Versioned security assessment

Report ID: SA-14D89605

6/28/2026, 6:12:16 AM

api-mitmproxy security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
api-mitmproxy
Version
v6
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/appsec/api-mitmproxy
Coverage
5 Files scanned · 2,004 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

High

4 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The static findings are mostly documentation and template examples, not hidden executable payloads. However, the skill provides high-impact dual-use guidance for HTTPS interception, credential capture, certificate pinning bypass, exposed proxy listeners, request modification, and copied CI command execution patterns. No prompt injection attempt or confirmed malicious marketplace behavior was found, but publication should require stricter safeguards and warnings.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 2,004 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 35 evidence locations

Filesystem access

May read or write local files.

Observed in 5 evidence locations

Env variables

May read values from the process environment.

Observed in 18 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 87 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (4)

RISK-001 High
SKILL.md:152-166SKILL.md:221-245SKILL.md:324-330SKILL.md:446-454
Dual-use HTTPS interception and credential capture guidance
The skill teaches users to proxy client traffic, install mitmproxy certificates, bypass certificate pinning, capture authorization headers, and modify requests. This is legitimate for authorized testing, but it can also enable unauthorized interception and token misuse if copied outside a controlled scope.
The lines explicitly describe certificate pinning bypass, token capture, sensitive captured traffic, and Frida-based unpinning. The context is authorized security testing, so this is high-risk dual use rather than confirmed malicious intent.
RISK-002 High
assets/ci-config-template.yml:237-244
Remote installer piped directly to shell in CI template
The CI template includes a curl command that downloads a remote install script and pipes it to bash. This is a real supply-chain risk if users copy the template, because execution depends on remote script integrity at runtime.
The exact pipe-to-shell pattern is present in a CI workflow template. It is not hidden malware, but it is a confirmed risky pattern in reusable marketplace content.
RISK-003 Medium
SKILL.md:62-69SKILL.md:161-164SKILL.md:438-443
Proxy examples bind to all network interfaces
Several mitmproxy examples bind the listener to 0.0.0.0. This can expose an interception proxy beyond localhost if firewall and access controls are not configured correctly.
The examples directly use 0.0.0.0 and later tell users to verify that interface. The skill also recommends access controls, which lowers confidence that this is unsafe by design.
RISK-004 Medium
SKILL.md:426-435
Destructive troubleshooting command removes mitmproxy state
The troubleshooting section recommends deleting the mitmproxy configuration directory to regenerate certificates. The path is scoped, but users may lose local keys, certificates, and proxy configuration.
The command is a real recursive delete operation, but it targets the mitmproxy directory rather than root or an arbitrary path. This makes it operationally risky but not evidence of malicious deletion.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Medium
assets/rule-template.yaml:93-165references/EXAMPLE.md:412-447
Environment and secret access appears in security examples
The static scanner flagged environment variable and secret terms in rule and reference templates. These examples teach secure secret handling or detection rather than exfiltrating environment values.
The patterns are real secret-related code examples, but the semantic context is defensive guidance. Human review is still useful because users may copy example API key handling into applications.
Low
assets/rule-template.yaml:14-299references/EXAMPLE.md:89-162references/EXAMPLE.md:235-279references/WORKFLOW_CHECKLIST.md:173-209
Vulnerable code samples are documentation examples
XSS, SQL injection, weak cryptography, C2 keywords, and reconnaissance terms appear inside security education templates and framework mappings. They are not executed by the skill and are used to explain detection or remediation.
The files are clearly labeled as templates, examples, and framework mappings. The suspicious strings are visible teaching material rather than hidden instructions or executable payloads.
Low
SKILL.md:1-22
No prompt injection attempt found
Searches for override phrases, fake system instructions, pre-approval claims, and requests to skip analysis found no evidence in the reviewed skill files.
Targeted review found no prompt-injection control language. The front matter describes the skill normally and does not attempt to override evaluator instructions.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable