Codex 公開發布前的隱私與安全稽核工具

這是一個在 Git 倉庫公開前使用的唯讀 Codex Skill。它會檢查密鑰、個資、 Git 歷史、敏感檔案與 GitHub Actions 設定，並避免在報告中輸出命中的 敏感值。

A local, read-only, redacting release gate for Git repositories and Codex Skills. It checks the content you are about to publish and reachable Git history without printing matched secret or personal-data values.

What it checks

• credential and private-key patterns
• personal email and public IP exposure
• sensitive filenames and local artifacts
• credential-bearing Git remotes
• staged, working-tree, tracked-tree, and reachable-history content
• symlinks and unexpected binaries
• GitHub Actions permissions and unpinned Actions
• commit email exposure

Install as a Codex Skill

$codexHome = if ($env:CODEX_HOME) { $env:CODEX_HOME } else { Join-Path $HOME '.codex' }
Copy-Item -Recurse -Force .\skills\public-release-audit (Join-Path $codexHome 'skills\public-release-audit')

codex_home="${CODEX_HOME:-$HOME/.codex}"
cp -R skills/public-release-audit "$codex_home/skills/public-release-audit"

Restart or open a new Codex task after installation so the Skill inventory is reloaded.

Run directly

Full public-release gate, including reachable history:

python -X utf8 skills/public-release-audit/scripts/audit_release.py . --mode all --format json

Other scopes:

# Intended staged release
python -X utf8 skills/public-release-audit/scripts/audit_release.py . --mode staged --format json

# Current tracked tree
python -X utf8 skills/public-release-audit/scripts/audit_release.py . --mode tree --format json

# Working tree
python -X utf8 skills/public-release-audit/scripts/audit_release.py . --mode working --format json

Verdicts and exit codes

Verdict	Meaning	Exit code
GO	Completed scan with no warning, high, or critical finding	0
REVIEW	Warning-level exposure or release-hygiene issue remains	1
NO-GO	High or critical privacy, secret, workflow, remote, or symlink finding	1
INCOMPLETE	A scan error or limit prevented a complete result	2

The JSON output reports rule code, severity, relative path, line number, and source. It intentionally omits the matched value, remote URL, and symlink target.

Safety boundaries

• no staging, commits, pushes, history rewrites, or network calls
• no automatic remediation
• no matched credential, email, IP, remote URL, or symlink target in output
• a clean staged scan does not replace --mode all before a public release
• zero candidates, completed clean scans, skipped files, and errors remain separate states

Repository layout

skills/public-release-audit/
  SKILL.md
  agents/openai.yaml
  scripts/audit_release.py
  tests/test_audit_release.py

Development

python -X utf8 tests/validate_skill.py
python -X utf8 skills/public-release-audit/tests/test_audit_release.py

The test suite uses disposable local Git repositories and fake credentials. It does not call a network service.

中文摘要

這個 Skill 用於在倉庫公開到 GitHub 前進行唯讀安全與隱私稽核。 --mode all 會同時檢查目前內容與可到達的 Git 歷史，避免已刪除的密鑰 仍留在歷史中。輸出只保留規則、嚴重度、相對路徑與行號，不會顯示命中的 Token、Email、IP、Remote URL 或符號連結目標。

License

MIT