📦
审计历史
taiwan-toilet - 1 审计
审计版本 1 最新
2026年10月13日 04:16
Markdown backticks, documented public-data requests, and the dataset access key do not establish command injection, secret theft, reconnaissance, or obfuscation. Predictable shared temporary files introduce local overwrite and tampering risks when another user can precreate or alter them. No evidence found of malicious intent, data exfiltration, or prompt injection.
1
已扫描文件
91
分析行数
8
复核项
0
已忽略误报
能力复核项 (4)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' "$BASE&limit=1000&offset=0&sort=ImportDate%20desc&format=JSON" -o /tmp/
curl writes to predictable /tmp/toilet_p1.json without creating a private directory. A precreated symlink can redirect the write and overwrite files permitted by the executing account.
中
Temp directory access
json.dump(rows, open('/tmp/toilet_all.json', 'w'), ensure_ascii=False)
Opening predictable /tmp/toilet_all.json in write mode follows symlinks and truncates an existing target. Another local user could redirect this write where filesystem protections permit.
中
Temp directory access
rows = json.load(open('/tmp/toilet_all.json')) # 上一節合併後的全部頁面
The calculation trusts a predictable shared cache without checking ownership or isolating it. A local attacker could replace the file and influence toilet names, locations, or rankings.
中
Python file write/append
json.dump(rows, open('/tmp/toilet_all.json', 'w'), ensure_ascii=False)
The write-mode open can truncate a preexisting file or follow a symlink at the fixed shared path. It lacks exclusive creation or a private temporary directory.
风险因素
⚙️ 外部命令 (7)
📁 文件系统访问 (5)
🔑 环境变量 (3)
审计者: codex