此报告尚无所请求语言的翻译，当前显示规范英文报告。
版本化安全评估
报告编号: SA-1212028B
7/5/2026, 10:26:36 PM
gitops-workflow 安全评估 v4
Skill 安全认证报告
审计模型: codex 历史报告
- 技能名称
- gitops-workflow
- 版本
- v4
- 维护者
- sickn33
- 覆盖范围
- 3 已扫描文件 · 571 分析行数
- 策略版本
- 不可用
已确认问题的最高严重性
中
有 2 个已确认的安全问题需要处理。
安装上下文
历史证据
本报告可能无法描述当前可安装的 artifact。请打开当前 Skill 详情页查看安装建议。
打开当前 Skill 详情页本报告不会阻止或授权 manifest 或 ZIP。
Most static code-execution alerts were markdown code fence false positives, not Ruby backtick execution. Confirmed issues remain around cluster-changing setup commands, direct remote manifest application, and a Flux install command that pipes network content to sudo bash. No prompt injection text was found.
报告位置
历史报告
使用本报告安装前，请先查看审计历史。
审计证明
无法签发证明
所需的不可变绑定不完整。
人工验证
未进行人工验证
本报告没有人工验证记录。
覆盖范围
3 已扫描文件 · 571 分析行数
有 11 项内容需要查看
局限
本报告不声称进行了运行时或沙箱执行，也不证明不存在副作用。
证据链
证据从来源绑定延伸到安装契约。证据可用于验证，但不是安全保证。
来源
绑定不可用
构件
身份信息不完整
审计
已完成
观察到的能力
“已观察到”表示本报告记录了支持证据；“未记录”不证明该能力不存在。
包含脚本
可能执行 Skill 随附的代码。
本次审计未记录
网络访问
可能连接外部服务。
在 14 个证据位置观察到
文件系统访问
可能读取或写入本地文件。
本次审计未记录
环境变量
可能读取进程环境中的值。
本次审计未记录
外部命令
可能调用 Skill 之外的命令或程序。
在 34 个证据位置观察到
能力复核项 (9)
高
Ruby/shell backtick execution
```bash
This bash block includes curl fetching an install script and piping it to sudo bash. That gives network content privileged execution if copied or run.
高
sudo privilege escalation
curl -s https://fluxcd.io/install.sh | sudo bash
The command pipes an install script from the network directly into sudo bash. This is privileged remote code execution if the user or agent runs it.
高
Hardcoded URL
curl -s https://fluxcd.io/install.sh | sudo bash
The hardcoded Flux install URL is fetched with curl and piped to sudo bash. This combines network dependency with privileged execution.
中
Ruby/shell backtick execution
```bash
This fenced bash block creates namespaces, applies a remote manifest, and reads the initial admin secret. It is legitimate setup guidance but can mutate clusters and expose sensitive credentials if run automatically.
中
Ruby/shell backtick execution
```bash
The troubleshooting block includes argocd app sync with prune, which can change or delete cluster resources. It should require explicit cluster and environment confirmation.
中
Ruby/shell backtick execution
```bash
The troubleshooting block includes argocd app sync --force, which can override live cluster state. It is legitimate but risky operational guidance.
低
Hardcoded URL
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/insta
The example applies a remote Kubernetes manifest directly from GitHub. This can install cluster resources from network content without local review.
低
Hardcoded URL
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/ha/in
The high-availability install also applies a remote GitHub manifest directly to the cluster. This is legitimate setup guidance but carries supply-chain risk.
低
Hardcoded URL
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/insta
The setup example applies a Kubernetes manifest from a remote GitHub URL. This is common but should be reviewed and pinned before cluster installation.
风险问题
已确认的安全问题与仍需审核的项目分开展示。
已确认安全问题 (2)
RISK-001 中
Production Auto-Sync With Prune Example
The production Application example uses apps/production/my-app with automated sync, prune, and selfHeal. If copied directly, it can delete or rewrite production resources without approval.
The file warns against production auto-sync at line 38, but the later production path example enables automated prune and selfHeal. This is a clear operational safety gap.
RISK-002 中
Credential Passed On Command Line
The repo-add example places a repository token in a command-line password argument. Users could expose tokens through shell history, logs, or process listings.
The token value is a placeholder, but the documented pattern teaches command-line secret handling. No real secret is embedded.
补救措施
本次审计记录了建议的修复措施。实施这些措施是维护者的责任。
- FIX-001高Remote install script with root privilegesReplace the curl-to-sudo Flux install command with a pinned package, checksum verification, or manual review step.
- FIX-002中Remote Kubernetes manifest applicationPin exact ArgoCD release URLs and tell users to inspect manifests before applying them to a cluster.
- FIX-003中Production auto-sync with prune in examplesChange production examples to manual sync or approval-gated sync. Reserve automated prune and selfHeal for lower environments.
- FIX-004中Repository token shown as a command argumentUse credential prompts, environment-specific secret stores, or documented secure token handling instead of command-line password arguments.
专家证据
不可变主体身份、扫描器元数据、已排除匹配项和源码级证据。
Artifact 主体
- Marketplace 提交
- 不可用
- 内容哈希
- 不可用
- 目录树哈希
- 不可用
- Skill 路径
- 不可用
- 审计载荷哈希
- 不可用
分析元数据
审计模型: codex
分析状态: 已完成
范围仅限于已记录的文件、行数、方法和证据；本报告不声称进行了运行时或沙箱执行。
验证与导出
manifest 和 lockfile 将安装 artifact 绑定到加密哈希。该完整性声明独立于安全评估。
审计证明: not_attestable