Versioned security assessment

Report ID: SA-7ED2830F

7/7/2026, 6:12:31 AM

domain-authority-auditor security assessment v3

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
domain-authority-auditor
Version
v3
Maintainer
aaron-he-zhu
Source
github.com/aaron-he-zhu/aaron-marketing-skills/tree/main/seo-geo/monitor/domain-authority-auditor
Coverage
2 Files scanned · 585 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

High

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static command-execution matches are false positives caused by Markdown formatting. However, the skill relies on parent-directory references, an unpinned remote fallback, and persistent memory writes, which create review-boundary and persistence risks.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

2 Files scanned · 585 Lines analyzed

17 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 4 evidence locations

Filesystem access

May read or write local files.

Observed in 16 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 49 evidence locations

Capability review items (15)
High
SKILL.md:19
Path traversal sequence
> Based on [CITE Domain Rating](https://github.com/aaron-he-zhu/cite-domain-rating). Full benchmark
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:51
Path traversal sequence
Start with one of these prompts. Finish with a citation-trust verdict and a handoff summary using th
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:93
Path traversal sequence
> See [CONNECTORS.md](../../../CONNECTORS.md) for tool category placeholders.
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:158
Path traversal sequence
If any critical trust check triggers, flag it prominently at the top of the report using plain langu
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:162
Path traversal sequence
Evaluate each item against the criteria in [references/cite-domain-rating.md](../../../references/ci
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:219
Path traversal sequence
**Before scoring, `Read ../../../references/auditor-runbook.md`.** It is the authoritative, framewor
This is a direct instruction to read ../../../references/auditor-runbook.md, which crosses outside the packaged skill folder. It can load unreviewed local content into the agent workflow.
High
SKILL.md:226
Path traversal sequence
*Standalone install fallback*: if that relative path does not exist, this skill was installed standa
The fallback references ../../../ paths and then tells the agent to fetch missing files externally. The hardcoded path is not user-controlled, but it still depends on content outside the reviewed skill package.
High
SKILL.md:231
Path traversal sequence
[references/auditor-runbook.md §1](../../../references/auditor-runbook.md): `status`, `objective`, `
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:240
Path traversal sequence
> (see [cite-domain-rating.md](../../../references/cite-domain-rating.md)), floor-rounded, before th
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:373
Path traversal sequence
Render BEFORE "Top 5 Priority Improvements". Group, sort, and translate every `key_findings` entry p
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:436
Path traversal sequence
Execute in order, using the framework-agnostic procedure in [references/auditor-runbook.md](../../..
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:444
Path traversal sequence
Write the audit artifact to `memory/audits/domain/YYYY-MM-DD-<topic>.md` (the per-role path from [sk
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:479
Path traversal sequence
- [CITE Domain Rating](../../../references/cite-domain-rating.md) — Full 40-item benchmark with dime
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
High
SKILL.md:484
Path traversal sequence
CAUTIOUS + link-quality: [offsite-signal-analyzer](../offsite-signal-analyzer/SKILL.md). UNTRUSTED:
The skill treats a parent-directory reference as an authoritative workflow input. The path is hardcoded, but it still crosses the packaged skill boundary and can load unreviewed local content.
Medium
SKILL.md:226
Hardcoded URL
*Standalone install fallback*: if that relative path does not exist, this skill was installed standa
This line instructs agents to fetch missing runbook files from raw.githubusercontent.com. No secrets are sent, but it creates a mutable external instruction dependency.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 High
SKILL.md:226
Unpinned External Instruction Dependency
The skill instructs agents to fetch the runbook and referenced files from raw.githubusercontent.com on the main branch when local files are missing. This can load mutable, unreviewed instructions after marketplace review.
Line 226 explicitly requires fetching external prompt and reference material from a mutable branch, and the skill says not to score without the runbook.
RISK-002 Medium
SKILL.md:87SKILL.md:444
Persistent Memory Write Instructions
The skill directs agents to save audit artifacts under memory/audits/domain and promote veto issues to memory/hot-cache.md. This may persist untrusted audit content into future context without explicit user confirmation.
Line 87 describes auto-saving to memory files, and line 444 gives explicit write and promotion instructions. The behavior is intentional, though host-side artifact gates may reduce impact.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    Parent-directory reference dependencies
    Bundle the runbook, CITE reference, skill contract excerpts, and connector guidance inside the skill folder. Replace ../../../ links with packaged local references.
  2. FIX-002
    High
    Mutable remote fallback for required instructions
    Remove the raw GitHub main-branch fallback. If remote retrieval remains necessary, pin a commit hash and require explicit user confirmation before loading it.
  3. FIX-003
    Medium
    Automatic persistent memory updates
    Require explicit user approval before writing audit results to memory files, and sanitize untrusted domain evidence before adding it to hot-cache context.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable