Versioned security assessment

Report ID: SA-D9F40CB7

6/28/2026, 12:49:29 PM

copilot-flow security assessment v7

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
copilot-flow
Version
v7
Maintainer
Aykahshi
Source
github.com/Aykahshi/copilot-mcp-tool/tree/main/plugins/copilot-flow/skills/copilot-flow-integration
Coverage
1 Files scanned · 156 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many high-risk patterns, but the reviewed file contains Markdown documentation rather than executable code. The backtick, weak cryptography, and reconnaissance detections are false positives; the real concerns are repository file modification, external Copilot MCP collaboration, and possible interaction history retention.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 156 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 4 evidence locations

Filesystem access

May read or write local files.

Observed in 5 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Not recorded by this audit

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Medium
SKILL.md:39-41SKILL.md:49-51SKILL.md:98-102SKILL.md:151
External AI Collaboration May Share Project Context
The workflow delegates design and review stages to Copilot through MCP. This is core functionality, but it may expose requirements, code details, or review context to an external assistant depending on the MCP configuration.
The file explicitly assigns design and review responsibilities to Copilot via MCP. No malicious endpoint is present, so the concern is privacy and data handling rather than confirmed exfiltration.
RISK-002 Medium
SKILL.md:85-88SKILL.md:94-96SKILL.md:119-124SKILL.md:143-147SKILL.md:153
Workflow Writes State, Reports, Source Files, and Delivery Artifacts
The skill instructs agents to maintain workflow state, produce reports, write source files, and create delivery output. This is legitimate for a development workflow, but users should review changes before applying them.
Multiple documented workflow outputs require file system writes. The behavior matches the skill purpose and does not show destructive intent.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
SKILL.md:31SKILL.md:36SKILL.md:41SKILL.md:46SKILL.md:51SKILL.md:63-65SKILL.md:77-81SKILL.md:86SKILL.md:107-109SKILL.md:120-124
Static Command Execution Matches Are Markdown False Positives
The reported Ruby or shell backtick findings map to Markdown inline code, code fences, output filenames, and slash command examples. No executable script, shell invocation, or command interpolation was found in SKILL.md.
Line review shows documentation examples and filenames inside Markdown formatting. There is no Ruby code, shell code, or executable wrapper in the scanned file.
Low
SKILL.md:3SKILL.md:24-25SKILL.md:33-41SKILL.md:45SKILL.md:99SKILL.md:114SKILL.md:121SKILL.md:151-156
Static Weak Cryptography Matches Are Text False Positives
The high-risk weak cryptography detections appear to match ordinary documentation text such as design, workflow descriptions, or .md filenames. No cryptographic API, hashing function, or encryption operation was found.
The reviewed lines contain prose and Markdown output names, not code using MD5, DES, RC4, or similar weak algorithms. The scanner likely matched substrings in natural language.
Low
SKILL.md:86
Static Network Reconnaissance Match Is a Documentation False Positive
The low-risk network reconnaissance finding points to workflow state documentation. No scanning command, host discovery logic, or network probing instruction was found at that location.
Line 86 documents a local workflow-state file path. It does not include a reconnaissance tool name or a network operation.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable