Versioned security assessment

Report ID: SA-C3651C3A

7/3/2026, 1:13:09 PM

video-ad-specs security assessment v1

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
video-ad-specs
Version
v1
Maintainer
halt-catch-fire
Source
github.com/halt-catch-fire/skills/tree/main/guides/video/video-ad-specs/
Coverage
1 Files scanned · 261 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The skill is a Markdown guide for video ad planning and production with platform-specific specifications. Several static shell findings are real because the guide instructs users to run belt and npx commands that contact external services or install other skills; no prompt injection text was found.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 261 Lines analyzed

10 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 14 evidence locations

Capability review items (10)
Medium
SKILL.md:7
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line instructs users to run npx skills add for another CLI skill, which is external installation activity. This is a supply-chain risk even though it is presented as setup documentation.
Medium
SKILL.md:17-26
Ruby/shell backtick execution
```bash
The code block tells users to run belt login and belt app run commands. These commands call an external CLI service and may transmit prompts or generated media.
Medium
SKILL.md:120-149
Ruby/shell backtick execution
```bash
The block contains multiple belt app run commands for video generation, text to speech, media merging, and captioning. These invoke external tools and may process user-provided creative assets.
Medium
SKILL.md:153-157
Ruby/shell backtick execution
```bash
The block runs belt app run google/veo-3-1-fast for square video generation. This is intentional external command execution through the belt CLI.
Medium
SKILL.md:161-171
Ruby/shell backtick execution
```bash
The block runs belt app run commands for video and text-to-speech generation. This is external CLI execution that can send prompt content to third-party services.
Medium
SKILL.md:188-195
Ruby/shell backtick execution
```bash
The block runs belt app run infsh/caption-videos with a video file and caption file. It may process local creative files through an external CLI service.
Medium
SKILL.md:252-257
Ruby/shell backtick execution
```bash
The block recommends npx skills add commands for related skills. Installing additional skills through npx is external command execution with supply-chain exposure.
Medium
SKILL.md:257-259
Ruby/shell backtick execution
```
The range includes the inline belt app store command after the related-skills block. It is a CLI command that can contact an external app store, though the risk is limited.
Low
SKILL.md:11
Hardcoded URL
Create platform-specific video ads via [inference.sh](https://inference.sh) CLI.
The line links users to inference.sh and frames the skill around that external CLI service. This is a legitimate dependency, but it is still external network use.
Low
SKILL.md:15
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The line links to raw GitHub install instructions for the required CLI. External install documentation can change and should be treated as a network and supply-chain dependency.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    External belt commands send prompts or media to third-party generation services.
    State that users should review prompts, files, and account permissions before running belt app run commands.
  2. FIX-002
    Medium
    The guide recommends installing additional skills with npx skills add.
    Ask for explicit user confirmation before installation and point users to trusted package sources.
  3. FIX-003
    Low
    The required CLI install instructions use a raw GitHub URL.
    Prefer stable, versioned, and signed installation documentation when available.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable