Versioned security assessment

Report ID: SA-635F69FB

7/13/2026, 10:33:57 AM

competitor-teardown security assessment v3

Skill Security Certification Report

Audit History
Audit model: codex Latest published report
Skill name
competitor-teardown
Version
v3
Maintainer
101-skills
Source
github.com/101-skills/skills/tree/main/guides/product/competitor-teardown/
Coverage
1 Files scanned · 316 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

1 confirmed security finding requires attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Nine findings are confirmed: unpinned npx installation commands and belt workflows that invoke external search, browser, code-execution, and image-processing services. The other 30 findings are Markdown syntax, documentation links, placeholder URLs, or comparison text. External processing can disclose research inputs, but no malicious intent, credential theft, destructive command, or prompt injection was found.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 316 Lines analyzed

10 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 7 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 28 evidence locations

Capability review items (9)
Medium
SKILL.md:7
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line recommends running npx to install a remote skill package. This executes third-party package tooling and introduces supply-chain risk.
Medium
SKILL.md:17-30
Ruby/shell backtick execution
```bash
The fenced block contains belt login and belt app run commands on lines 18-29. They execute an external CLI and submit input to remote apps.
Medium
SKILL.md:51-66
Ruby/shell backtick execution
```bash
The fenced Bash block runs three belt app commands for external search services on lines 53-65. This is intentional external command execution.
Medium
SKILL.md:70-85
Ruby/shell backtick execution
```bash
The block runs belt commands for search and extraction services on lines 72-84. These commands invoke external applications with supplied inputs.
Medium
SKILL.md:89-107
Ruby/shell backtick execution
```bash
The block invokes the belt browser app three times on lines 91-105. It intentionally runs an external command and accesses supplied URLs.
Medium
SKILL.md:212-217
Ruby/shell backtick execution
```bash
The Bash block invokes belt's Python executor with plotting code on lines 214-216. This intentionally submits code to an external execution service.
Medium
SKILL.md:242-252
Ruby/shell backtick execution
```bash
The Bash block runs belt search applications on lines 244-251. These are intentional external commands that transmit research queries.
Medium
SKILL.md:288-294
Ruby/shell backtick execution
```bash
The Bash block invokes the belt image-stitching application on lines 290-293. This executes an external command with supplied image paths.
Medium
SKILL.md:309-312
Ruby/shell backtick execution
```bash
The block recommends two npx skill-installation commands on lines 310-311. Running unpinned remote packages introduces external execution and supply-chain risk.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Medium
SKILL.md:21-29SKILL.md:212-216SKILL.md:288-293
Third-Party Research Data Disclosure
The belt workflows submit research queries, target URLs, screenshots, and plotting code to external inference.sh apps. Confidential inputs could leave the local environment.
The commands explicitly pass queries, URLs, code, and image paths to named belt applications. The external processing is clear, although disclosure impact depends on user input.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Unversioned npx installation
    Pin the skill package to a reviewed version and publish checksum or provenance guidance before asking users to install it.
  2. FIX-002
    Medium
    External processing of research inputs
    State which data each inference.sh app receives and warn users not to submit credentials, confidential plans, customer data, or private screenshots.
  3. FIX-003
    Medium
    External command and remote code execution
    Require explicit approval before invoking belt apps, especially python-executor, and document provider trust, retention, and data handling.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
635f69fb8d2f4e6330ba47a4e5a0fb239c04d110
Content hash
f10a74c382c2847ad4917ef69c0767b88bd1b1200ffa69d665bd912666c38c49
Tree hash
68e180f8816d1c767fe7e9003b89635bf08526a0239ac7ec740802dcfe8fe19b
Skill path
skills/101-skills/competitor-teardown
Audit payload hash
481e57c944456a307919ef3011c198ac

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable