Habilidades taiwan-id-check Histórico de auditoria
📦

Histórico de auditoria

taiwan-id-check - 1 auditoria

13 de out. de 2026, 03:21

All 13 static findings are false positives involving Markdown backticks or readable multilingual text, not shell substitution or concealed payloads. No evidence found of prompt injection, exfiltration, network access, or destructive operations. A reproduced Unicode normalization bypass contradicts the stated ASCII-only input policy and is recorded as a low-severity semantic finding.

1
Arquivos analisados
85
Linhas analisadas
2
Itens de revisão
0
Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Baixo
Unicode Normalization Bypasses ASCII-Only Input Policy
Uppercasing before validation converts Unicode U+017F to ASCII S, allowing a non-ASCII identifier through the regex and checksum. This contradicts the documented rejection policy.
A constructed input containing U+017F followed by 123456784 normalizes to S123456784 and passes the documented regex and checksum. The original input is non-ASCII.
Auditado por: codex