📦
审计历史
taiwan-weather - 1 审计
审计版本 1 最新
2026年10月13日 04:26
Markdown backticks, public weather URLs, and readable Chinese documentation explain the command, network, and entropy false positives. Two filesystem findings confirm shared temporary-file risks: symlink-based overwrite and local alert-data substitution. No evidence found of prompt injection, credential theft, or intentional data exfiltration.
1
已扫描文件
151
分析行数
5
复核项
0
已忽略误报
能力复核项 (2)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Temp directory access
curl -sm 30 'https://alerts.ncdr.nat.gov.tw/RssAtomFeed.ashx?AlertType=5' -o /tmp/typhoon.xml
curl writes to the predictable shared path /tmp/typhoon.xml without exclusive creation. A local attacker can pre-create a symlink to overwrite another writable file.
中
Temp directory access
h = open('/tmp/typhoon.xml', encoding='utf-8').read()
The parser trusts the same predictable shared path without binding the read to a verified download. Local substitution can feed forged alert text into reporting.
风险因素
⚙️ 外部命令 (18)
📁 文件系统访问 (2)
审计者: codex