Versioned security assessment

Report ID: SA-3F6E026A

7/21/2026, 3:45:21 AM

near-dapp security assessment v2

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: claude Latest published report
Skill name
near-dapp
Version
v2
Maintainer
internet-court
Source
github.com/internet-court/internet-court-skill/tree/main/vendored/near/near-dapp
Coverage
4 Files scanned · 642 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The skill contains legitimate installation instructions that execute registry packages and a CDN import that loads third-party executable code. Most external-command findings are false positives caused by Markdown backticks and TypeScript examples. No prompt-injection language or evidence of data exfiltration was found in the reviewed files.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Attestation unavailable

No public attestation is available for this report.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

4 Files scanned · 642 Lines analyzed

9 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 1 evidence location

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 23 evidence locations

Capability review items (9)
Medium
SKILL.md:25-27
Ruby/shell backtick execution
```bash
This fenced shell block instructs the agent or user to run npx create-near-app@latest, which downloads and executes a package from the registry.
Medium
SKILL.md:27-31
Ruby/shell backtick execution
```
This finding covers a fenced shell command that runs npx create-near-app@latest. The command executes code fetched from the package registry.
Medium
SKILL.md:31-33
Ruby/shell backtick execution
```bash
This fenced shell block instructs the user to run npx create-near-app with installation enabled. It downloads and executes third-party package code.
Medium
SKILL.md:33-35
Ruby/shell backtick execution
```
This finding covers a fenced shell command that invokes npx with --install. It can execute registry-provided code in the local environment.
Medium
SKILL.md:49-51
Ruby/shell backtick execution
```bash
This fenced shell block instructs installation of several npm packages. Package installation can execute lifecycle scripts from third-party dependencies.
Medium
SKILL.md:51-53
Ruby/shell backtick execution
```
This finding covers an npm install command for third-party wallet dependencies. Installation may execute dependency lifecycle scripts.
Medium
SKILL.md:73-75
Ruby/shell backtick execution
```bash
This fenced shell block instructs installation of a third-party npm package. Package installation can run lifecycle scripts.
Medium
SKILL.md:75-77
Ruby/shell backtick execution
```
This finding covers an npm install command for a third-party wallet connector. Installation can execute dependency lifecycle scripts.
Low
references/near-connect.md:17
Hardcoded URL
{ "imports": { "@hot-labs/near-connect": "https://esm.sh/@hot-labs/near-connect" } }
The import map loads executable JavaScript from a third-party CDN. This is a supply-chain and availability dependency unless the package URL and version are pinned and trusted.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Unpinned npx scaffolding command
    Pin create-near-app to a reviewed version and ask for user confirmation before running it.
  2. FIX-002
    Medium
    Third-party npm installation commands
    State that npm packages and lifecycle scripts are third-party code, and request confirmation before installation.
  3. FIX-003
    Low
    Unpinned CDN module import
    Prefer a lockfile-managed dependency or pin the CDN package to an exact version with integrity controls where available.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
3f6e026a3363e0954ede7bef0cfe88d4475de137
Content hash
480a521624fe113c0411071235bf682e1b9f878d93c1b50d8b697c431e5e9334
Tree hash
f34124e7b84c5c54fd502cd052234501a938b84b04459c408ecc178f2f76d6f6
Skill path
skills/internet-court/near-dapp
Audit payload hash
fd6d0bc15736610599ad71aa5b7e79d6

Analysis metadata

Audit model: claude

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: unavailable