📦
감사 이력
verify-release - 1 감사
감사 버전 1 최신
2026년 10월 27일 오전 11:32
The static matches are Markdown formatting, a documented service endpoint, or release decision criteria rather than the alleged threats. The skill also directs deployment record creation and pipeline changes without explicit confirmation, which can affect production evidence.
2
스캔된 파일
184
분석된 줄 수
3
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (1)
중간
Deployment records may be changed without confirmation
The skill instructs the agent to record missing deployments as succeeded and add a command to the pipeline without requiring user confirmation. Incorrect records or pipeline changes can distort release comparisons.
The instructions explicitly request a state-changing deployment record and pipeline modification, but do not require confirmation or verification of successful status.
위험 요인
⚙️ 외부 명령어 (30)
SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:36-38 SKILL.md:38-46 SKILL.md:46-48 SKILL.md:48-54 SKILL.md:54-56 SKILL.md:56-60 SKILL.md:60 SKILL.md:61 SKILL.md:62-63 SKILL.md:63-64 SKILL.md:64-66 SKILL.md:66 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:73-83 SKILL.md:83-86 SKILL.md:86-94 SKILL.md:94-97 SKILL.md:97-103 SKILL.md:103-104 SKILL.md:104 SKILL.md:105 SKILL.md:112-113 SKILL.md:113-118 SKILL.md:118-127
🌐 네트워크 접근 (1)
감사자: codex