Versioned security assessment

Report ID: SA-FE310546

6/30/2026, 6:35:37 AM

matplotlib security assessment v5

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
matplotlib
Version
v5
Maintainer
K-Dense-AI
Source
github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/matplotlib
Coverage
7 Files scanned · 3,217 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many command, crypto, credential, and network patterns, but review shows most are false positives from Markdown code fences, inline Matplotlib API examples, color syntax, and event key examples. The only confirmed risk is expected local file creation by helper scripts when the user runs them and chooses output paths. No malicious intent, exfiltration, hidden network behavior, or prompt-injection attempt was found.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

7 Files scanned · 3,217 Lines analyzed

1 item shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Not recorded by this audit

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Not recorded by this audit

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
scripts/style_configurator.py:196-198scripts/plot_template.py:392-394scripts/style_configurator.py:400-403
Local File Output in Helper Scripts
The helper scripts can write plot images and style files to user-supplied output paths. This is expected for a plotting skill, but users should avoid running it with privileged paths or untrusted filenames.
The file writes are explicit and tied to CLI output behavior. No evidence shows automatic execution, sensitive file targeting, or network transfer.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (4)
Low
SKILL.md:40-47references/api_reference.md:11-16references/plot_types.md:10-16references/styling_guide.md:11-18references/common_issues.md:9-12
Static External Command Findings Dismissed
The external-command findings are false positives from Markdown code blocks and inline Matplotlib examples. They document plotting calls and shell usage examples, not Ruby backtick execution or command execution logic.
The cited locations are documentation examples bounded by Markdown fences or inline code formatting. No executable shell backtick pattern appears in the reviewed Python scripts.
Low
SKILL.md:4SKILL.md:355-358references/api_reference.md:173-175
Hardcoded Documentation URLs Dismissed
The hardcoded URLs point to Matplotlib documentation, gallery pages, tutorials, and license information. They are static references and are not used by code to fetch data or transmit user content.
The URLs are visible documentation links with no surrounding request code. Review found no network library imports or outbound calls in the helper scripts.
Low
references/api_reference.md:378-382scripts/style_configurator.py:261-274SKILL.md:173-177scripts/plot_template.py:350-356
Credential and Weak-Crypto Findings Dismissed
The sensitive and weak-crypto alerts are caused by benign plotting vocabulary such as key press events, color shortcuts, style keys, and API reference text. No certificate, private key, hash operation, or cryptographic algorithm use was found.
The reviewed lines use ordinary plotting and CLI terminology. No secret material, key file access, or cryptographic operation exists in the cited context.
Low
references/styling_guide.md:116
Prompt Injection Review Completed
No text was found that tells the evaluator to ignore instructions, skip review, claim pre-approval, or override the audit. One reference line uses the word override only to explain Matplotlib style precedence.
Targeted review found only benign style-order language. No audit-directed prompt injection or special-authority claim was observed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable