📦
Histórico de auditoria
taiwan-garbage - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 03:07
Most findings are Markdown formatting, public government URLs, dataset identifiers, and legitimate data processing rather than malicious execution or reconnaissance. Seven temporary-file writes use predictable paths, creating local overwrite and symlink risks in shared environments. No evidence found of prompt injection, credential theft, or data exfiltration.
1
Arquivos analisados
162
Linhas analisadas
10
Itens de revisão
0
Falsos positivos ignorados
Itens de revisão de capacidade (7)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
curl -sLm 30 'https://data.taipei/api/dataset/6bb3304b-4f46-4bb0-8cd1-60c66dcd1cae/resource/a6e90031
curl writes to the predictable /tmp/tpe_garbage.csv path without exclusive creation. In shared environments, a pre-created symlink can redirect writes to runner-writable files.
Médio
Temp directory access
sed '1s/^\xef\xbb\xbf//' /tmp/tpe_garbage.csv > /tmp/g.csv
Shell redirection truncates the predictable /tmp/g.csv output and follows existing symlinks. A pre-created link can therefore overwrite another runner-writable file.
Médio
Temp directory access
curl -sm 30 'https://data.ntpc.gov.tw/api/datasets/EDC3AD26-8AE7-4916-A00B-BC6048D19BF8/json?page=0&
curl writes page zero to the fixed /tmp/ntpc_g0.json path. A pre-existing symlink can redirect this nonexclusive write to another runner-writable file.
Médio
Temp directory access
curl -sm 30 'https://data.ntpc.gov.tw/api/datasets/EDC3AD26-8AE7-4916-A00B-BC6048D19BF8/json?page=1&
curl writes page one to the predictable /tmp/ntpc_g1.json path. Without private-directory isolation, pre-created links can cause unintended local file overwrites.
Médio
Temp directory access
curl -sm 30 'https://data.ntpc.gov.tw/api/datasets/EDC3AD26-8AE7-4916-A00B-BC6048D19BF8/json?page=2&
The page-two download uses the fixed /tmp/ntpc_g2.json output path. Existing symlinks can redirect writes to files writable by the runner.
Médio
Temp directory access
jq -s 'add' /tmp/ntpc_g0.json /tmp/ntpc_g1.json /tmp/ntpc_g2.json > /tmp/ntpc_g.json
The merge redirects output to the predictable /tmp/ntpc_g.json path. Shell redirection follows existing symlinks and can truncate an unintended runner-writable target.
Médio
Temp directory access
curl -sm 60 'https://newdatacenter.taichung.gov.tw/api/v1/no-auth/resource.download?rid=68d1a87f-7ba
curl saves the Taichung dataset to the predictable /tmp/tc_g.json path. Pre-created symlinks can redirect this write to other runner-writable files.
Fatores de risco
⚙️ Comandos externos (46)
SKILL.md:26-28 SKILL.md:28-30 SKILL.md:30-32 SKILL.md:32-36 SKILL.md:36-38 SKILL.md:38-40 SKILL.md:40 SKILL.md:42 SKILL.md:46-58 SKILL.md:58-60 SKILL.md:60 SKILL.md:66-71 SKILL.md:71-79 SKILL.md:79-80 SKILL.md:80-81 SKILL.md:81 SKILL.md:82-83 SKILL.md:83-84 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88-92 SKILL.md:92-104 SKILL.md:104-106 SKILL.md:106 SKILL.md:112-114 SKILL.md:114-116 SKILL.md:116-118 SKILL.md:118 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-128 SKILL.md:128 SKILL.md:129 SKILL.md:130 SKILL.md:136-143 SKILL.md:143-145 SKILL.md:145 SKILL.md:151-152 SKILL.md:152 SKILL.md:154 SKILL.md:161 SKILL.md:141 SKILL.md:136-143
🌐 Acesso à rede (8)
📁 Acesso ao sistema de arquivos (15)
Auditado por: codex