📦
审计历史
shelter-lookup - 1 审计
审计版本 1 最新
2026年10月13日 04:17
Forty-seven alerts are false positives involving public GSI downloads, standard cache operations, Markdown formatting, and readable Japanese text. The shared temporary cache example permits local data poisoning because existing CSV files are trusted without ownership checks. No evidence found of prompt injection, credential collection, or data exfiltration.
3
已扫描文件
390
分析行数
5
复核项
0
已忽略误报
能力复核项 (1)
这些是真实的本地能力,对此技能可能是预期行为,因此需要复核,但不会按已确认恶意行为计分。
中
Temp directory access
--cache-dir /tmp/kurashi-shelter-cache
The example selects a predictable shared /tmp cache, and lookup.py trusts existing CSVs without ownership checks. Another local user can prepopulate false hazard designations and coordinates.
风险因素
🌐 网络访问 (8)
📁 文件系统访问 (10)
🔑 环境变量 (1)
⚙️ 外部命令 (25)
SKILL.md:20 SKILL.md:24 SKILL.md:25 SKILL.md:27-29 SKILL.md:29-35 SKILL.md:35-39 SKILL.md:39-41 SKILL.md:41-45 SKILL.md:45 SKILL.md:47-53 SKILL.md:53-55 SKILL.md:55 SKILL.md:59-66 SKILL.md:66-70 SKILL.md:70-75 SKILL.md:75-77 SKILL.md:77 SKILL.md:79-86 SKILL.md:86-88 SKILL.md:88 SKILL.md:94-96 SKILL.md:96-98 SKILL.md:98-104 SKILL.md:104-114 SKILL.md:114-119
审计者: codex