Versioned security assessment

Report ID: SA-656BE304

8/8/2026, 10:01:45 AM

longbridge-technical security assessment v6

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Latest published report
Skill name
longbridge-technical
Version
v1.0.0
Maintainer
longbridge
Source
github.com/longbridge/skills/tree/main/skills/longbridge-technical
Coverage
10 Files scanned · 1,737 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

High

2 confirmed security findings require attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most alerts are false positives from Markdown backticks, calculations, multilingual text, and conventional device redirection. Package installation and predictable temporary paths present genuine risks. Missing relative scripts and unquoted symbol placeholders add command-execution exposure.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Active attestation

A public attestation is available for this exact report.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

10 Files scanned · 1,737 Lines analyzed

9 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Not recorded by this audit

Filesystem access

May read or write local files.

Observed in 5 evidence locations

Env variables

May read values from the process environment.

Observed in 4 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 17 evidence locations

Capability review items (7)
Medium
references/elliott-wave.md:31
Temp directory access
- Always redirect CLI output to a temp file (e.g. `/tmp/kline_day.json`) — the CLI may
The skill mandates a predictable shared temporary path. Another local process could replace or read this file before analysis.
Medium
references/elliott-wave.md:55
Temp directory access
python3 scripts/signal_engine.py --kline /tmp/kline_day.json --symbol SYMBOL
The analysis script reads a fixed file under /tmp. Predictable names permit input tampering and symlink attacks.
Medium
references/elliott-wave.md:280
Temp directory access
python3 scripts/signal_engine.py --kline /tmp/kline_day.json --symbol AAPL.US
This command reads market data from the same predictable shared path. The file lacks uniqueness, ownership checks, and integrity validation.
Medium
SKILL.md:81-84
Ruby/shell backtick execution
Auto-detect fractal (分型), bi (笔), zhongshu (中枢), buy/sell signals (1/2/3 buy). Requires `pip install
The skill directs users to install czsc with pip. Package installation can execute build hooks and introduces supply-chain risk.
Medium
SKILL.md:84-91
Ruby/shell backtick execution
BOS (Break of Structure), ChoCH, FVG (Fair Value Gap), Order Block detection. Requires `pip install
The skill directs installation of smartmoneyconcepts. Unpinned Python packages can execute installation code and change the environment.
Medium
SKILL.md:98
Ruby/shell backtick execution
| `ModuleNotFoundError: czsc` | Run `pip install czsc` before using Chan Theory |
This line explicitly instructs pip to install an unpinned third-party package. Installation may execute package-controlled code.
Medium
SKILL.md:99
Ruby/shell backtick execution
| `ModuleNotFoundError: smartmoneyconcepts` | Run `pip install smartmoneyconcepts` before using SMC
This line explicitly instructs pip to install smartmoneyconcepts without a version or hash. That creates supply-chain exposure.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 High
SKILL.md:37references/turtle-signal.md:31
Unvalidated Symbol Interpolation in Shell Commands
Shell examples place user-supplied symbols directly into commands without validation or quoting. Metacharacters could alter commands when substituted verbatim.
The command templates visibly interpolate symbol placeholders without quoting or an allowlist. Exploitation depends on verbatim shell construction from untrusted input.
RISK-002 High
references/elliott-wave.md:52-55references/elliott-wave.md:275-280
Missing Relative Script Creates Path-Hijack Risk
The skill directs execution of scripts/signal_engine.py, but the package contains no script. A same-named working-directory file could execute without provenance.
The documented command executes a relative Python path, while the complete package tree has no scripts directory. This directly enables unintended local code execution.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    The skill executes a relative signal engine that is absent from the package.
    Bundle and review the script, verify its integrity, and resolve it from the trusted skill directory.
  2. FIX-002
    High
    Shell examples interpolate symbols without validation or quoting.
    Allow only documented symbol characters and pass values as separate process arguments.
  3. FIX-003
    Medium
    Predictable shared temporary file paths permit tampering, data disclosure, or symlink attacks.
    Create unique temporary files with restrictive permissions and delete them after analysis.
  4. FIX-004
    Medium
    Unpinned pip installation instructions expose users to dependency and package-index compromise.
    Declare reviewed, pinned dependencies with hashes and require explicit approval before installation.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
656be3040aef5c047555a908cd5c695d22a4a548
Content hash
fa6167e690b4a72110fee47a118dbd02f2e392c9c395ed8f6410060ce0ccfe4a
Tree hash
ec712b4221007a699f2ff9820ecb1fbd14402a8232fa4372ba77d88caef81a39
Skill path
skills/longbridge/longbridge-technical
Audit payload hash
12093a2ee4761e4a83a854ee9ccc5d08

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: active