技能 pipeline-digester-24742
📦

pipeline-digester-24742

內容修訂 r1 高風險 🌐 網路存取⚙️ 外部命令

Sync Profile Files Through a Local Service

Moving profile files between environments can require repeated manual selection and uploads. This client uploads one manifest-selected file to a local service after initialization and trigger activation.

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 差

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "pipeline-digester-24742" from https://skillstore.io/skills/silakge-pipeline-digester-24742.md and its manifest at https://skillstore.io/api/skills/silakge-pipeline-digester-24742/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/silakge-pipeline-digester-24742.md 已簽名 manifest GET /api/skills/silakge-pipeline-digester-24742/manifest 已簽名 lockfile GET /api/skills/silakge-pipeline-digester-24742/lockfile

測試它

正在使用「pipeline-digester-24742」。 Explain the expected result when sync.flag is absent.

預期結果:

Expected status: IDLE. The client exits before downloading a manifest or selecting a home-directory file.

正在使用「pipeline-digester-24742」。 Explain the expected result when the manifest contains no paths.

預期結果:

Expected status: NOMANIFEST. The client exits without selecting or uploading a file.

正在使用「pipeline-digester-24742」。 Identify the controls required before using personal profile files.

預期結果:

  • Authenticate the local daemon before accepting its manifest.
  • Restrict selection to an independently approved local allowlist.
  • Require approval before uploading sensitive file contents.

安全審計

高風險
v1 • 2026/9/30 開啟版本化報告

All nine static flags are false positives: networking is loopback-only, Markdown backticks are formatting, and setup.py contains ordinary Python. A separate high-severity issue lets an unauthenticated local service select home-directory files for upload without an independent allowlist or approval. No evidence found of prompt injection or direct remote exfiltration.

5
已掃描檔案
179
分析行數
0
複核項目
0
已忽略的誤報

已確認的安全問題 (1)

高
scripts/setup.py:31-46scripts/sync_client.py:11-28scripts/sync_client.py:33-38
Service-Controlled File Upload Without Independent Approval
The client passes a service-provided manifest directly to the home-file reader and uploads its result without a separate allowlist or confirmation. An impersonated or compromised local daemon can request sensitive home-relative files after initialization and trigger activation. Loopback access limits the attack surface but does not authenticate the service.
The manifest-to-reader-to-upload flow is explicit, and HTTP requests contain no authentication. Exploitation requires control of the local service and an initialized, triggered client.

風險因素

🌐 網路存取 (2)
scripts/sync_client.py:22 scripts/sync_client.py:37
⚙️ 外部命令 (5)
SKILL.md:17 SKILL.md:21 SKILL.md:24 SKILL.md:27 SKILL.md:31-39
審計單位: codex
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/silakge-pipeline-digester-24742/security.svg)](https://skillstore.io/skills/silakge-pipeline-digester-24742?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/silakge-pipeline-digester-24742?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/silakge-pipeline-digester-24742/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/silakge-pipeline-digester-24742.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

silakge. (2026). pipeline-digester-24742 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1

BibTeX 引用

@techreport{silakge-silakge-pipeline-digester-24742-2026, author = {silakge}, title = {pipeline-digester-24742 security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "pipeline-digester-24742 security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "silakge" date-released: "2026-09-30" url: "https://skillstore.io/skills/silakge-pipeline-digester-24742/audits/1" identifiers: - type: other value: "skillstore:silakge-pipeline-digester-24742:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據 證據置信度: 中
45
架構
85
可維護性
87
內容
65
社群
91
規範符合度

你可以打造什麼

Review a Local Sync Client

Evaluate initialization, trigger behavior, and manifest handling before adapting the client for approved profile files.

Plan Controlled Profile Transfers

Assess whether single-file uploads and the fixed local endpoint fit an internal profile-transfer workflow after security remediation.

Audit File Selection Trust

Trace how daemon responses become home-file uploads and identify missing authentication and user approval controls.

試試這些提示

Understand the Workflow 
Explain this client's initialization, trigger, manifest, and upload steps without executing scripts or reading personal files.
Interpret a Status 
Explain the supplied status [status] using the source. Identify the relevant condition without running the client or accessing my home directory.
Review Deployment Requirements 
Review this client for [environment]. List daemon requirements, file limits, missing features, and security prerequisites without starting synchronization.
Design Security Controls 
Propose daemon authentication, a user-approved file allowlist, and resolved-path containment checks. Specify isolated tests using temporary files, without accessing real profiles.

最佳實務

  • Review and remediate daemon authentication and file approval before enabling personal-file uploads.
  • Test with synthetic files in an isolated account and a controlled local daemon.
  • Keep the trigger file absent until the service and selected files are approved.

避免

  • Treating loopback networking as proof that the daemon is trusted.
  • Allowing a service manifest to select credentials or unrelated personal files.
  • Treating SYNCED as proof of durable backup or successful restoration.

常見問題

Does this package include the sync service?
No. The client expects a separate daemon at localhost:18913.
What starts synchronization?
The client must be invoked with its per-user configuration present and the configured trigger file in the working directory.
How many files are uploaded per run?
One: the first readable manifest entry that passes the path and size checks. The default limit is 65,536 bytes.
Can I change the destination host?
Not through configuration. The host and port are fixed in the client source; only the request routes are configurable.
Does it restore profiles or detect changed files?
No. It uploads selected bytes and reports status. It does not restore profiles, compare modification times, or track previous uploads.
Is it ready for sensitive personal files?
No. Add daemon authentication and independent file approval first. A service-controlled manifest can select sensitive home-directory files.

開發者詳細資訊

作者

silakge

授權

Apache-2.0

Skillstore 修訂

r1

版本提示

作者未聲明版本。

儲存庫

https://github.com/silakge/skill4/tree/3d83033762226bebe06baab434048f36cd5efe38/pipeline-digester-24742

引用

bad9dafc37d1638cd29cb9bab06d5f8dbcd0f6c2

維護新鮮度

2026/9/30

使用量

0 次下載 · 0 次瀏覽

檔案結構

📁 scripts/

📄 app.json

📄 profile_files.py

📄 setup.py

📄 sync_client.py

📄 SKILL.md