此报告尚无所请求语言的翻译，当前显示规范英文报告。

版本化安全评估

报告编号: SA-E406BF64

10/9/2026, 2:53:46 PM

basin 安全评估 v1

Skill 安全认证报告

审计历史

扫描器版本 3.0.0 审计模型: codex 最新发布的报告

技能名称: basin
版本: v1
维护者: cloudflare
来源: github.com/cloudflare/skills/tree/a18ffe2a99448ebff262fc87915b0fd14bab9b70/skills/basin
覆盖范围: 16 已扫描文件 · 1,104 分析行数
策略版本: skillstore-security-audit-policy-v1

已确认问题的最高严重性

高

有 4 个已确认的安全问题需要处理。

安装上下文

请查看当前 Skill 详情页

本页仅汇总报告证据。Skill 详情页提供 canonical install advisory。

打开当前 Skill 详情页

本报告不会阻止或授权 manifest 或 ZIP。

All 70 static matches are false positives involving documentation links, placeholder URLs, legitimate service requests, SQL identifiers, and TypeScript strings. Four semantic risks concern unauthenticated ingestion, an unprotected analytics endpoint, ineffective IP redaction, and a command that prints an API token. No evidence found of prompt injection, malicious exfiltration, or covert code execution in the reviewed files.

报告位置

证据链

证据从来源绑定延伸到安装契约。证据可用于验证，但不是安全保证。

来源

已绑定 commit 与路径
构件

已绑定内容与 tree hash
审计

已完成
安装契约

打开 manifest 进行验证
打开 manifest

观察到的能力

“已观察到”表示本报告记录了支持证据；“未记录”不证明该能力不存在。

包含脚本

可能执行 Skill 随附的代码。

本次审计未记录

网络访问

可能连接外部服务。

在 25 个证据位置观察到

文件系统访问

可能读取或写入本地文件。

在 19 个证据位置观察到

环境变量

可能读取进程环境中的值。

本次审计未记录

外部命令

可能调用 Skill 之外的命令或程序。

在 6 个证据位置观察到

风险问题

已确认的安全问题与仍需审核的项目分开展示。

已确认安全问题 (4)

RISK-001 高

references/sql/patterns.md:50-58 references/sql/patterns.md:61-69

Dashboard Worker Exposes Analytics Without Caller Authorization

The Worker matches "/api/analytics", queries with its server-side token, and returns result.rows without checking caller identity or permissions. A public deployment without external protection could disclose analytics and permit repeated billable queries.

The complete handler performs only a pathname check before returning authenticated query results. No caller authentication is shown; external deployment controls could reduce exposure.

RISK-002 中

references/pipelines/configuration.md:69-74 references/pipelines/configuration.md:115-121

HTTP Ingestion Templates Disable Authentication

The REST example sets "authentication": false, and Terraform also sets authentication = false for HTTP ingestion. If deployed, unauthenticated senders could inject events, corrupt analytics, and increase storage or processing costs.

Both executable configuration examples explicitly disable authentication without requiring an upstream access boundary. Exploitation depends on deploying these examples and accessing the ingest endpoint.

RISK-003 中

references/pipelines/patterns.md:64-72

Claimed IP Redaction Retains Raw Client Addresses

The Logpush transform selects ClientIP alongside sha256(ClientIP) AS hashed_ip while claiming "redact PII at ingest". The stored output retains the original address, so following this example does not achieve the stated redaction.

The same SELECT explicitly includes both the raw ClientIP column and its hash. The misleading redaction comment directly contradicts the output projection.

RISK-004 中

references/sql/gotchas.md:31-32

Troubleshooting Command Prints Authentication Secret

The checklist recommends "echo $WRANGLER_BASIN_SQL_AUTH_TOKEN" to test token presence. This reveals the complete credential in terminal output and can expose it through captured logs or assistant transcripts.

The command explicitly expands and prints the authentication token rather than checking whether it exists. Further disclosure depends on how terminal output is recorded.

补救措施

本次审计记录了建议的修复措施。实施这些措施是维护者的责任。

FIX-001
高
The dashboard Worker returns analytics using server credentials without checking caller identity.

Require verified Cloudflare Access or application authentication and authorization before querying; add request limits and return only approved fields.
FIX-002
中
REST and Terraform examples disable HTTP ingest authentication.

Enable authentication in both examples and require scoped send tokens; clearly label any intentional public ingestion with abuse and cost controls.
FIX-003
中
The Logpush example claims IP redaction while retaining ClientIP.

Remove ClientIP from stored output and correct the comment; use keyed pseudonymization where needed and document remaining privacy limitations.
FIX-004
中
The SQL troubleshooting checklist prints the complete authentication token.

Replace token echoing with a nonempty-variable check that prints only status; warn against placing credentials in logs or transcripts.

专家证据

不可变主体身份、扫描器元数据、已排除匹配项和源码级证据。

Artifact 主体

Marketplace 提交: e406bf64b5db6e514879399e87b346fa7ff7c2fb
内容哈希: d9bd504ac8125ef84820af6815b3a6f3417fb9126614bad68e420f0f01cec4e3
目录树哈希: 5f6d8e6932924af878f03dfc2caa6d5ea081f832a895fe540e30490336bd2003
Skill 路径: skills/cloudflare/basin
审计载荷哈希: d6208d1cc5e1607b30931a5fb16a2ce5

分析元数据

审计模型: codex

分析状态: 已完成

范围仅限于已记录的文件、行数、方法和证据；本报告不声称进行了运行时或沙箱执行。

验证与导出

JSON 报告已签名审计证明 CITATION.cff SARIF 2.1.0 已签名安装清单来源

manifest 和 lockfile 将安装 artifact 绑定到加密哈希。该完整性声明独立于安全评估。

审计证明: active