๐Ÿ“ฆ

Audit History

landing-page-design - 3 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v3 LatestJul 12, 2026, 10:10 AM 1 confirmed6No capability change
v2 Jul 12, 2026, 10:10 AM 1 confirmed6No capability change
v1 Jul 10, 2026, 11:11 AM No confirmed findings6Baseline

Jul 12, 2026, 10:10 AM

Most static findings are false positives caused by Markdown code fences and inline formatting. Confirmed risks are external package installation, third-party CLI execution, and transmission of prompts or search queries to remote services.

1
Files scanned
248
Lines analyzed
9
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
User Content Sent to Third-Party Services
Image prompts and research queries are submitted to remote providers through belt. Sensitive product details or personal data could leave the local environment.
The commands explicitly pass prompt and query fields to named remote applications. The skill provides no warning against submitting sensitive information.
Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
Line 7 instructs users to run npx against an external package. Installation can execute third-party package lifecycle code and creates a supply-chain risk.
Medium
Ruby/shell backtick execution ยท 5 occurrences
```bash
The Bash block runs belt login and remote belt app commands. These commands authenticate and send supplied inputs to external services.
Audited by: codex

Jul 12, 2026, 10:10 AM

Most static findings are false positives caused by Markdown code fences and inline formatting. Confirmed risks are external package installation, third-party CLI execution, and transmission of prompts or search queries to remote services.

1
Files scanned
248
Lines analyzed
9
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
User Content Sent to Third-Party Services
Image prompts and research queries are submitted to remote providers through belt. Sensitive product details or personal data could leave the local environment.
The commands explicitly pass prompt and query fields to named remote applications. The skill provides no warning against submitting sensitive information.
Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
Line 7 instructs users to run npx against an external package. Installation can execute third-party package lifecycle code and creates a supply-chain risk.
Medium
Ruby/shell backtick execution ยท 5 occurrences
```bash
The Bash block runs belt login and remote belt app commands. These commands authenticate and send supplied inputs to external services.
Audited by: codex

Jul 10, 2026, 11:11 AM

Most static findings are Markdown delimiters or inline formatting and do not execute commands. Six findings contain real npx or belt commands for installation, authentication, or hosted application requests. No malicious intent or prompt injection was found.

1
Files scanned
248
Lines analyzed
8
Review items
0
False positives ignored
Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line instructs users to run an npx command that installs third-party skill content. The backticks are Markdown, but the command is intended for execution.
Medium
Ruby/shell backtick execution ยท 5 occurrences
```bash
This Bash block directs users to run belt login and two belt app commands. These commands authenticate and invoke hosted services with supplied input.
Audited by: codex