📦
Histórico de auditoria
postal-address - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 02:58
Four predictable temporary-file writes create overwrite and local symlink risks. Other alerts concern Markdown syntax, public postal downloads, extension descriptions, and expected data reads. No evidence found of prompt injection, credential access, or data exfiltration.
1
Arquivos analisados
65
Linhas analisadas
7
Itens de revisão
0
Falsos positivos ignorados
Itens de revisão de capacidade (4)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
curl -sm 30 'https://www.post.gov.tw/post/download/103.12.25-%E8%87%BA%E7%81%A3%E5%9C%B0%E5%8D%80%E9
Shell redirection overwrites the predictable shared path /tmp/zip3.txt and follows existing symlinks. A local attacker could redirect writes to another writable file.
Médio
Temp directory access
curl -sm 30 -o /tmp/county.xml 'https://www.post.gov.tw/post/download/County_h_10906.xml'
Curl writes to the predictable shared path /tmp/county.xml without exclusive creation. Existing files or attacker-created symlink targets could be overwritten.
Médio
Temp directory access
curl -sm 30 'https://www.post.gov.tw/post/download/%E6%9D%91%E9%87%8C%E6%96%87%E5%AD%97%E5%B7%B7%E4%
Shell redirection overwrites the predictable shared path /tmp/village.txt and follows existing symlinks. A local attacker could redirect writes to another writable file.
Médio
Temp directory access
curl -sm 30 'https://www.post.gov.tw/post/download/%E4%B8%AD%E8%8B%B1%E6%96%87%E8%A1%97%E8%B7%AF%E5%
Shell redirection overwrites the predictable shared path /tmp/roads.txt and follows existing symlinks. A local attacker could redirect writes to another writable file.
Fatores de risco
⚙️ Comandos externos (10)
🌐 Acesso à rede (7)
📁 Acesso ao sistema de arquivos (8)
Auditado por: codex