📦
審計紀錄
verify-release - 1 審計
審計版本 1 最新
2026年10月27日 上午11:32
The static matches are Markdown formatting, a documented service endpoint, or release decision criteria rather than the alleged threats. The skill also directs deployment record creation and pipeline changes without explicit confirmation, which can affect production evidence.
2
已掃描檔案
184
分析行數
3
複核項目
0
已忽略的誤報
已確認的安全問題 (1)
中
Deployment records may be changed without confirmation
The skill instructs the agent to record missing deployments as succeeded and add a command to the pipeline without requiring user confirmation. Incorrect records or pipeline changes can distort release comparisons.
The instructions explicitly request a state-changing deployment record and pipeline modification, but do not require confirmation or verification of successful status.
風險因素
⚙️ 外部命令 (30)
SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:36-38 SKILL.md:38-46 SKILL.md:46-48 SKILL.md:48-54 SKILL.md:54-56 SKILL.md:56-60 SKILL.md:60 SKILL.md:61 SKILL.md:62-63 SKILL.md:63-64 SKILL.md:64-66 SKILL.md:66 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:73-83 SKILL.md:83-86 SKILL.md:86-94 SKILL.md:94-97 SKILL.md:97-103 SKILL.md:103-104 SKILL.md:104 SKILL.md:105 SKILL.md:112-113 SKILL.md:113-118 SKILL.md:118-127
🌐 網路存取 (1)
審計單位: codex