Versioned security assessment

Report ID: SA-8C3E20BB

7/23/2026, 11:27:37 AM

commit-chat-push security assessment v6

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Latest published report
Skill name
commit-chat-push
Version
v6
Maintainer
bertona88
Source
github.com/bertona88/commit-chat-push/tree/main/
Coverage
3 Files scanned · 220 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

High

2 confirmed security findings require attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static alerts are false positives caused by Markdown backticks, code fences, safe Git inspection commands, and defensive secret-search patterns. Confirmed risks include reading private Codex sessions, permitting raw-session commits, and pushing transcript content to a remote repository. The referenced redaction exporter is missing, so its privacy controls cannot be audited.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Active attestation

A public attestation is available for this exact report.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

3 Files scanned · 220 Lines analyzed

11 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 1 evidence location

Filesystem access

May read or write local files.

Observed in 7 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 34 evidence locations

Capability review items (9)
High
README.md:3
Hidden file in home directory
Commit Chat Push is a Codex skill for shipping code with its implementation provenance. It guides Co
The description explicitly reads Codex sessions under the hidden home directory and prepares their contents for a repository commit.
High
SKILL.md:3
Hidden file in home directory
description: Commit and push repository changes while also exporting and committing the Codex chat/s
The trigger description explicitly directs access to Codex sessions under ~/.codex and includes their exported content in a commit.
High
SKILL.md:62
Hidden file in home directory
- Do not commit raw `~/.codex/sessions/*.jsonl` unless the user explicitly asks for raw logs after b
The workflow permits committing raw session JSONL after a warning. Those files can contain secrets, private prompts, and full tool output.
Medium
README.md:3
Hidden file access
Commit Chat Push is a Codex skill for shipping code with its implementation provenance. It guides Co
The advertised workflow accesses private Codex session data under ~/.codex and exports it into source control.
Medium
SKILL.md:42-49
Ruby/shell backtick execution
```bash
The block instructs execution of a Python helper that processes private Codex session data and writes an export. The helper implementation is absent from the audit.
Medium
SKILL.md:80-81
Ruby/shell backtick execution
- If the branch already has an upstream, run `git push`.
The instruction runs git push, which transmits the staged code and transcript to the configured remote repository.
Medium
SKILL.md:81-86
Ruby/shell backtick execution
- If it does not and a default remote exists, run `git push -u origin HEAD`.
The instruction runs git push with upstream creation, causing an external repository mutation and possible transcript disclosure.
Medium
SKILL.md:3
Hidden file access
description: Commit and push repository changes while also exporting and committing the Codex chat/s
The advertised workflow reads private session records from the hidden Codex home directory for publication.
Medium
SKILL.md:62
Hidden file access
- Do not commit raw `~/.codex/sessions/*.jsonl` unless the user explicitly asks for raw logs after b
The line allows raw ~/.codex session files to enter source control after user confirmation, retaining substantial disclosure risk.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 High
SKILL.md:10-12SKILL.md:53-62SKILL.md:79-82
Session Transcript Publication Can Expose Sensitive Data
The workflow exports private Codex session content, adds the transcript to a commit, and pushes it. Redaction is explicitly described as incomplete.
The skill directly combines session export, transcript staging, and git push while warning that sessions can contain secrets and private instructions.
RISK-002 Medium
SKILL.md:12SKILL.md:42-49README.md:37-54
Security-Critical Exporter Is Missing From the Audited Package
The documentation invokes an exporter as the redaction boundary, but its implementation is absent from the three audited files. Redaction and session selection cannot be verified.
Both documentation files reference scripts/export_codex_session.py, while the audited package contains only .gitignore, README.md, and SKILL.md.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    The security-critical transcript exporter is missing from the audited package.
    Include the exporter source and tests. Verify secret redaction, anchored session selection, path handling, and safe output defaults before publication.
  2. FIX-002
    High
    The workflow permits raw Codex session logs to be committed after a warning.
    Prohibit raw JSONL commits. Export only reviewed Markdown with system instructions, tool output, local paths, and secret patterns removed.
  3. FIX-003
    Medium
    Transcript content is pushed to a remote repository.
    Show the selected remote, staged transcript, and secret-scan result. Require explicit confirmation immediately before push.
  4. FIX-004
    Medium
    Unanchored selection can choose the newest session sharing the repository path.
    Require a fresh unique anchor for every export. Remove automatic newest-session fallback from the publish workflow.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
8c3e20bba512c392d9b02ee748b18e0b09d4982c
Content hash
e1df57e87f8c518a630e27394bc76becdd7f615b68049a6ed3251cda4de17683
Tree hash
a0efbf12f83b7a0b68aacb27e6c04256bcbc5346ba330a866f523211f7b7c1bc
Skill path
skills/bertona88/commit-chat-push
Audit payload hash
b65623e6bc7fa13af76b25fbeadad9fd

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: active