📦
Histórico de auditoria
vibestart - 1 auditoria
Versão da auditoria 1 Mais recente
10 de out. de 2026, 14:10
Ten detections are false positives involving Markdown or ordinary project workflows; six describe commands that fetch and execute an unpinned npm package. Broad rollback instructions can discard unrelated edits and delete untracked files created after the operation starts. No evidence found of prompt injection, credential theft, or malicious exfiltration in the reviewed skill files; external package implementation was not available.
3
Arquivos analisados
172
Linhas analisadas
8
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (1)
Médio
Broad Rollback Can Delete Unrelated Project Work
The abandonment guidance uses `git restore . && git clean -fd`. It can discard unrelated tracked edits and permanently delete untracked files added after the operation.
The reference provides a blanket destructive rollback without a deletion preview or change ownership check. A clean starting worktree does not protect later additions.
Itens de revisão de capacidade (6)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Médio
Ruby/shell backtick execution
2. Run the CLI from npm with `npx --yes vibestart-cli` (or `pnpm dlx vibestart-cli`); a global insta
The launcher fetches and executes an unpinned npm package, with npx automatically approving installation. Later preview/application pinning does not protect this initial invocation.
Médio
Ruby/shell backtick execution
4. Read `npx --yes vibestart-cli --help` for creation or `npx --yes vibestart-cli COMMAND --help` fo
The help commands invoke the unpinned npm launcher with automatic installation approval. Help inspection still executes external package code before its trust is established.
Médio
Ruby/shell backtick execution
| Create a project or use a recipe | `npx --yes vibestart-cli --list --json`
Stack discovery invokes an unpinned npm package through npx with automatic installation approval. Listing output does not eliminate the external code execution risk.
Médio
Ruby/shell backtick execution
| Add a capability | `npx --yes vibestart-cli add --list --json`
Capability discovery invokes an unpinned npm package with automatic installation approval. Even a read-only capability list executes the downloaded CLI code.
Médio
Ruby/shell backtick execution
| Diagnose an existing project | `npx --yes vibestart-cli doctor --offline --js
The doctor command uses an unpinned npx launcher with automatic installation approval. Its offline flag controls diagnostics, not the launcher's package download or execution.
Médio
Ruby/shell backtick execution
| Update a generated project | `npx --yes vibestart-cli upgrade --dry-run --j
The upgrade preview invokes an unpinned npm launcher with automatic installation approval. Preview/application pinning is advised elsewhere, but this example still exposes external package execution.
Fatores de risco
Auditado por: codex