📦
審計紀錄
design - 1 審計
審計版本 1 最新
2026年10月26日 下午02:46
Most static findings are benign documentation, design terminology, mocked tests, or expected credential configuration. Confirmed findings expose API keys through unrestricted polling destinations and cross-origin redirects. Semantic findings identify incomplete DNS checks, unsanitized SVG and HTML output, and disabled browser sandboxing; no evidence found of deliberate prompt injection.
38
已掃描檔案
6,617
分析行數
15
複核項目
0
已忽略的誤報
已確認的安全問題 (4)
中
DNS Resolution Bypasses Private Address Checks
URL validation rejects literal private IP addresses but accepts unresolved hostnames. A provider-controlled hostname resolving internally can bypass the intended network boundary.
Nonliteral hostnames return before any DNS address check. Exploitation requires a suitable HTTPS endpoint and a malicious or compromised provider response.
中
Generated SVG Is Saved Without Active Content Filtering
SVG extraction checks text structure but preserves scripts, event handlers, and external references. Malicious generated markup can execute when opened directly or embedded inline.
The extraction and save path contains no SVG element or attribute allowlist. Prompt instructions against external references do not enforce output safety.
中
scripts/cip/render-html.py:109-119scripts/cip/render-html.py:143-149scripts/cip/render-html.py:342-364
Presentation Labels Are Interpolated Without HTML Escaping
Brand names and filename-derived labels enter HTML text and attributes without escaping. Crafted input can inject markup or scripts when the presentation is opened.
Python f-strings insert input directly into the title, image attributes, and headings. Exploitation requires crafted labels and opening the generated document.
中
Screenshot Workflow Disables Browser Sandboxing
The recommended Chrome command includes --no-sandbox while rendering HTML that may load external resources. This removes browser containment during screenshot export.
The documented command explicitly disables the Chrome sandbox without an isolation requirement. This increases compromise impact if rendered content exploits a browser vulnerability.
能力複核項目 (7)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
HTTP client library
def redirect_request(self, req, fp, code, msg, headers, newurl):
The redirect handler accepts unrelated HTTPS origins without removing authentication headers. A provider redirect can therefore disclose the API key to another host.
高
HTTP client library
return super().redirect_request(req, fp, code, msg, headers, newurl)
The superclass redirect implementation copies authentication headers across origins. An offline standard-library check confirmed that x-api-key survives an HTTPS cross-host redirect.
高
HTTP client library
def _json_request(
The request helper attaches credentials without restricting the destination origin. Its MuAPI caller supplies a response-controlled polling URL, enabling credential disclosure.
高
HTTP client library
data = _json_request(
Polling sends x-api-key to result_url from the provider response. HTTPS validation does not restrict that URL to the MuAPI origin.
高
Generic API/secret keys
api_key_header: auth_value,
This header attaches the API key to a URL without checking its provider origin. Response-controlled polling URLs can receive that credential.
高
Generic API/secret keys
api_key,
The MuAPI key is passed to polling requests for a response-controlled URL. No same-origin check prevents sending the key to another HTTPS host.
高
Generic API/secret keys
api_key_header="x-api-key",
The x-api-key header is explicitly enabled for the response-controlled polling URL. Arbitrary HTTPS destinations pass validation and can receive the credential.
