignorados
Elementos de revisión de capacidades (5)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto
manifest.yaml:23
Path traversal sequence
path: ../nature-shared/journal-formats/nature-machine-intelligence.md
The on-demand path deliberately resolves outside the audited skill directory. Its fixed target limits scope, but unaudited sibling content can influence agent behavior.
Alto
manifest.yaml:31
Path traversal sequence
path: ../nature-shared/core/consistency-sweep.md
The manifest loads a consistency guide through a parent-directory path outside the audited bundle. This bypasses package-local content boundaries.
Alto
SKILL.md:46
Path traversal sequence
`../nature-shared/journal-formats/nature-machine-intelligence.md` for its
The workflow explicitly directs the agent to read a parent-directory file outside the audited skill bundle. That content was not included in this audit.
Alto
SKILL.md:108
Path traversal sequence
| [../nature-shared/journal-formats/nature-machine-intelligence.md](../nature-shared/journal-formats
The related-files table links outside the skill root to an unaudited sibling guide. Opening it crosses the audited package boundary.
Alto
SKILL.md:113
Path traversal sequence
| [../nature-shared/core/consistency-sweep.md](../nature-shared/core/consistency-sweep.md) | The sam
The documentation instructs access to a parent-directory consistency guide. The fixed path reduces traversal scope but still imports unaudited instructions.

Factores de riesgo

📁 Acceso al sistema de archivos (5)
manifest.yaml:23 manifest.yaml:31 SKILL.md:46 SKILL.md:108 SKILL.md:113
⚙️ Comandos externos (15)
SKILL.md:15 SKILL.md:17 SKILL.md:38 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:46 SKILL.md:48 SKILL.md:50 SKILL.md:56-77 SKILL.md:77-81 SKILL.md:81-91 SKILL.md:91-97 SKILL.md:97-113 SKILL.md:113
Auditado por: codex
Versión de auditoría 1

18 ago 2026, 08:32

Five parent-directory references direct the agent beyond the audited skill bundle to unaudited sibling files. The command and reconnaissance detections are markdown or statistical guidance, while the entropy alert is readable Chinese documentation. No prompt injection, executable command, network action, or obfuscated payload was found in the reviewed files.

11
Archivos escaneados
815
Líneas analizadas
7
Elementos de revisión
0
Falsos positivos ignorados
Elementos de revisión de capacidades (5)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto
manifest.yaml:23
Path traversal sequence
path: ../nature-shared/journal-formats/nature-machine-intelligence.md
The on-demand path deliberately resolves outside the audited skill directory. Its fixed target limits scope, but unaudited sibling content can influence agent behavior.
Alto
manifest.yaml:31
Path traversal sequence
path: ../nature-shared/core/consistency-sweep.md
The manifest loads a consistency guide through a parent-directory path outside the audited bundle. This bypasses package-local content boundaries.
Alto
SKILL.md:46
Path traversal sequence
`../nature-shared/journal-formats/nature-machine-intelligence.md` for its
The workflow explicitly directs the agent to read a parent-directory file outside the audited skill bundle. That content was not included in this audit.
Alto
SKILL.md:108
Path traversal sequence
| [../nature-shared/journal-formats/nature-machine-intelligence.md](../nature-shared/journal-formats
The related-files table links outside the skill root to an unaudited sibling guide. Opening it crosses the audited package boundary.
Alto
SKILL.md:113
Path traversal sequence
| [../nature-shared/core/consistency-sweep.md](../nature-shared/core/consistency-sweep.md) | The sam
The documentation instructs access to a parent-directory consistency guide. The fixed path reduces traversal scope but still imports unaudited instructions.

Factores de riesgo

📁 Acceso al sistema de archivos (5)
manifest.yaml:23 manifest.yaml:31 SKILL.md:46 SKILL.md:108 SKILL.md:113
⚙️ Comandos externos (15)
SKILL.md:15 SKILL.md:17 SKILL.md:38 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:46 SKILL.md:48 SKILL.md:50 SKILL.md:56-77 SKILL.md:77-81 SKILL.md:81-91 SKILL.md:91-97 SKILL.md:97-113 SKILL.md:113
Auditado por: codex
← Volver a la habilidad