審計紀錄

references/tunnel/patterns.md:184

Pipe to shell pattern

await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh');

The reference contains a pipe-to-shell install command that an agent or user could copy into a live environment. Even though it is documentation, this pattern is hazardous and should be replaced with safer installation steps.

高

Systemd service enablement

systemctl start cloudflared && systemctl enable cloudflared

The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.

能力複核項目 (31)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

references/flagship/README.md:31

Dynamic code evaluation with eval()

| **OpenFeature SDK** | Workers, Node.js, browser | `@cloudflare/flagship` + `@openfeature/server-sd

The reference mentions dynamic eval usage, which is dangerous if copied into application code. Context may be educational, so confidence is moderate rather than high.

高

Process exec

const cursor = this.sql.exec('SELECT * FROM users WHERE email = ?', email);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec('UPDATE accounts SET balance = balance - ? WHERE id = ?', 100, 1);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

references/do-storage/configuration.md:44-49 references/do-storage/patterns.md:13-16

Process exec

this.sql.exec('UPDATE accounts SET balance = balance + ? WHERE id = ?', 100, 2);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec · 2 處

this.sql.exec(`

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("CREATE TABLE events(id INTEGER PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO events VALUES (?)", 1234567890123456789n); // Corrupts!

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("CREATE TABLE events(id TEXT PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO events VALUES (?)", "1234567890123456789");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec(`CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT)`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (1)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec(`ALTER TABLE users ADD COLUMN email TEXT`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (2)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec('DELETE FROM requests WHERE key = ? AND timestamp < ?', key, now - window);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

const cursor = this.sql.exec('SELECT * FROM users WHERE email = ?', email);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec('UPDATE accounts SET balance = balance - ? WHERE id = ?', 100, 1);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

references/do-storage/configuration.md:44 references/do-storage/patterns.md:13

Python exec() function

this.sql.exec('UPDATE accounts SET balance = balance + ? WHERE id = ?', 100, 2);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function · 2 處

this.sql.exec(`

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("CREATE TABLE events(id INTEGER PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO events VALUES (?)", 1234567890123456789n); // Corrupts!

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("CREATE TABLE events(id TEXT PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO events VALUES (?)", "1234567890123456789");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec(`CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT)`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (1)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec(`ALTER TABLE users ADD COLUMN email TEXT`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (2)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

references/tunnel/patterns.md:190

Python exec() function

this.sql.exec('DELETE FROM requests WHERE key = ? AND timestamp < ?', key, now - window);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

sudo privilege escalation

sudo cloudflared service install

The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.

高

references/tunnel/patterns.md:191

sudo privilege escalation

sudo launchctl start com.cloudflare.cloudflared

The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.

風險因素

⚙️ 外部命令 (50)

🌐 網路存取 (50)

🔑 環境變數 (50)

📁 檔案系統存取 (50)

⚡ 包含腳本 (50)

偵測到的模式

Pipe to shell patternSystemd service enablement

審計單位: claude

審計版本 4

2026年7月9日上午01:30

321

已掃描檔案

49,016

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (2)

嚴重

references/tunnel/patterns.md:184

Pipe to shell pattern

await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh');

高

Systemd service enablement

systemctl start cloudflared && systemctl enable cloudflared

The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.

能力複核項目 (31)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

references/flagship/README.md:31

Dynamic code evaluation with eval()

| **OpenFeature SDK** | Workers, Node.js, browser | `@cloudflare/flagship` + `@openfeature/server-sd

The reference mentions dynamic eval usage, which is dangerous if copied into application code. Context may be educational, so confidence is moderate rather than high.

高

Process exec

const cursor = this.sql.exec('SELECT * FROM users WHERE email = ?', email);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec('UPDATE accounts SET balance = balance - ? WHERE id = ?', 100, 1);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

references/do-storage/configuration.md:44-49 references/do-storage/patterns.md:13-16

Process exec

this.sql.exec('UPDATE accounts SET balance = balance + ? WHERE id = ?', 100, 2);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec · 2 處

this.sql.exec(`

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("CREATE TABLE events(id INTEGER PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO events VALUES (?)", 1234567890123456789n); // Corrupts!

