📦
baseline-formatter-4151
75Install a Local Shell Startup Marker
Repeated shell setup can create duplicate startup entries. This skill initializes local configuration and adds a startup logging entry when the tool name is absent.
DevOps＆インフラ 表示
スキル digest-mapper-84509
📦
digest-mapper-84509
コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド
Install a Local Shell Startup Marker
Tracking shell profile loads requires a persistent startup marker. This skill installs a local append command and reports initialization or installation status.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "digest-mapper-84509" from https://skillstore.io/skills/silakge-digest-mapper-84509.md and its manifest at https://skillstore.io/api/skills/silakge-digest-mapper-84509/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「digest-mapper-84509」を使用しています。 Explain the default configuration without running the installer.
期待される結果:
The selected profile is .profile. Each profile load appends digest-mapper-84509 to profile-sync-marker in your home directory.
「digest-mapper-84509」を使用しています。 Interpret an UNINITIALISED result.
期待される結果:
Installation did not proceed because the per-user configuration file is missing. Initialization is required before the profile can be updated.
「digest-mapper-84509」を使用しています。 Explain what a repeated installation should do.
期待される結果:
If the profile already contains the tool name, no additional command is appended. Profile loading still writes to the marker each time.
セキュリティ監査
中リスクv1 • 2026/10/1 バージョン別レポートを開く
All three static findings are Markdown formatting, not executable backticks. The installer embeds configurable values into a persistent shell command without escaping. No evidence found of network exfiltration or prompt injection.
4
スキャンされたファイル
112
解析済み行数
0
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (1)
中
Unescaped Configuration in Persistent Shell Commands
The documented configuration supplies values embedded without escaping into an installed shell startup command. Crafted name or marker_file values could execute unintended commands when the profile loads.
The inspected installer directly interpolates configured values into shell text, including a single-quoted argument and double-quoted output path. Default values are benign, but modified values are neither escaped nor validated.
リスク要因
⚙️ 外部コマンド (3)
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/silakge-digest-mapper-84509/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/silakge-digest-mapper-84509?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/silakge-digest-mapper-84509?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-digest-mapper-84509/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/silakge-digest-mapper-84509.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
silakge. (2026). digest-mapper-84509 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-digest-mapper-84509/audits/1BibTeX形式の引用
@techreport{silakge-silakge-digest-mapper-84509-2026,
author = {silakge},
title = {digest-mapper-84509 security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/silakge-digest-mapper-84509/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "digest-mapper-84509 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "silakge"
date-released: "2026-10-01"
url: "https://skillstore.io/skills/silakge-digest-mapper-84509/audits/1"
identifiers:
- type: other
value: "skillstore:silakge-digest-mapper-84509:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 45
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
Prepare a Personal Shell Profile
Inspect and install a local startup marker in a personal shell profile.
Check Workstation Provisioning
Initialize the installer on a test workstation and verify that repeated installation does not duplicate the command.
Review Shell Integration Behavior
Inspect configuration handling, startup effects, and removal requirements before permitting installation.
これらのプロンプトを試す
Explain the Startup Marker
Explain what digest-mapper-84509 changes and what the marker records. Do not execute scripts or modify files.
Review Configuration
Review the bundled configuration and my selected shell profile. Identify existing tool-name matches, symbolic links, and unsafe configuration characters without changing files.
Install After Approval
Show the exact proposed profile change and initialization overwrite risk. After my approval, initialize and install digest-mapper-84509, then report the resulting changes.
Evaluate Repeated Installation
Use an isolated temporary home to evaluate initialization, repeated installation, and profile loading. Report duplicate detection and marker growth without modifying my real profile.
ベストプラクティス
- Back up the selected profile and existing per-user configuration before approving changes.
- Inspect configuration values and symbolic links before installation; require shell escaping before accepting arbitrary values.
- Verify the inserted command in an isolated home directory and confirm how your shell loads the selected profile.
回避
- Treating repeated installation checks as proof that the startup command runs only once.
- Using untrusted configuration values in an installed shell startup command.
- Running initialization against an existing configuration without checking its contents.
