📦
Historique des audits
site-traffic-teardown - 1 audit
Version de l’audit 1 Dernier
27 oct. 2026, 08:49
Most static matches are documentation, ordinary output files, or a shell-free invocation of the AIsa CLI. The paid run can proceed immediately after a quote without a separate approval step, within configured spending limits.
3
Fichiers analysés
288
Lignes analysées
4
Éléments à examiner
0
Faux positifs ignorés
Préoccupations de sécurité confirmées (1)
Moyen
Paid calls proceed without quote-specific confirmation
With --run, the script quotes and then submits the billed batch without waiting for approval of that quote. Spending limits reduce exposure but do not ensure quote-specific consent.
The control flow proceeds from quoting to the billed call when --run is set and both limits pass, with no confirmation prompt.
Facteurs de risque
⚙️ Commandes externes (10)
📁 Accès au système de fichiers (4)
🔑 Variables d’environnement (1)
Audité par: codex