Versioned security assessment

Report ID: SA-3C88E590

6/30/2026, 5:46:53 AM

astropy security assessment v5

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
astropy
Version
v5
Maintainer
K-Dense-AI
Source
github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/astropy
Coverage
8 Files scanned · 2,758 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis produced many high-severity alerts, but review found they are mostly Markdown and astronomy terminology false positives. The skill is publishable with a medium warning because it documents package installation, local FITS/table file access, remote data downloads, and SAMP connections.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

8 Files scanned · 2,758 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 4 evidence locations

Filesystem access

May read or write local files.

Observed in 4 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 1 evidence location

Capability review items (3)
Medium
references/fits.md:13-20references/fits.md:27-29references/fits.md:45-49references/wcs_and_other_modules.md:334-358
Legitimate File and Remote Data Access Requires User Control
The skill documents FITS file reads, update and append modes, memory mapping, remote FITS access, downloads, and SAMP connections. These are expected Astropy workflows but should only run on user-approved files and URLs.
The cited lines directly show file I/O, remote access, downloads, and SAMP connection examples. They are legitimate scientific examples, so the risk is operational rather than malicious.
Medium
SKILL.md:189-194
Package Installation Commands Are Documentation Examples
The skill includes shell commands to install Astropy and optional dependencies. They are not hidden execution logic, but assistants should not run them without user consent.
The commands are visible installation guidance in a bash code fence. There is no evidence of dynamic command construction or automatic execution.
Low
references/wcs_and_other_modules.md:349-358
Astropy SAMP Misclassified as Windows SAM Database Access
The critical sensitive findings point to Astropy SAMP, Simple Application Messaging Protocol. This is astronomy interoperability documentation, not Windows credential database access.
The section heading expands SAMP and the code imports astropy.samp. There is no reference to Windows SAM files or credential extraction.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
references/coordinates.md:150-167references/units.md:93-100references/time.md:245-250references/fits.md:362-367
Scientific Terms Misclassified as C2, Weak Crypto, or Reconnaissance
Several blocker alerts are caused by astronomy variables, units, sorting terms, display calls, and file inspection examples. No evidence found of command-and-control, cryptography, or host reconnaissance intent.
The reviewed contexts are normal Astropy examples and best practices. The suspicious labels come from token matches such as variable names, decibels, and inspection methods.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)
Low
SKILL.md:29references/coordinates.md:9-24references/cosmology.md:9-24references/tables.md:9-14
Markdown Backticks Misclassified as Ruby Shell Execution
Most external command alerts occur on Markdown code fences or inline module names. They are documentation formatting and Python examples, not Ruby shell backtick execution.
The flagged lines are Markdown fences, inline references, or Python snippets. No Ruby code or shell interpolation pattern is present in context.
Low
references/wcs_and_other_modules.md:214-216
Dynamic Import Finding Is a Multiline Python Import False Positive
The scripts alert points to a parenthesized Python import from astropy.visualization. No dynamic import expression or runtime module loading was found at that location.
The cited code is a static from-import statement split across lines. It does not use Python importlib, JavaScript import(), or user-controlled module names.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable