Versioned security assessment

Report ID: SA-14664E8F

7/3/2026, 1:12:57 PM

app-store-screenshots security assessment v1

Skill Security Certification Report

Audit History

Audit model: codex Historical report

Skill name: app-store-screenshots
Version: v1
Maintainer: halt-catch-fire
Source: github.com/halt-catch-fire/skills/tree/main/guides/design/app-store-screenshots/
Coverage: 1 Files scanned · 271 Lines analyzed
Policy version: Unavailable

Highest confirmed finding severity

Medium

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The skill is a design guide, but it directs users and agents to install and run external CLI commands. Most static hits are markdown false positives; confirmed risks relate to npx installs, belt remote inference calls, and possible upload of app assets.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 271 Lines analyzed

12 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

Source

Binding unavailable
Artifact

Identity incomplete
Audit

Complete
Install contract

Open manifest to verify
Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 20 evidence locations

Capability review items (11)

Medium

SKILL.md:7

Ruby/shell backtick execution

> **Install the belt CLI skill:** `npx skills add belt-sh/cli`

Line 7 instructs users to run an npx skill installation command. That is a real external command and a supply-chain risk if executed without verification.

Medium

SKILL.md:17-26

Ruby/shell backtick execution

```bash

Lines 17-26 contain bash examples for belt login and belt app run. These commands invoke an external CLI and send prompt data to a remote inference service.

Medium

SKILL.md:137-144

Ruby/shell backtick execution

```bash

Lines 137-144 contain a belt app run command for a remote image generation model. This is intended external command execution with network submission of prompt data.

Medium

SKILL.md:148-154

Ruby/shell backtick execution

```bash

Lines 148-154 contain a belt app run command for an external image model. The command submits prompt data to a remote service.

Medium

SKILL.md:158-165

Ruby/shell backtick execution

```bash

Lines 158-165 contain a belt app run command for a remote generation service. This is real external command execution with network data transfer.

Medium

SKILL.md:169-175

Ruby/shell backtick execution

```bash

Lines 169-175 contain a belt app run command that references local screenshot image files. This may send user-provided app assets to an external service.

Medium

SKILL.md:206-211

Ruby/shell backtick execution

```bash

Lines 206-211 contain a belt app run command for a remote video generation model. The command executes an external CLI and submits prompt content.

Medium

SKILL.md:262-267

Ruby/shell backtick execution

```bash

Lines 262-267 instruct users to run multiple npx skills add commands. These are real external installation commands with supply-chain risk.

Medium

SKILL.md:267-269

Ruby/shell backtick execution

```

Line 269 tells users to run belt app store. This is a real external CLI command, although it appears to browse available applications rather than process user data.

Low

SKILL.md:11

Hardcoded URL

Create app store screenshots and preview videos via [inference.sh](https://inference.sh) CLI.

Line 11 names inference.sh as the service used to create screenshots and videos. This is a legitimate hardcoded external service dependency that should be disclosed.

Low

SKILL.md:15

Hardcoded URL

> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer

Line 15 links to raw GitHub installation instructions for the required CLI. This is an external network dependency and unpinned remote documentation risk.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Medium

SKILL.md:139-143 SKILL.md:171-174 SKILL.md:208-210

Remote Processing of App Assets

The skill guides users to send prompts and screenshot image filenames through the belt CLI to remote generation or stitching services. Proprietary app screens or unreleased UI assets could be exposed if users run these commands without reviewing data handling.

The examples directly invoke remote model apps and one example references local screenshot filenames. The risk depends on what the user supplies, so confidence is high for privacy exposure but not malicious intent.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

FIX-001
Medium
External CLI installation commands

Use pinned, reviewed installation instructions and require explicit user confirmation before running npx or skill installation commands.
FIX-002
Medium
Remote inference commands process user content

Add a clear data handling warning before belt app run examples, especially when prompts or local screenshots may contain private app assets.
FIX-003
Low
Unpinned raw GitHub install documentation

Pin external installation links to a reviewed commit or include trusted installation steps directly in the skill documentation.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit: Unavailable
Content hash: Unavailable
Tree hash: Unavailable
Skill path: Unavailable
Audit payload hash: Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable