📦
Historique des audits
design - 1 audit
Version de l’audit 1 Dernier
26 oct. 2026, 14:46
Most static findings are benign documentation, design terminology, mocked tests, or expected credential configuration. Confirmed findings expose API keys through unrestricted polling destinations and cross-origin redirects. Semantic findings identify incomplete DNS checks, unsanitized SVG and HTML output, and disabled browser sandboxing; no evidence found of deliberate prompt injection.
38
Fichiers analysés
6,617
Lignes analysées
15
Éléments à examiner
0
Faux positifs ignorés
Préoccupations de sécurité confirmées (4)
Moyen
DNS Resolution Bypasses Private Address Checks
URL validation rejects literal private IP addresses but accepts unresolved hostnames. A provider-controlled hostname resolving internally can bypass the intended network boundary.
Nonliteral hostnames return before any DNS address check. Exploitation requires a suitable HTTPS endpoint and a malicious or compromised provider response.
Moyen
Generated SVG Is Saved Without Active Content Filtering
SVG extraction checks text structure but preserves scripts, event handlers, and external references. Malicious generated markup can execute when opened directly or embedded inline.
The extraction and save path contains no SVG element or attribute allowlist. Prompt instructions against external references do not enforce output safety.
Moyen
scripts/cip/render-html.py:109-119scripts/cip/render-html.py:143-149scripts/cip/render-html.py:342-364
Presentation Labels Are Interpolated Without HTML Escaping
Brand names and filename-derived labels enter HTML text and attributes without escaping. Crafted input can inject markup or scripts when the presentation is opened.
Python f-strings insert input directly into the title, image attributes, and headings. Exploitation requires crafted labels and opening the generated document.
Moyen
Screenshot Workflow Disables Browser Sandboxing
The recommended Chrome command includes --no-sandbox while rendering HTML that may load external resources. This removes browser containment during screenshot export.
The documented command explicitly disables the Chrome sandbox without an isolation requirement. This increases compromise impact if rendered content exploits a browser vulnerability.
Éléments d’évaluation des capacités (7)
Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.
Élevé
HTTP client library
def redirect_request(self, req, fp, code, msg, headers, newurl):
The redirect handler accepts unrelated HTTPS origins without removing authentication headers. A provider redirect can therefore disclose the API key to another host.
Élevé
HTTP client library
return super().redirect_request(req, fp, code, msg, headers, newurl)
The superclass redirect implementation copies authentication headers across origins. An offline standard-library check confirmed that x-api-key survives an HTTPS cross-host redirect.
Élevé
HTTP client library
def _json_request(
The request helper attaches credentials without restricting the destination origin. Its MuAPI caller supplies a response-controlled polling URL, enabling credential disclosure.
Élevé
HTTP client library
data = _json_request(
Polling sends x-api-key to result_url from the provider response. HTTPS validation does not restrict that URL to the MuAPI origin.
Élevé
Generic API/secret keys
api_key_header: auth_value,
This header attaches the API key to a URL without checking its provider origin. Response-controlled polling URLs can receive that credential.
Élevé
Generic API/secret keys
api_key,
The MuAPI key is passed to polling requests for a response-controlled URL. No same-origin check prevents sending the key to another HTTPS host.
Élevé
Generic API/secret keys
api_key_header="x-api-key",
The x-api-key header is explicitly enabled for the response-controlled polling URL. Arbitrary HTTPS destinations pass validation and can receive the credential.