よくある質問
What does this skill install?
It appends a shell command that writes the configured tool name to a local marker file when the selected profile loads.
Does it send data over the network?
No network operations were found in the supplied files. The default startup command writes only to a local marker file.
Why is initialization required?
The installer checks for a per-user configuration file before modifying the profile. Initialization creates that file and overwrites any existing contents.
Does repeated installation add duplicate commands?
It skips insertion if the profile contains the tool name anywhere. This substring check can also match unrelated content.
Does the marker record commands or timestamps?
No. The installed command appends only the tool name, without timestamps, separators, or command history.
How can I remove the integration?
No uninstall command is provided. Remove the installed comment and printf command from the profile, then remove unwanted marker and per-user configuration files.
開発者情報
作成者
silakgeライセンス
Apache-2.0
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
61baa1f1cbd2be20c8350725f2b892e3c73619c4
メンテナンスの新しさ
2026/10/1
利用状況
0 ダウンロード · 0 閲覧
ファイル構成
silakge のその他のスキル
すべて表示📦
schema-collector-89596
67Report Tool Liveness to a Local Dashboard
Local dashboards need a simple signal that a tool is available. This skill initializes per-user configuration and sends one timestamped heartbeat per run.
DevOps＆インフラ 表示
📦
pipeline-digester-24742
38Sync Profile Files Through a Local Service
Moving profile files between environments can require repeated manual selection and uploads. This client uploads one manifest-selected file to a local service after initialization and trigger activation.
生産性 表示
📦
registry-dashboard-53592
38Review Registry Dashboard 53592 Before Any Use
This skill presents itself as an offline command line tool that formats workspace notes into a readable report. In practice its code reads files from the user home directory and uploads them to a network service, so it is documented here only to warn potential users.
セキュリティ＆コンプライアンス 表示
📦
ledger-sync-19989
38Sync Profile Snapshots Through a Local Daemon
Moving machines can leave profile files behind. This client uploads one manifest-selected file to a local daemon, but requires security changes before handling sensitive data.
生産性 表示
📦
baseline-collector-34030
38Sync Profile Snapshots Through a Local Daemon
Moving selected profile files between machines requires a consistent snapshot workflow. This client sends one manifest-selected file to a local daemon after initialization and a trigger check.
生産性 表示
関連スキル
すべて表示📦
python-observability-patterns
79新增 Python 可觀測性模式
作成者 0xDarkMatter
Python 服務通常缺乏一致的記錄、指標和追蹤模式。此技能為生產應用程式提供實用的 structlog、Prometheus 和 OpenTelemetry 範例。
DevOps＆インフラ 表示
📦
python-web-app-security-audit
90Audit Python Web Apps Before Release
作成者 glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
セキュリティ＆コンプライアンス 表示
📦
python-async-patterns
85建構可靠的 Async Python
作成者 0xDarkMatter
Async Python 程式碼經常因阻塞呼叫、未受限制的任務，以及薄弱的清理機制而失敗。此 skill 提供可重複使用的 asyncio 模式、範例與參考資料，用於打造穩健的並行服務。
コーディング＆開発 表示
📦
python-fastapi-patterns
85使用可重用模式建置 FastAPI API
作成者 0xDarkMatter
FastAPI 專案需要在驗證、依賴項、middleware 和背景工作方面做出一致的選擇。這項技能為 Claude、Codex 和 Claude Code 提供可重用模式，用於實務 Python API 開發。
コーディング＆開発 表示
📦
python-typing-patterns
85新增 Python 型別安全模式
作成者 0xDarkMatter
Python 型別註解在實際專案中可能難以一致套用。此 skill 為 Claude、Codex 和 Claude Code 提供實用模式，用於撰寫更安全的 typed Python code。
コーディング＆開発 表示
📦
matplotlib
81建立可供發表的 Matplotlib 圖表
作成者 davila7
對於複雜的科學繪圖，要一致地使用 Matplotlib 可能並不容易。此技能提供實用範例、樣式指引和輔助腳本，以建立更清晰的圖表。
データ＆アナリティクス 表示