📦

監査履歴

geo-sleuth - 1 監査

2026年10月11日 14:34

Most static matches are false positives from Python identifiers, documentation, lookup tables, tests, and standard model operations. Confirmed risks include curl option injection, unvalidated thumbnail destinations, photo uploads without explicit consent, and inadequate safeguards for precise private-location identification. The static catalog covers 400 of 486 matches; 86 omitted matches still require manual review before automatic publication. Static review was capped at 400/486 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

スキャンされたファイル

44,220

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (2)

高

SKILL.md:40-47 scripts/intake.py:130-132 scripts/intake.py:194-209 scripts/revimg.py:148-154 scripts/revimg.py:195-201

Photo Uploads Lack Explicit Consent

Default intake uploads the original photo and generated variants to Baidu and Yandex. No explicit upload consent or mandatory redaction step protects private image content.

The default engines and file-upload calls directly establish third-party transmission. Uploads can be disabled, but the documented first command does not require informed consent.

高

SKILL.md:24 SKILL.md:131-148

Private-Location Precision Has Inadequate Safeguards

The privacy rule says to 'go to the finest level as usual' when a source or purpose is already stated. This exception can expose residences or locations associated with minors without establishing authorization.

The explicit exception bypasses the purpose question for sensitive images, while the output requirements support coordinates and building or floor precision. Harmful intent is not established.

機能レビュー項目 (2)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高

scripts/_net.py:26

Python subprocess.run

result = subprocess.run(cmd + [url], capture_output=True, timeout=timeout + 5)

Remote thumbnail values reach curl arguments without URL validation or '--'. Option-shaped input can load curl configuration files; argument lists prevent shell injection, not option injection.

中

scripts/revimg.py:104

Hardcoded URL

data = fetch_bytes(url, proxy, 15, {"User-Agent": UA, "Referer": "https://graph.baidu.com/"})

The download URL comes from remote thumbUrl fields, not the fixed Referer header. Unrestricted destinations and redirects can trigger requests to internal services.

リスク要因

🌐 ネットワークアクセス (50)

data/calling_codes.json:4 data/driving_side.json:4 data/territories.json:4 regions/cn/data/admin.json:4 regions/cn/data/area_codes.json:11 regions/cn/data/plates.json:13 regions/README.md:63 scripts/_browser.py:12 scripts/_net.py:35 scripts/_net.py:36 scripts/_net.py:39 scripts/baidu_pano.py:40 scripts/doctor.py:35 scripts/doctor.py:36 scripts/doctor.py:37 scripts/doctor.py:38 scripts/doctor.py:39 scripts/doctor.py:40 scripts/doctor.py:41 scripts/doctor.py:46 scripts/evidence.py:10 scripts/gsv.py:39 scripts/gsv.py:40 scripts/gsv.py:36 scripts/osm.py:58 scripts/osm.py:59 scripts/osm.py:60 scripts/osm.py:63 scripts/poi.py:59 scripts/poi.py:82 scripts/poi.py:95 scripts/refresh.py:35 scripts/refresh.py:36 scripts/refresh.py:37 scripts/refresh.py:38 scripts/refresh.py:39 scripts/refresh.py:40 scripts/revimg.py:102 scripts/revimg.py:53 scripts/revimg.py:54 scripts/revimg.py:104 scripts/revimg.py:148 scripts/revimg.py:195 scripts/terrain.py:60 scripts/tiles.py:54 scripts/tiles.py:265 scripts/tiles.py:295 scripts/tiles.py:40 scripts/tiles.py:41 SKILL.md:157

⚙️ 外部コマンド (50)

regions/cn/region.json:22 regions/cn/region.json:23 scripts/_browser.py:25 scripts/_browser.py:26 scripts/_net.py:26 scripts/board.py:126 scripts/board.py:9 scripts/board.py:80 scripts/board.py:81 scripts/board.py:83 scripts/board.py:84 scripts/board.py:100 scripts/board.py:244 scripts/board.py:245 scripts/board.py:484 scripts/board.py:494 scripts/board.py:518 scripts/board.py:578 scripts/board.py:611 scripts/board.py:628 scripts/board.py:629 scripts/board.py:630 scripts/board.py:631 scripts/board.py:653 scripts/board.py:655 scripts/board.py:657 scripts/board.py:658 scripts/board.py:665 scripts/board.py:678 scripts/board.py:766 scripts/board.py:767 scripts/board.py:768 scripts/board.py:1068 scripts/board.py:1170 scripts/clues.py:10 scripts/clues.py:11 scripts/clues.py:12 scripts/clues.py:16 scripts/clues.py:73 scripts/clues.py:196 scripts/clues.py:234 scripts/doctor.py:58 scripts/doctor.py:78 scripts/doctor.py:119 scripts/doctor.py:110 scripts/doctor.py:149 scripts/gsv.py:52 scripts/imgprep.py:14 scripts/intake.py:52 scripts/intake.py:223

🔑 環境変数 (38)

📁 ファイルシステムへのアクセス (37)

scripts/board.py:657 scripts/doctor.py:26 scripts/doctor.py:126 scripts/evidence.py:52 scripts/geo.py:522 scripts/geo.py:747 scripts/geo.py:948 scripts/geo.py:953 scripts/geo.py:955 scripts/geo.py:1005 scripts/geo.py:1034 scripts/geo.py:1050 scripts/intake.py:296 scripts/match.py:26 scripts/match.py:26 scripts/match.py:212 scripts/match.py:323 scripts/osm.py:532 scripts/pose.py:196 scripts/regions.py:347 scripts/revimg.py:64 scripts/revimg.py:323 scripts/revimg.py:326 scripts/tiles.py:120 tests/test_board.py:13 tests/test_board.py:23 tests/test_board.py:137 tests/test_regions.py:14 tests/test_regions.py:91 tests/test_runtime.py:17 tests/test_runtime.py:102 tests/test_runtime.py:152 tests/test_runtime.py:167 tests/test_runtime.py:193 tests/test_terrain.py:15 tests/test_terrain.py:75 tests/test_terrain.py:162

⚡ スクリプトを含む (2)

scripts/match.py:99 scripts/sat_scan.py:128

監査者: codex

← スキルに戻る