Facteurs de risque
🔑 Variables d’environnement (50)
references/cip-design.md:121 references/icon-design.md:120 references/logo-design.md:93 references/logo-design.md:97 references/logo-design.md:100 scripts/cip/generate.py:84 scripts/cip/generate.py:85 scripts/cip/generate.py:91 scripts/cip/generate.py:92 scripts/cip/generate.py:223 scripts/cip/generate.py:223 scripts/cip/generate.py:224 scripts/cip/generate.py:225 scripts/cip/generate.py:228 scripts/icon/generate.py:41 scripts/icon/generate.py:42 scripts/icon/generate.py:56 scripts/icon/generate.py:56 scripts/icon/generate.py:243 scripts/icon/generate.py:244 scripts/icon/generate.py:245 scripts/icon/generate.py:248 scripts/icon/generate.py:335 scripts/icon/generate.py:336 scripts/icon/generate.py:339 scripts/logo/generate.py:67 scripts/logo/generate.py:68 scripts/logo/generate.py:75 scripts/logo/generate.py:76 scripts/logo/generate.py:77 scripts/logo/generate.py:81 scripts/logo/generate.py:84 scripts/logo/generate.py:75 scripts/logo/generate.py:76 scripts/logo/generate.py:77 scripts/logo/generate.py:207 scripts/logo/generate.py:209 scripts/logo/generate.py:210 scripts/logo/generate.py:211 scripts/logo/generate.py:212 scripts/logo/generate.py:222 scripts/logo/generate.py:280 scripts/logo/generate.py:281 scripts/logo/generate.py:282 scripts/logo/generate.py:291 scripts/logo/generate.py:320 scripts/logo/generate.py:400 scripts/logo/generate.py:401 scripts/logo/generate.py:402 scripts/logo/generate.py:415
📁 Accès au système de fichiers (25)
references/design-routing.md:167 references/design-routing.md:168 references/design-routing.md:173 references/design-routing.md:174 references/slides-copywriting-formulas.md:69 references/slides-copywriting-formulas.md:72 references/slides-html-template.md:161 references/slides-layout-patterns.md:116 references/slides-layout-patterns.md:119 references/slides-strategies.md:79 references/slides-strategies.md:82 scripts/cip/generate.py:285 scripts/cip/render-html.py:385 scripts/icon/generate.py:320 scripts/icon/generate.py:394 scripts/icon/generate.py:340 scripts/icon/generate.py:419 scripts/logo/generate.py:276 scripts/logo/generate.py:520 scripts/logo/generate.py:628 scripts/logo/tests/test_generate.py:5 scripts/logo/tests/test_generate.py:136 scripts/logo/tests/test_generate.py:329 scripts/logo/tests/test_generate.py:407 SKILL.md:42
🌐 Accès réseau (33)
references/slides-html-template.md:14 references/slides-html-template.md:278 references/social-photos-design.md:94 scripts/logo/generate.py:176 scripts/logo/generate.py:178 scripts/logo/generate.py:206 scripts/logo/generate.py:289 scripts/logo/generate.py:318 scripts/logo/generate.py:413 scripts/logo/generate.py:444 scripts/logo/generate.py:48 scripts/logo/generate.py:92 scripts/logo/generate.py:95 scripts/logo/tests/test_generate.py:261 scripts/logo/tests/test_generate.py:61 scripts/logo/tests/test_generate.py:99 scripts/logo/tests/test_generate.py:139 scripts/logo/tests/test_generate.py:148 scripts/logo/tests/test_generate.py:158 scripts/logo/tests/test_generate.py:161 scripts/logo/tests/test_generate.py:177 scripts/logo/tests/test_generate.py:185 scripts/logo/tests/test_generate.py:208 scripts/logo/tests/test_generate.py:213 scripts/logo/tests/test_generate.py:221 scripts/logo/tests/test_generate.py:262 scripts/logo/tests/test_generate.py:281 scripts/logo/tests/test_generate.py:309 scripts/logo/tests/test_generate.py:158 SKILL.md:312 SKILL.md:320 SKILL.md:321 SKILL.md:322
⚙️ Commandes externes (50)
references/social-photos-design.md:170-181 references/social-photos-design.md:196-207 references/social-photos-design.md:138 scripts/icon/generate.py:110 scripts/icon/generate.py:124 scripts/icon/generate.py:132-133 scripts/icon/generate.py:133 scripts/icon/generate.py:138-140 scripts/icon/generate.py:140 scripts/logo/generate.py:5 scripts/logo/generate.py:6 scripts/logo/generate.py:18 scripts/tests/test_cip_generate.py:34 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:42 SKILL.md:51-53 SKILL.md:53-57 SKILL.md:57-61 SKILL.md:61-67 SKILL.md:67-73 SKILL.md:73-77 SKILL.md:77 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-96 SKILL.md:96-100 SKILL.md:100-112 SKILL.md:112-114 SKILL.md:114 SKILL.md:118-120 SKILL.md:120-128 SKILL.md:128-134 SKILL.md:134-135 SKILL.md:135-136 SKILL.md:136-137 SKILL.md:137-138 SKILL.md:138-142 SKILL.md:142 SKILL.md:144-148 SKILL.md:148-149 SKILL.md:149 SKILL.md:193-197
Audité par: codex