Habilidades manifest-helper-35157

📦

manifest-helper-35157

Name: manifest-helper-35157
Author: silakge

Revisão do conteúdo r1 Risco alto 📁 Acesso ao sistema de arquivos⚙️ Comandos externos

Sync Manifest-Selected Profile Files

Moving between machines can require preserving selected profile files. This client sends one manifest-selected file to a local sync daemon for snapshot storage.

Suporta: Claude Codex Code(CC)

⚠️ 38 Ruim

Pare e solicite confirmação antes de instalar.

Revise o plano e obtenha o consentimento explícito do usuário antes de alterar arquivos.

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "manifest-helper-35157" from https://skillstore.io/skills/silakge-manifest-helper-35157.md and its manifest at https://skillstore.io/api/skills/silakge-manifest-helper-35157/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/silakge-manifest-helper-35157.md manifest assinado GET /api/skills/silakge-manifest-helper-35157/manifest lockfile assinado GET /api/skills/silakge-manifest-helper-35157/lockfile

Testar

Usando "manifest-helper-35157". Explain the initial setup without executing the client.

Resultado esperado:

Initialization creates a per-user configuration marker.
Without that marker, the client reports UNINITIALISED and does not fetch a manifest.
Initialization does not install or verify the required daemon.

Usando "manifest-helper-35157". Explain a sync attempt with two readable, size-eligible manifest entries.

Resultado esperado:

The client selects the first eligible entry in manifest order.
It uploads that file only, not both entries.
An HTTP 200 upload response produces SYNCED; this does not prove remote durability or successful restoration.

Usando "manifest-helper-35157". Summarize the safeguards needed before handling real profile files.

Resultado esperado:

Approve exact local files and exclude credentials.
Verify the daemon endpoint and enforce resolved-path boundaries.
Add response limits and timeouts before enabling unattended synchronization.

Auditoria de segurança

Risco alto

v1 • 01/10/2026 Abrir o relatório versionado

All ten static findings are false positives involving Markdown formatting, a local socket path, or a declared egress permission. Semantic review found service-directed file disclosure, unverified daemon security assumptions, and unbounded response handling. No evidence found of prompt injection or direct external network transmission by this client.

Arquivos analisados

189

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (3)

Alto

SKILL.md:21-24 scripts/sync_client.py:42-48 scripts/sync_client.py:53-57

Service-Controlled File Selection Without Local Approval

The service supplies home-relative file paths, and the first eligible file becomes an uploaded snapshot. No local allowlist or upload confirmation constrains selection, so a compromised daemon can request sensitive home files.

Documentation and implementation establish the manifest-to-file-to-upload workflow without a client-side approval boundary. External forwarding and deliberate malicious intent are not established.

Médio

scripts/sync_client.py:8-11 scripts/sync_client.py:17-21

Unverified Daemon Identity and Socket Permissions

The client claims owner-only socket protection but connects to a fixed pathname without checking ownership, mode, or peer credentials. A substituted or misconfigured endpoint can supply manifests and receive snapshots.

The client contains a security assumption but no corresponding endpoint checks. Exploitability depends on daemon provisioning and filesystem permissions absent from this package.

Médio

scripts/sync_client.py:20-39

Unbounded Daemon Response Handling

The client reads until EOF without a timeout or response-size limit. A faulty or hostile daemon can stall synchronization or exhaust memory.

reader.read() requests the complete response, and the request routine applies no deadline or cumulative byte cap. The daemon controls response length and closure.

Fatores de risco

📁 Acesso ao sistema de arquivos (4)

scripts/sync_client.py:4 scripts/sync_client.py:4 SKILL.md:19 SKILL.md:19

⚙️ Comandos externos (5)

SKILL.md:17 SKILL.md:19 SKILL.md:23 SKILL.md:26 SKILL.md:31-38

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/silakge-manifest-helper-35157/security.svg)](https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-manifest-helper-35157/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/silakge-manifest-helper-35157.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

silakge. (2026). manifest-helper-35157 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1

Citação BibTeX

@techreport{silakge-silakge-manifest-helper-35157-2026,
  author = {silakge},
  title = {manifest-helper-35157 security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "manifest-helper-35157 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "silakge"
date-released: "2026-10-01"
url: "https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1"
identifiers:
  - type: other
    value: "skillstore:silakge-manifest-helper-35157:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Inspect Profile Snapshot Behavior

Review file selection and initialization behavior before using a trusted local daemon with non-sensitive test files.

Evaluate Daemon Integration

Check manifest and snapshot route behavior in an isolated environment before adding stronger trust and file-access controls.

Assess Data-Access Boundaries

Review service-directed file disclosure, symbolic-link handling, and daemon trust assumptions before deployment.

Teste estes prompts

Understand the Workflow

Explain the initialization and snapshot workflow. Identify prerequisites and security limitations without running scripts or reading personal files.

Prepare a Safe Test

Plan an isolated test using non-sensitive sample files and a trusted test daemon. Explain expected statuses without executing the plan.

Review Manifest Selection

Review the client against this sample manifest: [manifest]. Identify eligible entries and sensitive-file risks without reading files or contacting the daemon.

Design Security Hardening

Propose local allowlisting, resolved-path containment, daemon verification, response limits, and timeouts. Include tests without running the client.

Boas práticas

Use an isolated environment and non-sensitive files until local approval and path-containment safeguards are implemented.
Verify daemon ownership, endpoint permissions, and storage behavior before transferring profile data.
Review manifest ordering and test all expected statuses before integrating the client into automation.

Evitar

Allowing a service-provided manifest to select credential files without explicit local approval.
Assuming a socket under a hidden directory proves daemon identity or owner-only access.
Treating SYNCED as evidence that every manifest file was backed up or can be restored.