Compétences ai-maestro-code-graph-query
📦
ai-maestro-code-graph-query
Révision du contenu r1 Risque élevé 📁 Accès au système de fichiers⚙️ Commandes externes🌐 Accès réseau
Analyser les dépendances du graphe de code
Modifier du code sans contexte sur les dépendances peut casser les appelants, les sérialiseurs et les composants associés. Cette compétence utilise les commandes de graphe AI Maestro pour inspecter les relations avant les modifications.
Prend en charge: Claude Codex Code(CC)
Arrêtez-vous et demandez confirmation avant l’installation.
Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.
Installer avec mon Agent
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Demande d’agent
Review the Skillstore skill "ai-maestro-code-graph-query" from https://skillstore.io/skills/23blocks-os-ai-maestro-code-graph-query.md and its manifest at https://skillstore.io/api/skills/23blocks-os-ai-maestro-code-graph-query/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Ressources lisibles par les agents
Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.
Tester
Utilisation de « ai-maestro-code-graph-query ». Trouve l’impact de la modification de la fonction de traitement des paiements.
Résultat attendu:
- La fonction est appelée par les workflows de paiement, de renouvellement d’abonnement et de remboursement.
- Elle appelle la logique de validation, de débit de carte et de journalisation des transactions.
- Examine les tests de paiement et de renouvellement avant de modifier la signature de la fonction.
Utilisation de « ai-maestro-code-graph-query ». Vérifie les dépendances du modèle utilisateur avant d’ajouter un champ.
Résultat attendu:
- Le modèle possède des sérialiseurs pour le profil public et les vues d’administration.
- Il est associé aux comptes, sessions, commandes et enregistrements d’audit.
- Mets à jour la couverture des sérialiseurs et les tests de migration avant d’exposer le nouveau champ.
Audit de sécurité
Risque élevév6 • 06/07/2026 Ouvrir le rapport versionné
The skill provides useful AI Maestro code graph workflows, but it relies on Bash execution and strongly mandates automatic graph queries after reading files. The highest risks are unbundled PATH-resolved scripts, hidden home-directory installation under ~/.local/bin, and coercive prompt text that can push agents to execute commands without fresh user intent.
2
Fichiers analysés
329
Lignes analysées
31
Éléments à examiner
0
Faux positifs ignorés
Préoccupations de sécurité confirmées (2)
Élevé
Prompt Injection Attempt Detected
The skill uses forceful authority language such as "THIS IS NOT OPTIONAL" and requires immediate graph queries after every Read. This can override normal user intent and push automatic Bash execution.
The text explicitly claims default authority over agent behavior and mandates tool use. It does not request data theft, so high severity is appropriate rather than critical.
Élevé
Unbundled PATH-Resolved Script Trust
The skill references graph scripts by name and says they are installed in ~/.local/bin. The reviewed package does not include those scripts, so the agent may run unreviewed PATH-resolved code.
The command list and install guidance clearly rely on external shell scripts not present in the scanned files. This is a strong supply-chain and PATH-hijack risk.
Éléments d’évaluation des capacités (31)
Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.
Élevé
Hidden file in home directory
- Verify scripts installed: `ls -la ~/.local/bin/graph-*.sh`
The skill instructs accessing ~/.local/bin, a hidden home-directory path outside the project. This creates review and PATH-trust risk for scripts the agent may execute.
Élevé
Hidden file in home directory
- Scripts are installed to `~/.local/bin/` which should be in your PATH
The skill states scripts are installed under ~/.local/bin. That hidden home location can hold mutable executables outside marketplace review.
Élevé
Hidden file in home directory
This installs scripts to `~/.local/bin/`.
The install note says scripts are placed under ~/.local/bin. This hidden home-directory installation target is outside the reviewed skill package.
Moyen
Ruby/shell backtick execution
```bash
This command is part of the skill workflow for graph lookup and is intended to be run by the agent. It is legitimate functionality but still represents local command execution risk.
Moyen
Ruby/shell backtick execution
```bash
This command is part of the skill workflow for graph lookup and is intended to be run by the agent. It is legitimate functionality but still represents local command execution risk.
Moyen
Ruby/shell backtick execution
| `graph-describe.sh <name>` | Describe a component or function |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-find-callers.sh <function>` | Find all functions that call this function |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-find-callees.sh <function>` | Find all functions called by this function |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-find-related.sh <component>` | Find related components (extends, includes, etc.) |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-find-by-type.sh <type>` | Find all components of a type (model, controller, etc.) |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-find-serializers.sh <model>` | Find serializers for a model |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-find-associations.sh <model>` | Find model associations (belongs_to, has_many) |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-find-path.sh <from> <to>` | Find call path between two functions |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| `graph-index-delta.sh [project-path]` | **Delta index** - only re-index changed files |
The skill documents a delta indexing script that can process project paths. This is local command execution over repository content and should require user awareness.
Moyen
Ruby/shell backtick execution
```bash
The code block explicitly instructs running graph-index-delta.sh, optionally with a project path. This is intended Bash execution over local files.
Moyen
Ruby/shell backtick execution
| Model | `graph-describe.sh`, `graph-find-serializers.sh`, `graph-find-associations.sh` |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| Controller | `graph-describe.sh`, `graph-find-callees.sh` |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| Service | `graph-describe.sh`, `graph-find-callers.sh` |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| Function | `graph-find-callers.sh`, `graph-find-callees.sh` |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| Serializer | `graph-describe.sh` |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
| Any class | `graph-find-related.sh` |
The line documents a graph command that the skill later tells agents to run automatically. Because the command is PATH-resolved, it carries local execution and trust-boundary risk.
Moyen
Ruby/shell backtick execution
Use with `graph-find-by-type.sh`:
This line references graph-find-by-type.sh as a command users should run with selected type values. It is lower-risk documentation but still part of Bash-driven workflow.
Moyen
Ruby/shell backtick execution
- Check PATH: `which graph-describe.sh`
The troubleshooting step asks the agent or user to run which against a graph script. The command is low impact but confirms local shell execution is part of the skill.
Moyen
Ruby/shell backtick execution
- Verify scripts installed: `ls -la ~/.local/bin/graph-*.sh`
The line instructs listing ~/.local/bin graph scripts. This reads a hidden home directory and supports execution of locally installed scripts.
Moyen
Ruby/shell backtick execution
- If not found, run: `./install-graph-tools.sh`
The skill tells users to run ./install-graph-tools.sh if commands are missing. The installer is not included in the scanned files, so running it is unreviewed local code execution.
Moyen
Ruby/shell backtick execution
- Ensure AI Maestro is running: `curl http://localhost:23000/api/agents`
The skill instructs running curl against a local API endpoint. This is a network-capable command and interacts with a local service outside the skill files.
Moyen
Ruby/shell backtick execution
```bash
This code block contains the install-graph-tools.sh command. Running an installer that is not present in the reviewed files is local execution risk.
Moyen
Hidden file access
- Verify scripts installed: `ls -la ~/.local/bin/graph-*.sh`
The line directs listing graph scripts in ~/.local/bin. That is access to a hidden home directory and supports execution of unbundled local tools.
Moyen
Hidden file access
- Scripts are installed to `~/.local/bin/` which should be in your PATH
The skill relies on scripts installed in ~/.local/bin. This hidden path access is part of the intended operating model.
Moyen
Hidden file access
This installs scripts to `~/.local/bin/`.
The installer destination is ~/.local/bin, a hidden home-directory path. The marketplace package does not include the installed scripts for review.
Faible
Hardcoded URL
- Ensure AI Maestro is running: `curl http://localhost:23000/api/agents`
The URL is limited to localhost, so there is no evidence of external exfiltration. It still directs a network request to a local service and should be disclosed.
Facteurs de risque
📁 Accès au système de fichiers (8)
⚙️ Commandes externes (40)
SKILL.md:13 SKILL.md:32-37 SKILL.md:37-40 SKILL.md:40-45 SKILL.md:45-48 SKILL.md:48-52 SKILL.md:52-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69-70 SKILL.md:70-75 SKILL.md:75-81 SKILL.md:81-87 SKILL.md:87-107 SKILL.md:107 SKILL.md:108 SKILL.md:109 SKILL.md:110 SKILL.md:111-112 SKILL.md:112-126 SKILL.md:126-127 SKILL.md:127-128 SKILL.md:128-129 SKILL.md:129-130 SKILL.md:130-131 SKILL.md:131-132 SKILL.md:132-133 SKILL.md:133-134 SKILL.md:134-139 SKILL.md:139-140 SKILL.md:140-141 SKILL.md:141-142 SKILL.md:142-145 SKILL.md:145-155 SKILL.md:155-157 SKILL.md:157-159
🌐 Accès réseau (1)
Audité par: codex Voir l’historique des audits →
Partager et citer ce rapport
Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.
