📦
Audit History
cloudbase-document-database-web-sdk - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Jul 9, 2026, 04:06 PM
Most static findings are false positives from JavaScript examples, Markdown backticks, _id or uid identifiers, and Object.keys usage. I confirmed the SKILL.md raw fallback URLs and parent-directory sibling references because they can load mutable or out-of-scope instructions at runtime. No prompt injection phrases were found in the reviewed files.
8
Files scanned
3,395
Lines analyzed
12
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Mutable Remote Instruction Loading
SKILL.md directs agents to use published fallback URLs for sibling skills when local references are absent. This can load mutable external instructions outside the audited package.
The instructions explicitly point agents to raw remote SKILL.md files as fallback sources. This is not exfiltration, but it materially expands the instruction trust boundary.
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Path traversal sequence
- Web login and caller identity -> `../auth-web/SKILL.md` (standalone fallback: `https://cnb.cool/te
The skill tells the agent to read a parent-directory sibling SKILL.md path with ../. That can escape the current skill boundary and expand the trusted instruction surface beyond this audit.
High
Path traversal sequence
- General Web app structure -> `../web-development/SKILL.md` (standalone fallback: `https://cnb.cool
The skill tells the agent to read a parent-directory sibling SKILL.md path with ../. That can escape the current skill boundary and expand the trusted instruction surface beyond this audit.
High
Path traversal sequence
- Mini Program database code -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.co
The skill tells the agent to read a parent-directory sibling SKILL.md path with ../. That can escape the current skill boundary and expand the trusted instruction surface beyond this audit.
Low
Hardcoded URL
- CloudBase main entry: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/sk
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- Current skill raw source: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/mai
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- Web login and caller identity -> `../auth-web/SKILL.md` (standalone fallback: `https://cnb.cool/te
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- General Web app structure -> `../web-development/SKILL.md` (standalone fallback: `https://cnb.cool
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- Mini Program database code -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.co
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Risk Factors
⚙️ External commands (50)
geolocation.md:314-315 pagination.md:140-141 pagination.md:141-142 security-rules.md:972-974 SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:15 SKILL.md:23 SKILL.md:24 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:39 SKILL.md:43 SKILL.md:51 SKILL.md:52 SKILL.md:57 SKILL.md:64 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:75 SKILL.md:81 SKILL.md:88 SKILL.md:93-102 SKILL.md:102-112 SKILL.md:112-113 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116-117 SKILL.md:117-118 SKILL.md:118-126 SKILL.md:126-131 SKILL.md:131-132 SKILL.md:132 SKILL.md:133 SKILL.md:134 SKILL.md:139 SKILL.md:142 SKILL.md:143 SKILL.md:149-153 SKILL.md:153-157 SKILL.md:157-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-179 SKILL.md:179-183 SKILL.md:183-196
🌐 Network access (5)
📁 Filesystem access (3)
Audited by: codex
Jul 9, 2026, 04:06 PM
Most static findings are false positives from JavaScript examples, Markdown backticks, _id or uid identifiers, and Object.keys usage. I confirmed the SKILL.md raw fallback URLs and parent-directory sibling references because they can load mutable or out-of-scope instructions at runtime. No prompt injection phrases were found in the reviewed files.
8
Files scanned
3,395
Lines analyzed
12
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Mutable Remote Instruction Loading
SKILL.md directs agents to use published fallback URLs for sibling skills when local references are absent. This can load mutable external instructions outside the audited package.
The instructions explicitly point agents to raw remote SKILL.md files as fallback sources. This is not exfiltration, but it materially expands the instruction trust boundary.
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Path traversal sequence
- Web login and caller identity -> `../auth-web/SKILL.md` (standalone fallback: `https://cnb.cool/te
The skill tells the agent to read a parent-directory sibling SKILL.md path with ../. That can escape the current skill boundary and expand the trusted instruction surface beyond this audit.
High
Path traversal sequence
- General Web app structure -> `../web-development/SKILL.md` (standalone fallback: `https://cnb.cool
The skill tells the agent to read a parent-directory sibling SKILL.md path with ../. That can escape the current skill boundary and expand the trusted instruction surface beyond this audit.
High
Path traversal sequence
- Mini Program database code -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.co
The skill tells the agent to read a parent-directory sibling SKILL.md path with ../. That can escape the current skill boundary and expand the trusted instruction surface beyond this audit.
Low
Hardcoded URL
- CloudBase main entry: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/sk
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- Current skill raw source: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/mai
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- Web login and caller identity -> `../auth-web/SKILL.md` (standalone fallback: `https://cnb.cool/te
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- General Web app structure -> `../web-development/SKILL.md` (standalone fallback: `https://cnb.cool
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Low
Hardcoded URL
- Mini Program database code -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.co
The skill embeds raw external fallback URLs for loading CloudBase skill instructions. That can make runtime behavior depend on mutable content outside the audited package.
Risk Factors
⚙️ External commands (50)
geolocation.md:314-315 pagination.md:140-141 pagination.md:141-142 security-rules.md:972-974 SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:15 SKILL.md:23 SKILL.md:24 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:39 SKILL.md:43 SKILL.md:51 SKILL.md:52 SKILL.md:57 SKILL.md:64 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:75 SKILL.md:81 SKILL.md:88 SKILL.md:93-102 SKILL.md:102-112 SKILL.md:112-113 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116-117 SKILL.md:117-118 SKILL.md:118-126 SKILL.md:126-131 SKILL.md:131-132 SKILL.md:132 SKILL.md:133 SKILL.md:134 SKILL.md:139 SKILL.md:142 SKILL.md:143 SKILL.md:149-153 SKILL.md:153-157 SKILL.md:157-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-179 SKILL.md:179-183 SKILL.md:183-196
🌐 Network access (5)
📁 Filesystem access (3)
Audited by: codex