📦

監査履歴

nla-arbitrate - 2 監査

バージョン比較

監査済みバージョン間の機能と検出結果の変化(新しい順)。

バージョン日付結果レビュー項目前バージョンとの変化
v2 最新2026年7月21日 03:59 確認された検出結果なし0機能の変化なし
v1 2026年7月10日 00:15 4 確認済み8基準

2026年7月21日 03:59

This skill is documentation-only guidance for the third-party `nla` CLI, scoped by `allowed-tools: Bash(nla:*)`. All 26 static findings are false positives: the flagged backtick/code-fence patterns are markdown formatting in a how-to guide, the reconnaissance flags are documented `nla escrow:*` usage examples, and the env/private-key mentions describe how a user supplies their own wallet key and LLM API keys to the CLI. No finding shows the skill itself reading, transmitting, or exfiltrating secrets, and no prompt-injection or data-exfiltration intent was found. Residual risk is inherent to the underlying tool (on-chain transactions cost real funds and require a private key), not to this skill's instructions.

1
スキャンされたファイル
102
解析済み行数
2
レビュー項目
0
誤検知を無視
監査者: claude

2026年7月10日 00:15

The skill is not overtly malicious, but it operates a high-impact escrow arbitration CLI. Several Markdown backtick and reconnaissance alerts are false positives, while arbitration commands and secret handling are confirmed risks. Auto mode adds prompt-injection and irreversible on-chain decision exposure.

1
スキャンされたファイル
102
解析済み行数
14
レビュー項目
0
誤検知を無視

確認済みのセキュリティ上の懸念 (4)

高
Crypto seed/private key mention
- Private key set via `nla wallet:set`, `--private-key` flag, or `PRIVATE_KEY` env var
The line explicitly mentions a crypto private key. Exposure or misuse of this key can enable unauthorized signing or asset loss.
高
Prompt Injection Exposure in Auto Arbitration
Auto mode uses an LLM to judge escrow demand and fulfillment text. Untrusted escrow text could steer the model and affect on-chain decisions.
The skill says the command displays demand and fulfillment text, then documents LLM auto mode. That creates a clear prompt-injection exposure even without a malicious sample in the file.
高
Command-Line Secret Exposure
The skill allows API keys and private keys through command-line flags. Shell history or process listings can expose these secrets.
The file explicitly mentions API-key and private-key flags and includes an API-key flag example. The exposure path depends on the local shell and operating system.
高
Irreversible On-Chain Decisions in Broad Auto Mode
The skill documents automatic arbitration for all pending requests while noting that each decision becomes a permanent on-chain attestation.
The impact is clear from permanent attestations and all-pending auto examples. The exact harm depends on escrow value and user confirmation behavior in the CLI.
機能レビュー項目 (8)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高
Generic API/secret keys
- Auto mode reads LLM API keys from environment variables (OPENAI_API_KEY, etc.) or CLI flags
Auto mode explicitly reads LLM API keys from environment variables or flags. These are credentials and should be treated as sensitive inputs.
高
Generic API/secret keys
- Private key set via `nla wallet:set`, `--private-key` flag, or `PRIVATE_KEY` env var
The skill documents PRIVATE_KEY access through an environment variable or flag. A wallet private key is a high-impact secret.
中
Ruby/shell backtick execution · 3 件
```bash
This command can submit arbitration decisions for a specific escrow through an external CLI. Auto mode increases impact because decisions may be made without manual review.
中
Ruby/shell backtick execution
In **auto mode** (`--auto`), the command uses the LLM provider/model specified in the escrow's deman
The line documents auto mode for the external arbitration command and says it can use provider credentials. This is a legitimate feature but carries execution and decision risk.
中
Ruby/shell backtick execution
- `nla` CLI installed and configured
The prerequisite section references installing and configuring the external nla CLI. This is expected for the skill, but it is still an external-command dependency.
中
Ruby/shell backtick execution
- Private key set via `nla wallet:set`, `--private-key` flag, or `PRIVATE_KEY` env var
The line references nla wallet:set and private-key flags for wallet setup. External command use touches a highly sensitive signing key.
監査者: codex