此报告尚无所请求语言的翻译，当前显示规范英文报告。

版本化安全评估

报告编号: SA-ADB60C53

7/5/2026, 10:32:54 PM

busybox-on-windows 安全评估 v3

Skill 安全认证报告

审计历史
审计模型: codex 历史报告
技能名称
busybox-on-windows
版本
v3
维护者
sickn33
来源
github.com/sickn33/antigravity-awesome-skills/tree/main/skills/busybox-on-windows
覆盖范围
1 已扫描文件 · 31 分析行数
策略版本
不可用

已确认问题的最高严重性

高

有 1 个已确认的安全问题需要处理。

安装上下文

历史证据

本报告可能无法描述当前可安装的 artifact。请打开当前 Skill 详情页查看安装建议。

打开当前 Skill 详情页

本报告不会阻止或授权 manifest 或 ZIP。

The skill is legitimate Windows BusyBox setup guidance. It asks agents or users to run PowerShell and download executables from hardcoded external URLs. I confirmed the shell and download risks, dismissed documentation-only links and simple local usage examples, and found no evidence of prompt injection.

报告位置

历史报告

使用本报告安装前，请先查看审计历史。

审计证明

无法签发证明

所需的不可变绑定不完整。

人工验证

未进行人工验证

本报告没有人工验证记录。

覆盖范围

1 已扫描文件 · 31 分析行数

有 15 项内容需要查看

局限

本报告不声称进行了运行时或沙箱执行，也不证明不存在副作用。

证据链

证据从来源绑定延伸到安装契约。证据可用于验证，但不是安全保证。

  1. 来源

    绑定不可用

  2. 构件

    身份信息不完整

  3. 审计

    已完成

  4. 安装契约

    打开 manifest 进行验证

    打开 manifest

观察到的能力

“已观察到”表示本报告记录了支持证据；“未记录”不证明该能力不存在。

包含脚本

可能执行 Skill 随附的代码。

本次审计未记录

网络访问

可能连接外部服务。

在 6 个证据位置观察到

文件系统访问

可能读取或写入本地文件。

本次审计未记录

环境变量

可能读取进程环境中的值。

本次审计未记录

外部命令

可能调用 Skill 之外的命令或程序。

在 13 个证据位置观察到

能力复核项 (14)
高
SKILL.md:16
Ruby/shell backtick execution
- 32-bit x86 (ANSI): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fripp
Line 16 provides a runnable PowerShell download command that saves an external executable as busybox.exe. Downloading binaries through shell commands is a real risk.
高
SKILL.md:17
Ruby/shell backtick execution
- 64-bit x86 (ANSI): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fripp
Line 17 provides a runnable PowerShell command that downloads a 64-bit executable from an external site. This is executable acquisition through shell execution.
高
SKILL.md:18
Ruby/shell backtick execution
- 64-bit x86 (Unicode): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fr
Line 18 provides a runnable PowerShell command that downloads an external executable. The command saves the result directly as busybox.exe.
高
SKILL.md:19
Ruby/shell backtick execution
- 64-bit ARM (Unicode): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fr
Line 19 provides a runnable PowerShell command that downloads an ARM executable from an external URL. This is risky executable download guidance.
高
SKILL.md:12
PowerShell invocation
These are PowerShell commands, if you have a classic `cmd.exe` terminal, then you must use `powershe
Line 12 explicitly instructs use of PowerShell through cmd.exe. PowerShell execution guidance is a real capability and risk for an install-oriented skill.
高
SKILL.md:15
PowerShell invocation
3. Download a suitable build of BusyBox by running one of these PowerShell commands:
Line 15 introduces PowerShell commands specifically for downloading BusyBox builds. The following commands fetch executable files, so the invocation risk is confirmed.
高
SKILL.md:12
Windows cmd.exe
These are PowerShell commands, if you have a classic `cmd.exe` terminal, then you must use `powershe
Line 12 tells users in cmd.exe to run PowerShell commands. This is Windows shell execution guidance rather than passive documentation.
高
SKILL.md:16
Hardcoded URL
- 32-bit x86 (ANSI): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fripp
Line 16 contains a hardcoded HTTPS URL used to download an executable file. The binary source is external and no integrity check is provided.
高
SKILL.md:17
Hardcoded URL
- 64-bit x86 (ANSI): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fripp
Line 17 contains a hardcoded external URL for a BusyBox executable download. The command writes the response directly to busybox.exe without verification.
高
SKILL.md:18
Hardcoded URL
- 64-bit x86 (Unicode): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fr
Line 18 contains a hardcoded external executable URL. The skill gives no checksum, signature, or version pin for the downloaded binary.
高
SKILL.md:19
Hardcoded URL
- 64-bit ARM (Unicode): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fr
Line 19 contains a hardcoded external URL for an ARM executable. The direct binary download is not paired with any integrity verification.
中
SKILL.md:12
Ruby/shell backtick execution
These are PowerShell commands, if you have a classic `cmd.exe` terminal, then you must use `powershe
Line 12 explicitly tells users to invoke PowerShell from cmd.exe. This is real shell execution guidance in an AI skill, even though the Markdown backticks are not Ruby syntax.
中
SKILL.md:13
Ruby/shell backtick execution
1. Print the type of CPU: `Get-CimInstance -ClassName Win32_Processor | Select-Object Name, NumberOf
Line 13 provides a runnable PowerShell command to query processor details. It is a local system command, so the external command finding is valid.
中
SKILL.md:14
Ruby/shell backtick execution
2. Print the OS versions: `Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" | S
Line 14 provides a runnable PowerShell command that reads Windows registry metadata. It is command execution against local system state.

风险问题

已确认的安全问题与仍需审核的项目分开展示。

已确认安全问题 (1)

RISK-001 高
SKILL.md:16-19
Unverified Executable Download
The skill instructs users to download BusyBox executable files from external URLs and save them as busybox.exe without checksum, signature, or version verification.
Lines 16-19 contain direct executable download commands and no nearby integrity verification instructions. This is a clear supply-chain risk beyond the presence of a URL alone.

补救措施

本次审计记录了建议的修复措施。实施这些措施是维护者的责任。

  1. FIX-001
    高
    Unverified executable downloads
    Pin exact BusyBox release versions and require checksum or signature verification before saving or running downloaded binaries.
  2. FIX-002
    高
    PowerShell command execution guidance
    Require explicit user approval before running any PowerShell command and explain each command before execution.
  3. FIX-003
    中
    Hardcoded external binary source
    Prefer a trusted package manager or official release channel with integrity metadata instead of bare executable URLs.
  4. FIX-004
    低
    Windows registry query
    Make the registry metadata check optional or replace it with a less sensitive OS version check where possible.

专家证据

不可变主体身份、扫描器元数据、已排除匹配项和源码级证据。

Artifact 主体

Marketplace 提交
不可用
内容哈希
不可用
目录树哈希
不可用
Skill 路径
不可用
审计载荷哈希
不可用

分析元数据

审计模型: codex

分析状态: 已完成

范围仅限于已记录的文件、行数、方法和证据；本报告不声称进行了运行时或沙箱执行。

已忽略静态误报 (1)
高
SKILL.md:14
Windows registry access
2. Print the OS versions: `Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" | S
Force-confirmed blocker/high static finding; AI dismissal overridden.

验证与导出

JSON 报告 CITATION.cff SARIF 2.1.0 已签名安装清单

manifest 和 lockfile 将安装 artifact 绑定到加密哈希。该完整性声明独立于安全评估。

审计证明: not_attestable