📦

監査履歴

paperclip-create-agent - 1 監査

2026年7月20日 10:47

Most static detections are Markdown formatting, local installation guidance, or documented use of an authenticated Paperclip API. Confirmed findings cover privileged API operations, API-key use, and two destructive reset commands that recursively delete the default embedded database. No prompt-injection text or credential-exfiltration intent was found.

10
スキャンされたファイル
1,292
解析済み行数
31
レビュー項目
0
誤検知を無視

確認済みのセキュリティ上の懸念 (3)

重大
Recursive delete on root/home
rm -rf ~/.paperclip/instances/default/db
The documented command recursively deletes the default Paperclip database under the user home directory. A mistaken invocation permanently destroys local instance data.
重大
Recursive delete on root/home
rm -rf ~/.paperclip/instances/default/db
The documented command recursively deletes the default Paperclip database under the user home directory. A mistaken invocation permanently destroys local instance data.
高
Privileged Agent Capability Provisioning
The hire payload can assign adapter configuration and desired skills, including access-expanding capabilities. Governance guidance is present, but a privileged caller could create an agent with broader operational reach.
The documented payload explicitly accepts desiredSkills and adapter configuration, while the surrounding text acknowledges they can expand browser, external-system, filesystem, and secret-handling access.
機能レビュー項目 (24)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

重大
Hidden file in home directory · 2 件
rm -rf ~/.paperclip/instances/default/db
The documented command recursively deletes the default Paperclip database under the user home directory. A mistaken invocation permanently destroys local instance data.
重大
Hidden file access · 2 件
rm -rf ~/.paperclip/instances/default/db
The documented command recursively deletes the default Paperclip database under the user home directory. A mistaken invocation permanently destroys local instance data.
高
Ruby/shell backtick execution
```sh
The documented curl command submits a privileged agent-hire request that can provision a new agent and its configured capabilities.
高
Generic API/secret keys · 8 件
-H "Authorization: Bearer $PAPERCLIP_API_KEY"
The command reads an API key and transmits it in an Authorization header. This is intended for Paperclip, but endpoint configuration must be trusted and the credential is sensitive.
高
Generic API/secret keys · 3 件
-H "Authorization: Bearer $PAPERCLIP_API_KEY" \
The command reads an API key and transmits it in an Authorization header. This is intended for Paperclip, but endpoint configuration must be trusted and the credential is sensitive.
中
Shell command substitution
kill $(lsof -ti:3100)
The command kills every process listening on port 3100 without verifying ownership. It can stop an unrelated local service.
中
Ruby/shell backtick execution · 7 件
```sh
The documented curl command performs an authenticated Paperclip API operation. It has an external side effect or accesses governed company data.

リスク要因

⚙️ 外部コマンド (50)
🌐 ネットワークアクセス (4)
📁 ファイルシステムへのアクセス (9)
🔑 環境変数 (12)

検出されたパターン

Recursive delete on root/homeRecursive delete on root/home
監査者: claude