Versioned security assessment

Report ID: SA-508C43B6

7/5/2026, 2:06:02 AM

dast-ffuf security assessment v7

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
dast-ffuf
Version
v7
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/appsec/dast-ffuf
Coverage
5 Files scanned · 1,996 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Critical

7 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

I confirmed the remote pipe-to-shell CI installer and the intended active web-fuzzing workflows as security-relevant risks. Most static hits are false positives from Markdown code fences, placeholder URLs, security examples, and generic templates. No prompt injection attempt was found in the reviewed files.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 1,996 Lines analyzed

9 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 59 evidence locations

Filesystem access

May read or write local files.

Observed in 2 evidence locations

Env variables

May read values from the process environment.

Observed in 18 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 76 evidence locations

Capability review items (2)
High
assets/ci-config-template.yml:240
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads an installer from GitHub and pipes it directly to bash. This is a real supply-chain risk because remote script content is executed without pinning or checksum verification.
Medium
SKILL.md:392
Unix shell invocation
#!/bin/bash
The skill includes a CI shell script that runs ffuf and parses scan output. This is expected for the tool, but it is real command execution that should remain scoped and user-approved.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (7)

RISK-001 Critical
assets/ci-config-template.yml:240
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The template uses a curl-to-bash installer pattern for tfsec. Executing network content directly in CI can run attacker-controlled code if the upstream script or transport path is compromised.
RISK-002 High
SKILL.md:164
System reconnaissance
-mr "Invalid password|Incorrect password" # Match responses indicating valid user
The authentication workflow matches responses that reveal valid usernames. This can enable credential enumeration if run outside an approved assessment.
RISK-003 High
SKILL.md:380
Network scanning tools
2. Port scanning (nmap)
The integration workflow explicitly includes nmap port scanning before ffuf enumeration. This is an active reconnaissance capability that requires strict authorization.
RISK-004 High
SKILL.md:61-87SKILL.md:135-150SKILL.md:185-204
Active Web Fuzzing Against Arbitrary Targets
The skill guides directory, virtual host, parameter, and sensitive file discovery against target web applications. This is legitimate DAST only when the target is explicitly authorized.
The workflows explicitly describe content discovery, vhost identification, and sensitive file discovery. The file also includes authorization guidance, so the finding is about misuse risk rather than hidden malicious intent.
RISK-005 High
SKILL.md:152-183
Credential Enumeration and Password Fuzzing Workflow
The authentication workflow directs username discovery and password fuzzing against login endpoints. This can enable credential enumeration or account lockouts outside a controlled assessment.
The workflow explicitly fuzzes usernames and passwords and matches responses indicating valid users. That is a clear authentication abuse risk if authorization and safeguards are absent.
RISK-006 Medium
SKILL.md:145
System reconnaissance
-fs 0 # Filter by response size to identify valid vhosts
The workflow identifies valid virtual hosts by comparing responses. This is legitimate DAST when authorized, but it is still reconnaissance against web infrastructure.
RISK-007 Medium
SKILL.md:300
System reconnaissance
Respect rate limits and avoid detection:
The wording mentions avoiding detection while tuning scan rate limits. The context also discusses reducing load, so confidence is moderate, but the phrase can support stealthy reconnaissance.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Critical
    Remote installer executes network content in CI.
    Replace curl-to-bash with a pinned release, checksum verification, or a trusted action version.
  2. FIX-002
    High
    Authentication fuzzing can cause credential enumeration or account lockouts.
    Require written authorization, test accounts, low request rates, and explicit stop conditions before using these workflows.
  3. FIX-003
    High
    Active web fuzzing can affect unauthorized or production targets.
    Add a mandatory scope confirmation step with allowed hosts, rate limits, and excluded paths before scan planning.
  4. FIX-004
    Low
    Generic template files create noisy security signals.
    Remove unused generic reference templates or tailor them to ffuf-specific safe usage guidance.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)
High
references/EXAMPLE.md:276
C2 keywords
- **T1041**: Exfiltration Over C2 Channel
Force-confirmed blocker/high static finding; AI dismissal overridden.
High
references/WORKFLOW_CHECKLIST.md:193
Malware type keywords
[ ] 10. Remove malicious artifacts (malware, backdoors, webshells)
Force-confirmed blocker/high static finding; AI dismissal overridden.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable