Навыки nature-statistics История аудитов
📦

История аудитов

nature-statistics - 2 аудиты

Сравнение версий

Изменения возможностей и находок между проверенными версиями, сначала новые.

ВерсияДатаРезультатПункты проверкиИзменение к предыдущей
v2 Последняя18 авг. 2026 г., 08:32 Подтверждённых находок нет5Возможности не изменились
v1 18 авг. 2026 г., 08:32 Подтверждённых находок нет5Базовая
Версия аудита 2 Последняя

18 авг. 2026 г., 08:32

Five parent-directory references direct the agent beyond the audited skill bundle to unaudited sibling files. The command and reconnaissance detections are markdown or statistical guidance, while the entropy alert is readable Chinese documentation. No prompt injection, executable command, network action, or obfuscated payload was found in the reviewed files.

11
Просканировано файлов
815
Проанализировано строк
7
Пункты проверки
0
Ложные срабатывания проигнорированы
Пункты проверки возможностей (5)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий
manifest.yaml:23
Path traversal sequence
path: ../nature-shared/journal-formats/nature-machine-intelligence.md
The on-demand path deliberately resolves outside the audited skill directory. Its fixed target limits scope, but unaudited sibling content can influence agent behavior.
Высокий
manifest.yaml:31
Path traversal sequence
path: ../nature-shared/core/consistency-sweep.md
The manifest loads a consistency guide through a parent-directory path outside the audited bundle. This bypasses package-local content boundaries.
Высокий
SKILL.md:46
Path traversal sequence
`../nature-shared/journal-formats/nature-machine-intelligence.md` for its
The workflow explicitly directs the agent to read a parent-directory file outside the audited skill bundle. That content was not included in this audit.
Высокий
SKILL.md:108
Path traversal sequence
| [../nature-shared/journal-formats/nature-machine-intelligence.md](../nature-shared/journal-formats
The related-files table links outside the skill root to an unaudited sibling guide. Opening it crosses the audited package boundary.
Высокий
SKILL.md:113
Path traversal sequence
| [../nature-shared/core/consistency-sweep.md](../nature-shared/core/consistency-sweep.md) | The sam
The documentation instructs access to a parent-directory consistency guide. The fixed path reduces traversal scope but still imports unaudited instructions.

Факторы риска

📁 Доступ к файловой системе (5)
manifest.yaml:23 manifest.yaml:31 SKILL.md:46 SKILL.md:108 SKILL.md:113
⚙️ Внешние команды (15)
SKILL.md:15 SKILL.md:17 SKILL.md:38 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:46 SKILL.md:48 SKILL.md:50 SKILL.md:56-77 SKILL.md:77-81 SKILL.md:81-91 SKILL.md:91-97 SKILL.md:97-113 SKILL.md:113
Аудитор:: codex
Версия аудита 1

18 авг. 2026 г., 08:32

Five parent-directory references direct the agent beyond the audited skill bundle to unaudited sibling files. The command and reconnaissance detections are markdown or statistical guidance, while the entropy alert is readable Chinese documentation. No prompt injection, executable command, network action, or obfuscated payload was found in the reviewed files.

11
Просканировано файлов
815
Проанализировано строк
7
Пункты проверки
0
Ложные срабатывания проигнорированы
Пункты проверки возможностей (5)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий
manifest.yaml:23
Path traversal sequence
path: ../nature-shared/journal-formats/nature-machine-intelligence.md
The on-demand path deliberately resolves outside the audited skill directory. Its fixed target limits scope, but unaudited sibling content can influence agent behavior.
Высокий
manifest.yaml:31
Path traversal sequence
path: ../nature-shared/core/consistency-sweep.md
The manifest loads a consistency guide through a parent-directory path outside the audited bundle. This bypasses package-local content boundaries.
Высокий
SKILL.md:46
Path traversal sequence
`../nature-shared/journal-formats/nature-machine-intelligence.md` for its
The workflow explicitly directs the agent to read a parent-directory file outside the audited skill bundle. That content was not included in this audit.
Высокий
SKILL.md:108
Path traversal sequence
| [../nature-shared/journal-formats/nature-machine-intelligence.md](../nature-shared/journal-formats
The related-files table links outside the skill root to an unaudited sibling guide. Opening it crosses the audited package boundary.
Высокий
SKILL.md:113
Path traversal sequence
| [../nature-shared/core/consistency-sweep.md](../nature-shared/core/consistency-sweep.md) | The sam
The documentation instructs access to a parent-directory consistency guide. The fixed path reduces traversal scope but still imports unaudited instructions.

Факторы риска

📁 Доступ к файловой системе (5)
manifest.yaml:23 manifest.yaml:31 SKILL.md:46 SKILL.md:108 SKILL.md:113
⚙️ Внешние команды (15)
SKILL.md:15 SKILL.md:17 SKILL.md:38 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:46 SKILL.md:48 SKILL.md:50 SKILL.md:56-77 SKILL.md:77-81 SKILL.md:81-91 SKILL.md:91-97 SKILL.md:97-113 SKILL.md:113
Аудитор:: codex
← Назад к навыку