Versioned security assessment

Report ID: SA-C47A0D68

7/12/2026, 9:48:20 AM

product-photography security assessment v1

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
product-photography
Version
v1
Maintainer
101-skills
Source
github.com/101-skills/skills/tree/main/guides/photo/product-photography/
Coverage
1 Files scanned · 294 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static findings are false positives caused by Markdown backticks and fixed CLI examples. Package installation and mutable remote instructions present supply-chain risk, while image workflows transmit prompts and files to an external service.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 294 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 32 evidence locations

Capability review items (3)
Medium
SKILL.md:7
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The npx command installs a remote package that may execute lifecycle scripts, creating a supply-chain risk.
Medium
SKILL.md:286-290
Ruby/shell backtick execution
```bash
The fenced commands install remote skills through npx without immutable versions, creating a supply-chain risk.
Low
SKILL.md:15
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The installation link targets a mutable main-branch document, so its instructions can change after review.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Medium
SKILL.md:18-24SKILL.md:259-268
Remote Processing of Prompts and Images
The belt workflows send prompts to an external inference service, and editing examples supply local image files for remote processing.
The skill names an external inference service and passes prompt and image fields to its CLI.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Installation commands execute packages from remote registries without an immutable version.
    Pin package and skill versions, document the expected publisher, and recommend verification before installation.
  2. FIX-002
    Medium
    Image editing examples can upload local product images to an external inference service.
    Disclose remote processing and advise users to remove confidential or regulated content before submission.
  3. FIX-003
    Low
    The installation guide uses a mutable GitHub branch URL.
    Link to a tagged release or commit-pinned document with a published checksum.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
c47a0d6818048b11e035c26cf0a679adb938020c
Content hash
ebdfb6b2cd8aa2065c62bcf9174b1efcdf4bca754f68ccfd3841333d3999dd28
Tree hash
f8e5e3f041872ae0de3b7d3df88547b74969637740cd8607f4932c6975dd434c
Skill path
skills/101-skills/product-photography
Audit payload hash
5b007ea722e421e3445544825ab3b9fe

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable