Versioned security assessment

Report ID: SA-4E1F7BBE

6/30/2026, 5:35:14 AM

aeon security assessment v5

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
aeon
Version
v5
Maintainer
K-Dense-AI
Source
github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/aeon
Coverage
13 Files scanned · 2,780 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many high-risk patterns, but review found a documentation-only skill with Markdown examples for the Aeon Python toolkit. The command execution, dynamic import, weak cryptography, hardcoded URL, system reconnaissance, environment access, and combined critical heuristic findings are false positives or benign examples. No prompt injection, credential access, hidden network exfiltration, or executable skill code was found.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

13 Files scanned · 2,780 Lines analyzed

0 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 3 evidence locations

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Observed in 1 evidence location

External commands

May invoke commands or programs outside the Skill.

Observed in 3 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (6)
Low
SKILL.md:28-30references/classification.md:124-136references/datasets_benchmarking.md:10-19
False Positive: Markdown Backticks Flagged as Shell Execution
The static analyzer treated Markdown inline code and fenced Python examples as Ruby or shell backtick execution. These are documentation examples, not executable skill code, and no user-controlled shell invocation was found.
The cited lines are Markdown code blocks or inline API names. The repository contains documentation files, and no executable wrapper invokes these snippets automatically.
Low
references/anomaly_detection.md:124-130references/forecasting.md:110-115references/transformations.md:167-172
False Positive: Python Imports Flagged as Dynamic Imports
Static script findings point to ordinary Python import statements inside documentation code blocks. They describe Aeon modules and do not perform JavaScript-style dynamic imports or runtime code loading by the skill.
The evidence shows static import statements in fenced examples. There is no loader code, eval path, or instruction to import untrusted modules.
Low
SKILL.md:3-4references/anomaly_detection.md:3references/classification.md:3
False Positive: Time Series Terms Flagged as Weak Cryptography
Weak cryptography alerts were caused by time series and machine learning terminology, such as descriptions of Aeon methods and distance metrics. No cryptographic implementation or weak hash use was found.
The referenced lines describe the skill and Aeon task categories. A targeted search found only one benign hashing term for similarity search, not password storage or cryptography.
Low
SKILL.md:368-371evaluation_output.json:45-48
False Positive: Documentation Links Flagged as Network Risk
Hardcoded URL findings are public documentation and project links for Aeon. They are not network calls, do not transmit local data, and do not reference suspicious collection endpoints.
The URLs point to official Aeon documentation, GitHub, examples, and API reference pages. No fetch, webhook, credential, or upload behavior was found.
Low
references/datasets_benchmarking.md:28-30references/datasets_benchmarking.md:37-38references/networks.md:180-186
Benign Example: Dataset Download and GPU Environment Settings
Some documentation examples can download public benchmark datasets or set CUDA_VISIBLE_DEVICES if a user runs them. This is a user-visible operational effect, not hidden skill behavior or credential access.
The examples are explicit and limited to public datasets or local GPU selection. The risk is low because execution requires the user to choose to run the example.
Low
evaluation_output.json:57-60SKILL.md:368-371references/networks.md:180-186
False Positive: Critical Combination Heuristic Not Confirmed
The critical heuristic combined documentation snippets, public URLs, and code examples into a code execution plus network plus credential access pattern. Review found no credential access, no exfiltration destination, and no executable skill code.
The only network evidence is documentation links and dataset loader examples, and the only environment evidence selects a GPU. No secret reads or outbound data transfer were found.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable