Compétences zentao-api Historique des audits
📦

Historique des audits

zentao-api - 2 audits

Version de l’audit 2

Dernier Risque élevé

Jun 29, 2026, 11:27 PM

Static analysis over-reported many Markdown backticks and weak-cryptography hits that are false positives in API documentation. However, manual review confirmed a high-risk eval workflow that emits unescaped credentials into the shell and a plaintext persistent token cache. No prompt injection attempt or confirmed malicious intent was found, so this is not a critical block.

3
Fichiers analysés
776
Lignes analysées
10
Review items
0
False positives ignored

Confirmed security concerns (4)

Élevé
SKILL.md:33SKILL.md:43scripts/get-token.sh:15-17scripts/get-token.sh:101
Shell Eval Command Injection in Token Setup
The skill tells users to run the token helper through eval. The helper prints unescaped URL, token, and account values as shell assignments, so metacharacters from environment variables, the cache file, or a server response can execute in the user shell.
The eval instruction is explicit, and the script emits raw variable values without shell escaping. This creates a direct command execution path if any emitted value is attacker controlled.
Élevé
SKILL.md:24scripts/get-token.sh:5-6scripts/get-token.sh:57scripts/get-token.sh:98
Persistent Plaintext ZenTao Token Cache
The helper stores ZenTao URL, account, and token in a hidden home-directory JSON file. The documentation states ZenTao tokens are permanent, so local file disclosure can expose long-lived account access.
The cache path and write operations are directly present, and the comments describe permanent token behavior. The risk depends on local file permissions but the credential persistence is confirmed.
Faible
api-reference.md:3-5api-reference.md:36SKILL.md:52-74
Markdown Backticks Misclassified as External Commands
Most static external command hits in SKILL.md and api-reference.md are Markdown code spans, shell examples, endpoint paths, or API tables. They are not executable Ruby backticks in a source file.
The cited lines are documentation text and tables, not Ruby code. The exception is the documented shell eval workflow, which is captured as a separate high-risk finding.
Faible
api-reference.md:84-86api-reference.md:237-241SKILL.md:168-171
Weak Cryptography Findings Are Terminology False Positives
The weak cryptography hits map to API documentation terms, enum values, field names, and Markdown content. No evidence found of hashing, encryption, or custom cryptographic implementation in the reviewed files.
Manual review of representative flagged lines shows API fields and status values rather than crypto operations. This makes the high static severity misleading for that pattern.
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Moyen
scripts/get-token.sh:71-73SKILL.md:41-48SKILL.md:95-161
Authenticated Network Requests and Mutating API Operations
The skill is designed to send authenticated requests to a user-configured ZenTao server and supports create, update, delete, and status transition actions. This is expected for the skill, but it can change project records and should require clear user confirmation.
The network call and many mutating curl examples are visible. The behavior is legitimate for this integration, but it raises operational risk when credentials are available.
Faible
scripts/get-token.sh:1-6SKILL.md:1-8
High Entropy Heuristic Appears Caused by Documentation Text
The high entropy heuristic points at normal shell script and Markdown files containing Chinese text and dense API references. No evidence found of encoded payloads, binary blobs, or encrypted content.
The flagged files are readable source and documentation. The confidence is below very high because entropy is a heuristic, but the reviewed context does not show obfuscation.

Facteurs de risque

⚡ Contient des scripts (2)
scripts/get-token.sh:1 SKILL.md:30-33
⚙️ Commandes externes (3)
SKILL.md:33 SKILL.md:43 scripts/get-token.sh:71-75
📁 Accès au système de fichiers (5)
SKILL.md:24 SKILL.md:220 scripts/get-token.sh:10 scripts/get-token.sh:57 scripts/get-token.sh:98
🌐 Accès réseau (2)
scripts/get-token.sh:71-73 SKILL.md:229-230

Motifs détectés

Shell Eval Command Injection in Token SetupPersistent Plaintext ZenTao Token Cache
Audité par: codex

Version de l’audit 1

Sûr

Apr 27, 2026, 06:17 AM

All 628 static analysis findings are false positives. The skill is a legitimate ZenTao API integration tool for project management operations. Detected patterns (backtick syntax, weak crypto flags, high entropy) are misclassifications of markdown documentation and API parameter values. No malicious behavior confirmed after human review.

3
Fichiers analysés
776
Lignes analysées
0
Review items
0
False positives ignored
Aucun problème de sécurité trouvé
Audité par: claude
← Retour à la compétence