Versioned security assessment

Report ID: SA-3E4B6C31

7/9/2026, 7:49:01 AM

pytm security assessment v13

Skill Security Certification Report

Audit History
Audit model: codex Latest published report
Skill name
pytm
Version
v0.1.0
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/threatmodel/pytm
Coverage
1 Files scanned · 575 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

No prompt injection or malicious intent was found in SKILL.md. Most static findings are Markdown formatting, inline code, or reference URLs. A few command examples install packages, run local Python files, or use sudo, so agents should require explicit approval and a trusted environment.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 575 Lines analyzed

6 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 10 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 52 evidence locations

Capability review items (6)
High
SKILL.md:188
sudo privilege escalation
sudo apt-get install -y graphviz
The CI example uses sudo apt-get to install Graphviz with root privileges. Even in setup guidance, privileged commands should require explicit approval and isolated CI context.
High
SKILL.md:458
sudo privilege escalation
sudo apt-get install graphviz # Linux
The troubleshooting command uses sudo apt-get on a Linux host. Running it grants root privileges to package installation and can alter the system.
Medium
SKILL.md:79-84
Ruby/shell backtick execution
```bash
The bash install block instructs package-manager commands for pytm and Graphviz. This is legitimate setup guidance, but installer commands can modify the host and need explicit approval.
Medium
SKILL.md:169-201
Ruby/shell backtick execution
```yaml
The CI example runs dependency installation and local Python scripts. This is expected for CI, but it can execute project code and should be limited to trusted repositories.
Medium
SKILL.md:207-216
Ruby/shell backtick execution
```bash
The report generation block tells users to run threat_model.py and helper scripts. Running local Python files can execute arbitrary project code if the model is untrusted.
Medium
SKILL.md:452-462
Ruby/shell backtick execution
```bash
The troubleshooting block includes installation and Python execution commands. These are legitimate diagnostics, but they modify or execute code on the user machine if run directly.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    Privileged package installation examples
    Avoid sudo in skill instructions where possible. Mark Linux package installation as a user-approved or CI-only action.
  2. FIX-002
    Medium
    Local Python execution examples
    State that agents should only run threat_model.py and helper scripts from trusted repositories after user confirmation.
  3. FIX-003
    Medium
    Dependency installation commands
    Recommend virtual environments, pinned dependency versions, and official installation sources for pytm and Graphviz.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Content hash
f148ac5a58ecdb02a665e53d269b96157e3b36dda16abe5c326d4d2869e40c5e
Tree hash
d768ed7d12cfcdf1adebe531af542940a886061bcf95b5b8ea55051d139d8c78
Skill path
skills/agentsecops/pytm
Audit payload hash
06afed7a82480fda4278768a49ff33a6

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable