Versioned security assessment

Report ID: SA-3E4B6C31

7/9/2026, 7:23:21 AM

guizang-social-card-skill security assessment v4

Skill Security Certification Report

Audit History
Audit model: codex Latest published report
Skill name
guizang-social-card-skill
Version
v4
Maintainer
op7418
Source
github.com/op7418/guizang-social-card-skill/tree/main/
Coverage
35 Files scanned · 9,783 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

2 confirmed security findings require attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static findings are false positives from Markdown code spans, CSS class names, design terminology, relative asset URLs, and legitimate local validation scripts. Confirmed issues are limited to remote template dependencies, public web image fetching, Mapbox network usage, and a curl-based asset workflow. Additional semantic review found token-handling and third-party package execution risks in the map and Live Photo workflows.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

35 Files scanned · 9,783 Lines analyzed

16 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 24 evidence locations

Filesystem access

May read or write local files.

Observed in 36 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 51 evidence locations

Capability review items (14)
Medium
assets/template-swiss-card.html:10
Hardcoded URL
<script src="https://unpkg.com/lucide@latest/dist/umd/lucide.min.js"></script>
The Swiss seed template loads lucide from unpkg at render time, which executes third-party JavaScript in the browser context. This is an intentional dependency but remains a supply-chain and network exposure risk.
Medium
SKILL.md:272
Ruby/shell backtick execution
- Use WebFetch or `curl` to download the image into the task folder's `assets/` directory.
This line explicitly permits using curl to download web images into task assets. The command is task-scoped, but it is real external command and network behavior.
Low
assets/template-editorial-card.html:7
Hardcoded URL
<link rel="preconnect" href="https://fonts.googleapis.com">
The editorial seed template loads Google Fonts from external hosts when rendered. This is expected for typography, but it creates network egress and a remote dependency.
Low
assets/template-editorial-card.html:8
Hardcoded URL
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
The editorial seed template loads Google Fonts from external hosts when rendered. This is expected for typography, but it creates network egress and a remote dependency.
Low
assets/template-editorial-card.html:9
Hardcoded URL
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Noto+Serif+SC:wght@400;500;700
The editorial seed template loads Google Fonts from external hosts when rendered. This is expected for typography, but it creates network egress and a remote dependency.
Low
assets/template-swiss-card.html:7
Hardcoded URL
<link rel="preconnect" href="https://fonts.googleapis.com">
The seed template loads Google Fonts from external hosts when rendered. This is expected for typography, but it creates network egress and a remote dependency.
Low
assets/template-swiss-card.html:8
Hardcoded URL
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
The seed template loads Google Fonts from external hosts when rendered. This is expected for typography, but it creates network egress and a remote dependency.
Low
assets/template-swiss-card.html:9
Hardcoded URL
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@200;300;400;500;600
The seed template loads Google Fonts from external hosts when rendered. This is expected for typography, but it creates network egress and a remote dependency.
Low
references/map-component.md:22
Hardcoded URL
https://api.mapbox.com/styles/v1/mapbox/light-v11/static/
The map reference documents Mapbox Static image URLs for real route rendering. This is intentional map functionality, but it relies on a third-party network service.
Low
references/map-component.md:31
Hardcoded URL
<img src="https://api.mapbox.com/styles/v1/mapbox/light-v11/static/.../1200x675@2x?access_token=..."
The map reference documents Mapbox Static image URLs for real route rendering. This is intentional map functionality, but it relies on a third-party network service.
Low
SKILL.md:262
Hardcoded URL
1. **Unsplash** — `https://unsplash.com/s/photos/<keyword>`. Strong for outdoor / lifestyle / atmosp
SKILL.md recommends public image-source sites for web-sourced assets. This is user-facing workflow guidance, but it can cause external network access during card production.
Low
SKILL.md:263
Hardcoded URL
2. **Pexels** — `https://www.pexels.com/search/<keyword>/` or `https://www.pexels.com/zh-cn/search/<
SKILL.md recommends public image-source sites for web-sourced assets. This is user-facing workflow guidance, but it can cause external network access during card production.
Low
SKILL.md:264
Hardcoded URL
3. **Flickr CC-licensed pool** — `https://www.flickr.com/search/?text=<keyword>&license=2%2C3%2C4%2C
SKILL.md recommends public image-source sites for web-sourced assets. This is user-facing workflow guidance, but it can cause external network access during card production.
Low
SKILL.md:265
Hardcoded URL
4. **Wallhaven** — `https://wallhaven.cc/search?q=<keyword>`. Strong for game / anime / wallpaper th
SKILL.md recommends public image-source sites for web-sourced assets. This is user-facing workflow guidance, but it can cause external network access during card production.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Medium
references/map-component.md:19-31
Map API Token Exposure Risk
The map component guidance builds Mapbox Static image URLs with an access_token query parameter. Generated HTML or provenance files can expose scoped map tokens if shared or committed.
The documentation explicitly requires MAPBOX_ACCESS_TOKEN and shows the token embedded in an image URL. The risk depends on generated artifact handling, but the exposure path is clear.
RISK-002 Medium
references/live-photo-production.md:209-228scripts/package-live-photo.py:6-8
Third-Party Package Execution For Live Photo Packaging
The Live Photo workflow uses uvx and makelive to execute third-party package code during packaging. Some examples omit the pinned version even though the text recommends pinning.
The commands are documented and the wrapper imports makelive directly. This is legitimate functionality, but it introduces package supply-chain risk and should be pinned and confirmed.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Remote fonts and CDN script dependencies in seed templates
    Vendor fonts and icon scripts locally, or pin remote assets with integrity checks and document that rendering contacts external hosts.
  2. FIX-002
    Medium
    Mapbox token can be embedded in generated map image URLs
    Use scoped public tokens, avoid writing tokenized URLs to committed files, and strip or redact tokens from provenance files and final reports.
  3. FIX-003
    Medium
    Live Photo packaging executes third-party package code
    Pin makelive in every uvx example, require user confirmation before first install, and prefer a locked local environment for repeated use.
  4. FIX-004
    Low
    Web-sourced image workflow can fetch untrusted external files
    Ask for explicit approval before web downloads, validate MIME type and size, keep files task-scoped, and retain source provenance.
  5. FIX-005
    Low
    Binary WebP texture assets are not statically inspectable
    Track checksums and source notes for bundled binary assets, and re-review them when they change.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Content hash
8311a62184ec81d25d3711cfcf5ec771558d300a3caaf43b464527db1178dd98
Tree hash
20d644cf53be4a270fe798e0ff60e71373c387e586d040c39b7be30652b1db20
Skill path
skills/op7418/guizang-social-card-skill
Audit payload hash
43f96b4d62f6310dfcedfd91a724963a

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable