📦
Histórico de auditoria
taiwan-suspension - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 04:13
Ten static alerts are false positives involving Markdown, official URLs, HTML entity decoding, and multilingual text. Two temporary-file alerts expose local overwrite or tampering risks; an additional finding addresses stale announcements after failed downloads. No evidence found of prompt injection, credential collection, exfiltration, or hidden code execution.
1
Arquivos analisados
77
Linhas analisadas
6
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (1)
Médio
Failed Downloads Can Reuse Stale Announcements
The curl example does not require success before parsing the existing file. An early download failure can leave old announcements available for a newly timestamped response.
The examples lack a download-status gate, while responses require a current query time. Prose warns about failures, but the executable workflow does not enforce freshness.
Itens de revisão de capacidade (2)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' 'https://www.dgpa.gov.tw/typh/daily/nds.html' -o /tmp/nds.html
curl writes to the predictable shared path /tmp/nds.html without private creation or symlink protection. A local attacker could redirect writes to files accessible to the executing user.
Médio
Temp directory access
t = open('/tmp/nds.html', encoding='utf-8', errors='replace').read()
The parser reopens the same predictable temporary path without ownership or integrity checks. A local attacker could replace its contents and cause false suspension reports.
Fatores de risco
⚙️ Comandos externos (6)
🌐 Acesso à rede (2)
📁 Acesso ao sistema de arquivos (2)
Auditado por: codex