📦

审计历史

routeros-container - 2 审计

审计版本 2

最新 安全

Apr 16, 2026, 09:02 PM

This skill is a Markdown documentation file providing instructions and examples for the MikroTik RouterOS /container subsystem. The static scanner flagged 171 patterns, but all are false positives. The 'external_commands' detections match RouterOS CLI syntax inside Markdown code fences, not actual shell execution. The 'network' detections reference example URLs and IPs in documentation snippets. The 'weak cryptographic algorithm' and 'path traversal' findings have no basis in the content. No executable code exists in this file - it is purely instructional documentation for network administrators.

1
已扫描文件
348
分析行数
0
发现项
claude
审计者
未发现安全问题

审计版本 1

安全

Mar 30, 2026, 02:30 AM

This is a legitimate documentation file for RouterOS container management skill. Static analyzer flagged 170 potential issues, but all are false positives: backtick markers are markdown formatting, btoa() is legitimate base64 encoding for HTTP Basic Auth, and fetch calls are TypeScript code examples in documentation. The skill provides helpful guidance for managing OCI containers on MikroTik hardware.

1
已扫描文件
347
分析行数
6
发现项
claude
审计者
中风险问题 (1)
Documentation Contains Code Examples with Network Access
The SKILL.md file includes TypeScript code examples showing HTTP fetch calls to RouterOS REST API endpoints. These are legitimate documentation examples for API usage, not malicious network calls.
低风险问题 (2)
Hardcoded Example IP Addresses
Documentation contains example IP addresses (192.168.1.1) and URLs for educational purposes. These are standard documentation patterns, not security concerns.
Base64 Encoding for Authentication
The btoa() function is used to encode credentials for HTTP Basic Authentication in RouterOS REST API examples. This is the documented method for RouterOS API authentication.

风险因素

🌐 网络访问 (5)
⚙️ 外部命令
未记录任何特定位置
📁 文件系统访问
未记录任何特定位置