📦
監査履歴
instrument-app - 1 監査
監査バージョン 1 最新
2026年10月27日 11:31
Most static matches are Markdown, SDK configuration, or safe secret-handling guidance. The Rails key export can expose a secret in shell history, and the workflow should validate install commands and review existing logs before forwarding them.
3
スキャンされたファイル
520
解析済み行数
7
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (2)
中
Unreviewed generated install command
The instructions execute the CLI-provided install command without requiring validation of its executable, arguments, or package source. A compromised CLI or manipulated output could cause unintended command execution.
The instructions explicitly use and run the generated command, but exploitation depends on compromised or manipulated CLI output.
中
Existing logs may expose sensitive data
Connecting the existing logger can send current logs to an external service without first checking their contents. Existing records may contain sensitive data despite the rules for newly added logs.
The skill forwards current logs while applying logging rules to added events; exposure depends on the existing application logs and SDK privacy settings.
機能レビュー項目 (1)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Generic API/secret keys
export LOGBREW_SERVER_API_KEY="your project-scoped server ingest key"
The shell export example invites entry of an actual ingest key in a command, which can persist in shell history.
リスク要因
⚡ スクリプトを含む (1)
⚙️ 外部コマンド (31)
references/frameworks.md:123-134 SKILL.md:18 SKILL.md:38-40 SKILL.md:40-42 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:49 SKILL.md:54-56 SKILL.md:56-58 SKILL.md:58-62 SKILL.md:62-66 SKILL.md:66-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:79-82 SKILL.md:82 SKILL.md:83-84 SKILL.md:84-91 SKILL.md:91-92 SKILL.md:92 SKILL.md:96-101 SKILL.md:101-104 SKILL.md:104-106 SKILL.md:106-107 SKILL.md:107 SKILL.md:108 SKILL.md:118-129 SKILL.md:129 SKILL.md:130
🔑 環境変数 (17)
references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:198 references/frameworks.md:230 references/frameworks.md:282 references/frameworks.md:286 references/frameworks.md:292 SKILL.md:79 SKILL.md:129
📁 ファイルシステムへのアクセス (3)
監査者: codex