審計紀錄
chipsec - 6 審計
審計版本 6
最新 中風險Jun 28, 2026, 05:59 PM
Static analysis found many command, malware-keyword, weak-hash, and filesystem alerts, but most are Markdown examples for defensive offline firmware analysis. The confirmed concern is repeated guidance to run sudo chmod 777 on a Python site-packages logs directory, which is unsafe documentation for users. No prompt injection attempt, credential exfiltration, or malicious automation was found in the reviewed files.
中風險問題 (1)
低風險問題 (3)
風險因素
偵測到的模式
審計版本 5
安全Jan 16, 2026, 07:55 PM
This is a documentation-only skill providing instructions for Intel's chipsec framework. All 241 static findings are false positives caused by the analyzer misinterpreting documentation as code. The files contain only markdown documentation describing legitimate firmware security analysis workflows. No executable code, no malicious patterns, and no attack tooling.
風險因素
⚙️ 外部命令 (154)
審計版本 4
安全Jan 16, 2026, 07:55 PM
This is a documentation-only skill providing instructions for Intel's chipsec framework. All 241 static findings are false positives caused by the analyzer misinterpreting documentation as code. The files contain only markdown documentation describing legitimate firmware security analysis workflows. No executable code, no malicious patterns, and no attack tooling.
風險因素
⚙️ 外部命令 (154)
審計版本 3
安全Jan 10, 2026, 11:31 AM
This is a pure prompt-based skill containing only documentation and instructions for using Intel's chipsec framework. No executable scripts, no network calls, no credential access, and no code execution capabilities. The skill is purely instructional content describing how to perform static firmware analysis.
審計版本 2
安全Jan 10, 2026, 11:31 AM
This is a pure prompt-based skill containing only documentation and instructions for using Intel's chipsec framework. No executable scripts, no network calls, no credential access, and no code execution capabilities. The skill is purely instructional content describing how to perform static firmware analysis.
審計版本 1
安全Jan 10, 2026, 11:31 AM
This is a pure prompt-based skill containing only documentation and instructions for using Intel's chipsec framework. No executable scripts, no network calls, no credential access, and no code execution capabilities. The skill is purely instructional content describing how to perform static firmware analysis.