📦
審計紀錄
instrument-app - 1 審計
審計版本 1 最新
2026年10月27日 上午11:31
Most static matches are Markdown, SDK configuration, or safe secret-handling guidance. The Rails key export can expose a secret in shell history, and the workflow should validate install commands and review existing logs before forwarding them.
3
已掃描檔案
520
分析行數
7
複核項目
0
已忽略的誤報
已確認的安全問題 (2)
中
Unreviewed generated install command
The instructions execute the CLI-provided install command without requiring validation of its executable, arguments, or package source. A compromised CLI or manipulated output could cause unintended command execution.
The instructions explicitly use and run the generated command, but exploitation depends on compromised or manipulated CLI output.
中
Existing logs may expose sensitive data
Connecting the existing logger can send current logs to an external service without first checking their contents. Existing records may contain sensitive data despite the rules for newly added logs.
The skill forwards current logs while applying logging rules to added events; exposure depends on the existing application logs and SDK privacy settings.
能力複核項目 (1)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Generic API/secret keys
export LOGBREW_SERVER_API_KEY="your project-scoped server ingest key"
The shell export example invites entry of an actual ingest key in a command, which can persist in shell history.
風險因素
⚡ 包含腳本 (1)
⚙️ 外部命令 (31)
references/frameworks.md:123-134 SKILL.md:18 SKILL.md:38-40 SKILL.md:40-42 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:49 SKILL.md:54-56 SKILL.md:56-58 SKILL.md:58-62 SKILL.md:62-66 SKILL.md:66-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:79-82 SKILL.md:82 SKILL.md:83-84 SKILL.md:84-91 SKILL.md:91-92 SKILL.md:92 SKILL.md:96-101 SKILL.md:101-104 SKILL.md:104-106 SKILL.md:106-107 SKILL.md:107 SKILL.md:108 SKILL.md:118-129 SKILL.md:129 SKILL.md:130
🔑 環境變數 (17)
references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:51 references/frameworks.md:86 references/frameworks.md:148 references/frameworks.md:178 references/frameworks.md:198 references/frameworks.md:230 references/frameworks.md:282 references/frameworks.md:286 references/frameworks.md:292 SKILL.md:79 SKILL.md:129
📁 檔案系統存取 (3)
審計單位: codex