此报告尚无所请求语言的翻译，当前显示规范英文报告。

版本化安全评估

报告编号: SA-14664E8F

7/3/2026, 1:12:57 PM

app-store-screenshots 安全评估 v1

Skill 安全认证报告

审计历史
审计模型: codex 历史报告
技能名称
app-store-screenshots
版本
v1
维护者
halt-catch-fire
来源
github.com/halt-catch-fire/skills/tree/main/guides/design/app-store-screenshots/
覆盖范围
1 已扫描文件 · 271 分析行数
策略版本
不可用

已确认问题的最高严重性

中

有 1 个已确认的安全问题需要处理。

安装上下文

历史证据

本报告可能无法描述当前可安装的 artifact。请打开当前 Skill 详情页查看安装建议。

打开当前 Skill 详情页

本报告不会阻止或授权 manifest 或 ZIP。

The skill is a design guide, but it directs users and agents to install and run external CLI commands. Most static hits are markdown false positives; confirmed risks relate to npx installs, belt remote inference calls, and possible upload of app assets.

报告位置

历史报告

使用本报告安装前，请先查看审计历史。

审计证明

无法签发证明

所需的不可变绑定不完整。

人工验证

未进行人工验证

本报告没有人工验证记录。

覆盖范围

1 已扫描文件 · 271 分析行数

有 12 项内容需要查看

局限

本报告不声称进行了运行时或沙箱执行，也不证明不存在副作用。

证据链

证据从来源绑定延伸到安装契约。证据可用于验证，但不是安全保证。

  1. 来源

    绑定不可用

  2. 构件

    身份信息不完整

  3. 审计

    已完成

  4. 安装契约

    打开 manifest 进行验证

    打开 manifest

观察到的能力

“已观察到”表示本报告记录了支持证据；“未记录”不证明该能力不存在。

包含脚本

可能执行 Skill 随附的代码。

本次审计未记录

网络访问

可能连接外部服务。

在 2 个证据位置观察到

文件系统访问

可能读取或写入本地文件。

本次审计未记录

环境变量

可能读取进程环境中的值。

本次审计未记录

外部命令

可能调用 Skill 之外的命令或程序。

在 20 个证据位置观察到

能力复核项 (11)
中
SKILL.md:7
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
Line 7 instructs users to run an npx skill installation command. That is a real external command and a supply-chain risk if executed without verification.
中
SKILL.md:17-26
Ruby/shell backtick execution
```bash
Lines 17-26 contain bash examples for belt login and belt app run. These commands invoke an external CLI and send prompt data to a remote inference service.
中
SKILL.md:137-144
Ruby/shell backtick execution
```bash
Lines 137-144 contain a belt app run command for a remote image generation model. This is intended external command execution with network submission of prompt data.
中
SKILL.md:148-154
Ruby/shell backtick execution
```bash
Lines 148-154 contain a belt app run command for an external image model. The command submits prompt data to a remote service.
中
SKILL.md:158-165
Ruby/shell backtick execution
```bash
Lines 158-165 contain a belt app run command for a remote generation service. This is real external command execution with network data transfer.
中
SKILL.md:169-175
Ruby/shell backtick execution
```bash
Lines 169-175 contain a belt app run command that references local screenshot image files. This may send user-provided app assets to an external service.
中
SKILL.md:206-211
Ruby/shell backtick execution
```bash
Lines 206-211 contain a belt app run command for a remote video generation model. The command executes an external CLI and submits prompt content.
中
SKILL.md:262-267
Ruby/shell backtick execution
```bash
Lines 262-267 instruct users to run multiple npx skills add commands. These are real external installation commands with supply-chain risk.
中
SKILL.md:267-269
Ruby/shell backtick execution
```
Line 269 tells users to run belt app store. This is a real external CLI command, although it appears to browse available applications rather than process user data.
低
SKILL.md:11
Hardcoded URL
Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.
Line 11 names inference.sh as the service used to create screenshots and videos. This is a legitimate hardcoded external service dependency that should be disclosed.
低
SKILL.md:15
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
Line 15 links to raw GitHub installation instructions for the required CLI. This is an external network dependency and unpinned remote documentation risk.

风险问题

已确认的安全问题与仍需审核的项目分开展示。

已确认安全问题 (1)

RISK-001 中
SKILL.md:139-143SKILL.md:171-174SKILL.md:208-210
Remote Processing of App Assets
The skill guides users to send prompts and screenshot image filenames through the belt CLI to remote generation or stitching services. Proprietary app screens or unreleased UI assets could be exposed if users run these commands without reviewing data handling.
The examples directly invoke remote model apps and one example references local screenshot filenames. The risk depends on what the user supplies, so confidence is high for privacy exposure but not malicious intent.

补救措施

本次审计记录了建议的修复措施。实施这些措施是维护者的责任。

  1. FIX-001
    中
    External CLI installation commands
    Use pinned, reviewed installation instructions and require explicit user confirmation before running npx or skill installation commands.
  2. FIX-002
    中
    Remote inference commands process user content
    Add a clear data handling warning before belt app run examples, especially when prompts or local screenshots may contain private app assets.
  3. FIX-003
    低
    Unpinned raw GitHub install documentation
    Pin external installation links to a reviewed commit or include trusted installation steps directly in the skill documentation.

专家证据

不可变主体身份、扫描器元数据、已排除匹配项和源码级证据。

Artifact 主体

Marketplace 提交
不可用
内容哈希
不可用
目录树哈希
不可用
Skill 路径
不可用
审计载荷哈希
不可用

分析元数据

审计模型: codex

分析状态: 已完成

范围仅限于已记录的文件、行数、方法和证据；本报告不声称进行了运行时或沙箱执行。

验证与导出

JSON 报告 CITATION.cff SARIF 2.1.0 已签名安装清单

manifest 和 lockfile 将安装 artifact 绑定到加密哈希。该完整性声明独立于安全评估。

审计证明: not_attestable