📦
監査履歴
kbo-results - 1 監査
監査バージョン 1 最新
2026年11月8日 14:42
All 19 static alerts are false positives involving documented package loading, harmless path lookup, Markdown syntax, reference links, or readable Korean text. Semantic review identifies mutable npm execution and instruction delegation, plus an updater that can modify unrelated agent skills. No evidence found of credential theft, data exfiltration, or an embedded prompt injection attack.
5
スキャンされたファイル
170
解析済み行数
7
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (2)
高
Mutable Runtime Code and Instruction Delegation
SKILL.md requires following CLI output as primary instructions using npx -y @nomadamas/k-skill@0. The workflow also installs kbo-game globally without a version. These mutable dependencies can execute changed code and supply instructions outside the reviewed snapshot, without a separate approval step.
The commands use a major-version range and an unversioned package, while the prose expressly delegates primary instructions to runtime output. No malicious package behavior was established.
中
Updater Exceeds the Requested Lookup Scope
The skill recommends updating the CLI and every coding-agent skill installation, including Vercel Agent Skills. This expands a scoreboard lookup into unrelated installation changes without a stated approval requirement.
The documented command explicitly targets every coding-agent skill installation, not only this skill. Actual updater internals were not inspected or executed.
リスク要因
⚡ スクリプトを含む (1)
⚙️ 外部コマンド (10)
🔑 環境変数 (2)
📁 ファイルシステムへのアクセス (1)
🌐 ネットワークアクセス (1)
監査者: codex