Versioned security assessment

Report ID: SA-FF29B0B1

6/28/2026, 5:55:59 AM

pytm security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
pytm
Version
v6
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/threatmodel/pytm
Coverage
1 Files scanned · 575 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many command, network, credential, C2, and weak-crypto patterns, but review shows most are markdown examples, security taxonomy terms, or reference links. No prompt injection or malicious intent was found in SKILL.md. The remaining risk is legitimate guidance that includes package installation and sudo commands, so publication should include a command-execution warning.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 575 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 5 evidence locations

Capability review items (1)
Medium
SKILL.md:185-188SKILL.md:452-458
Privileged Package Installation Guidance
The skill includes package installation commands, including sudo apt-get for graphviz in CI and troubleshooting examples. This is legitimate setup guidance, but users should review privileged package manager commands before running them.
The sudo commands are explicit and would run with elevated privileges if copied by a user. Context shows dependency installation, not malicious escalation, so the risk is moderate.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
SKILL.md:252-256SKILL.md:536-545
Security Terms Misclassified as Sensitive or Malicious Content
Static hits for Windows SAM, C2, and weak cryptography are false positives from security framework names and example threat descriptions. OWASP SAMM and SOC2 are compliance references, not credential access or command-and-control behavior.
The suspicious strings are used in threat modeling and compliance context. No evidence found of credential extraction, C2 infrastructure, or cryptographic implementation.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)
Low
SKILL.md:41-84SKILL.md:123-163SKILL.md:286-325
Markdown Code Fences Misclassified as Command Execution
Many static external-command findings are caused by fenced markdown examples and inline command text. They document pytm usage and do not execute automatically when the skill is loaded.
The flagged backticks are markdown code block delimiters around Python, YAML, and shell examples. No executable script file or automatic invocation is present.
Low
SKILL.md:20-24SKILL.md:567-574
Reference URLs Misclassified as Network Behavior
The hardcoded URLs are reference links to pytm, OWASP, Microsoft STRIDE, MITRE ATT&CK, and NIST material. No evidence found that the skill sends data to these URLs.
The URLs appear in metadata references and a References section. There are no HTTP client calls, webhooks, or data upload instructions in the reviewed file.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable