Audit History

Environment file access

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

Environment file access

return Boolean(process.env.SUDOWORK_AUTH_PROXY_URL && process.env.SUDOWORK_AUTH_PROXY_TOKEN);

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

scripts/shareone_client.js:134

Environment file access

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

Environment file access

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

scripts/shareone_client.js:177

Environment file access

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

scripts/check_api_key.js:18-20 scripts/create_guest_key.js:16-31 workflows/environment-and-credentials.md:60-64 workflows/environment-and-credentials.md:113-119

API Keys Are Printed to Output and Chat Workflows

check_api_key.js prints KEY_FOUND with the full API key, and create_guest_key.js prints generated keys. The workflow also instructs the agent to display generated keys and key-bearing account binding links to the user, which can expose credentials in transcripts and logs.

The cited code and workflow explicitly output full API key values. This is not just secret access; it is intentional disclosure through process output and chat instructions.

High

scripts/shareone_client.js:8 scripts/shareone_client.js:42-43

Local API Key Stored Without Permission Hardening

shareone_client.js writes the ShareOne API key as plaintext JSON in the user home directory without setting restrictive file permissions. Other local users or backup tools could read the credential depending on the environment.

The credential path and write call are explicit, and there is no chmod or atomic permission handling nearby. The impact depends on host file permissions, so confidence is high but not absolute.

Capability review items (74)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/create_guest_key.js:16

Generic API/secret keys

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

Generic API/secret keys

if (result.api_key) {

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:19

Generic API/secret keys

await saveSudoworkApiKey(result.api_key);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:21

Generic API/secret keys

console.log(`ERROR:SUDOWORK_AUTH_PROXY_SAVE_FAILED:${result.api_key}`);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:29

Generic API/secret keys

saveLocalApiKey(result.api_key);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:31

Generic API/secret keys

console.log(`GUEST_KEY_CREATED:${result.api_key}`);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/shareone_client.js:32

Generic API/secret keys

return data && data.api_key ? data.api_key : null;

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

Generic API/secret keys

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:17

Generic API/secret keys

fs.writeFileSync(CREDENTIALS_PATH, JSON.stringify({ api_key: apiKey }));

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

SKILL.md:62

Generic API/secret keys

- `KEY_FOUND:<api_key>`:当前是普通 AI Agent 环境,且已找到 API Key。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

SKILL.md:68

Generic API/secret keys

- 普通 AI Agent:可以使用 `--api-key`、环境变量 `SHAREONE_API_KEY` 或本地凭证文件。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

SKILL.md:112

Generic API/secret keys

- 如果 `create_guest_key.js` 输出 `GUEST_KEY_CREATED:<api_key>`,必须立即向用户发送临时 API Key、绑定账号链接和保存提醒。即使 key 已

The workflow places an API key into a URL query string, which can leak through logs, history, or referrers. This is real credential exposure risk.

High

Generic API/secret keys

- `KEY_FOUND:<api_key>`:当前是普通 AI Agent 环境。将该 API Key 用于后续 direct 模式发布请求。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:35 workflows/environment-and-credentials.md:94

Generic API/secret keys · 2 occurrences

node scripts/save_api_key.js <用户提供的KEY>

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:60 workflows/environment-and-credentials.md:113

Generic API/secret keys · 2 occurrences

如果输出 `GUEST_KEY_CREATED:<api_key>`,这是阻塞性用户通知。必须先回复用户以下内容,然后才能继续原操作:

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:62 workflows/environment-and-credentials.md:70 workflows/environment-and-credentials.md:115

Generic API/secret keys · 3 occurrences

> 已为您自动分配临时 API Key:`<api_key>`

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:63 workflows/environment-and-credentials.md:116

Generic API/secret keys · 2 occurrences

> 绑定账号链接:https://shareone.app/?key=<api_key>

The workflow places an API key into a URL query string, which can leak through logs, history, or referrers. This is real credential exposure risk.

High

workflows/environment-and-credentials.md:68

Generic API/secret keys

如果输出 `ERROR:SUDOWORK_AUTH_PROXY_SAVE_FAILED:<api_key>`,暂停操作并提示:

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:103

Generic API/secret keys

确认输出 `KEY_FOUND:<api_key>` 后继续原操作。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:119

Generic API/secret keys

普通 AI Agent 环境会把临时 API Key 保存到本地凭证文件。即使保存成功,也不能省略上面的用户通知。后续也可以使用环境变量 `SHAREONE_API_KEY` 或命令参数 `--api

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:128

Generic API/secret keys

- 普通 AI Agent:可以传 `--api-key`,也可以依赖 `SHAREONE_API_KEY` 或本地凭证。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/publish-binary-file.md:39 workflows/publish-binary-file.md:55 workflows/publish-text-page.md:54 workflows/update-share-settings.md:37

Generic API/secret keys · 4 occurrences

- 普通 AI Agent 环境可传 `--api-key`,也可以依赖 `SHAREONE_API_KEY` 或本地凭证。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

Medium

Node.js fs operations

const data = JSON.parse(fs.readFileSync(CREDENTIALS_PATH, 'utf8'));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

scripts/shareone_client.js:48

Node.js fs operations

fs.writeFileSync(CREDENTIALS_PATH, JSON.stringify({ api_key: apiKey }));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

Node.js fs operations

fs.unlinkSync(CREDENTIALS_PATH);

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

Synchronous file operations

const data = JSON.parse(fs.readFileSync(CREDENTIALS_PATH, 'utf8'));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

scripts/shareone_upload.js:38 scripts/shareone_upload.js:59

Synchronous file operations

fs.writeFileSync(CREDENTIALS_PATH, JSON.stringify({ api_key: apiKey }));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

Node.js fs operations · 2 occurrences

const fileData = fs.readFileSync(filePath);

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Medium

scripts/shareone_upload.js:38 scripts/shareone_upload.js:59

Synchronous file operations · 2 occurrences

const fileData = fs.readFileSync(filePath);

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Medium

Node.js fs operations

const content = fs.readFileSync(filePath, "utf-8");

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Medium

Synchronous file operations

const content = fs.readFileSync(filePath, "utf-8");

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Low

Environment variable access (dot notation)

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

scripts/shareone_client.js:62

Environment variable object

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

HTTP client library

const req = client.request(target, {

The script constructs outbound HTTP or HTTPS requests to ShareOne or configured endpoints. This is necessary for the skill but is real network egress.

Low

scripts/shareone_client.js:7

Hardcoded URL

const DEFAULT_BASE_URL = 'https://shareone.app';

The script constructs outbound HTTP or HTTPS requests to ShareOne or configured endpoints. This is necessary for the skill but is real network egress.

Low

scripts/shareone_client.js:29

Node.js fs stat operations

if (!fs.existsSync(CREDENTIALS_PATH)) return null;

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Low

scripts/shareone_client.js:47

Node.js fs stat operations

if (!fs.existsSync(CREDENTIALS_PATH)) return false;

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Low

Environment variable access (dot notation)

return Boolean(process.env.SUDOWORK_AUTH_PROXY_URL && process.env.SUDOWORK_AUTH_PROXY_TOKEN);

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable access (dot notation)

return process.env.SUDOWORK_AUTH_PROXY_BASE_URL || String(process.env.SUDOWORK_AUTH_PROXY_URL || '')

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Environment variable access (dot notation)

return process.env.SHAREONE_BASE_URL || DEFAULT_BASE_URL;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

scripts/shareone_client.js:134 scripts/shareone_client.js:177

Environment variable access (dot notation)

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable access (dot notation) · 2 occurrences

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable access (dot notation)

url: process.env.SUDOWORK_AUTH_PROXY_URL,

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Environment variable object

return Boolean(process.env.SUDOWORK_AUTH_PROXY_URL && process.env.SUDOWORK_AUTH_PROXY_TOKEN);

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable object

return process.env.SUDOWORK_AUTH_PROXY_BASE_URL || String(process.env.SUDOWORK_AUTH_PROXY_URL || '')

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Environment variable object

return process.env.SHAREONE_BASE_URL || DEFAULT_BASE_URL;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

scripts/shareone_client.js:134 scripts/shareone_client.js:177

Environment variable object

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable object · 2 occurrences

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

scripts/shareone_upload.js:104

Environment variable object

url: process.env.SUDOWORK_AUTH_PROXY_URL,

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Node.js fs stat operations

if (!fs.existsSync(filePath)) {

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Low

Environment variable access (dot notation)

process.env.SHAREONE_BASE_URL = args[++i];

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable object

process.env.SHAREONE_BASE_URL = args[++i];

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable access (dot notation)

process.env.SHAREONE_BASE_URL = explicitBaseUrl;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable access (dot notation)

process.env.SHAREONE_BASE_URL = `${parsed.protocol}//${parsed.host}`;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable object

process.env.SHAREONE_BASE_URL = explicitBaseUrl;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

workflows/publish-text-page.md:93

Environment variable object

process.env.SHAREONE_BASE_URL = `${parsed.protocol}//${parsed.host}`;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

SKILL.md:42

Hardcoded URL

- "帮我下载这个 ShareOne 链接的文件:https://shareone.app/s/xxx"

The skill documentation intentionally routes users to ShareOne URLs. This is expected behavior but confirms external network interaction.

Low

SKILL.md:43

Hardcoded URL

- "拉取一下这个链接的评论:https://shareone.app/s/xxx"

The skill documentation intentionally routes users to ShareOne URLs. This is expected behavior but confirms external network interaction.

Low

SKILL.md:44

Hardcoded URL

- "给这个 ShareOne 链接加水印:https://shareone.app/s/xxx"

The skill documentation intentionally routes users to ShareOne URLs. This is expected behavior but confirms external network interaction.

Low

SKILL.md:45

Hardcoded URL

- "根据这个链接的评论修改页面:https://shareone.app/s/xxx"

The skill documentation intentionally routes users to ShareOne URLs. This is expected behavior but confirms external network interaction.

Low

SKILL.md:46

Hardcoded URL

- "修改这个 ShareOne 链接的内容:https://shareone.app/s/xxx"

The skill documentation intentionally routes users to ShareOne URLs. This is expected behavior but confirms external network interaction.

Low

Hardcoded URL

import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs';

The workflow recommends loading Mermaid from a public CDN in generated HTML. That is expected but creates third-party network dependency for published pages.

Risk Factors

⚙️ External commands (86)

🔑 Env variables (70)

🌐 Network access (8)

scripts/shareone_client.js:62 scripts/shareone_client.js:7 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 workflows/publish-text-page.md:93

📁 Filesystem access (14)

scripts/shareone_client.js:31 scripts/shareone_client.js:43 scripts/shareone_client.js:48 scripts/shareone_client.js:29 scripts/shareone_client.js:47 scripts/shareone_client.js:31 scripts/shareone_client.js:43 scripts/shareone_upload.js:38 scripts/shareone_upload.js:59 scripts/shareone_upload.js:104 scripts/shareone_upload.js:38 scripts/shareone_upload.js:59 scripts/upload_page.js:61 scripts/upload_page.js:61

Audited by: codex

Audit version 4

Jul 7, 2026, 04:36 AM

Files scanned

1,935

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (8)

Critical

scripts/update_share_settings.js:98-103 scripts/shareone_client.js:164-190 workflows/update-share-settings.md:28-31

User-Controlled API Host Can Receive Credentials

High

Environment file access

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

Environment file access

return Boolean(process.env.SUDOWORK_AUTH_PROXY_URL && process.env.SUDOWORK_AUTH_PROXY_TOKEN);

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

scripts/shareone_client.js:134

Environment file access

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

Environment file access

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

scripts/shareone_client.js:177

Environment file access

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code accesses secret-bearing environment variables or local API key material for authentication. This is expected but sensitive credential access.

High

scripts/check_api_key.js:18-20 scripts/create_guest_key.js:16-31 workflows/environment-and-credentials.md:60-64 workflows/environment-and-credentials.md:113-119

API Keys Are Printed to Output and Chat Workflows

The cited code and workflow explicitly output full API key values. This is not just secret access; it is intentional disclosure through process output and chat instructions.

High

scripts/shareone_client.js:8 scripts/shareone_client.js:42-43

Local API Key Stored Without Permission Hardening

The credential path and write call are explicit, and there is no chmod or atomic permission handling nearby. The impact depends on host file permissions, so confidence is high but not absolute.

Capability review items (74)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/create_guest_key.js:16

Generic API/secret keys

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

Generic API/secret keys

if (result.api_key) {

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:19

Generic API/secret keys

await saveSudoworkApiKey(result.api_key);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:21

Generic API/secret keys

console.log(`ERROR:SUDOWORK_AUTH_PROXY_SAVE_FAILED:${result.api_key}`);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:29

Generic API/secret keys

saveLocalApiKey(result.api_key);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/create_guest_key.js:31

Generic API/secret keys

console.log(`GUEST_KEY_CREATED:${result.api_key}`);

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

scripts/shareone_client.js:32

Generic API/secret keys

return data && data.api_key ? data.api_key : null;

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

Generic API/secret keys

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:17

Generic API/secret keys

fs.writeFileSync(CREDENTIALS_PATH, JSON.stringify({ api_key: apiKey }));

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

SKILL.md:62

Generic API/secret keys

- `KEY_FOUND:<api_key>`:当前是普通 AI Agent 环境,且已找到 API Key。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

SKILL.md:68

Generic API/secret keys

- 普通 AI Agent:可以使用 `--api-key`、环境变量 `SHAREONE_API_KEY` 或本地凭证文件。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

SKILL.md:112

Generic API/secret keys

- 如果 `create_guest_key.js` 输出 `GUEST_KEY_CREATED:<api_key>`,必须立即向用户发送临时 API Key、绑定账号链接和保存提醒。即使 key 已

The workflow places an API key into a URL query string, which can leak through logs, history, or referrers. This is real credential exposure risk.

High

Generic API/secret keys

- `KEY_FOUND:<api_key>`:当前是普通 AI Agent 环境。将该 API Key 用于后续 direct 模式发布请求。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:35 workflows/environment-and-credentials.md:94

Generic API/secret keys · 2 occurrences

node scripts/save_api_key.js <用户提供的KEY>

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:60 workflows/environment-and-credentials.md:113

Generic API/secret keys · 2 occurrences

如果输出 `GUEST_KEY_CREATED:<api_key>`,这是阻塞性用户通知。必须先回复用户以下内容,然后才能继续原操作:

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:62 workflows/environment-and-credentials.md:70 workflows/environment-and-credentials.md:115

Generic API/secret keys · 3 occurrences

> 已为您自动分配临时 API Key:`<api_key>`

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:63 workflows/environment-and-credentials.md:116

Generic API/secret keys · 2 occurrences

> 绑定账号链接:https://shareone.app/?key=<api_key>

The workflow places an API key into a URL query string, which can leak through logs, history, or referrers. This is real credential exposure risk.

High

workflows/environment-and-credentials.md:68

Generic API/secret keys

如果输出 `ERROR:SUDOWORK_AUTH_PROXY_SAVE_FAILED:<api_key>`,暂停操作并提示:

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:103

Generic API/secret keys

确认输出 `KEY_FOUND:<api_key>` 后继续原操作。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:119

Generic API/secret keys

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/environment-and-credentials.md:128

Generic API/secret keys

- 普通 AI Agent:可以传 `--api-key`,也可以依赖 `SHAREONE_API_KEY` 或本地凭证。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

High

workflows/publish-binary-file.md:39 workflows/publish-binary-file.md:55 workflows/publish-text-page.md:54 workflows/update-share-settings.md:37

Generic API/secret keys · 4 occurrences

- 普通 AI Agent 环境可传 `--api-key`,也可以依赖 `SHAREONE_API_KEY` 或本地凭证。

The cited line reads, stores, passes, or displays ShareOne API key material. This is intentional credential handling and should be treated as sensitive.

Medium

Node.js fs operations

const data = JSON.parse(fs.readFileSync(CREDENTIALS_PATH, 'utf8'));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

scripts/shareone_client.js:48

Node.js fs operations

fs.writeFileSync(CREDENTIALS_PATH, JSON.stringify({ api_key: apiKey }));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

Node.js fs operations

fs.unlinkSync(CREDENTIALS_PATH);

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

Synchronous file operations

const data = JSON.parse(fs.readFileSync(CREDENTIALS_PATH, 'utf8'));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

scripts/shareone_upload.js:38 scripts/shareone_upload.js:59

Synchronous file operations

fs.writeFileSync(CREDENTIALS_PATH, JSON.stringify({ api_key: apiKey }));

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Medium

Node.js fs operations · 2 occurrences

const fileData = fs.readFileSync(filePath);

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Medium

scripts/shareone_upload.js:38 scripts/shareone_upload.js:59

Synchronous file operations · 2 occurrences

const fileData = fs.readFileSync(filePath);

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Medium

Node.js fs operations

const content = fs.readFileSync(filePath, "utf-8");

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Medium

Synchronous file operations

const content = fs.readFileSync(filePath, "utf-8");

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Low

Environment variable access (dot notation)

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

scripts/shareone_client.js:62

Environment variable object

let apiKey = process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

HTTP client library

const req = client.request(target, {

The script constructs outbound HTTP or HTTPS requests to ShareOne or configured endpoints. This is necessary for the skill but is real network egress.

Low

scripts/shareone_client.js:7

Hardcoded URL

const DEFAULT_BASE_URL = 'https://shareone.app';

The script constructs outbound HTTP or HTTPS requests to ShareOne or configured endpoints. This is necessary for the skill but is real network egress.

Low

scripts/shareone_client.js:29

Node.js fs stat operations

if (!fs.existsSync(CREDENTIALS_PATH)) return null;

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Low

scripts/shareone_client.js:47

Node.js fs stat operations

if (!fs.existsSync(CREDENTIALS_PATH)) return false;

The code reads, writes, or deletes a local credentials file containing the ShareOne API key. That is intentional but security-sensitive filesystem access.

Low

Environment variable access (dot notation)

return Boolean(process.env.SUDOWORK_AUTH_PROXY_URL && process.env.SUDOWORK_AUTH_PROXY_TOKEN);

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable access (dot notation)

return process.env.SUDOWORK_AUTH_PROXY_BASE_URL || String(process.env.SUDOWORK_AUTH_PROXY_URL || '')

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Environment variable access (dot notation)

return process.env.SHAREONE_BASE_URL || DEFAULT_BASE_URL;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

scripts/shareone_client.js:134 scripts/shareone_client.js:177

Environment variable access (dot notation)

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable access (dot notation) · 2 occurrences

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable access (dot notation)

url: process.env.SUDOWORK_AUTH_PROXY_URL,

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Environment variable object

return Boolean(process.env.SUDOWORK_AUTH_PROXY_URL && process.env.SUDOWORK_AUTH_PROXY_TOKEN);

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable object

return process.env.SUDOWORK_AUTH_PROXY_BASE_URL || String(process.env.SUDOWORK_AUTH_PROXY_URL || '')

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Environment variable object

return process.env.SHAREONE_BASE_URL || DEFAULT_BASE_URL;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

scripts/shareone_client.js:134 scripts/shareone_client.js:177

Environment variable object

return explicitApiKey || process.env.SHAREONE_API_KEY || readLocalApiKey();

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

Environment variable object · 2 occurrences

Authorization: `Bearer ${process.env.SUDOWORK_AUTH_PROXY_TOKEN}`,

The code reads secret-bearing environment variables used for ShareOne or Sudowork authentication. This is expected but sensitive.

Low

scripts/shareone_upload.js:104

Environment variable object

url: process.env.SUDOWORK_AUTH_PROXY_URL,

The code reads environment-controlled proxy endpoints used for authenticated ShareOne requests. This is expected but relevant to request routing.

Low

Node.js fs stat operations

if (!fs.existsSync(filePath)) {

The script reads or checks a user-selected local file before uploading it to ShareOne. This is expected capability but real local file access.

Low

Environment variable access (dot notation)

process.env.SHAREONE_BASE_URL = args[++i];

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable object

process.env.SHAREONE_BASE_URL = args[++i];

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable access (dot notation)

process.env.SHAREONE_BASE_URL = explicitBaseUrl;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable access (dot notation)

process.env.SHAREONE_BASE_URL = `${parsed.protocol}//${parsed.host}`;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low

Environment variable object

process.env.SHAREONE_BASE_URL = explicitBaseUrl;

The environment variable controls the outbound API base URL. This is configuration access, but it can redirect credentialed requests if untrusted.

Low