📦
Histórico de auditoria
taiwan-lunar-cal - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 03:40
Eight backtick findings are false positives caused by Markdown syntax, not shell command substitution. Three temporary-file findings expose a predictable shared-directory script to preexisting content or symlink attacks. No evidence found of prompt injection, credential access, or data exfiltration in SKILL.md.
1
Arquivos analisados
164
Linhas analisadas
5
Itens de revisão
0
Falsos positivos ignorados
Itens de revisão de capacidade (3)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
上面兩段程式(農曆換算、節氣計算)都是 python3 標準庫實作,不需要安裝任何套件。把兩段依序存成同一個 `.py` 檔(如 `/tmp/lunar.py`)後直接呼叫:
The recommended /tmp/lunar.py path is predictable in a shared directory and is later appended to and executed. No private-directory or ownership safeguards are specified.
Médio
Temp directory access
cat >> /tmp/lunar.py <<'EOF'
The append redirection preserves any preexisting script content and follows symlinks at a predictable temporary path. Another local user could precreate malicious content or redirect writes.
Médio
Temp directory access
python3 /tmp/lunar.py
Python executes the predictable temporary script without verifying ownership or excluding preexisting content. This can run attacker-supplied code after the preceding append operation.
Fatores de risco
⚙️ Comandos externos (8)
📁 Acesso ao sistema de arquivos (3)
Auditado por: codex