📦

seal

Name: seal
Author: seal-hq

コンテンツリビジョン r1 重大 ⚙️ 外部コマンド🌐 ネットワークアクセス🔑 環境変数

Exchange Files and Secrets with SEAL

Large files and credentials are difficult to exchange through chat without exposing their contents. This skill guides SEAL transfers through inboxes, restricted files, and recipient-addressed links.

対応: Claude Codex Code(CC)

⚠️ 38 不十分

Maintain this Skill? Claim it ⚠️ 38 不十分

この Skill を自動インストールしないでください。

基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "seal" from https://skillstore.io/skills/seal-hq-seal.md and its manifest at https://skillstore.io/api/skills/seal-hq-seal/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/seal-hq-seal.md 署名済み manifest GET /api/skills/seal-hq-seal/manifest 署名済み lockfile GET /api/skills/seal-hq-seal/lockfile

テストする

「seal」を使用しています。 What would a metadata-only transfer check report?

期待される結果:

Illustrative receipt: release-archive.zip, 240 MB, expires in one day.
The contents remain unopened.

「seal」を使用しています。 What should happen when a secret cannot be opened inline?

期待される結果:

The transfer is marked as a secret, so inline access is blocked.
Use file mode and pass the restricted file path to the intended program.
Do not display the secret value.

「seal」を使用しています。 What happens if my transfer exceeds the free limit?

期待される結果:

The transfer requires a paid tier.
Review the payment request before continuing.
The documented workflow resumes the same transfer after payment.

セキュリティ監査

重大

v1 • 2026/10/29 バージョン別レポートを開く

Most flags identify Markdown backticks or authorized secret-handling examples, not unsafe execution or credential theft. Confirmed risks include direct remote installer execution, an unpinned executable package, and instructions to execute commands supplied by update responses. No evidence found of intentional credential exfiltration or instructions to manipulate this audit.

スキャンされたファイル

119

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (2)

重大

SKILL.md:26

Pipe to shell pattern

- **CLI** `seal` (`curl -fsSL https://seal.net/install.sh | sh`). Pass `--json`:

The installation instruction directly pipes curl output to sh, executing remotely controlled code with local user permissions. No signature or checksum verification is required.

重大

SKILL.md:102

Pipe to shell pattern

| `run_cli_missing` | `seal_run` needs the `seal` CLI: `curl -fsSL https://seal.net/install.sh \| sh

The recovery instruction repeats the same unverified remote-script execution. The backslash escapes Markdown table syntax and does not remove the intended shell pipeline.

機能レビュー項目 (6)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高

SKILL.md:106

Ruby/shell backtick execution

| `client_outdated` (CLI exit 7) | The client is outdated: run the command from the answer. |

The recovery says to run the command from the answer without constraining or verifying that command. Untrusted update output could become executable instructions.

中

SKILL.md:25

Ruby/shell backtick execution

started with `npx -y sealnet-mcp@latest`).

The instruction starts sealnet-mcp@latest through npx -y, executing a mutable registry package without version pinning or installation confirmation. This creates supply-chain exposure.

中

SKILL.md:26

Ruby/shell backtick execution

- **CLI** `seal` (`curl -fsSL https://seal.net/install.sh | sh`). Pass `--json`:

Although the backticks are Markdown, the enclosed installation instruction pipes a remote script directly into sh. No integrity verification precedes execution.

中

SKILL.md:102

Ruby/shell backtick execution

| `run_cli_missing` | `seal_run` needs the `seal` CLI: `curl -fsSL https://seal.net/install.sh \| sh

The missing-CLI recovery repeats a remote installer piped into sh. The escaped pipe is Markdown table syntax, not an execution safeguard.

低

SKILL.md:26

Hardcoded URL

- **CLI** `seal` (`curl -fsSL https://seal.net/install.sh | sh`). Pass `--json`:

This URL supplies a mutable script that the documented command immediately executes. HTTPS does not verify the publisher's script contents or pin a reviewed version.

