Versioned security assessment

Report ID: SA-D46E6208

7/7/2026, 8:25:38 PM

dast-ffuf security assessment v8

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
dast-ffuf
Version
v8
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/appsec/dast-ffuf
Coverage
6 Files scanned · 2,006 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Critical

9 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static alerts are Markdown examples, placeholder URLs, or reference text, but the review confirms a critical CI supply-chain issue and high-risk dual-use DAST guidance. The skill is useful for authorized application security testing, yet it can enable reconnaissance, credential enumeration, and sensitive file discovery if used outside scope.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

6 Files scanned · 2,006 Lines analyzed

11 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 59 evidence locations

Filesystem access

May read or write local files.

Observed in 2 evidence locations

Env variables

May read values from the process environment.

Observed in 18 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 76 evidence locations

Capability review items (2)
High
assets/ci-config-template.yml:164
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The CI template passes GITHUB_TOKEN into a third-party action. This is common for GitHub workflows, but it creates token exposure risk if the action or ref is compromised.
Low
assets/ci-config-template.yml:240
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The URL is part of a remote installer fetched by curl and piped to bash. A hardcoded remote script source creates supply-chain exposure if the template is used.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (9)

RISK-001 Critical
assets/ci-config-template.yml:240
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The template directly pipes a remote install script into bash with no checksum or commit pin. This is a real supply-chain execution risk.
RISK-002 High
SKILL.md:164
System reconnaissance
-mr "Invalid password|Incorrect password" # Match responses indicating valid user
The line matches login responses that indicate valid users during username fuzzing. That can enable account enumeration if used outside authorized testing.
RISK-003 High
SKILL.md:380
Network scanning tools
2. Port scanning (nmap)
The workflow includes nmap port scanning before ffuf. This is active network reconnaissance and requires strict authorization.
RISK-004 High
assets/ci-config-template.yml:161-164assets/ci-config-template.yml:196-201assets/ci-config-template.yml:237-240
Unpinned CI Actions and Remote Installer
The CI template uses third-party actions by mutable version tags and includes a remote installer path. This can expose users to supply-chain changes when the template is copied into a workflow.
The file shows gitleaks and trivy actions referenced by tag or branch, plus a remote installer. These are clear CI supply-chain risks when reused without pinning or integrity checks.
RISK-005 High
SKILL.md:152-183
Credential Fuzzing Against Authentication Endpoints
The skill describes fuzzing usernames and passwords against login endpoints, including matching responses that indicate valid users. This is dual-use and can enable account enumeration or brute-force activity outside an approved test.
The authentication workflow explicitly covers username discovery, password fuzzing, and combined username-password fuzzing. The behavior is legitimate for authorized DAST but high risk outside scope.
RISK-006 High
SKILL.md:185-204
Sensitive Backup and Data Exposure Discovery Workflow
The skill guides users to find backup files, sensitive files, and exposed data, then download and analyze discovered files. This can lead to unauthorized data access when used outside a permitted scope.
The workflow directly targets backup and sensitive files and instructs users to analyze discovered files. The surrounding guidance includes authorization warnings, so the risk is dual-use rather than clearly malicious.
RISK-007 Medium
SKILL.md:300
System reconnaissance
Respect rate limits and avoid detection:
The section says to rate-limit fuzzing to avoid detection while tuning delays and concurrency. That wording can support evasive use despite also reducing traffic impact.
RISK-008 Medium
SKILL.md:298-311
Stealth-Leaning Rate Limit Guidance
The rate-limited fuzzing section frames delays and concurrency limits as a way to avoid detection. This wording can encourage evasive scanning behavior instead of only safety-focused traffic reduction.
The phrase appears in a section about tuning ffuf request pacing. It has a benign performance interpretation, but the detection-avoidance wording is materially risky.
RISK-009 Low
SKILL.md:145
System reconnaissance
-fs 0 # Filter by response size to identify valid vhosts
The line supports virtual-host discovery by filtering response sizes to identify valid hosts. This is legitimate in scope, but it is still reconnaissance against web targets.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Critical
    Remote installer is piped directly to bash in the CI template.
    Replace curl-to-shell installation with a pinned release, checksum verification, or a trusted package source.
  2. FIX-002
    High
    CI examples use mutable third-party action references and pass GITHUB_TOKEN to a third-party action.
    Pin GitHub Actions to commit SHAs, restrict token permissions, and document required token scopes.
  3. FIX-003
    High
    Authentication fuzzing guidance can enable account enumeration or brute-force behavior.
    Add explicit authorization, test-account, rate-limit, lockout, and stop-condition requirements before any credential testing.
  4. FIX-004
    High
    Sensitive file discovery guidance includes downloading and analyzing discovered files.
    Require scope confirmation, minimize data access, avoid downloading sensitive content unless approved, and document handling rules.
  5. FIX-005
    Medium
    Rate-limit guidance uses detection-avoidance language.
    Reword the section to emphasize service stability, consent, and safety rather than avoiding detection.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable