📦

감사 이력

httpclient-factory - 1 감사

2026년 10월 31일 오후 02:11

All 44 static findings are false positives: 39 match Markdown backticks, and five match illustrative HTTPS addresses. The payment example enables default retries without disabling unsafe methods, creating a duplicate-charge risk. No evidence found of prompt injection, command execution, or intentional data exfiltration.

스캔된 파일

259

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

중간

SKILL.md:53-69 SKILL.md:87-98

Payment Retries Can Duplicate Charges

The payment client enables AddStandardResilienceHandler and sends a charge POST without unsafe-method exclusions or idempotency keys. Retrying an ambiguous failure could duplicate a charge. A later retry safeguard is not applied to this client.

The charge example uses standard retries without the unsafe-method exclusion demonstrated later. Actual duplicate charges depend on failure timing and upstream idempotency behavior.

감사자: codex

← 스킬로 돌아가기

감사 이력

확인된 보안 우려 사항 (1)

위험 요인