📦

감사 이력

design - 1 감사

2026년 10월 26일 오후 02:46

Most static findings are benign documentation, design terminology, mocked tests, or expected credential configuration. Confirmed findings expose API keys through unrestricted polling destinations and cross-origin redirects. Semantic findings identify incomplete DNS checks, unsanitized SVG and HTML output, and disabled browser sandboxing; no evidence found of deliberate prompt injection.

스캔된 파일

6,617

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (4)

중간

scripts/logo/generate.py:181-203 scripts/logo/generate.py:255-264

DNS Resolution Bypasses Private Address Checks

URL validation rejects literal private IP addresses but accepts unresolved hostnames. A provider-controlled hostname resolving internally can bypass the intended network boundary.

Nonliteral hostnames return before any DNS address check. Exploitation requires a suitable HTTPS endpoint and a malicious or compromised provider response.

중간

scripts/icon/generate.py:128-163 scripts/icon/generate.py:297-321

Generated SVG Is Saved Without Active Content Filtering

SVG extraction checks text structure but preserves scripts, event handlers, and external references. Malicious generated markup can execute when opened directly or embedded inline.

The extraction and save path contains no SVG element or attribute allowlist. Prompt instructions against external references do not enforce output safety.

중간

scripts/cip/render-html.py:109-119 scripts/cip/render-html.py:143-149 scripts/cip/render-html.py:342-364

Presentation Labels Are Interpolated Without HTML Escaping

Brand names and filename-derived labels enter HTML text and attributes without escaping. Crafted input can inject markup or scripts when the presentation is opened.

Python f-strings insert input directly into the title, image attributes, and headings. Exploitation requires crafted labels and opening the generated document.

중간

references/social-photos-design.md:126-140

Screenshot Workflow Disables Browser Sandboxing

The recommended Chrome command includes --no-sandbox while rendering HTML that may load external resources. This removes browser containment during screenshot export.

The documented command explicitly disables the Chrome sandbox without an isolation requirement. This increases compromise impact if rendered content exploits a browser vulnerability.

기능 검토 항목 (7)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음

scripts/logo/generate.py:176

HTTP client library

def redirect_request(self, req, fp, code, msg, headers, newurl):

The redirect handler accepts unrelated HTTPS origins without removing authentication headers. A provider redirect can therefore disclose the API key to another host.

높음

scripts/logo/generate.py:178

HTTP client library

return super().redirect_request(req, fp, code, msg, headers, newurl)

The superclass redirect implementation copies authentication headers across origins. An offline standard-library check confirmed that x-api-key survives an HTTPS cross-host redirect.

높음

scripts/logo/generate.py:206

HTTP client library

def _json_request(

The request helper attaches credentials without restricting the destination origin. Its MuAPI caller supplies a response-controlled polling URL, enabling credential disclosure.

높음

scripts/logo/generate.py:444

HTTP client library

data = _json_request(

Polling sends x-api-key to result_url from the provider response. HTTPS validation does not restrict that URL to the MuAPI origin.

높음

scripts/logo/generate.py:222

Generic API/secret keys

api_key_header: auth_value,

This header attaches the API key to a URL without checking its provider origin. Response-controlled polling URLs can receive that credential.

높음

scripts/logo/generate.py:446

Generic API/secret keys

api_key,

The MuAPI key is passed to polling requests for a response-controlled URL. No same-origin check prevents sending the key to another HTTPS host.

높음

scripts/logo/generate.py:447

Generic API/secret keys

api_key_header="x-api-key",

The x-api-key header is explicitly enabled for the response-controlled polling URL. Arbitrary HTTPS destinations pass validation and can receive the credential.

위험 요인

🔑 환경 변수 (50)

📁 파일 시스템 접근 (25)

references/design-routing.md:167 references/design-routing.md:168 references/design-routing.md:173 references/design-routing.md:174 references/slides-copywriting-formulas.md:69 references/slides-copywriting-formulas.md:72 references/slides-html-template.md:161 references/slides-layout-patterns.md:116 references/slides-layout-patterns.md:119 references/slides-strategies.md:79 references/slides-strategies.md:82 scripts/cip/generate.py:285 scripts/cip/render-html.py:385 scripts/icon/generate.py:320 scripts/icon/generate.py:394 scripts/icon/generate.py:340 scripts/icon/generate.py:419 scripts/logo/generate.py:276 scripts/logo/generate.py:520 scripts/logo/generate.py:628 scripts/logo/tests/test_generate.py:5 scripts/logo/tests/test_generate.py:136 scripts/logo/tests/test_generate.py:329 scripts/logo/tests/test_generate.py:407 SKILL.md:42

🌐 네트워크 접근 (33)

⚙️ 외부 명령어 (50)

references/social-photos-design.md:170-181 references/social-photos-design.md:196-207 references/social-photos-design.md:138 scripts/icon/generate.py:110 scripts/icon/generate.py:124 scripts/icon/generate.py:132-133 scripts/icon/generate.py:133 scripts/icon/generate.py:138-140 scripts/icon/generate.py:140 scripts/logo/generate.py:5 scripts/logo/generate.py:6 scripts/logo/generate.py:18 scripts/tests/test_cip_generate.py:34 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:42 SKILL.md:51-53 SKILL.md:53-57 SKILL.md:57-61 SKILL.md:61-67 SKILL.md:67-73 SKILL.md:73-77 SKILL.md:77 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-96 SKILL.md:96-100 SKILL.md:100-112 SKILL.md:112-114 SKILL.md:114 SKILL.md:118-120 SKILL.md:120-128 SKILL.md:128-134 SKILL.md:134-135 SKILL.md:135-136 SKILL.md:136-137 SKILL.md:137-138 SKILL.md:138-142 SKILL.md:142 SKILL.md:144-148 SKILL.md:148-149 SKILL.md:149 SKILL.md:193-197

감사자: codex

← 스킬로 돌아가기