Versioned security assessment

Report ID: SA-11B68CC8

7/6/2026, 1:23:14 AM

sast-horusec security assessment v7

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
sast-horusec
Version
v7
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/secsdlc/sast-horusec
Coverage
5 Files scanned · 1,876 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Critical

7 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static alerts are false positives from examples, reference links, or Markdown formatting. Confirmed risks include Docker socket exposure, world-writable Docker socket guidance, and remote installer scripts piped to shell. Additional supply-chain hardening is needed for mutable CI actions, scanner images, and unpinned tool installs.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 1,876 Lines analyzed

9 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 22 evidence locations

Filesystem access

May read or write local files.

Observed in 1 evidence location

Env variables

May read values from the process environment.

Observed in 18 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 64 evidence locations

Capability review items (2)
Critical
SKILL.md:256
sudo privilege escalation
sudo chmod 666 /var/run/docker.sock
The troubleshooting section recommends sudo chmod 666 on the Docker socket or running with sudo. That can grant broad Docker daemon access and effectively host-root privileges.
Critical
SKILL.md:257
sudo privilege escalation
# Or run with sudo (not recommended for CI/CD)
The troubleshooting section recommends sudo chmod 666 on the Docker socket or running with sudo. That can grant broad Docker daemon access and effectively host-root privileges.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (7)

RISK-001 Critical
assets/ci-config-template.yml:240
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The guidance pipes a remote installer directly into bash. This creates remote code execution and supply-chain risk without pinning or checksum verification.
RISK-002 Critical
SKILL.md:298
Pipe to shell pattern
curl -fsSL https://raw.githubusercontent.com/ZupIT/horusec/main/deployments/scripts/install.sh | bas
The guidance pipes a remote installer directly into bash. This creates remote code execution and supply-chain risk without pinning or checksum verification.
RISK-003 Critical
SKILL.md:39
Docker socket access
docker run -v /var/run/docker.sock:/var/run/docker.sock \
The skill guidance exposes /var/run/docker.sock to scanner containers or changes its permissions. Docker socket access can provide host-level control, especially on CI runners.
RISK-004 Critical
SKILL.md:213
Docker socket access
docker run -v /var/run/docker.sock:/var/run/docker.sock \
The skill guidance exposes /var/run/docker.sock to scanner containers or changes its permissions. Docker socket access can provide host-level control, especially on CI runners.
RISK-005 Critical
SKILL.md:256
Docker socket access
sudo chmod 666 /var/run/docker.sock
The skill guidance exposes /var/run/docker.sock to scanner containers or changes its permissions. Docker socket access can provide host-level control, especially on CI runners.
RISK-006 High
assets/ci-config-template.yml:197SKILL.md:39-40SKILL.md:222
Unpinned CI Actions and Scanner Images
The CI and usage guidance references mutable action refs and latest scanner images. A mutable security tool chain can change without review and expose users to compromised or inconsistent scans.
The cited lines use mutable refs and latest tags in CI or scanner execution guidance. This is a clear supply-chain hardening gap for a security scanning workflow.
RISK-007 Medium
assets/ci-config-template.yml:57assets/ci-config-template.yml:119assets/ci-config-template.yml:230
Unpinned Security Tool Installation in CI Template
The CI template installs security tools without fixed versions. Build behavior can drift or be compromised through package supply-chain changes.
The template calls package installers without explicit versions. This is common in examples, but security CI templates should be reproducible and pinned.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Critical
    Docker socket exposure in scanner examples
    Remove Docker socket mounts from published examples. Use rootless Docker, isolated runners, or Horusec modes that do not bind the host socket.
  2. FIX-002
    Critical
    World-writable Docker socket troubleshooting guidance
    Delete the chmod 666 recommendation. Use least-privilege Docker group membership or dedicated ephemeral runners instead.
  3. FIX-003
    Critical
    Remote installer scripts piped directly to bash
    Replace curl-to-shell examples with pinned release downloads, checksum verification, or trusted package manager instructions.
  4. FIX-004
    High
    Mutable CI actions, images, and package installs
    Pin GitHub Actions to commit SHAs, pin container image digests, and install exact package versions for scanner dependencies.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)
High
references/EXAMPLE.md:276
C2 keywords
- **T1041**: Exfiltration Over C2 Channel
Force-confirmed blocker/high static finding; AI dismissal overridden.
High
references/WORKFLOW_CHECKLIST.md:193
Malware type keywords
[ ] 10. Remove malicious artifacts (malware, backdoors, webshells)
Force-confirmed blocker/high static finding; AI dismissal overridden.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable