📦
監査履歴
html-slides - 1 監査
監査バージョン 1 最新
2026年11月7日 14:36
The 23 shell-execution matches are Markdown formatting, and three resource links are benign references. Eleven CDN asset references present low-severity supply-chain exposure through mutable version aliases without integrity checks. No evidence found of prompt injection, credential access, or intentional data exfiltration.
1
スキャンされたファイル
344
解析済み行数
13
レビュー項目
0
誤検知を無視
機能レビュー項目 (11)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
低
Hardcoded URL · 3 件
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/reveal.css">
The core stylesheet loads from a mutable reveal.js@4 CDN URL without integrity verification. A compromised dependency could alter presentation appearance or introduce tracking.
低
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/black.css">
The black theme loads external CSS through a mutable major-version alias without integrity verification. Dependency compromise could alter displayed content or introduce tracking.
低
Hardcoded URL · 3 件
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/reveal.js"></script>
The browser executes CDN JavaScript from a mutable reveal.js@4 alias without integrity verification. Compromised upstream code could access presentation content.
低
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/night.css">
The night theme uses a mutable reveal.js@4 CDN alias without integrity verification. A compromised stylesheet could modify displayed content or introduce tracking.
低
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/plugin/highlight/monokai.css">
The highlighting stylesheet loads from a mutable CDN alias without integrity verification. Dependency compromise could change code presentation or introduce tracking.
低
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4/plugin/highlight/highlight.js"></script>
The highlighting plugin executes external JavaScript through a mutable major-version alias without integrity verification. Compromised upstream code could access slide content.
低
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/white.css">
The white theme loads external CSS from a mutable major-version alias without integrity verification. Compromised styles could modify presentation content or introduce tracking.
リスク要因
⚙️ 外部コマンド (23)
SKILL.md:71-89 SKILL.md:89-93 SKILL.md:93-112 SKILL.md:112-116 SKILL.md:116 SKILL.md:118-120 SKILL.md:120-124 SKILL.md:124-130 SKILL.md:130-134 SKILL.md:134-141 SKILL.md:141-143 SKILL.md:143 SKILL.md:147-156 SKILL.md:156-160 SKILL.md:160-168 SKILL.md:168-172 SKILL.md:172-184 SKILL.md:184-188 SKILL.md:188-222 SKILL.md:222-227 SKILL.md:227-289 SKILL.md:289-292 SKILL.md:292-337
監査者: codex