📦
История аудитов
verify-release - 1 аудит
Версия аудита 1 Последняя
27 окт. 2026 г., 11:32
The static matches are Markdown formatting, a documented service endpoint, or release decision criteria rather than the alleged threats. The skill also directs deployment record creation and pipeline changes without explicit confirmation, which can affect production evidence.
2
Просканировано файлов
184
Проанализировано строк
3
Пункты проверки
0
Ложные срабатывания проигнорированы
Подтверждённые проблемы безопасности (1)
Средний
Deployment records may be changed without confirmation
The skill instructs the agent to record missing deployments as succeeded and add a command to the pipeline without requiring user confirmation. Incorrect records or pipeline changes can distort release comparisons.
The instructions explicitly request a state-changing deployment record and pipeline modification, but do not require confirmation or verification of successful status.
Факторы риска
⚙️ Внешние команды (30)
SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:36-38 SKILL.md:38-46 SKILL.md:46-48 SKILL.md:48-54 SKILL.md:54-56 SKILL.md:56-60 SKILL.md:60 SKILL.md:61 SKILL.md:62-63 SKILL.md:63-64 SKILL.md:64-66 SKILL.md:66 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:73-83 SKILL.md:83-86 SKILL.md:86-94 SKILL.md:94-97 SKILL.md:97-103 SKILL.md:103-104 SKILL.md:104 SKILL.md:105 SKILL.md:112-113 SKILL.md:113-118 SKILL.md:118-127
🌐 Доступ к сети (1)
Аудитор:: codex