Versioned security assessment

Report ID: SA-1888DF52

6/28/2026, 6:21:57 AM

sca-trivy security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
sca-trivy
Version
v6
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/devsecops/sca-trivy
Coverage
1 Files scanned · 458 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis found many shell-command examples, network URLs, filesystem paths, and high-risk keywords. Review found no prompt injection, malware intent, data exfiltration, or hidden execution; most high-risk hits are false positives from security terminology and documentation. The skill still warrants a medium warning because it instructs users to run Trivy, Docker, CI actions, filesystem scans, and credential-related commands.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 458 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 10 evidence locations

Filesystem access

May read or write local files.

Observed in 2 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 61 evidence locations

Capability review items (4)
Medium
SKILL.md:39-56SKILL.md:76-88SKILL.md:251-279SKILL.md:376-388SKILL.md:440-448
User-Executed Security Scanning Commands
The skill contains numerous Trivy, Docker, CI, and helper-script commands. These are legitimate for an SCA skill, but they can pull images, inspect local files, create reports, and fail CI jobs when users run them.
The commands are plainly documented and aligned with Trivy scanning workflows. Risk is operational rather than malicious because no hidden execution path or injected user input is present.
Medium
SKILL.md:83-87SKILL.md:170-179SKILL.md:191-194SKILL.md:407-408
Filesystem Scanning and Sensitive Report Generation
The skill directs users to scan local filesystems and generate JSON, SARIF, SBOM, and vulnerability reports. These outputs can expose package versions, internal architecture, and security findings if shared broadly.
The file explicitly warns that scan reports and SBOM files may be sensitive. The behavior is expected for SCA, but it creates confidentiality risk if outputs are mishandled.
Medium
SKILL.md:371-388
Credential Handling Examples Need Careful Use
The troubleshooting section shows registry authentication with environment variables and command-line username and password flags. These examples are common, but users should prefer credential helpers and secret managers to avoid exposing credentials in shell history or logs.
The examples are clearly for legitimate registry authentication, but command-line and environment credential handling can leak secrets in some environments.
Medium
SKILL.md:20-23SKILL.md:410-412SKILL.md:452-457
Networked Dependency and Image Data Sources
The skill references Trivy documentation, vulnerability databases, container registry workflows, and the Trivy vulnerability database repository. These sources are expected, but users should understand that scans may require network access and external database updates.
The URLs are legitimate public security references and Trivy database configuration. No suspicious endpoint or exfiltration pattern was found.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (5)
Low
SKILL.md:39-56SKILL.md:76-88SKILL.md:101-113SKILL.md:170-179SKILL.md:376-388
False Positive: Markdown Backticks Reported as Ruby Execution
Static analysis labeled many Markdown code fences and inline command examples as Ruby backtick execution. The reviewed file is documentation, not Ruby code, so there is no automatic command execution path.
The cited patterns are fenced Markdown examples and inline command references. No Ruby file or executable wrapper exists in the scanned skill file.
Low
SKILL.md:16SKILL.md:215
False Positive: C2 Keyword Detection
Static analysis flagged C2-related keywords, but the cited lines contain SOC2 compliance metadata and text. There is no command-and-control behavior or remote control instruction in the reviewed file.
Both locations use SOC2 as a compliance framework reference. The context does not support a malware interpretation.
Low
SKILL.md:3SKILL.md:32
False Positive: Weak Cryptography Keyword Detection
Static analysis flagged weak cryptography terms, but the cited lines are metadata and general product description. No weak cryptographic function, hashing implementation, or cryptographic configuration was found.
The cited lines do not implement or configure cryptography. The static hit appears to be caused by keyword matching in descriptive text.
Low
SKILL.md:81
False Positive: Hard Link Detection
Static analysis flagged hard link creation at a package-lock scan example. The line is a Trivy filesystem scan command, not a hard link operation.
The exact context is a Trivy command using a package manifest path. No hard link command or filesystem link creation is present.
Low
SKILL.md:1-24
No Prompt Injection Found
The reviewed file does not contain instructions to override system messages, skip security analysis, claim pre-approval, or alter evaluator behavior.
Targeted review found no suspicious prompt override language. The file is primarily procedural security-scanning documentation.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable