📦
監査履歴
rsi-skill - 1 監査
監査バージョン 1 最新
2026年10月28日 上午06:48
Most static alerts concern harmless formatting, arithmetic examples, documentation links, or intended backend configuration. Four HTTP request findings expose credentials through unrestricted redirects; a separate model-grading weakness can undermine evaluation integrity. No evidence found of malicious instructions, embedded credentials, or intentional data theft.
6
スキャンされたファイル
520
解析済み行数
9
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (1)
中
Untrusted content can influence model-based grading
Judge mode concatenates task input and generated answers into a grading message. Attacker-controlled content can request PASS verdicts and undermine prompt selection.
The grader receives untrusted answer text without explicit data-only instructions and accepts a PASS prefix. Exploit success depends on the selected model.
機能レビュー項目 (4)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Python HTTP libraries
req = urllib.request.Request(url, headers={"Authorization": f"Bearer {key}"} if key else {})
Authorization is attached as an ordinary request header before default urllib redirect handling. Cross-origin redirects can forward this bearer credential to another host.
高
Python HTTP libraries
with urllib.request.urlopen(req, timeout=timeout) as r:
Default urlopen follows redirects without restricting the credential-bearing request to its original origin. A local redirect-handler check confirmed Authorization forwarding.
高
Python HTTP libraries
req = urllib.request.Request(be["base"] + "/chat/completions", data=body, headers=headers)
The completion request includes Authorization in ordinary headers. A redirect accepted by urllib can send that credential to a different origin.
高
Python HTTP libraries
with urllib.request.urlopen(req, timeout=300) as r:
The completion request uses default redirect handling without an origin check. Accepted redirects can carry the bearer credential to an unintended host.
リスク要因
📁 ファイルシステムへのアクセス (3)
⚙️ 外部コマンド (28)
scripts/rsi.py:12 scripts/rsi.py:121 scripts/rsi.py:190 SKILL.md:10 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:38 SKILL.md:39 SKILL.md:41-43 SKILL.md:43-47 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:54-61 SKILL.md:61-63 SKILL.md:63-67 SKILL.md:67-68 SKILL.md:68 SKILL.md:75-91
🌐 ネットワークアクセス (19)
監査者: codex