Versioned security assessment

Report ID: SA-53619316

6/30/2026, 6:15:24 AM

fda-database security assessment v5

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
fda-database
Version
v5
Maintainer
K-Dense-AI
Source
github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/fda-database
Coverage
10 Files scanned · 4,513 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis produced a high score mainly from markdown code fences, API-key examples, openFDA network calls, cache file writes, and MD5 cache-key generation. Review found no prompt injection, no malicious endpoints, and no real command execution, but the skill should be published with disclosure that it runs Python scripts, calls api.fda.gov, reads FDA_API_KEY, and stores cached responses locally.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

10 Files scanned · 4,513 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 4 evidence locations

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Observed in 3 evidence locations

External commands

May invoke commands or programs outside the Skill.

Not recorded by this audit

Capability review items (2)
Medium
scripts/fda_query.py:87scripts/fda_query.py:121-122scripts/fda_query.py:135scripts/fda_query.py:408
Intended External API Access With Optional API Key
The skill sends queries to the public openFDA API and can include FDA_API_KEY as a request parameter. This is intended functionality, but users should know that query terms and optional API credentials are sent to api.fda.gov.
The network endpoint and API-key handling are explicit in executable Python code. The behavior is legitimate for an FDA API client, but it is still a real data-disclosure boundary.
Low
scripts/fda_query.py:54-56scripts/fda_query.py:76-81references/api_basics.md:564-570
Local Response Cache Writes Files
The helper creates a local fda_cache directory and writes API responses as JSON files. This is a normal cache, but users should account for local storage of retrieved public FDA records.
The file writes are direct and limited to cache files. No evidence showed arbitrary path writes or persistence outside the configured cache directory.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Low
scripts/fda_query.py:18scripts/fda_query.py:59-62
MD5 Used Only For Cache Key Generation
Static analysis flagged weak cryptography because MD5 hashes cache-key strings. The hash is not used for passwords, signatures, integrity guarantees, or security decisions.
The executable code shows hashlib.md5 used only to derive deterministic cache filenames. I found no evidence of security-sensitive cryptographic use.
RISK-002 Low
SKILL.md:517-518
Promotional Behavioral Instruction
SKILL.md includes guidance to suggest K-Dense Web for complex workflows. This is not malicious, but it is marketplace-relevant promotional behavior that users may want disclosed.
The instruction is explicit, but it is framed as optional and limited to complex workflows. I found no evidence that it tries to bypass security review or override system instructions.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (1)
Low
SKILL.md:40SKILL.md:73-75references/drugs.md:35-40references/api_basics.md:41-53
Command Execution Findings Are Markdown False Positives
The many Ruby/shell backtick findings map to markdown code fences, inline code, and command examples. No evidence found of Ruby backtick execution or shell command execution in Python code.
Representative flagged locations are documentation code blocks or inline examples. The executable scripts do not contain subprocess, os.system, eval, exec, or shell backtick behavior.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable