📦
감사 이력
instrument-app - 1 감사
감사 버전 1 최신
2026년 10월 27일 오전 11:31
Most static matches are Markdown, SDK configuration, or safe secret-handling guidance. The Rails key export can expose a secret in shell history, and the workflow should validate install commands and review existing logs before forwarding them.
3
스캔된 파일
520
분석된 줄 수
7
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (2)
중간
Unreviewed generated install command
The instructions execute the CLI-provided install command without requiring validation of its executable, arguments, or package source. A compromised CLI or manipulated output could cause unintended command execution.
The instructions explicitly use and run the generated command, but exploitation depends on compromised or manipulated CLI output.
중간
Existing logs may expose sensitive data
Connecting the existing logger can send current logs to an external service without first checking their contents. Existing records may contain sensitive data despite the rules for newly added logs.
The skill forwards current logs while applying logging rules to added events; exposure depends on the existing application logs and SDK privacy settings.
기능 검토 항목 (1)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
높음
Generic API/secret keys
export LOGBREW_SERVER_API_KEY="your project-scoped server ingest key"
The shell export example invites entry of an actual ingest key in a command, which can persist in shell history.
위험 요인
⚡ 스크립트 포함 (1)
⚙️ 외부 명령어 (31)
references/frameworks.md:123-134 SKILL.md:18 SKILL.md:38-40 SKILL.md:40-42 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:49 SKILL.md:54-56 SKILL.md:56-58 SKILL.md:58-62 SKILL.md:62-66 SKILL.md:66-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:79-82 SKILL.md:82 SKILL.md:83-84 SKILL.md:84-91 SKILL.md:91-92 SKILL.md:92 SKILL.md:96-101 SKILL.md:101-104 SKILL.md:104-106 SKILL.md:106-107 SKILL.md:107 SKILL.md:108 SKILL.md:118-129 SKILL.md:129 SKILL.md:130
🔑 환경 변수 (17)
references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:198 references/frameworks.md:230 references/frameworks.md:282 references/frameworks.md:286 references/frameworks.md:292 SKILL.md:79 SKILL.md:129
📁 파일 시스템 접근 (3)
감사자: codex