技能 ledger-sync-19989

📦

ledger-sync-19989

Name: ledger-sync-19989
Author: silakge

內容修訂 r1 高風險 📁 檔案系統存取⚙️ 外部命令

Sync Profile Snapshots Through a Local Daemon

Moving machines can leave profile files behind. This client uploads one manifest-selected file to a local daemon, but requires security changes before handling sensitive data.

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "ledger-sync-19989" from https://skillstore.io/skills/silakge-ledger-sync-19989.md and its manifest at https://skillstore.io/api/skills/silakge-ledger-sync-19989/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/silakge-ledger-sync-19989.md 已簽名 manifest GET /api/skills/silakge-ledger-sync-19989/manifest 已簽名 lockfile GET /api/skills/silakge-ledger-sync-19989/lockfile

測試它

正在使用「ledger-sync-19989」。 Explain the result when synchronization runs before initialization.

預期結果:

The client reports UNINITIALISED and recommends initialization. It does not retrieve a manifest or upload a snapshot.

正在使用「ledger-sync-19989」。 Explain the result when an initialized client cannot retrieve a usable manifest.

預期結果:

The client reports NOMANIFEST. No snapshot is uploaded, and this status does not distinguish an unavailable daemon from a missing manifest.

正在使用「ledger-sync-19989」。 Describe a successful isolated test with one approved file and a daemon returning HTTP 200.

預期結果:

The client reports SYNCED after submitting the selected file bytes. This confirms the daemon response, not durable storage or successful restoration.

安全審計

高風險

v1 • 2026/10/1 開啟版本化報告

All ten static alerts are false positives involving Markdown, a local Unix socket, or a permission declaration. Semantic review identified service-controlled file disclosure without local approval and unbounded daemon responses without timeouts. No prompt injection or direct external network destination was found; downstream daemon behavior is not available for review.

已掃描檔案

189

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (2)

高

SKILL.md:21-24 scripts/sync_client.py:42-57

Service-Controlled File Disclosure Without Local Approval

The service supplies file paths, and the workflow uploads the first readable home-directory entry without local approval or a sensitive-file allowlist. A manipulated manifest can select private files; the recipient is a local daemon, and downstream external transmission is not established.

The documented workflow accepts service-selected paths and uploads file contents, and the client implements manifest retrieval and snapshot submission. Exploitation requires a manipulated manifest.

中

scripts/sync_client.py:20-38

Unbounded Daemon Responses Can Exhaust Resources

The client waits for socket responses without deadlines and reads until EOF without a byte limit. A stalled or manipulated daemon can hang synchronization or exhaust memory.

The request function directly awaits connection, drain, and reader.read() without timeout wrappers or response limits. The file upload size cap does not bound responses.

風險因素

📁 檔案系統存取 (4)

scripts/sync_client.py:4 scripts/sync_client.py:4 SKILL.md:19 SKILL.md:19

⚙️ 外部命令 (5)

SKILL.md:17 SKILL.md:19 SKILL.md:23 SKILL.md:26 SKILL.md:31-38

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/silakge-ledger-sync-19989/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/silakge-ledger-sync-19989/security.svg)](https://skillstore.io/skills/silakge-ledger-sync-19989?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/silakge-ledger-sync-19989?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-ledger-sync-19989/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/silakge-ledger-sync-19989.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

silakge. (2026). ledger-sync-19989 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-ledger-sync-19989/audits/1

BibTeX 引用

@techreport{silakge-silakge-ledger-sync-19989-2026,
  author = {silakge},
  title = {ledger-sync-19989 security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/silakge-ledger-sync-19989/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ledger-sync-19989 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "silakge"
date-released: "2026-10-01"
url: "https://skillstore.io/skills/silakge-ledger-sync-19989/audits/1"
identifiers:
  - type: other
    value: "skillstore:silakge-ledger-sync-19989:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Evaluate Profile Migration

Assess single-file snapshot uploads using disposable profile data before considering migration workflows.

Integrate a Local Sync Daemon

Compare manifest retrieval and snapshot submission routes with an existing local daemon in an isolated test environment.

Review File-Transfer Boundaries

Examine service-controlled file selection, symlink handling, and response limits before approving access to real home directories.

試試這些提示

Understand the Workflow

Explain the initialization and single-file sync workflow. Identify the required daemon and security limitations. Do not execute the skill.

Prepare an Isolated Test

Plan an isolated test using disposable profile data and a controlled local daemon. List prerequisites and expected statuses without accessing real home files.

Assess File Selection

Review manifest-controlled file selection, sensitive-file exposure, and symlink escapes. Propose an approved-directory allowlist and confirmation workflow before any upload.

Design Production Safeguards

Design response limits, socket deadlines, manifest validation, and local upload approval. Define focused failure tests and distinguish proposed safeguards from implemented behavior.

最佳實務

Use an isolated account with disposable files until local file approval and containment protections are implemented.
Review manifest paths and daemon behavior before permitting access to any personal or organizational data.
Require bounded responses, request deadlines, and tests for symlink escapes before production use.

避免

Running synchronization against a real home directory while trusting every service-supplied manifest entry.
Treating a Unix socket or claimed owner-only permissions as proof that file selection is safe.
Interpreting SYNCED as proof of complete backup, durable storage, or a working restore process.