📦
Histórico de auditoria
taiwan-schools - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 04:06
Markdown backticks, public Ministry of Education URLs, and readable multilingual text explain eleven findings without evidence of malicious execution, exfiltration, or obfuscation. Three filesystem findings concern predictable shared temporary paths, enabling local overwrite or dataset tampering when another process can control those paths. No evidence found of prompt injection or credential collection.
1
Arquivos analisados
67
Linhas analisadas
6
Itens de revisão
0
Falsos positivos ignorados
Itens de revisão de capacidade (3)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' -o /tmp/basej.csv 'https://stats.moe.gov.tw/files/opendata/basej.csv'
curl writes to the fixed shared path /tmp/basej.csv without exclusive creation. A local attacker can precreate a symbolic link, causing overwrite of a target writable by the agent.
Médio
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' -o /tmp/basec114.csv 'https://stats.moe.gov.tw/files/detail/114/114_bas
curl writes to the fixed shared path /tmp/basec114.csv without exclusive creation. A preexisting file or attacker-created symbolic link can cause unintended overwrite under the agent's permissions.
Médio
Temp directory access
rows = list(csv.reader(io.StringIO(open('/tmp/basec114.csv','rb').read().decode('utf-8-sig'))))
The parser reads /tmp/basec114.csv without checking provenance or isolating it from other local processes. If another process controls that path, substituted CSV can corrupt reported school totals.
Fatores de risco
⚙️ Comandos externos (7)
🌐 Acesso à rede (3)
📁 Acesso ao sistema de arquivos (3)
Auditado por: codex