風險因素
🔑 環境變數 (50)
references/cip-design.md:121 references/icon-design.md:120 references/logo-design.md:93 references/logo-design.md:97 references/logo-design.md:100 scripts/cip/generate.py:84 scripts/cip/generate.py:85 scripts/cip/generate.py:91 scripts/cip/generate.py:92 scripts/cip/generate.py:223 scripts/cip/generate.py:223 scripts/cip/generate.py:224 scripts/cip/generate.py:225 scripts/cip/generate.py:228 scripts/icon/generate.py:41 scripts/icon/generate.py:42 scripts/icon/generate.py:56 scripts/icon/generate.py:56 scripts/icon/generate.py:243 scripts/icon/generate.py:244 scripts/icon/generate.py:245 scripts/icon/generate.py:248 scripts/icon/generate.py:335 scripts/icon/generate.py:336 scripts/icon/generate.py:339 scripts/logo/generate.py:67 scripts/logo/generate.py:68 scripts/logo/generate.py:75 scripts/logo/generate.py:76 scripts/logo/generate.py:77 scripts/logo/generate.py:81 scripts/logo/generate.py:84 scripts/logo/generate.py:75 scripts/logo/generate.py:76 scripts/logo/generate.py:77 scripts/logo/generate.py:207 scripts/logo/generate.py:209 scripts/logo/generate.py:210 scripts/logo/generate.py:211 scripts/logo/generate.py:212 scripts/logo/generate.py:222 scripts/logo/generate.py:280 scripts/logo/generate.py:281 scripts/logo/generate.py:282 scripts/logo/generate.py:291 scripts/logo/generate.py:320 scripts/logo/generate.py:400 scripts/logo/generate.py:401 scripts/logo/generate.py:402 scripts/logo/generate.py:415
📁 檔案系統存取 (25)
references/design-routing.md:167 references/design-routing.md:168 references/design-routing.md:173 references/design-routing.md:174 references/slides-copywriting-formulas.md:69 references/slides-copywriting-formulas.md:72 references/slides-html-template.md:161 references/slides-layout-patterns.md:116 references/slides-layout-patterns.md:119 references/slides-strategies.md:79 references/slides-strategies.md:82 scripts/cip/generate.py:285 scripts/cip/render-html.py:385 scripts/icon/generate.py:320 scripts/icon/generate.py:394 scripts/icon/generate.py:340 scripts/icon/generate.py:419 scripts/logo/generate.py:276 scripts/logo/generate.py:520 scripts/logo/generate.py:628 scripts/logo/tests/test_generate.py:5 scripts/logo/tests/test_generate.py:136 scripts/logo/tests/test_generate.py:329 scripts/logo/tests/test_generate.py:407 SKILL.md:42
🌐 網路存取 (33)
references/slides-html-template.md:14 references/slides-html-template.md:278 references/social-photos-design.md:94 scripts/logo/generate.py:176 scripts/logo/generate.py:178 scripts/logo/generate.py:206 scripts/logo/generate.py:289 scripts/logo/generate.py:318 scripts/logo/generate.py:413 scripts/logo/generate.py:444 scripts/logo/generate.py:48 scripts/logo/generate.py:92 scripts/logo/generate.py:95 scripts/logo/tests/test_generate.py:261 scripts/logo/tests/test_generate.py:61 scripts/logo/tests/test_generate.py:99 scripts/logo/tests/test_generate.py:139 scripts/logo/tests/test_generate.py:148 scripts/logo/tests/test_generate.py:158 scripts/logo/tests/test_generate.py:161 scripts/logo/tests/test_generate.py:177 scripts/logo/tests/test_generate.py:185 scripts/logo/tests/test_generate.py:208 scripts/logo/tests/test_generate.py:213 scripts/logo/tests/test_generate.py:221 scripts/logo/tests/test_generate.py:262 scripts/logo/tests/test_generate.py:281 scripts/logo/tests/test_generate.py:309 scripts/logo/tests/test_generate.py:158 SKILL.md:312 SKILL.md:320 SKILL.md:321 SKILL.md:322
⚙️ 外部命令 (50)
references/social-photos-design.md:170-181 references/social-photos-design.md:196-207 references/social-photos-design.md:138 scripts/icon/generate.py:110 scripts/icon/generate.py:124 scripts/icon/generate.py:132-133 scripts/icon/generate.py:133 scripts/icon/generate.py:138-140 scripts/icon/generate.py:140 scripts/logo/generate.py:5 scripts/logo/generate.py:6 scripts/logo/generate.py:18 scripts/tests/test_cip_generate.py:34 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:42 SKILL.md:51-53 SKILL.md:53-57 SKILL.md:57-61 SKILL.md:61-67 SKILL.md:67-73 SKILL.md:73-77 SKILL.md:77 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-96 SKILL.md:96-100 SKILL.md:100-112 SKILL.md:112-114 SKILL.md:114 SKILL.md:118-120 SKILL.md:120-128 SKILL.md:128-134 SKILL.md:134-135 SKILL.md:135-136 SKILL.md:136-137 SKILL.md:137-138 SKILL.md:138-142 SKILL.md:142 SKILL.md:144-148 SKILL.md:148-149 SKILL.md:149 SKILL.md:193-197
審計單位: codex