Versioned security assessment

Report ID: SA-4F072F9F

7/6/2026, 4:41:24 PM

domain-authority-auditor security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
domain-authority-auditor
Version
v2
Maintainer
aaron-he-zhu
Source
github.com/aaron-he-zhu/aaron-marketing-skills/tree/main/seo-geo/monitor/domain-authority-auditor
Coverage
2 Files scanned · 583 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

High

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static command findings are false positives from markdown code fences, inline paths, and skill names; no executable shell or Ruby code was found. The confirmed risk is that the skill requires parent-directory reference files and a mutable raw GitHub fallback, so important runtime instructions are outside the audited package. No prompt injection attempt was found in the scanned files.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

2 Files scanned · 583 Lines analyzed

7 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 4 evidence locations

Filesystem access

May read or write local files.

Observed in 16 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 49 evidence locations

Capability review items (5)
High
SKILL.md:162
Path traversal sequence
Evaluate each item against the criteria in [references/cite-domain-rating.md](../../../references/ci
The skill tells agents to evaluate criteria from ../../../references/cite-domain-rating.md, which is outside the scanned package. That external file can change the scoring behavior without marketplace review.
High
SKILL.md:219
Path traversal sequence
**Before scoring, `Read ../../../references/auditor-runbook.md`.** It is the authoritative, framewor
The skill explicitly instructs agents to read ../../../references/auditor-runbook.md before scoring. This required instruction source is outside the audited skill files and can alter behavior.
High
SKILL.md:226
Path traversal sequence
*Standalone install fallback*: if that relative path does not exist, this skill was installed standa
The fallback expands loading to other ../../../references files when local files are missing. This makes the skill depend on parent-directory files that were not included in the scanned package.
High
SKILL.md:434
Path traversal sequence
Execute in order, using the framework-agnostic procedure in [references/auditor-runbook.md](../../..
The skill directs agents to execute the workflow using ../../../references/auditor-runbook.md. That makes an off-package file an authoritative part of runtime behavior.
Medium
SKILL.md:226
Hardcoded URL
*Standalone install fallback*: if that relative path does not exist, this skill was installed standa
The fallback instructs agents to fetch required reference files from raw.githubusercontent.com when local files are missing. This creates a mutable network dependency and can load unreviewed instructions at runtime.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 High
SKILL.md:162SKILL.md:219-226
Unscanned External Instruction Dependency
The skill requires agents to read an authoritative runbook outside the package before scoring, and also relies on an external CITE benchmark file. Those files were not part of the two audited files and can change the skill behavior outside marketplace review.
Lines 162 and 219-226 directly require parent-directory reference files for scoring. The scanned package only contains SKILL.md and references/example-report.md, so the required instruction sources are unreviewed here.
RISK-002 High
SKILL.md:226
Mutable Remote Reference Loading
When local reference files are missing, the skill tells agents to fetch them from the main branch of raw.githubusercontent.com. This loads mutable remote instructions without a pinned commit or integrity check.
Line 226 explicitly names the raw GitHub main-branch fallback for required reference files. No hash, commit pin, or approval gate is described.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    Required instructions are loaded from files outside the scanned skill package.
    Bundle the required runbook and CITE benchmark files inside the skill package, or remove mandatory parent-directory reads.
  2. FIX-002
    High
    The standalone fallback fetches mutable reference files from a GitHub main branch.
    Pin remote references to an immutable commit and verify file hashes before using them.
  3. FIX-003
    Low
    Audit results may be saved into memory paths as part of the workflow.
    Ask for user confirmation before persisting reports or hot-cache entries that may contain sensitive domain findings.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable