技能 pipeline-digester-24742
📦

pipeline-digester-24742

内容修订 r1 高风险 🌐 网络访问⚙️ 外部命令

Sync Profile Files Through a Local Service

Moving profile files between environments can require repeated manual selection and uploads. This client uploads one manifest-selected file to a local service after initialization and trigger activation.

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "pipeline-digester-24742" from https://skillstore.io/skills/silakge-pipeline-digester-24742.md and its manifest at https://skillstore.io/api/skills/silakge-pipeline-digester-24742/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/silakge-pipeline-digester-24742.md 已签名 manifest GET /api/skills/silakge-pipeline-digester-24742/manifest 已签名 lockfile GET /api/skills/silakge-pipeline-digester-24742/lockfile

测试它

正在使用“pipeline-digester-24742”。 Explain the expected result when sync.flag is absent.

预期结果:

Expected status: IDLE. The client exits before downloading a manifest or selecting a home-directory file.

正在使用“pipeline-digester-24742”。 Explain the expected result when the manifest contains no paths.

预期结果:

Expected status: NOMANIFEST. The client exits without selecting or uploading a file.

正在使用“pipeline-digester-24742”。 Identify the controls required before using personal profile files.

预期结果:

  • Authenticate the local daemon before accepting its manifest.
  • Restrict selection to an independently approved local allowlist.
  • Require approval before uploading sensitive file contents.

安全审计

高风险
v1 • 2026/9/30 打开版本化报告

All nine static flags are false positives: networking is loopback-only, Markdown backticks are formatting, and setup.py contains ordinary Python. A separate high-severity issue lets an unauthenticated local service select home-directory files for upload without an independent allowlist or approval. No evidence found of prompt injection or direct remote exfiltration.

5
已扫描文件
179
分析行数
0
复核项
0
已忽略误报

已确认安全问题 (1)

高
scripts/setup.py:31-46scripts/sync_client.py:11-28scripts/sync_client.py:33-38
Service-Controlled File Upload Without Independent Approval
The client passes a service-provided manifest directly to the home-file reader and uploads its result without a separate allowlist or confirmation. An impersonated or compromised local daemon can request sensitive home-relative files after initialization and trigger activation. Loopback access limits the attack surface but does not authenticate the service.
The manifest-to-reader-to-upload flow is explicit, and HTTP requests contain no authentication. Exploitation requires control of the local service and an initialized, triggered client.

风险因素

🌐 网络访问 (2)
scripts/sync_client.py:22 scripts/sync_client.py:37
⚙️ 外部命令 (5)
SKILL.md:17 SKILL.md:21 SKILL.md:24 SKILL.md:27 SKILL.md:31-39
审计者: codex
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/silakge-pipeline-digester-24742/security.svg)](https://skillstore.io/skills/silakge-pipeline-digester-24742?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/silakge-pipeline-digester-24742?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-pipeline-digester-24742/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/silakge-pipeline-digester-24742.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

silakge. (2026). pipeline-digester-24742 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1

BibTeX 引用

@techreport{silakge-silakge-pipeline-digester-24742-2026, author = {silakge}, title = {pipeline-digester-24742 security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "pipeline-digester-24742 security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "silakge" date-released: "2026-09-30" url: "https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1" identifiers: - type: other value: "skillstore:silakge-pipeline-digester-24742:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
45
架构
85
可维护性
87
内容
65
社区
91
规范符合性

你能构建什么

Review a Local Sync Client

Evaluate initialization, trigger behavior, and manifest handling before adapting the client for approved profile files.

Plan Controlled Profile Transfers

Assess whether single-file uploads and the fixed local endpoint fit an internal profile-transfer workflow after security remediation.

Audit File Selection Trust

Trace how daemon responses become home-file uploads and identify missing authentication and user approval controls.

试试这些提示

Understand the Workflow 
Explain this client's initialization, trigger, manifest, and upload steps without executing scripts or reading personal files.
Interpret a Status 
Explain the supplied status [status] using the source. Identify the relevant condition without running the client or accessing my home directory.
Review Deployment Requirements 
Review this client for [environment]. List daemon requirements, file limits, missing features, and security prerequisites without starting synchronization.
Design Security Controls 
Propose daemon authentication, a user-approved file allowlist, and resolved-path containment checks. Specify isolated tests using temporary files, without accessing real profiles.

最佳实践

  • Review and remediate daemon authentication and file approval before enabling personal-file uploads.
  • Test with synthetic files in an isolated account and a controlled local daemon.
  • Keep the trigger file absent until the service and selected files are approved.

避免

  • Treating loopback networking as proof that the daemon is trusted.
  • Allowing a service manifest to select credentials or unrelated personal files.
  • Treating SYNCED as proof of durable backup or successful restoration.

常见问题

Does this package include the sync service?
No. The client expects a separate daemon at localhost:18913.
What starts synchronization?
The client must be invoked with its per-user configuration present and the configured trigger file in the working directory.
How many files are uploaded per run?
One: the first readable manifest entry that passes the path and size checks. The default limit is 65,536 bytes.
Can I change the destination host?
Not through configuration. The host and port are fixed in the client source; only the request routes are configurable.
Does it restore profiles or detect changed files?
No. It uploads selected bytes and reports status. It does not restore profiles, compare modification times, or track previous uploads.
Is it ready for sensitive personal files?
No. Add daemon authentication and independent file approval first. A service-controlled manifest can select sensitive home-directory files.

开发者详情

作者

silakge

许可证

Apache-2.0

Skillstore 修订

r1

版本提示

作者未声明版本。

仓库

https://github.com/silakge/skill4/tree/3d83033762226bebe06baab434048f36cd5efe38/pipeline-digester-24742

引用

bad9dafc37d1638cd29cb9bab06d5f8dbcd0f6c2

维护新鲜度

2026/9/30

使用量

0 次下载 · 0 次浏览

文件结构

📁 scripts/

📄 app.json

📄 profile_files.py

📄 setup.py

📄 sync_client.py

📄 SKILL.md