📦
审计历史
garbage-day - 1 审计
审计版本 1 最新
2026年10月13日 03:42
Of 53 static findings, 52 are false positives involving Markdown formatting, public HTTPS downloads, repository names, or a documentation link. The remaining finding confirms an HTTP fallback that exposes retrieved directory content to interception or modification. No evidence found of prompt injection, credential access, destructive commands, or data exfiltration.
1
已扫描文件
196
分析行数
4
复核项
0
已忽略误报
能力复核项 (1)
这些是真实的本地能力,对此技能可能是预期行为,因此需要复核,但不会按已确认恶意行为计分。
低
Hardcoded URL
3. 5374公式サイト ( http://5374.jp/ ) にある展開済み地域の案内。HTTPSは証明書が未設定で使えないため(2026-09-13実測、`*.github.com` の証明書が
The skill explicitly recommends HTTP after reporting an HTTPS certificate mismatch. Unauthenticated transport allows interception or modification of directory content and destination links.
风险因素
⚙️ 外部命令 (37)
SKILL.md:15 SKILL.md:23 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:37 SKILL.md:39-42 SKILL.md:42-46 SKILL.md:46-48 SKILL.md:48-49 SKILL.md:49-50 SKILL.md:50 SKILL.md:52-54 SKILL.md:54-58 SKILL.md:58-64 SKILL.md:64-79 SKILL.md:79-81 SKILL.md:81 SKILL.md:85-95 SKILL.md:95-99 SKILL.md:99-101 SKILL.md:101-105 SKILL.md:105-132 SKILL.md:132-135 SKILL.md:135-143 SKILL.md:143-147 SKILL.md:147-167 SKILL.md:167-171 SKILL.md:171-182 SKILL.md:182-183 SKILL.md:183-192 SKILL.md:192
🌐 网络访问 (13)
📁 文件系统访问 (2)
审计者: codex