📦
Histórico de auditoria
taiwan-stock - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 04:09
Thirty-three alerts are false positives involving Markdown backticks, readable multilingual text, public HTTPS endpoints, and JSON reads. Four download commands use predictable shared temporary paths, creating conditional file collision and symlink overwrite risks. No evidence found of credential theft, malicious payload execution, or prompt injection.
1
Arquivos analisados
83
Linhas analisadas
7
Itens de revisão
0
Falsos positivos ignorados
Itens de revisão de capacidade (4)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
curl -sm 30 'https://openapi.twse.com.tw/v1/exchangeReport/STOCK_DAY_ALL' -o /tmp/twse.json
curl writes to predictable /tmp/twse.json without exclusive creation. A pre-existing writable symlink can redirect the write, and concurrent runs can overwrite data.
Médio
Temp directory access
curl -sm 30 'https://www.tpex.org.tw/openapi/v1/tpex_mainboard_daily_close_quotes' -o /tmp/tpex.json
curl writes to predictable /tmp/tpex.json without exclusive creation. A pre-existing writable symlink can redirect the write, and concurrent runs can overwrite data.
Médio
Temp directory access
curl -sm 30 'https://www.twse.com.tw/exchangeReport/STOCK_DAY?response=json&date=20260901&stockNo=23
curl writes to predictable /tmp/stock.json without exclusive creation. A pre-existing writable symlink can redirect the write, and simultaneous stock queries share one file.
Médio
Temp directory access
curl -sm 30 'https://www.twse.com.tw/exchangeReport/MI_INDEX?response=json&date=20260911&type=ALLBUT
curl writes to predictable /tmp/mi.json without exclusive creation. A pre-existing writable symlink can redirect the write, and concurrent date queries can overwrite data.
Fatores de risco
⚙️ Comandos externos (22)
SKILL.md:18-20 SKILL.md:20-22 SKILL.md:22 SKILL.md:24-36 SKILL.md:36-40 SKILL.md:40-42 SKILL.md:42-44 SKILL.md:44 SKILL.md:46-48 SKILL.md:48-52 SKILL.md:52-55 SKILL.md:55-57 SKILL.md:57 SKILL.md:59-61 SKILL.md:61-65 SKILL.md:65-67 SKILL.md:67-69 SKILL.md:69 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:82
🌐 Acesso à rede (5)
📁 Acesso ao sistema de arquivos (8)
Auditado por: codex