スキル qwen-image 監査履歴
🖼️

監査履歴

qwen-image - 2 監査

監査バージョン 2

最新 安全

Mar 6, 2026, 08:49 AM

This skill is a documentation wrapper for Alibaba Qwen-Image-2.0 image generation models via the inference.sh CLI. All static findings are false positives: (1) external_commands detected markdown code blocks with bash examples, not actual shell execution; (2) network findings are legitimate documentation URLs; (3) cryptographic and system reconnaissance flags are scanner misinterpretations. No actual security risks identified.

1
スキャンされたファイル
184
解析された行数
4
検出結果
claude
監査者

高リスクの問題 (4)

False Positive: External Commands in Documentation
Static scanner detected 'Ruby/shell backtick execution' patterns at 39 locations. These are bash command examples in markdown code blocks (e.g., 'infsh login', 'infsh app run...'), not actual code execution. The skill uses the infsh CLI tool which is installed separately.
False Positive: Hardcoded URLs in Documentation
Static scanner detected 'Hardcoded URL' patterns at 8 locations. These are legitimate documentation URLs (inference.sh docs, example placeholder URLs) used for user guidance.
False Positive: Weak Cryptographic Algorithm
Static scanner flagged 'Weak cryptographic algorithm' at multiple lines. This is a scanner misinterpretation - no cryptographic algorithms are present in this skill.
False Positive: System Reconnaissance
Static scanner flagged 'System reconnaissance' at line 118. This is a false positive - the line contains a negative_prompt parameter for image generation ('low resolution, blurry, deformed, oversaturated'), not system scanning.

監査バージョン 1

低リスク

Mar 5, 2026, 08:54 AM

Static analysis detected external commands and network patterns, but evaluation confirms these are legitimate uses of the inference.sh CLI for image generation. The backtick detections are false positives from markdown code fences. URLs point to official inference.sh service. No malicious behavior confirmed.

1
スキャンされたファイル
184
解析された行数
4
検出結果
claude
監査者
中リスクの問題 (1)
External CLI Commands
Skill invokes inference.sh CLI (infsh) for image generation. This is the documented, intended behavior for this skill type.
低リスクの問題 (1)
External Network URLs
Documentation URLs and API endpoints for inference.sh service. Required for skill functionality.

リスク要因

⚙️ 外部コマンド (1)
🌐 ネットワークアクセス (1)