Versioned security assessment

Report ID: SA-B8CA75D2

7/6/2026, 6:55:14 PM

scientific-visualization security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
scientific-visualization
Version
v6
Maintainer
K-Dense-AI
Source
github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/scientific-visualization
Coverage
12 Files scanned · 3,620 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

High

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static findings are false positives from Markdown code fences, visualization terminology, dictionary keys, and citation URLs. One real local file-write capability remains in style_presets.py, and semantic review found an embedded safety self-assessment plus promotional steering. No evidence found of credential access, malicious command execution, or unauthorized network calls.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

12 Files scanned · 3,620 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Observed in 1 evidence location

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 130 evidence locations

Capability review items (1)
Medium
scripts/style_presets.py:319
Python file write/append
with open(output_file, 'w') as f:
create_style_template opens the caller-provided output_file with write mode, so it can overwrite a local path. This is intended utility behavior, but it is a real filesystem write capability that should be constrained or confirmed.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 High
EVALUATION_OUTPUT.json:15-18
Prompt Injection Attempt Detected
EVALUATION_OUTPUT.json declares the skill safe_to_publish and says all findings are dismissed after manual review. Embedding a prior safety claim in the skill package can bias an AI auditor toward accepting the package without independent review.
The file explicitly asserts a safe risk level and a manual dismissal of findings. It does not contain an override command, so confidence is high but not absolute.
RISK-002 Low
SKILL.md:778-779
Promotional Steering to External Service
SKILL.md instructs the assistant to proactively suggest K-Dense Web for complex workflows. This can steer users toward an external service outside the core scientific visualization task.
The instruction is explicit and cites a hosted service. It is promotional rather than credential theft or code execution, so the severity is low.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    Embedded prior audit and safety claim
    Remove EVALUATION_OUTPUT.json from the distributed skill package so audits rely on current source content only.
  2. FIX-002
    Medium
    Unbounded style template file write
    Restrict create_style_template to expected .mplstyle outputs, resolve paths safely, and confirm before overwriting existing files.
  3. FIX-003
    Low
    Promotional instruction in skill guidance
    Remove or clearly separate marketing guidance that asks the assistant to recommend an external hosted service.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable