Versioned security assessment

Report ID: SA-43B77C29

6/28/2026, 5:37:27 AM

iac-checkov security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
iac-checkov
Version
v6
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/devsecops/iac-checkov
Coverage
9 Files scanned · 2,451 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis flagged many command, network, secret, and blocker keywords, but review found they are primarily Checkov usage examples, CI templates, and security policy terminology. No prompt injection attempt or malicious exfiltration intent was found. The skill still carries medium operational risk because it instructs users to run external scanners, read IaC files and reports, optionally download external modules, and use cloud security integrations.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

9 Files scanned · 2,451 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 5 evidence locations

Filesystem access

May read or write local files.

Observed in 4 evidence locations

Env variables

May read values from the process environment.

Observed in 2 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 5 evidence locations

Capability review items (3)
Medium
SKILL.md:39-61assets/github_actions.yml:146-157assets/gitlab_ci.yml:132-156
External Scanner Commands Are Central to Skill Operation
The skill instructs users and CI systems to install and run Checkov, parse scan output with shell tools, and generate reports. This is legitimate for an IaC security skill, but it can execute local tools over large workspace paths and should be run only in trusted project contexts.
The command execution is directly documented and operationally necessary. I found no evidence that command arguments are crafted for malicious behavior.
Medium
assets/checkov_config.yaml:46-75SKILL.md:652-657assets/pre_commit_config.yaml:7-10
Optional Network Access and Cloud Integration
Examples enable downloading external Terraform modules and show optional Prisma Cloud or Bridgecrew integration through an API key variable. These patterns are legitimate, but they can contact third-party services and may expose metadata if configured carelessly.
The network behavior is explicit in configuration examples. It is bounded to documented Checkov integrations rather than hidden exfiltration.
Medium
SKILL.md:455-463SKILL.md:221-227assets/github_actions.yml:175-176
IaC and Secret Scan Outputs May Contain Sensitive Context
The skill encourages secrets scanning and report generation over infrastructure files. Scan inputs and generated JSON or SARIF reports can contain resource names, paths, misconfiguration details, and sometimes secret-like values.
The skill plainly handles IaC files and scan reports. Sensitivity depends on the scanned repository and report retention settings.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
references/suppression_guide.md:19-31references/suppression_guide.md:216-226references/suppression_guide.md:233-240
Suppression Examples Require Governance
The suppression guide includes examples that bypass specific Checkov checks for legacy or public resources. The guide also asks for justifications, but users could copy suppressions without approval.
The examples are real and could reduce scanning coverage if misused. The surrounding guidance reduces but does not remove this risk.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (1)
Low
references/compliance_mapping.md:1-14references/custom_policies.md:247-260SKILL.md:396-403
Static Blocker Keywords Are Contextual False Positives
Several static hits for weak cryptography, command-and-control terminology, and Windows SAM are references to compliance controls, Checkov categories, or AWS SAM templates. They do not instruct the model to perform offensive activity.
The reviewed lines show security documentation and cloud template terminology. No prompt injection or malicious operational instruction was present.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable