📦
Histórico de auditoria
taiwan-museum - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 03:43
Seven findings are false positives: Markdown fences, public government URLs, and readable multilingual text do not demonstrate execution, exfiltration, or obfuscation. Two filesystem findings are confirmed because a predictable shared temporary path permits symlink overwrite and local data substitution. No evidence found of prompt injection, credential access, or malicious intent.
1
Arquivos analisados
61
Linhas analisadas
5
Itens de revisão
0
Falsos positivos ignorados
Itens de revisão de capacidade (2)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' 'https://cloud.culture.tw/frontsite/trans/emapOpenDataAction.do?method=
curl writes to the predictable /tmp/museum.json path without exclusive creation or symlink protection. A local actor could precreate a symlink and overwrite another writable file.
Médio
Temp directory access
d = json.load(open('/tmp/museum.json'))
The parser opens the same predictable shared file without verifying its provenance. A local actor could substitute records, including after a failed download, and corrupt results.
Fatores de risco
⚙️ Comandos externos (4)
🌐 Acesso à rede (2)
📁 Acesso ao sistema de arquivos (2)
Auditado por: codex