📦
История аудитов
html-slides - 1 аудит
Версия аудита 1 Последняя
7 нояб. 2026 г., 14:36
The 23 shell-execution matches are Markdown formatting, and three resource links are benign references. Eleven CDN asset references present low-severity supply-chain exposure through mutable version aliases without integrity checks. No evidence found of prompt injection, credential access, or intentional data exfiltration.
1
Просканировано файлов
344
Проанализировано строк
13
Пункты проверки
0
Ложные срабатывания проигнорированы
Пункты проверки возможностей (11)
Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.
Низкий
Hardcoded URL · 3 совпадений
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/reveal.css">
The core stylesheet loads from a mutable reveal.js@4 CDN URL without integrity verification. A compromised dependency could alter presentation appearance or introduce tracking.
Низкий
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/black.css">
The black theme loads external CSS through a mutable major-version alias without integrity verification. Dependency compromise could alter displayed content or introduce tracking.
Низкий
Hardcoded URL · 3 совпадений
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/reveal.js"></script>
The browser executes CDN JavaScript from a mutable reveal.js@4 alias without integrity verification. Compromised upstream code could access presentation content.
Низкий
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/night.css">
The night theme uses a mutable reveal.js@4 CDN alias without integrity verification. A compromised stylesheet could modify displayed content or introduce tracking.
Низкий
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/plugin/highlight/monokai.css">
The highlighting stylesheet loads from a mutable CDN alias without integrity verification. Dependency compromise could change code presentation or introduce tracking.
Низкий
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4/plugin/highlight/highlight.js"></script>
The highlighting plugin executes external JavaScript through a mutable major-version alias without integrity verification. Compromised upstream code could access slide content.
Низкий
Hardcoded URL
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4/dist/theme/white.css">
The white theme loads external CSS from a mutable major-version alias without integrity verification. Compromised styles could modify presentation content or introduce tracking.
Факторы риска
⚙️ Внешние команды (23)
SKILL.md:71-89 SKILL.md:89-93 SKILL.md:93-112 SKILL.md:112-116 SKILL.md:116 SKILL.md:118-120 SKILL.md:120-124 SKILL.md:124-130 SKILL.md:130-134 SKILL.md:134-141 SKILL.md:141-143 SKILL.md:143 SKILL.md:147-156 SKILL.md:156-160 SKILL.md:160-168 SKILL.md:168-172 SKILL.md:172-184 SKILL.md:184-188 SKILL.md:188-222 SKILL.md:222-227 SKILL.md:227-289 SKILL.md:289-292 SKILL.md:292-337
Аудитор:: codex