低

SKILL.md:102

Hardcoded URL

| `run_cli_missing` | `seal_run` needs the `seal` CLI: `curl -fsSL https://seal.net/install.sh \| sh

The URL is used in the missing-CLI recovery to fetch executable shell input. The instruction lacks release pinning or independent integrity verification.

リスク要因

⚙️ 外部コマンド (50)

🌐 ネットワークアクセス (2)

SKILL.md:26 SKILL.md:102

🔑 環境変数 (1)

SKILL.md:40

検出されたパターン

Pipe to shell pattern×2

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/seal-hq-seal/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/seal-hq-seal/security.svg)](https://skillstore.io/skills/seal-hq-seal?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/seal-hq-seal?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/seal-hq-seal/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/seal-hq-seal.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

seal-hq. (2026). seal security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/seal-hq-seal/audits/1

BibTeX形式の引用

@techreport{seal-hq-seal-hq-seal-2026,
  author = {seal-hq},
  title = {seal security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/seal-hq-seal/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "seal security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "seal-hq"
date-released: "2026-10-29"
url: "https://skillstore.io/skills/seal-hq-seal/audits/1"
identifiers:
  - type: other
    value: "skillstore:seal-hq-seal:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Deliver build artifacts

Use an approved SEAL installation to send a generated archive to the user's paired inbox and report its receipt.

Provide runtime credentials

Request a needed credential through SEAL and pass its restricted file path to the intended program without printing its value.

Coordinate agent file handoffs

Forward a file to a verified agent address, inspect delivery metadata, and revoke access when the transfer is no longer needed.

これらのプロンプトを試す

Inspect a received transfer

Using the approved SEAL tool, inspect metadata for [link]. Report its name, size, and expiry without opening the contents.

Send an archive

Send [archive path] to my paired SEAL inbox using existing approved tools. Report the receipt, and ask before any payment or installation.

Request a program credential

Request [credential] through SEAL for [program]. Show verification words, use a restricted file or redacted execution, and never print the secret.

Coordinate a recipient-bound handoff

Confirm [recipient address], then forward [file path] with existing approved SEAL tools. Inspect status and report expiry. Revoke only when I approve.

ベストプラクティス

Use reviewed, pinned installations and approve software changes; do not execute remote installers or update-response commands without verification.
Keep secrets in restricted files or redacted program execution, and verify request words and recipient addresses.
Inspect metadata first, explain expiry and payment requirements, and revoke transfers that are no longer needed.

回避

Pasting credentials into chat, printing secret files, or inserting secret values directly into command arguments.
Forwarding files to unverified addresses or treating ordinary share links as recipient-bound links.
Automatically paying, overriding confirmations without consent, or running commands supplied by untrusted update responses.

よくある質問

Can I use this skill with Claude, Codex, and Claude Code?

The report lists all three tools. Actual transfers require an available SEAL CLI, MCP server, or SDK.

Does the skill implement encryption itself?

No. It documents SEAL workflows and describes sender-side encryption. The supplied file does not include implementation code for verification.

Can I transfer a credential without pasting it into chat?

The documented request flow returns a restricted file path. Pass that path to the intended program or use the redacted execution workflow.

Are large transfers free?

The documentation describes a free size limit. Larger transfers require a user payment, and current prices must be checked with the service.

Why might a received link fail?

It may be expired, revoked, already opened, password-protected, or addressed to another recipient. The skill provides recovery steps for these cases.

Should the installation commands run automatically?

No. The guidance includes remote scripts and an unpinned executable package. Use reviewed releases, integrity checks, and explicit approval before installing.

開発者情報

作成者

seal-hq

ライセンス

不明

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/seal-hq/claude-plugins/tree/26ec2a4e22404f7d3d9fa805944d67342eb1da4e/skills/seal

参照

c97754f131806ffe5af68f3dd2e1c241e1393c59

メンテナンスの新しさ

2026/11/2

利用状況

3 ダウンロード · 0 閲覧

ファイル構成

📄 SKILL.md