📦
Histórico de auditoria
taiwan-hospital - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 03:18
Twenty alerts are false positives involving Markdown backticks, readable multilingual text, public HTTPS requests, a comment, and provider identifier matching. Five filesystem alerts reflect predictable shared temporary files that permit symlink overwrites or cache tampering when another local user can pre-create them. No evidence found of prompt injection, credential access, or data exfiltration.
1
Arquivos analisados
80
Linhas analisadas
8
Itens de revisão
0
Falsos positivos ignorados
Itens de revisão de capacidade (5)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' 'https://info.nhi.gov.tw/api/iode0010/v1/rest/datastore/A21030000I-D210
curl writes to predictable /tmp/hosp_meta.json without exclusive creation. Another local user could pre-create a symlink, causing an unintended writable file to be overwritten.
Médio
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' 'https://info.nhi.gov.tw/api/iode0010/v1/rest/dataset?limit=100' -o /tm
curl writes to predictable /tmp/datasets.json without a private temporary directory. A pre-existing symlink can redirect the write to another file accessible to the agent.
Médio
Temp directory access
json.dump({'result': {'total': total, 'records': recs}}, open('/tmp/hosp.json', 'w'), ensure_ascii=F
Opening predictable /tmp/hosp.json in write mode follows existing symlinks and truncates their targets. Local pre-creation can therefore cause unintended file overwrites.
Médio
Temp directory access
d = json.load(open('/tmp/hosp.json'))
The filter trusts JSON loaded from predictable /tmp/hosp.json without establishing ownership or provenance. Local cache replacement can inject false provider contacts into results.
Médio
Python file write/append
json.dump({'result': {'total': total, 'records': recs}}, open('/tmp/hosp.json', 'w'), ensure_ascii=F
The write-mode open uses a fixed shared temporary path with no exclusive creation. It can truncate an unintended target through a pre-existing symlink.
Fatores de risco
⚙️ Comandos externos (10)
🌐 Acesso à rede (7)
📁 Acesso ao sistema de arquivos (6)
Auditado por: codex