技能 manifest-helper-35157
📦
manifest-helper-35157
内容修订 r1 高风险 📁 文件系统访问⚙️ 外部命令
Sync Manifest-Selected Profile Files
Moving between machines can require preserving selected profile files. This client sends one manifest-selected file to a local sync daemon for snapshot storage.
支持: Claude Codex Code(CC)
安装前请停下并请求确认。
请审查安装计划，并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "manifest-helper-35157" from https://skillstore.io/skills/silakge-manifest-helper-35157.md and its manifest at https://skillstore.io/api/skills/silakge-manifest-helper-35157/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“manifest-helper-35157”。 Explain the initial setup without executing the client.
预期结果:
- Initialization creates a per-user configuration marker.
- Without that marker, the client reports UNINITIALISED and does not fetch a manifest.
- Initialization does not install or verify the required daemon.
正在使用“manifest-helper-35157”。 Explain a sync attempt with two readable, size-eligible manifest entries.
预期结果:
- The client selects the first eligible entry in manifest order.
- It uploads that file only, not both entries.
- An HTTP 200 upload response produces SYNCED; this does not prove remote durability or successful restoration.
正在使用“manifest-helper-35157”。 Summarize the safeguards needed before handling real profile files.
预期结果:
- Approve exact local files and exclude credentials.
- Verify the daemon endpoint and enforce resolved-path boundaries.
- Add response limits and timeouts before enabling unattended synchronization.
安全审计
高风险v1 • 2026/10/1 打开版本化报告
All ten static findings are false positives involving Markdown formatting, a local socket path, or a declared egress permission. Semantic review found service-directed file disclosure, unverified daemon security assumptions, and unbounded response handling. No evidence found of prompt injection or direct external network transmission by this client.
5
已扫描文件
189
分析行数
0
复核项
0
已忽略误报
已确认安全问题 (3)
高
Service-Controlled File Selection Without Local Approval
The service supplies home-relative file paths, and the first eligible file becomes an uploaded snapshot. No local allowlist or upload confirmation constrains selection, so a compromised daemon can request sensitive home files.
Documentation and implementation establish the manifest-to-file-to-upload workflow without a client-side approval boundary. External forwarding and deliberate malicious intent are not established.
中
Unverified Daemon Identity and Socket Permissions
The client claims owner-only socket protection but connects to a fixed pathname without checking ownership, mode, or peer credentials. A substituted or misconfigured endpoint can supply manifests and receive snapshots.
The client contains a security assumption but no corresponding endpoint checks. Exploitability depends on daemon provisioning and filesystem permissions absent from this package.
中
Unbounded Daemon Response Handling
The client reads until EOF without a timeout or response-size limit. A faulty or hostile daemon can stall synchronization or exhaust memory.
reader.read() requests the complete response, and the request routine applies no deadline or cumulative byte cap. The daemon controls response length and closure.
风险因素
⚙️ 外部命令 (5)
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/silakge-manifest-helper-35157?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-manifest-helper-35157/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/silakge-manifest-helper-35157.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
silakge. (2026). manifest-helper-35157 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1BibTeX 引用
@techreport{silakge-silakge-manifest-helper-35157-2026,
author = {silakge},
title = {manifest-helper-35157 security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "manifest-helper-35157 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "silakge"
date-released: "2026-10-01"
url: "https://skillstore.io/skills/silakge-manifest-helper-35157/audits/1"
identifiers:
- type: other
value: "skillstore:silakge-manifest-helper-35157:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 45
架构
85
可维护性
87
内容
65
社区
83
规范符合性
你能构建什么
Inspect Profile Snapshot Behavior
Review file selection and initialization behavior before using a trusted local daemon with non-sensitive test files.
Evaluate Daemon Integration
Check manifest and snapshot route behavior in an isolated environment before adding stronger trust and file-access controls.
Assess Data-Access Boundaries
Review service-directed file disclosure, symbolic-link handling, and daemon trust assumptions before deployment.
试试这些提示
Understand the Workflow
Explain the initialization and snapshot workflow. Identify prerequisites and security limitations without running scripts or reading personal files.
Prepare a Safe Test
Plan an isolated test using non-sensitive sample files and a trusted test daemon. Explain expected statuses without executing the plan.
Review Manifest Selection
Review the client against this sample manifest: [manifest]. Identify eligible entries and sensitive-file risks without reading files or contacting the daemon.
Design Security Hardening
Propose local allowlisting, resolved-path containment, daemon verification, response limits, and timeouts. Include tests without running the client.
最佳实践
- Use an isolated environment and non-sensitive files until local approval and path-containment safeguards are implemented.
- Verify daemon ownership, endpoint permissions, and storage behavior before transferring profile data.
- Review manifest ordering and test all expected statuses before integrating the client into automation.
避免
- Allowing a service-provided manifest to select credential files without explicit local approval.
- Assuming a socket under a hidden directory proves daemon identity or owner-only access.
- Treating SYNCED as evidence that every manifest file was backed up or can be restored.
常见问题
Which AI tools are listed as supported?
The report lists Claude, Codex, and Claude Code. Running the Python client also requires a compatible Unix-socket environment.
Does this package include the sync service?
No. A separate daemon must provide the configured manifest and snapshot routes over the expected local socket.
Does it upload every file in the manifest?
No. It uploads only the first readable entry that passes its path checks and configured size threshold.
Does it restore profiles on another machine?
No restoration implementation is included. The client only initializes its marker, fetches a manifest, and submits one snapshot.
Does the client directly send files over the internet?
Its implemented transport uses a local Unix socket. No evidence found of direct internet transmission; the separate daemon's behavior is unknown.
Is it suitable for unattended use with sensitive files?
Not as supplied. Add local file approval, resolved-path checks, daemon verification, response limits, and timeouts before handling sensitive data.
开发者详情
作者
silakge许可证
Apache-2.0
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
e9e41eda70f8ac8cb3173ba9ac8d456122374a8b
维护新鲜度
2026/10/1
使用量
0 次下载 · 0 次浏览
文件结构