Versioned security assessment

Report ID: SA-1DC997D0

7/13/2026, 10:55:07 AM

storyboard-creation security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Latest published report
Skill name
storyboard-creation
Version
v2
Maintainer
101-skills
Source
github.com/101-skills/skills/tree/main/guides/video/storyboard-creation/
Coverage
1 Files scanned · 270 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

2 confirmed security findings require attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static findings are false positives caused by Markdown code fences and inline formatting. Six findings contain intended belt or npx commands, while semantic review identified unpinned installations and third-party processing of prompts or images. No prompt injection or malicious exfiltration intent was found.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 270 Lines analyzed

8 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 22 evidence locations

Capability review items (6)
Medium
SKILL.md:7
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
Line 7 presents an npx command that installs a remote community skill. Running it executes package tooling and changes the local skill environment.
Medium
SKILL.md:17-32
Ruby/shell backtick execution
```bash
The Bash block runs belt login and belt app run commands against external applications. These commands have authentication and network side effects when followed.
Medium
SKILL.md:50-71
Ruby/shell backtick execution
```bash
The fenced Bash examples invoke belt app run for remote image generation. They are intended external commands, although their arguments are fixed examples.
Medium
SKILL.md:196-217
Ruby/shell backtick execution
```bash
The Bash block runs three belt app run jobs against an external image model. The commands submit storyboard prompts and create remote processing side effects.
Medium
SKILL.md:221-238
Ruby/shell backtick execution
```bash
The Bash block invokes the external infsh/stitch-images application through belt. It may send referenced image inputs to third-party processing.
Medium
SKILL.md:261-266
Ruby/shell backtick execution
```bash
The Bash block contains four npx skills add commands for remote skills. Running them invokes package tooling and modifies the installed skill set.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Medium
SKILL.md:7SKILL.md:261-265
Unpinned Remote Skill Installation
The documented npx commands install community skills without immutable versions or commit references, creating dependency and supply-chain exposure.
The commands visibly name remote skill sources without version pins or commit hashes. Their future contents can change independently of this audited file.
RISK-002 Medium
SKILL.md:17-31SKILL.md:50-70SKILL.md:196-216SKILL.md:221-237
Third-Party Storyboard Data Processing
The belt app run examples submit storyboard prompts and image references to external inference applications, which may expose confidential production material.
The skill identifies inference.sh as the image-generation service and uses belt app run with prompt and image fields. External processing is central to these examples.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Remote CLI and skill installation commands are not pinned to immutable versions.
    Pin trusted package versions or commit references and ask users to review each source before installation.
  2. FIX-002
    Medium
    Storyboard prompts and image inputs may be processed by an external inference service.
    Disclose the external service, its data handling terms, and advise users to exclude confidential material.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
1dc997d0e4b11aab70d6ab66295e0a1b7e2e12d4
Content hash
7e5b91d6595a7b47177183b45f33a6e1a94345228146c2ee52197381cec47ed3
Tree hash
eb6c02e112fb062a3aacc81ef99f39c1ebe82921e5a83ecba6448cc4a93805d2
Skill path
skills/101-skills/storyboard-creation
Audit payload hash
987ececa2daef644a4cb6fb6e99838be

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable