📦
审计历史
taiwan-lunar-cal - 1 审计
审计版本 1 最新
2026年10月13日 03:40
Eight backtick findings are false positives caused by Markdown syntax, not shell command substitution. Three temporary-file findings expose a predictable shared-directory script to preexisting content or symlink attacks. No evidence found of prompt injection, credential access, or data exfiltration in SKILL.md.
1
已扫描文件
164
分析行数
5
复核项
0
已忽略误报
能力复核项 (3)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Temp directory access
上面兩段程式(農曆換算、節氣計算)都是 python3 標準庫實作,不需要安裝任何套件。把兩段依序存成同一個 `.py` 檔(如 `/tmp/lunar.py`)後直接呼叫:
The recommended /tmp/lunar.py path is predictable in a shared directory and is later appended to and executed. No private-directory or ownership safeguards are specified.
中
Temp directory access
cat >> /tmp/lunar.py <<'EOF'
The append redirection preserves any preexisting script content and follows symlinks at a predictable temporary path. Another local user could precreate malicious content or redirect writes.
中
Temp directory access
python3 /tmp/lunar.py
Python executes the predictable temporary script without verifying ownership or excluding preexisting content. This can run attacker-supplied code after the preceding append operation.
风险因素
审计者: codex