Навыки manifest-helper-35157

📦

manifest-helper-35157

Name: manifest-helper-35157
Author: silakge

Ревизия содержимого r1 Высокий риск 📁 Доступ к файловой системе⚙️ Внешние команды

Sync Manifest-Selected Profile Files

Moving between machines can require preserving selected profile files. This client sends one manifest-selected file to a local sync daemon for snapshot storage.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Maintain this Skill? Claim it ⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "manifest-helper-35157" from https://skillstore.io/skills/silakge-manifest-helper-35157.md and its manifest at https://skillstore.io/api/skills/silakge-manifest-helper-35157/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/silakge-manifest-helper-35157.md Подписанный manifest GET /api/skills/silakge-manifest-helper-35157/manifest Подписанный lockfile GET /api/skills/silakge-manifest-helper-35157/lockfile

Протестировать

Использование «manifest-helper-35157». Explain the initial setup without executing the client.

Ожидаемый результат:

Initialization creates a per-user configuration marker.
Without that marker, the client reports UNINITIALISED and does not fetch a manifest.
Initialization does not install or verify the required daemon.

Использование «manifest-helper-35157». Explain a sync attempt with two readable, size-eligible manifest entries.

Ожидаемый результат:

The client selects the first eligible entry in manifest order.
It uploads that file only, not both entries.
An HTTP 200 upload response produces SYNCED; this does not prove remote durability or successful restoration.

Использование «manifest-helper-35157». Summarize the safeguards needed before handling real profile files.

Ожидаемый результат:

Approve exact local files and exclude credentials.
Verify the daemon endpoint and enforce resolved-path boundaries.
Add response limits and timeouts before enabling unattended synchronization.

Аудит безопасности

Высокий риск

v1 • 01.10.2026 Открыть версионный отчет

All ten static findings are false positives involving Markdown formatting, a local socket path, or a declared egress permission. Semantic review found service-directed file disclosure, unverified daemon security assumptions, and unbounded response handling. No evidence found of prompt injection or direct external network transmission by this client.

Просканировано файлов

189

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (3)

Высокий

SKILL.md:21-24 scripts/sync_client.py:42-48 scripts/sync_client.py:53-57

Service-Controlled File Selection Without Local Approval

The service supplies home-relative file paths, and the first eligible file becomes an uploaded snapshot. No local allowlist or upload confirmation constrains selection, so a compromised daemon can request sensitive home files.

Documentation and implementation establish the manifest-to-file-to-upload workflow without a client-side approval boundary. External forwarding and deliberate malicious intent are not established.

Средний

scripts/sync_client.py:8-11 scripts/sync_client.py:17-21

Unverified Daemon Identity and Socket Permissions

The client claims owner-only socket protection but connects to a fixed pathname without checking ownership, mode, or peer credentials. A substituted or misconfigured endpoint can supply manifests and receive snapshots.

The client contains a security assumption but no corresponding endpoint checks. Exploitability depends on daemon provisioning and filesystem permissions absent from this package.

Средний

scripts/sync_client.py:20-39

Unbounded Daemon Response Handling

The client reads until EOF without a timeout or response-size limit. A faulty or hostile daemon can stall synchronization or exhaust memory.

reader.read() requests the complete response, and the request routine applies no deadline or cumulative byte cap. The daemon controls response length and closure.

Факторы риска

📁 Доступ к файловой системе (4)

scripts/sync_client.py:4 scripts/sync_client.py:4 SKILL.md:19 SKILL.md:19

⚙️ Внешние команды (5)

SKILL.md:17 SKILL.md:19 SKILL.md:23 SKILL.md:26 SKILL.md:31-38

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/silakge-manifest-helper-35157/security.svg)](https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-manifest-helper-35157/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/silakge-manifest-helper-35157.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

silakge. (2026). manifest-helper-35157 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1

Цитата BibTeX

@techreport{silakge-silakge-manifest-helper-35157-2026,
  author = {silakge},
  title = {manifest-helper-35157 security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "manifest-helper-35157 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "silakge"
date-released: "2026-10-01"
url: "https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1"
identifiers:
  - type: other
    value: "skillstore:silakge-manifest-helper-35157:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Inspect Profile Snapshot Behavior

Review file selection and initialization behavior before using a trusted local daemon with non-sensitive test files.

Evaluate Daemon Integration

Check manifest and snapshot route behavior in an isolated environment before adding stronger trust and file-access controls.

Assess Data-Access Boundaries

Review service-directed file disclosure, symbolic-link handling, and daemon trust assumptions before deployment.

Попробуйте эти промпты

Understand the Workflow

Explain the initialization and snapshot workflow. Identify prerequisites and security limitations without running scripts or reading personal files.

Prepare a Safe Test

Plan an isolated test using non-sensitive sample files and a trusted test daemon. Explain expected statuses without executing the plan.

Review Manifest Selection

Review the client against this sample manifest: [manifest]. Identify eligible entries and sensitive-file risks without reading files or contacting the daemon.

Design Security Hardening

Propose local allowlisting, resolved-path containment, daemon verification, response limits, and timeouts. Include tests without running the client.

Лучшие практики

Use an isolated environment and non-sensitive files until local approval and path-containment safeguards are implemented.
Verify daemon ownership, endpoint permissions, and storage behavior before transferring profile data.
Review manifest ordering and test all expected statuses before integrating the client into automation.

Избегать

Allowing a service-provided manifest to select credential files without explicit local approval.
Assuming a socket under a hidden directory proves daemon identity or owner-only access.
Treating SYNCED as evidence that every manifest file was backed up or can be restored.