flydb-multi-environment

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 11:00 AM UTC
• Version: 1.0.2

Overview

This skill is a documentation-only Flydb migration helper that gives scoped CI and approval guidance for multi-environment database releases.

Install this only if you want Codex guidance for Flydb CI/database migration workflows. Because the generated workflows may touch production databases, review all generated CI scripts, keep database passwords in your secret manager, require real approval gates before migrate, and do not use repair, undo, or clean automatically.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 17)May include surrounding context.

md

| [`references/multi-environment.md`](references/multi-environment.md) | 完整组织模式：配置矩阵、密码分层、脚本仓库布局、流水线、baseline、驱动分发、能力边界 |

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md

| [`references/multi-environment.md`](references/multi-environment.md) | 完整组织模式：配置矩阵、密码分层、脚本仓库布局、流水线、baseline、驱动分发、能力边界 |

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

md

| [`references/multi-environment.md`](references/multi-environment.md) | 完整组织模式：配置矩阵、密码分层、脚本仓库布局、流水线、baseline、驱动分发、能力边界 |

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 65% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · evals/evals.json (reported line 86)May include surrounding context.

json

},
    {
      "id": 8,
      "prompt": "CI 的 Flydb 会跑两个小时，想用 nohup 后就让 job 成功退出，失败了再自动重试。",
      "expected_output": "CI 应前台执行并设置足够超时，完整获取退出码；结果未知需核验现场，不根据日志静默或超时自动重试。",
      "files": [],
      "assertions": [

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 65% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · references/multi-environment.md (reported line 129)May include surrounding context.

md

},
    {
      "id": 8,
      "prompt": "CI 的 Flydb 会跑两个小时，想用 nohup 后就让 job 成功退出，失败了再自动重试。",
      "expected_output": "CI 应前台执行并设置足够超时，完整获取退出码；结果未知需核验现场，不根据日志静默或超时自动重试。",
      "files": [],
      "assertions": [

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The document title and all operational guidance are written in Chinese, and there is no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.