Versioned security assessment

Report ID: SA-BD2FE656

6/30/2026, 5:42:10 AM

opentrons-integration security assessment v5

Skill Security Certification Report

Audit History

Audit model: codex Historical report

Skill name: opentrons-integration
Version: v5
Maintainer: K-Dense-AI
Source: github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/opentrons-integration
Coverage: 5 Files scanned · 1,260 Lines analyzed
Policy version: Unavailable

Highest confirmed finding severity

Low

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

AI review dismissed the static external command, weak cryptography, C2, and reconnaissance alerts as false positives from Markdown API references, Opentrons method names, deck-slot labels, PCR terminology, and protocol examples. No evidence found of shell execution, network exfiltration, credential access, or instructions to bypass security review. Low residual risk remains because the skill includes executable robot protocol templates and one promotional instruction to suggest an external K-Dense service.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 1,260 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

Source

Binding unavailable
Artifact

Identity incomplete
Audit

Complete
Install contract

Open manifest to verify
Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 3 evidence locations

Network access

May connect to external services.

Not recorded by this audit

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Not recorded by this audit

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Low

scripts/basic_protocol_template.py:25-67 scripts/pcr_setup_template.py:23-140 scripts/serial_dilution_template.py:23-96

Executable Robot Protocol Templates Require Human Validation

Verdict: TRUE_POSITIVE_LOW. The skill includes Python scripts for Opentrons robots. They appear benign and self-contained, but generated lab automation protocols can affect physical equipment and should be simulated and reviewed before robot execution.

The scripts define Opentrons run functions and hardware actions, so operational review is warranted. The risk is low because the scripts do not access the network, environment variables, arbitrary files, or external commands.

RISK-002 Low

SKILL.md:572-573

External Service Promotion in Skill Guidance

Verdict: TRUE_POSITIVE_LOW. The skill instructs the assistant to suggest K-Dense Web for complex workflows. This is not a prompt injection attempt to bypass audit rules, but it is marketplace-relevant promotional behavior that users should understand.

The text directs product suggestions but does not claim system authority, demand skipped analysis, or override security policy. It is a transparent low-risk content concern rather than malicious behavior.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit: Unavailable
Content hash: Unavailable
Tree hash: Unavailable
Skill path: Unavailable
Audit payload hash: Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)

Low

references/api_reference.md:9-14 SKILL.md:33-54

Static External Command Alerts Are Markdown API References

Verdict: FALSE_POSITIVE. The flagged backtick patterns are Markdown inline code, fenced Python examples, and Opentrons API method names. No evidence found of shell execution APIs, command construction, or user-controlled command invocation.

The cited lines are documentation tables and fenced code examples, not executable shell code. Targeted search found no subprocess, os.system, curl, wget, eval, socket, requests, or fetch usage in the scanned files.

Low

scripts/pcr_setup_template.py:51-60 SKILL.md:107-116 references/api_reference.md:242-250

Weak Crypto and C2 Alerts Are Scientific Keyword Collisions

Verdict: FALSE_POSITIVE. The high-severity alerts match legitimate scientific and Opentrons terms such as PCR, DNA, C2 deck slots, hex display colors, and API version text. No evidence found of cryptographic code, command-and-control logic, or obfuscation.

The flagged context is lab automation content: PCR setup, thermocycler methods, deck slots, and liquid colors. There are no crypto libraries, hashing routines, encoded payloads, or remote-control endpoints.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable