📦
История аудитов
pptx-nova - 1 аудит
Версия аудита 1 Последняя
6 нояб. 2026 г., 15:33
Reviewed all 1,000 supplied findings; most are syntax, multilingual text, local workflow operations, or explicit safety prohibitions. Confirmed risks concern executable JavaScript content loading and predictable shared temporary log redirection; no evidence found of malicious exfiltration or audit-directed prompt injection. The static cap leaves 4,842 additional matches unadjudicated, so this review does not establish publication readiness. Static review was capped at 1000/5842 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
713
Просканировано файлов
182,283
Проанализировано строк
8
Пункты проверки
0
Ложные срабатывания проигнорированы
Пункты проверки возможностей (3)
Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.
Средний
Dynamic import() expression
const mod = await import(join(process.cwd(), path))
loadContent imports supplied .js or .mjs content paths before validation, executing their top-level code with user privileges. Untrusted content can therefore execute arbitrary code.
Средний
nohup (background persistent process)
nohup xdoc daemon start >/tmp/xdoc-daemon.log 2>&1 &
The example redirects daemon output to predictable /tmp/xdoc-daemon.log without exclusive creation. A precreated symlink can redirect writes where platform protections permit.
Средний
Temp directory access
nohup xdoc daemon start >/tmp/xdoc-daemon.log 2>&1 &
The example redirects daemon output to predictable /tmp/xdoc-daemon.log without exclusive creation. A precreated symlink can redirect writes where platform protections permit.
Факторы риска
📁 Доступ к файловой системе (50)
assets/brands/catalog.json:8 assets/deckkits/amber-ledger/amber-ledger.kit.mjs:1 assets/deckkits/amber-ledger/components.mjs:1 assets/deckkits/amber-ledger/examples/build.mjs:3 assets/deckkits/amber-ledger/examples/build.mjs:4 assets/deckkits/amber-ledger/examples/build.mjs:5 assets/deckkits/amber-ledger/intent.md:16 assets/deckkits/amber-ledger/layouts.mjs:1 assets/deckkits/amber-ledger/layouts.mjs:2 assets/deckkits/amber-ledger/registry.mjs:1 assets/deckkits/amber-ledger/registry.mjs:31 assets/deckkits/amber-ledger/registry.mjs:137 assets/deckkits/amber-ledger/registry.mjs:2 assets/deckkits/amber-ledger/registry.mjs:94 assets/deckkits/biennale-yellow/biennale-yellow.kit.mjs:2 assets/deckkits/biennale-yellow/components.mjs:1 assets/deckkits/biennale-yellow/components.mjs:2 assets/deckkits/biennale-yellow/components.mjs:3 assets/deckkits/biennale-yellow/examples/build.mjs:2 assets/deckkits/biennale-yellow/examples/build.mjs:56 assets/deckkits/biennale-yellow/examples/build.mjs:4 assets/deckkits/biennale-yellow/examples/build.mjs:5 assets/deckkits/biennale-yellow/examples/build.mjs:6 assets/deckkits/biennale-yellow/layouts.mjs:1 assets/deckkits/biennale-yellow/layouts.mjs:18 assets/deckkits/biennale-yellow/layouts.mjs:8 assets/deckkits/biennale-yellow/layouts.mjs:9 assets/deckkits/black-gold/black-gold.kit.mjs:2 assets/deckkits/black-gold/components.mjs:2 assets/deckkits/black-gold/components.mjs:3 assets/deckkits/black-gold/components.mjs:4 assets/deckkits/black-gold/examples/build.mjs:2 assets/deckkits/black-gold/examples/build.mjs:56 assets/deckkits/black-gold/examples/build.mjs:4 assets/deckkits/black-gold/examples/build.mjs:5 assets/deckkits/black-gold/examples/build.mjs:6 assets/deckkits/black-gold/layouts.mjs:2 assets/deckkits/black-gold/layouts.mjs:74 assets/deckkits/blue-research/blue-research.kit.mjs:1 assets/deckkits/blue-research/components.mjs:1 assets/deckkits/blue-research/examples/build.mjs:3 assets/deckkits/blue-research/examples/build.mjs:4 assets/deckkits/blue-research/examples/build.mjs:5 assets/deckkits/blue-research/intent.md:58 assets/deckkits/blue-research/layouts.mjs:1 assets/deckkits/blue-research/layouts.mjs:2 assets/deckkits/blue-research/registry.mjs:1 assets/deckkits/blue-research/registry.mjs:27 assets/deckkits/blue-research/registry.mjs:2 assets/deckkits/blue-research/registry.mjs:104
⚙️ Внешние команды (50)
assets/deckkits/amber-ledger/components.mjs:6 assets/deckkits/amber-ledger/layouts.mjs:30 assets/deckkits/amber-ledger/layouts.mjs:50 assets/deckkits/amber-ledger/layouts.mjs:51 assets/deckkits/amber-ledger/layouts.mjs:55 assets/deckkits/amber-ledger/layouts.mjs:57 assets/deckkits/amber-ledger/layouts.mjs:72 assets/deckkits/amber-ledger/layouts.mjs:73 assets/deckkits/amber-ledger/layouts.mjs:92 assets/deckkits/amber-ledger/layouts.mjs:185 assets/deckkits/amber-ledger/layouts.mjs:196 assets/deckkits/amber-ledger/layouts.mjs:217 assets/deckkits/amber-ledger/layouts.mjs:228 assets/deckkits/amber-ledger/layouts.mjs:235 assets/deckkits/amber-ledger/layouts.mjs:245 assets/deckkits/amber-ledger/layouts.mjs:246 assets/deckkits/amber-ledger/layouts.mjs:247 assets/deckkits/amber-ledger/layouts.mjs:254 assets/deckkits/amber-ledger/layouts.mjs:256 assets/deckkits/amber-ledger/layouts.mjs:260 assets/deckkits/amber-ledger/layouts.mjs:262 assets/deckkits/amber-ledger/layouts.mjs:269 assets/deckkits/amber-ledger/layouts.mjs:279 assets/deckkits/amber-ledger/layouts.mjs:297 assets/deckkits/amber-ledger/layouts.mjs:303 assets/deckkits/amber-ledger/layouts.mjs:313 assets/deckkits/amber-ledger/layouts.mjs:323 assets/deckkits/amber-ledger/layouts.mjs:326 assets/deckkits/amber-ledger/layouts.mjs:351 assets/deckkits/amber-ledger/layouts.mjs:353 assets/deckkits/amber-ledger/layouts.mjs:361 assets/deckkits/amber-ledger/layouts.mjs:363 assets/deckkits/amber-ledger/layouts.mjs:370 assets/deckkits/amber-ledger/layouts.mjs:382 assets/deckkits/amber-ledger/layouts.mjs:386 assets/deckkits/amber-ledger/layouts.mjs:396 assets/deckkits/amber-ledger/layouts.mjs:404 assets/deckkits/amber-ledger/layouts.mjs:406 assets/deckkits/amber-ledger/layouts.mjs:410 assets/deckkits/amber-ledger/layouts.mjs:413 assets/deckkits/amber-ledger/layouts.mjs:417 assets/deckkits/amber-ledger/layouts.mjs:433 assets/deckkits/amber-ledger/layouts.mjs:442 assets/deckkits/amber-ledger/layouts.mjs:474 assets/deckkits/amber-ledger/layouts.mjs:486 assets/deckkits/amber-ledger/layouts.mjs:493 assets/deckkits/amber-ledger/layouts.mjs:509 assets/deckkits/amber-ledger/layouts.mjs:517 assets/deckkits/amber-ledger/layouts.mjs:522 assets/deckkits/amber-ledger/layouts.mjs:541
🌐 Доступ к сети (50)
assets/deckkits/biennale-yellow/schemas/biennaleCalendarSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleChapterSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleColophonSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleCoverSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleDataSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleEvidenceSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleManifestoSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleProgrammeSlide.schema.json:2 assets/deckkits/biennale-yellow/schemas/biennaleQuoteSlide.schema.json:2 assets/deckkits/black-gold/schemas/ledgerCoverSlide.schema.json:2 assets/deckkits/black-gold/schemas/ledgerDecisionSlide.schema.json:2 assets/deckkits/black-gold/schemas/ledgerMatrixSlide.schema.json:2 assets/deckkits/black-gold/schemas/ledgerRankingSlide.schema.json:2 assets/deckkits/black-gold/schemas/ledgerSummarySlide.schema.json:2 assets/deckkits/black-gold/schemas/ledgerTrendSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchBridgeSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchCoverSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchEvidenceSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchFindingsSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchImplicationsSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchMatrixSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchOverviewSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchScorecardSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchTiersSlide.schema.json:2 assets/deckkits/blue-research/schemas/researchTimelineSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideBarChartSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideChapterSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideCompareSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideCoverSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideCycleSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideDonutSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideEndSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideFadeListSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideFlowSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideListSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsidePyramidSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideQuoteSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideSplitSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideStatementSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideStatsSlide.schema.json:2 assets/deckkits/broadside/schemas/broadsideTimelineSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianAgendaSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianAnalyticalSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianBarChartSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianCardsSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianClosingSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianComparisonSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianCoverSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianExhibitSlide.schema.json:2 assets/deckkits/cartesian/schemas/cartesianFormulaSlide.schema.json:2
🔑 Переменные окружения (39)
assets/deckkits/catalog.json:56 assets/deckkits/clear-value/examples/content.json:14 assets/deckkits/long-table/examples/content.json:30 assets/examples/deckkits/clear-value/brief.md:8 assets/examples/deckkits/clear-value/content.json:14 assets/examples/deckkits/clear-value/summary.json:6 assets/examples/deckkits/long-table/content.json:30 assets/examples/deckkits/manifest.json:906 references/edit/template-following.md:270 scripts/cli/review/compare.mjs:316 scripts/cli/review/compare.mjs:221 scripts/cli/review/compare.mjs:316 scripts/cli/review/compare.mjs:710 scripts/cli/review/compare.mjs:721 scripts/cli/runtime/remediation.mjs:142 scripts/cli/runtime/remediation.mjs:160 scripts/cli/runtime/remediation.mjs:115 scripts/cli/runtime/remediation.mjs:317 scripts/cli/runtime/remediation.mjs:318 scripts/cli/runtime/remediation.mjs:115 scripts/cli/runtime/remediation.mjs:130 scripts/cli/runtime/remediation.mjs:142 scripts/cli/runtime/remediation.mjs:160 scripts/cli/runtime/remediation.mjs:164 scripts/cli/runtime/remediation.mjs:317 scripts/cli/runtime/remediation.mjs:318 scripts/lib/assets/tabler-icons.mjs:9 scripts/lib/assets/tabler-icons.mjs:9 scripts/lib/review/page-bitmap-cache.mjs:71 scripts/lib/review/page-bitmap-cache.mjs:71 scripts/lib/review/render-context.mjs:15 scripts/lib/review/render-context.mjs:15 scripts/lib/review/render-context.mjs:38 scripts/lib/runtime/progress.mjs:23 scripts/lib/runtime/progress.mjs:112 scripts/lib/runtime/progress.mjs:23 scripts/lib/runtime/progress.mjs:112 scripts/lib/runtime/runner-runtime.mjs:104 scripts/lib/runtime/runner-runtime.mjs:211
⚡ Содержит скрипты (7)
Аудитор:: codex