此报告尚无所请求语言的翻译，当前显示规范英文报告。

版本化安全评估

报告编号: SA-E406BF64

10/10/2026, 2:10:03 PM

vibestart 安全评估 v1

Skill 安全认证报告

审计历史

扫描器版本 3.0.0 审计模型: codex 最新发布的报告

技能名称: vibestart
版本: v1
维护者: vinkydev
来源: github.com/vinkydev/vibestart/tree/b7f503159fb68dd3e3d5c2c4d9b85d4e13baae13/skills/vibestart
覆盖范围: 3 已扫描文件 · 172 分析行数
策略版本: skillstore-security-audit-policy-v1

已确认问题的最高严重性

中

有 1 个已确认的安全问题需要处理。

安装上下文

请查看当前 Skill 详情页

本页仅汇总报告证据。Skill 详情页提供 canonical install advisory。

打开当前 Skill 详情页

本报告不会阻止或授权 manifest 或 ZIP。

Ten detections are false positives involving Markdown or ordinary project workflows; six describe commands that fetch and execute an unpinned npm package. Broad rollback instructions can discard unrelated edits and delete untracked files created after the operation starts. No evidence found of prompt injection, credential theft, or malicious exfiltration in the reviewed skill files; external package implementation was not available.

报告位置

证据链

证据从来源绑定延伸到安装契约。证据可用于验证，但不是安全保证。

来源

已绑定 commit 与路径
构件

已绑定内容与 tree hash
审计

已完成
安装契约

打开 manifest 进行验证
打开 manifest

观察到的能力

“已观察到”表示本报告记录了支持证据；“未记录”不证明该能力不存在。

包含脚本

可能执行 Skill 随附的代码。

本次审计未记录

网络访问

可能连接外部服务。

本次审计未记录

文件系统访问

可能读取或写入本地文件。

本次审计未记录

环境变量

可能读取进程环境中的值。

本次审计未记录

外部命令

可能调用 Skill 之外的命令或程序。

在 15 个证据位置观察到

能力复核项 (6)

中

SKILL.md:13

Ruby/shell backtick execution

2. Run the CLI from npm with `npx --yes vibestart-cli` (or `pnpm dlx vibestart-cli`); a global insta

The launcher fetches and executes an unpinned npm package, with npx automatically approving installation. Later preview/application pinning does not protect this initial invocation.

中

SKILL.md:15

Ruby/shell backtick execution

4. Read `npx --yes vibestart-cli --help` for creation or `npx --yes vibestart-cli COMMAND --help` fo

The help commands invoke the unpinned npm launcher with automatic installation approval. Help inspection still executes external package code before its trust is established.

中

SKILL.md:23

Ruby/shell backtick execution

| Create a project or use a recipe | `npx --yes vibestart-cli --list --json`

Stack discovery invokes an unpinned npm package through npx with automatic installation approval. Listing output does not eliminate the external code execution risk.

中

SKILL.md:24

Ruby/shell backtick execution

| Add a capability | `npx --yes vibestart-cli add --list --json`

Capability discovery invokes an unpinned npm package with automatic installation approval. Even a read-only capability list executes the downloaded CLI code.

中

SKILL.md:25

Ruby/shell backtick execution

| Diagnose an existing project | `npx --yes vibestart-cli doctor --offline --js

The doctor command uses an unpinned npx launcher with automatic installation approval. Its offline flag controls diagnostics, not the launcher's package download or execution.

中

SKILL.md:26

Ruby/shell backtick execution

| Update a generated project | `npx --yes vibestart-cli upgrade --dry-run --j

The upgrade preview invokes an unpinned npm launcher with automatic installation approval. Preview/application pinning is advised elsewhere, but this example still exposes external package execution.

风险问题

已确认的安全问题与仍需审核的项目分开展示。

已确认安全问题 (1)

RISK-001 中

references/maintenance.md:47-53

Broad Rollback Can Delete Unrelated Project Work

The abandonment guidance uses `git restore . && git clean -fd`. It can discard unrelated tracked edits and permanently delete untracked files added after the operation.

The reference provides a blanket destructive rollback without a deletion preview or change ownership check. A clean starting worktree does not protect later additions.

补救措施

本次审计记录了建议的修复措施。实施这些措施是维护者的责任。

FIX-001
中
Discovery and help commands execute an unpinned npm package with automatic installation approval.

Use an explicitly approved exact CLI version for discovery, help, previews, and writes; disclose registry access and execution before the first invocation.
FIX-002
中
Rollback instructions restore all tracked files and delete untracked files without checking for new unrelated work.

Replace blanket rollback with operation-specific restoration; review the deletion preview and obtain explicit approval before deleting untracked files.

专家证据

不可变主体身份、扫描器元数据、已排除匹配项和源码级证据。

Artifact 主体

Marketplace 提交: e406bf64b5db6e514879399e87b346fa7ff7c2fb
内容哈希: 413ba6584097d530b72027dbe7d45fe87a69c7b1c4b7543ac87b14c9cccfd10f
目录树哈希: 306662dd55119bcf2935ee7f2599a9308fbe0d1d4680e14386f7fe6986e4cf00
Skill 路径: skills/vinkydev/vibestart
审计载荷哈希: 579a7ca3a42859efa64515346461c370

分析元数据

审计模型: codex

分析状态: 已完成

范围仅限于已记录的文件、行数、方法和证据；本报告不声称进行了运行时或沙箱执行。

验证与导出

JSON 报告已签名审计证明 CITATION.cff SARIF 2.1.0 已签名安装清单来源

manifest 和 lockfile 将安装 artifact 绑定到加密哈希。该完整性声明独立于安全评估。

审计证明: active