Подтверждённая проблема безопасности (1) требует внимания.
Контекст установки
Исторические доказательства
Этот отчёт может не описывать артефакт, доступный для установки в настоящее время. Откройте текущую страницу Навыка для получения рекомендаций по установке.
Этот отчёт не блокирует и не разрешает манифест или ZIP.
The skill is a documented client for the verging.ai background removal service and intentionally performs authenticated network uploads of user images. Most markdown backtick findings are false positives, but the curl workflow, external API calls, API key handling, temporary files, and public result URLs are real security and privacy risks.
Позиция отчета
Исторический отчет
Откройте историю аудита перед использованием этого отчета для установки.
Аттестация аудита
Не подлежит аттестации
Требуемая неизменяемая привязка не завершена.
Проверка человеком
Не проверено
Для этого отчета не зафиксирована проверка человеком.
Этот отчёт не заявляет о выполнении во время работы или в песочнице и не доказывает отсутствие побочных эффектов.
01
Цепочка доказательств
Проследите доказательства от привязки источника до контракта установки. Доступные доказательства подтверждают возможность проверки; они не являются гарантией безопасности.
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
| --api-key | -k | Your API Key | VERGING_API_KEY env |
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
curl -X POST -H "Authorization: ApiKey $VERGING_API_KEY" \
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
curl -X POST -H "Authorization: ApiKey $VERGING_API_KEY" \
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
- Replace `$VERGING_API_KEY` with your actual API key or set it as an environment variable
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
- API Key can be passed via --api-key parameter or read from environment variable VERGING_API_KEY
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
- Set it via environment variable: `export VERGING_API_KEY="your_key"`
The skill requires a verging.ai API key and uses it for authenticated API requests. This is intended behavior, but it is real handling of sensitive credentials.
This block documents curl commands that send an API key and image data to external endpoints. It is documentation rather than embedded code, but the skill instructs the agent to run these external commands.
- Every 5 seconds call `/api/v1/background-removal/jobs?job_ids=xxx` to query status
This range includes the documented workflow to poll remote job URLs and use curl to download the result. The static trigger is a markdown backtick, but the surrounding instructions require external command execution.
The example public_url uses an external image delivery domain. This is a real privacy consideration because processed image results are exposed by URL.
- For remote image URLs (https://example.com/image.jpg), use curl to download
The skill instructs the agent to download remote image URLs with curl. User-supplied URL downloads can contact arbitrary hosts and should be constrained.
- **Temporary files:** Local temporary files are stored in `/tmp/verging-bg-removal/` and cleaned up
The skill documents storing temporary files under /tmp/verging-bg-removal. A fixed temp directory can expose image data or collide across runs if permissions and cleanup are weak.
The skill instructs agents to upload images to verging.ai storage for processing and return processed images through a public URL. Users may expose private photos if they are not warned before upload or if result URLs are shared.
The processing flow explicitly uploads images to external storage and the privacy section states that result images are returned via a public URL.
04
Меры по устранению
В ходе этого аудита были зафиксированы рекомендуемые исправления. Их применение является ответственностью сопровождающего.
FIX-001
Высокий
API key exposure risk
Prefer environment variables or a secret manager, discourage command-line API keys, and never print Authorization headers in logs or examples.
FIX-002
Высокий
External image transfer and public result URLs
Warn users before uploading sensitive images, document retention and access controls, and use expiring private result URLs where possible.
FIX-003
Средний
Unconstrained curl workflow
Validate URL schemes and hosts, quote all local paths, and restrict downloads to http or https resources requested by the user.
FIX-004
Средний
Temporary file handling
Use a unique per-run temporary directory with restrictive permissions and clean it up on success, failure, and cancellation.
05
Экспертные доказательства
Неизменяемая идентификация субъекта, метаданные сканера, отклонённые совпадения и доказательства на уровне источника.
Субъект артефакта
Коммит Marketplace
Недоступно
Хеш содержимого
Недоступно
Хеш дерева
Недоступно
Путь Skill
Недоступно
Хеш данных аудита
Недоступно
Метаданные анализа
Модель аудита: codex
Состояние анализа: Завершено
Область действия ограничена зафиксированными файлами, строками, методами и доказательствами. Выполнение во время работы или в песочнице не заявляется.