Versioned security assessment

Report ID: SA-BAB52D84

6/28/2026, 6:07:59 AM

analysis-tshark security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
analysis-tshark
Version
v6
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/offsec/analysis-tshark
Coverage
5 Files scanned · 2,158 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static findings are mostly documentation and template examples, but the core skill intentionally provides privileged packet capture, credential extraction, and TLS decryption workflows. No prompt injection or covert exfiltration was found, so this is not blocked as malicious. The dual-use credential and network interception capabilities make it unsuitable for publication without strong gating and authorization controls.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 2,158 Lines analyzed

7 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 1 evidence location

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Observed in 3 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 4 evidence locations

Capability review items (7)
High
SKILL.md:36-41SKILL.md:564-569
Privileged Live Packet Capture
The skill instructs users to run TShark with sudo on live interfaces and to grant packet capture capabilities. This can intercept traffic outside an authorized scope and expose private communications.
The commands explicitly use sudo and packet capture capabilities. The surrounding text requires authorization, which reduces malicious-intent confidence but not operational risk.
High
SKILL.md:276-286SKILL.md:289-319
Credential and Hash Extraction Workflows
The skill provides TShark filters for HTTP Basic Auth, FTP passwords, NTLM responses, Kerberos names, POP3 credentials, and IMAP login data. These are legitimate for forensics but can directly enable credential harvesting.
The cited section is explicitly titled credential extraction and contains commands for extracting passwords and authentication material from captures.
High
SKILL.md:603-611
TLS Decryption Material Handling
The troubleshooting guidance uses SSL key log files and server private keys to decrypt TLS traffic. Misuse could expose protected communications from packet captures.
The lines directly reference SSLKEYLOGFILE and a server key path for TLS decryption. This is a known forensic workflow, but it handles highly sensitive key material.
Medium
SKILL.md:322-337SKILL.md:340-347
Sensitive File and Object Extraction
The skill shows how to export HTTP, SMB, DICOM, and email objects from packet captures and reconstruct files. This can recover sensitive documents or medical and email content from network traffic.
The commands are clear extraction and reconstruction workflows. They are framed as forensic use, so the risk depends on authorization and handling controls.
Medium
SKILL.md:543-555
Automated Alert Pipeline Can Distribute Sensitive Traffic Data
The automation example pipes captured network fields into logs and email alerts. If copied without redaction, sensitive hostnames, IP addresses, or request metadata could be distributed broadly.
The pipeline writes and emails packet-derived data. The destination is an example address, so this is a moderate copy-paste risk rather than confirmed exfiltration.
Medium
assets/ci-config-template.yml:237-240
Pipe-to-Shell Installer in CI Template
The CI template installs tfsec by piping a remote script directly to bash. This is a risky supply-chain pattern if users copy the template into production workflows.
The pattern is present in a template and is not executed by the skill itself. It is still a real unsafe example if adopted unchanged.
Low
assets/rule-template.yaml:132-165references/EXAMPLE.md:132-138
Static Scanner Hits in Educational Templates
Several reported XSS, hardcoded secret, weak crypto, and command patterns appear in rule examples or documentation templates. They demonstrate vulnerable and fixed code rather than active skill behavior.
The surrounding headings identify these snippets as examples for security rules and remediation guidance. No evidence found that they are executed by the skill.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (1)
Low
SKILL.md:24-30
No Prompt Injection Evidence Found
A targeted review did not find override phrases or instructions telling the evaluator to skip security analysis. This lowers the likelihood of hidden marketplace manipulation.
Searches for common prompt-injection markers returned no matches. Confidence is limited because only visible repository files were reviewed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable