📦
Audit History
miniprogram-development - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Jul 9, 2026, 04:31 PM
Most static command findings are false positives caused by Markdown code spans and fenced examples. Confirmed issues are the mutable external instruction URLs and parent-directory references to sibling skills outside the package. No prompt injection language was found in the reviewed files.
3
Files scanned
423
Lines analyzed
16
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Unpinned External Instruction References
The skill tells agents to use raw external skill and protocol URLs from a main branch. Future remote changes could alter agent instructions after this package is reviewed.
The referenced URLs point to raw external instruction files on a mutable branch. The skill explicitly presents them as entries or fallbacks for agent use.
Capability review items (12)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Path traversal sequence
- CloudBase auth -> `../auth-wechat/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
High
Path traversal sequence
- CloudBase document DB -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.cool/te
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
High
Path traversal sequence
- Mini Program WeChat Pay or Integration Center generated payment functions -> `../cloudbase-wechat-
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
High
Path traversal sequence
- UI generation -> `../ui-design/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/clo
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
Low
Hardcoded URL
- CloudBase main entry: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/sk
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Current skill raw source: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/mai
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Change Safety Protocol: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Deployment Gate: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- CloudBase auth -> `../auth-wechat/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- CloudBase document DB -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.cool/te
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Mini Program WeChat Pay or Integration Center generated payment functions -> `../cloudbase-wechat-
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- UI generation -> `../ui-design/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/clo
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Risk Factors
⚙️ External commands (50)
SKILL.md:3 SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:15 SKILL.md:18 SKILL.md:19 SKILL.md:29 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:41 SKILL.md:46 SKILL.md:48 SKILL.md:49 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:77 SKILL.md:78 SKILL.md:81 SKILL.md:83 SKILL.md:91 SKILL.md:100 SKILL.md:101 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:110 SKILL.md:111 SKILL.md:115 SKILL.md:117 SKILL.md:119 SKILL.md:121-132 SKILL.md:132-134 SKILL.md:134 SKILL.md:138-139 SKILL.md:139-145 SKILL.md:145-150 SKILL.md:150-152 SKILL.md:152-158 SKILL.md:158-160 SKILL.md:160-162 SKILL.md:162-168 SKILL.md:168-170 SKILL.md:170-172 SKILL.md:172-176 SKILL.md:176-178 SKILL.md:178-180
🌐 Network access (8)
📁 Filesystem access (4)
Audited by: codex
Jul 9, 2026, 04:31 PM
Most static command findings are false positives caused by Markdown code spans and fenced examples. Confirmed issues are the mutable external instruction URLs and parent-directory references to sibling skills outside the package. No prompt injection language was found in the reviewed files.
3
Files scanned
423
Lines analyzed
16
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Unpinned External Instruction References
The skill tells agents to use raw external skill and protocol URLs from a main branch. Future remote changes could alter agent instructions after this package is reviewed.
The referenced URLs point to raw external instruction files on a mutable branch. The skill explicitly presents them as entries or fallbacks for agent use.
Capability review items (12)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Path traversal sequence
- CloudBase auth -> `../auth-wechat/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
High
Path traversal sequence
- CloudBase document DB -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.cool/te
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
High
Path traversal sequence
- Mini Program WeChat Pay or Integration Center generated payment functions -> `../cloudbase-wechat-
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
High
Path traversal sequence
- UI generation -> `../ui-design/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/clo
The skill directs agents to read sibling paths using ../ outside the packaged skill directory. The targets are fixed, but they cross the audited package boundary.
Low
Hardcoded URL
- CloudBase main entry: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/sk
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Current skill raw source: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/mai
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Change Safety Protocol: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Deployment Gate: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- CloudBase auth -> `../auth-wechat/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- CloudBase document DB -> `../no-sql-wx-mp-sdk/SKILL.md` (standalone fallback: `https://cnb.cool/te
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- Mini Program WeChat Pay or Integration Center generated payment functions -> `../cloudbase-wechat-
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Low
Hardcoded URL
- UI generation -> `../ui-design/SKILL.md` (standalone fallback: `https://cnb.cool/tencent/cloud/clo
The URL is documentation-like, but it points to mutable external skill or protocol content. Agents may import unreviewed instructions from that remote source.
Risk Factors
⚙️ External commands (50)
SKILL.md:3 SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:15 SKILL.md:18 SKILL.md:19 SKILL.md:29 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:41 SKILL.md:46 SKILL.md:48 SKILL.md:49 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:77 SKILL.md:78 SKILL.md:81 SKILL.md:83 SKILL.md:91 SKILL.md:100 SKILL.md:101 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:110 SKILL.md:111 SKILL.md:115 SKILL.md:117 SKILL.md:119 SKILL.md:121-132 SKILL.md:132-134 SKILL.md:134 SKILL.md:138-139 SKILL.md:139-145 SKILL.md:145-150 SKILL.md:150-152 SKILL.md:152-158 SKILL.md:158-160 SKILL.md:160-162 SKILL.md:162-168 SKILL.md:168-170 SKILL.md:170-172 SKILL.md:172-176 SKILL.md:176-178 SKILL.md:178-180
🌐 Network access (8)
📁 Filesystem access (4)
Audited by: codex