📦
审计历史
app-store-screenshots - 5 审计
版本对比
各审计版本间的能力与发现变化，最新在前。
审计版本 5 最新
2026年7月9日 11:38
Most static command hits are Markdown fences, inline CLI names, or documentation examples rather than dynamic shell execution. Confirmed risks are limited to third-party CLI installation guidance, belt commands that call external generation services, and remote processing of prompts or app imagery.
1
已扫描文件
271
分析行数
12
复核项
0
已忽略误报
已确认安全问题 (1)
中
Third-Party Asset Processing Through belt
The skill directs users to create screenshots and videos through the inference.sh belt CLI. Prompts and referenced app images may be processed by an external service, so private app assets need explicit user approval.
The documentation explicitly depends on inference.sh and shows belt app run commands for remote image, stitching, and video generation. The risk is privacy exposure, not evidence of malicious intent.
能力复核项 (9)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line recommends running npx to install a third-party CLI skill. That can download and execute external package code during setup, so it is a real supply-chain risk.
中
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 处
```bash
The fenced example runs belt login and belt app run against a remote model service. The arguments are static, but execution requires authentication and sends prompt data to an external CLI.
低
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The line links to mutable raw GitHub install instructions for a required external CLI. This is a low-severity supply-chain concern because users may follow unaudited setup content.
风险因素
⚙️ 外部命令 (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 网络访问 (2)
审计者: codex
2026年7月9日 11:38
Most static command hits are Markdown fences, inline CLI names, or documentation examples rather than dynamic shell execution. Confirmed risks are limited to third-party CLI installation guidance, belt commands that call external generation services, and remote processing of prompts or app imagery.
1
已扫描文件
271
分析行数
12
复核项
0
已忽略误报
已确认安全问题 (1)
中
Third-Party Asset Processing Through belt
The skill directs users to create screenshots and videos through the inference.sh belt CLI. Prompts and referenced app images may be processed by an external service, so private app assets need explicit user approval.
The documentation explicitly depends on inference.sh and shows belt app run commands for remote image, stitching, and video generation. The risk is privacy exposure, not evidence of malicious intent.
能力复核项 (9)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line recommends running npx to install a third-party CLI skill. That can download and execute external package code during setup, so it is a real supply-chain risk.
中
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 处
```bash
The fenced example runs belt login and belt app run against a remote model service. The arguments are static, but execution requires authentication and sends prompt data to an external CLI.
低
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The line links to mutable raw GitHub install instructions for a required external CLI. This is a low-severity supply-chain concern because users may follow unaudited setup content.
风险因素
⚙️ 外部命令 (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 网络访问 (2)
审计者: codex
2026年7月5日 16:13
Several static detections are real low-to-medium risks because the skill asks users to install and run the third-party belt CLI. The remaining detections are Markdown fences, diagrams, or metadata false positives; no prompt injection or covert exfiltration intent was found.
1
已扫描文件
271
分析行数
13
复核项
0
已忽略误报
能力复核项 (11)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The inline command asks users to run npx skills add belt-sh/cli, which installs an external skill through a package runner. It is not automatic execution, but it creates a real supply-chain risk if followed.
中
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 处
```bash
The quick-start bash block instructs belt login and belt app run, which launch a third-party CLI and remote model call. The command family is constrained, but it still executes external tooling.
中
Ruby/shell backtick execution
```
The section includes a belt app store command after the fenced block. It is a documented CLI action, not automatic execution, but it invokes third-party tooling.
低
Hardcoded URL
Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.
The skill explicitly depends on the inference.sh network service for screenshot and video generation. This is expected, but users should know prompt and asset data may leave their environment.
低
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The install instructions use a raw GitHub URL from an external repository. It is a normal documentation link, but it is still a third-party network dependency.
风险因素
⚙️ 外部命令 (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 网络访问 (2)
审计者: codex
2026年7月5日 16:13
Several static detections are real low-to-medium risks because the skill asks users to install and run the third-party belt CLI. The remaining detections are Markdown fences, diagrams, or metadata false positives; no prompt injection or covert exfiltration intent was found.
1
已扫描文件
271
分析行数
13
复核项
0
已忽略误报
能力复核项 (11)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The inline command asks users to run npx skills add belt-sh/cli, which installs an external skill through a package runner. It is not automatic execution, but it creates a real supply-chain risk if followed.
中
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 处
```bash
The quick-start bash block instructs belt login and belt app run, which launch a third-party CLI and remote model call. The command family is constrained, but it still executes external tooling.
中
Ruby/shell backtick execution
```
The section includes a belt app store command after the fenced block. It is a documented CLI action, not automatic execution, but it invokes third-party tooling.
低
Hardcoded URL
Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.
The skill explicitly depends on the inference.sh network service for screenshot and video generation. This is expected, but users should know prompt and asset data may leave their environment.
低
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The install instructions use a raw GitHub URL from an external repository. It is a normal documentation link, but it is still a third-party network dependency.
风险因素
⚙️ 外部命令 (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 网络访问 (2)
审计者: codex
2026年7月3日 13:12
The skill is a design guide, but it directs users and agents to install and run external CLI commands. Most static hits are markdown false positives; confirmed risks relate to npx installs, belt remote inference calls, and possible upload of app assets.
1
已扫描文件
271
分析行数
14
复核项
0
已忽略误报
已确认安全问题 (1)
中
Remote Processing of App Assets
The skill guides users to send prompts and screenshot image filenames through the belt CLI to remote generation or stitching services. Proprietary app screens or unreleased UI assets could be exposed if users run these commands without reviewing data handling.
The examples directly invoke remote model apps and one example references local screenshot filenames. The risk depends on what the user supplies, so confidence is high for privacy exposure but not malicious intent.
能力复核项 (11)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
Line 7 instructs users to run an npx skill installation command. That is a real external command and a supply-chain risk if executed without verification.
中
SKILL.md:17-26SKILL.md:137-144SKILL.md:148-154SKILL.md:158-165SKILL.md:169-175SKILL.md:206-211SKILL.md:262-267
Ruby/shell backtick execution · 7 处
```bash
Lines 17-26 contain bash examples for belt login and belt app run. These commands invoke an external CLI and send prompt data to a remote inference service.
中
Ruby/shell backtick execution
```
Line 269 tells users to run belt app store. This is a real external CLI command, although it appears to browse available applications rather than process user data.
低
Hardcoded URL
Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.
Line 11 names inference.sh as the service used to create screenshots and videos. This is a legitimate hardcoded external service dependency that should be disclosed.
低
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
Line 15 links to raw GitHub installation instructions for the required CLI. This is an external network dependency and unpinned remote documentation risk.
风险因素
⚙️ 外部命令 (20)
SKILL.md:7 SKILL.md:15 SKILL.md:17-26 SKILL.md:26-83 SKILL.md:83-97 SKILL.md:97-121 SKILL.md:121-131 SKILL.md:131-137 SKILL.md:137-144 SKILL.md:144-148 SKILL.md:148-154 SKILL.md:154-158 SKILL.md:158-165 SKILL.md:165-169 SKILL.md:169-175 SKILL.md:175-206 SKILL.md:206-211 SKILL.md:211-262 SKILL.md:262-267 SKILL.md:267-269
🌐 网络访问 (2)
审计者: codex