Copier le lien du rapport
https://skillstore.io/skills/23blocks-os-ai-maestro-code-graph-query/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/23blocks-os-ai-maestro-code-graph-query?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/23blocks-os-ai-maestro-code-graph-query?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/23blocks-os-ai-maestro-code-graph-query/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Carte intégrable
<iframe src="https://skillstore.io/embed/skills/23blocks-os-ai-maestro-code-graph-query.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citations académiques (APA · BibTeX · CFF)
Citation APA
23blocks-OS. (2026). ai-maestro-code-graph-query security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/23blocks-os-ai-maestro-code-graph-query/audits/6Citation BibTeX
@techreport{23blocks-os-23blocks-os-ai-maestro-code-graph-query-2026,
author = {23blocks-OS},
title = {ai-maestro-code-graph-query security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/23blocks-os-ai-maestro-code-graph-query/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-maestro-code-graph-query security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "23blocks-OS"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/23blocks-os-ai-maestro-code-graph-query/audits/6"
identifiers:
- type: other
value: "skillstore:23blocks-os-ai-maestro-code-graph-query:audit:6"
description: "Skillstore immutable audit report identifier"
Score Skillstore
Pourquoi ce score Niveau de confiance des preuves: Moyen 55
Architecture
85
Maintenabilité
85
Contenu
70
Communauté
83
Conformité aux spécifications
Ce que vous pouvez créer
Examiner l’impact d’une modification de modèle
Trouver les sérialiseurs, les associations et le code dépendant avant de modifier un modèle.
Préparer des refactorisations plus sûres
Identifier les appelants et les appelés avant de modifier la signature d’une fonction ou de déplacer de la logique.
Explorer des bases de code inconnues
Cartographier les relations entre contrôleurs, services, jobs et composants pendant l’intégration.
Essayez ces prompts
Inspecter un composant
Utilise le graphe de code pour décrire ce composant. Résume ce dont il dépend et ce qui dépend de lui.
Vérifier l’impact d’une fonction
Trouve les appelants et les appelés de cette fonction. Explique quels appelants doivent être examinés avant que je la modifie.
Examiner les dépendances d’un modèle
Trouve les sérialiseurs, les associations et les composants associés à ce modèle. Mets en évidence toute dépendance aval risquée.
Tracer un flux entre couches
Trace le chemin d’appel entre ce point d’entrée et cette fonction interne. Explique les principales couches et les risques de changement.
Bonnes pratiques
- Confirmer les commandes de graphe avec l’utilisateur avant d’exécuter Bash dans un dépôt.
- Actualiser l’index du graphe après des modifications de code significatives.
- Comparer les résultats du graphe avec les tests avant d’effectuer des refactorisations à fort impact.
Éviter
- Exécuter des scripts de graphe résolus via PATH sans vérifier leur source.
- Considérer la sortie du graphe comme complète alors que l’index peut être obsolète.
- Modifier des fonctions publiques sans examiner les appelants et les tests.
Foire aux questions
À quoi cette compétence se connecte-t-elle ?
Elle s’attend à ce qu’AI Maestro expose une API locale et des scripts de graphe sur le poste de travail.
Nécessite-t-elle Bash ?
Oui. La compétence est construite autour de commandes Bash pour les requêtes de graphe et l’indexation.
Peut-elle fonctionner sans graphe indexé ?
Non. Le projet doit être indexé avant que les requêtes de dépendances puissent renvoyer des résultats utiles.
Envoie-t-elle du code à un service externe ?
Aucune preuve d’accès à un réseau externe n’a été trouvée. Le point de terminaison d’API documenté est localhost.
Pourquoi examiner les commandes avant utilisation ?
La compétence exécute des scripts résolus via PATH qui ne sont pas inclus dans le package examiné.
Qui bénéficie le plus de cette compétence ?
Les développeurs qui ont besoin du contexte des dépendances avant de refactoriser ou de modifier du code partagé en bénéficient le plus.
Détails du développeur
Auteur
23blocks-OSLicence
MIT
Révision Skillstore
r1
Avis de version
L’auteur n’a déclaré aucune version.
Réf
c1fdca50ff516318f65fed0d7f9e82797c5171dc
Récence de maintenance
20/07/2026
Utilisation
27 téléchargements · 188 vues
Structure de fichiers
📄 SKILL.md