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("CREATE TABLE events(id TEXT PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO events VALUES (?)", "1234567890123456789");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec(`CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT)`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (1)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec(`ALTER TABLE users ADD COLUMN email TEXT`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (2)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Process exec

this.sql.exec('DELETE FROM requests WHERE key = ? AND timestamp < ?', key, now - window);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

const cursor = this.sql.exec('SELECT * FROM users WHERE email = ?', email);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec('UPDATE accounts SET balance = balance - ? WHERE id = ?', 100, 1);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

references/do-storage/configuration.md:44 references/do-storage/patterns.md:13

Python exec() function

this.sql.exec('UPDATE accounts SET balance = balance + ? WHERE id = ?', 100, 2);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function · 2 處

this.sql.exec(`

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("CREATE TABLE events(id INTEGER PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO events VALUES (?)", 1234567890123456789n); // Corrupts!

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("CREATE TABLE events(id TEXT PRIMARY KEY)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO events VALUES (?)", "1234567890123456789");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec(`CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT)`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (1)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec(`ALTER TABLE users ADD COLUMN email TEXT`);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

Python exec() function

this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (2)");

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

references/tunnel/patterns.md:190

Python exec() function

this.sql.exec('DELETE FROM requests WHERE key = ? AND timestamp < ?', key, now - window);

The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.

高

sudo privilege escalation

sudo cloudflared service install

The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.

高

references/tunnel/patterns.md:191

sudo privilege escalation

sudo launchctl start com.cloudflare.cloudflared

The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.

風險因素

⚙️ 外部命令 (50)

🌐 網路存取 (50)

🔑 環境變數 (50)

📁 檔案系統存取 (50)

⚡ 包含腳本 (50)

偵測到的模式

Pipe to shell patternSystemd service enablement

審計單位: claude

審計版本 3

2026年7月5日上午07:16

Most static findings are false positives from Markdown, Cloudflare API examples, SQL exec calls, and documented placeholder secrets. Confirmed risks remain in Sandbox examples that promote unsafe shell execution, token-in-URL cloning, and untrusted command construction, plus Tunnel service-install examples that require administrator approval.

321

已掃描檔案

49,016

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (4)

嚴重

references/tunnel/patterns.md:184

Pipe to shell pattern

await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh');

The example pipes a remotely fetched install script directly into sh inside a sandbox. This is a classic unsafe installation pattern and should not be promoted as a common pattern.

高

Systemd service enablement

systemctl start cloudflared && systemctl enable cloudflared

The command enables a persistent systemd service. This is legitimate for Tunnel setup but creates persistence and should be clearly gated behind admin approval.

高

multiple:1

[HEURISTIC] SUSPICIOUS COMBINATION: Code execution + Persistence mechanism

This combination is common in malware that maintains access

The repository contains confirmed pipe-to-shell and persistent service-install examples. The evidence is documentation rather than hidden executable code, so confidence is moderate.

高

references/sandbox/patterns.md:39-41 references/sandbox/patterns.md:135-138 references/sandbox/patterns.md:185-186

Unsafe Sandbox Command Patterns Presented as Examples

The Sandbox reference includes common-pattern examples that pipe a remote installer into a shell, interpolate request values into git commands, and execute request body code. These examples need stronger warnings and safer alternatives.

The cited lines present these commands under common patterns, not only as anti-patterns. Static analysis finds the mechanics, but the framing as recommended examples is the additional risk.

能力複核項目 (23)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

嚴重

Python exec() function

await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh');

This finding is tied to the same curl-to-shell sandbox example. It fetches code from the network and executes it without pinning or verification.

嚴重

Process exec

await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh');

This finding is tied to the same curl-to-shell sandbox example. It fetches code from the network and executes it without pinning or verification.

嚴重

references/sandbox/api.md:167

Hardcoded URL

await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh');

This finding is tied to the same curl-to-shell sandbox example. It fetches code from the network and executes it without pinning or verification.

高

Python exec() function

const result = await sandbox.exec('python /tmp/code.py');

The lifecycle example writes a variable named code to /tmp/code.py and executes it. This is safe only for trusted code and needs explicit validation guidance.

高

references/sandbox/api.md:167

Process exec

const result = await sandbox.exec('python /tmp/code.py');

The lifecycle example writes a variable named code to /tmp/code.py and executes it. This is safe only for trusted code and needs explicit validation guidance.

高

references/sandbox/api.md:166

Temp directory access

await sandbox.writeFile('/tmp/code.py', code);

The lifecycle example writes a variable named code to /tmp/code.py and executes it. This is safe only for trusted code and needs explicit validation guidance.

高

references/sandbox/api.md:167

Temp directory access

const result = await sandbox.exec('python /tmp/code.py');

The lifecycle example writes a variable named code to /tmp/code.py and executes it. This is safe only for trusted code and needs explicit validation guidance.

高

references/sandbox/gotchas.md:29

Python exec() function

return await sandbox.exec(cmd);

The retry helper executes a caller-supplied command string. It may be legitimate, but it needs a validation boundary to avoid command injection.

高

references/sandbox/gotchas.md:29

Process exec

return await sandbox.exec(cmd);

The retry helper executes a caller-supplied command string. It may be legitimate, but it needs a validation boundary to avoid command injection.

高

references/sandbox/patterns.md:138

Python exec() function

await sandbox.exec(`git clone -b ${branch} ${repo} /workspace/repo`);

The CI example interpolates request-supplied repo and branch values directly into a shell command. This creates a command-injection risk unless inputs are strictly validated.

高

references/sandbox/patterns.md:186

Python exec() function

const result = await session.exec(`python3 -c "${code}"`);

The session example executes request body content through python3 -c with shell interpolation. This is unsafe untrusted code execution guidance.

高

references/sandbox/patterns.md:138

Python exec() function

await sandbox.exec(`git clone https://${env.GITHUB_TOKEN}@github.com/user/repo.git`);

The example embeds GITHUB_TOKEN directly in a git clone URL. Tokens in URLs can leak through logs, shell history, process listings, and error messages.

高

Process exec

await sandbox.exec(`git clone -b ${branch} ${repo} /workspace/repo`);

The CI example interpolates request-supplied repo and branch values directly into a shell command. This creates a command-injection risk unless inputs are strictly validated.

高

references/sandbox/patterns.md:186

Process exec

const result = await session.exec(`python3 -c "${code}"`);

The session example executes request body content through python3 -c with shell interpolation. This is unsafe untrusted code execution guidance.

高

references/sandbox/patterns.md:138-159

Process exec

await sandbox.exec(`git clone https://${env.GITHUB_TOKEN}@github.com/user/repo.git`);

The example embeds GITHUB_TOKEN directly in a git clone URL. Tokens in URLs can leak through logs, shell history, process listings, and error messages.

高

Ruby/shell backtick execution

await sandbox.exec(`git clone -b ${branch} ${repo} /workspace/repo`);

The CI example interpolates request-supplied repo and branch values directly into a shell command. This creates a command-injection risk unless inputs are strictly validated.

高

references/sandbox/patterns.md:186-191

Ruby/shell backtick execution

const result = await session.exec(`python3 -c "${code}"`);

The session example executes request body content through python3 -c with shell interpolation. This is unsafe untrusted code execution guidance.

高

references/sandbox/patterns.md:200-201

Ruby/shell backtick execution

await sandbox.exec(`git clone https://${env.GITHUB_TOKEN}@github.com/user/repo.git`);

The example embeds GITHUB_TOKEN directly in a git clone URL. Tokens in URLs can leak through logs, shell history, process listings, and error messages.

高

Hardcoded URL

await sandbox.exec(`git clone https://${env.GITHUB_TOKEN}@github.com/user/repo.git`);

The example embeds GITHUB_TOKEN directly in a git clone URL. Tokens in URLs can leak through logs, shell history, process listings, and error messages.

高