📦
审计历史
cargo-mcp - 1 审计
审计版本 1 最新
2026年10月12日 17:18
All 69 static findings are false positives involving Markdown formatting, documentation links, or intended Cargo connectivity and workspace checks. One semantic concern remains: paid pilot execution precedes the explicit approval step. No evidence found of prompt injection, credential exfiltration, or malicious command execution in the supplied files; hosted service implementation was not reviewed.
2
已扫描文件
213
分析行数
4
复核项
0
已忽略误报
已确认安全问题 (1)
中
Paid Pilot Before Explicit Approval
The instruction says "Run 10–20 records first" and requests user approval only after reporting the sample and quoting the full batch. An agent following this sequence can spend credits and process personal records before explicit pilot authorization.
The documented sequence explicitly places the pilot before approval of the full run. Prior user authorization could mitigate this, but the skill does not require it.
风险因素
⚙️ 外部命令 (47)
SKILL.md:3 SKILL.md:24 SKILL.md:29 SKILL.md:31 SKILL.md:32 SKILL.md:40 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:57-61 SKILL.md:61-65 SKILL.md:65-66 SKILL.md:66 SKILL.md:67-69 SKILL.md:69-71 SKILL.md:71-73 SKILL.md:73-75 SKILL.md:75-77 SKILL.md:77-86 SKILL.md:86-92 SKILL.md:92-102 SKILL.md:102-105 SKILL.md:105-111 SKILL.md:111-119 SKILL.md:119-121 SKILL.md:121 SKILL.md:122 SKILL.md:125-131 SKILL.md:131-132 SKILL.md:132 SKILL.md:135-146 SKILL.md:146-148 SKILL.md:148 SKILL.md:149 SKILL.md:154 SKILL.md:157-159 SKILL.md:159 SKILL.md:160-161 SKILL.md:161-162 SKILL.md:162 SKILL.md:166-167 SKILL.md:167-168 SKILL.md:168 SKILL.md:177-179 SKILL.md:179-182 SKILL.md:182-191
🌐 网络访问 (9)
审计者: codex