📦

Audit History

app-store-screenshots - 6 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v6 LatestJul 9, 2026, 07:31 AM No confirmed findings0No capability change
v5 Jul 9, 2026, 07:31 AM No confirmed findings0No capability change
v4 Jul 5, 2026, 08:53 PM No confirmed findings1No capability change
v3 Jul 5, 2026, 08:53 PM No confirmed findings1 Network accessFilesystem access
v2 Jun 30, 2026, 10:45 AM 2 confirmed0External commandsNetwork accessFilesystem access
v1 Mar 11, 2026, 12:14 AM No confirmed findings0Baseline

Jul 5, 2026, 08:53 PM

Most static findings are false positives caused by Markdown code fences, inline code, and TSX template literals. The only confirmed issue is the setup block that tells an agent to run package-manager commands, which is legitimate but can download dependencies and change the workspace. The screen-capture, system-reconnaissance, and binary-file findings were not supported by the reviewed context.

1
Files scanned
335
Lines analyzed
2
Review items
3
False positives ignored
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
```bash
This setup block instructs the agent to run package-manager commands that scaffold a Next.js app and install html-to-image. The purpose is legitimate, but it downloads dependencies and mutates the workspace, so it requires user confirmation.
Static false positives ignored (3)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

High
Screen capture upload
1. **App screenshots** — "Where are your app screenshots? (PNG files of actual device captures)"
Force-confirmed blocker/high static finding; AI dismissal overridden.
High
Screen capture upload
- **On-screen for capture**: Temporarily move to `left: 0` before calling `toPng`.
Force-confirmed blocker/high static finding; AI dismissal overridden.
High
Screen capture upload
| Export is blank | Use double-call trick; move element on-screen before capture |
Force-confirmed blocker/high static finding; AI dismissal overridden.
Audited by: codex

Jul 5, 2026, 08:53 PM

Most static findings are false positives caused by Markdown code fences, inline code, and TSX template literals. The only confirmed issue is the setup block that tells an agent to run package-manager commands, which is legitimate but can download dependencies and change the workspace. The screen-capture, system-reconnaissance, and binary-file findings were not supported by the reviewed context.

1
Files scanned
335
Lines analyzed
2
Review items
3
False positives ignored
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
```bash
This setup block instructs the agent to run package-manager commands that scaffold a Next.js app and install html-to-image. The purpose is legitimate, but it downloads dependencies and mutates the workspace, so it requires user confirmation.
Static false positives ignored (3)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

High
Screen capture upload
1. **App screenshots** — "Where are your app screenshots? (PNG files of actual device captures)"
Force-confirmed blocker/high static finding; AI dismissal overridden.
High
Screen capture upload
- **On-screen for capture**: Temporarily move to `left: 0` before calling `toPng`.
Force-confirmed blocker/high static finding; AI dismissal overridden.
High
Screen capture upload
| Export is blank | Use double-call trick; move element on-screen before capture |
Force-confirmed blocker/high static finding; AI dismissal overridden.
Audited by: codex

Jun 30, 2026, 10:45 AM

Static analysis reported many high-risk patterns, but review shows most are Markdown false positives from inline code, screenshot terminology, and words that matched cryptography heuristics. The confirmed risk is legitimate operational behavior: package installation, project scaffolding, filesystem writes, and local image export. No evidence found of prompt injection, credential access, obfuscation, malicious network exfiltration, or unauthorized screenshot upload.

1
Files scanned
335
Lines analyzed
5
Review items
2
False positives ignored

Confirmed security concerns (2)

Medium
Package Installation and Project Scaffolding Commands
The skill instructs the agent to detect package managers, scaffold a Next.js project, and install html-to-image. This is expected for the stated workflow, but it can download third-party code and modify the current workspace, so users should review commands before execution.
The package-manager commands are explicit and affect the workspace. I found no suspicious endpoint, obfuscation, or command injection pattern, so the concern is operational risk rather than malicious intent.
Low
System Reconnaissance Finding Is Low-Risk Tool Detection
The skill tells the agent to check which package manager exists before choosing install commands. This reveals minimal local environment information and is directly related to setup.
The command checks for common package-manager binaries only. It does not enumerate secrets, users, network configuration, or broader system state.
Static false positives ignored (2)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Screen Capture Upload Finding Is a False Positive
The skill asks the user for local app screenshot and icon files, then describes browser-based export with html-to-image. No evidence found that it uploads screenshots or captured images to a remote service.
The cited lines discuss local source assets and local PNG export behavior. There is no instruction to transmit captures to an external domain or service.
Low
Weak Cryptography Findings Are False Positives
The weak-cryptography static hits occur in prose, Markdown, dimensions, and design guidance. No cryptographic algorithm, hash function call, encryption code, or credential handling appears in the skill text.
The flagged lines are natural-language instructions and UI sizing examples, not cryptographic code. The file contains no executable crypto implementation to evaluate.

Risk Factors

⚙️ External commands (1)
🌐 Network access (2)
📁 Filesystem access (2)

Detected Patterns

Third-Party Package Installation
Audited by: codex

Mar 11, 2026, 12:14 AM

Static analysis detected 75 potential issues across 335 lines, all of which are false positives upon review. The findings consist of bash command examples in markdown code blocks (instructional documentation), legitimate use of html-to-image library for screenshot generation (core functionality), and MD5 hashes used for content integrity verification. No executable code, no network exfiltration, no credential access, and no malicious intent detected. This is a legitimate skill for generating App Store marketing assets.

1
Files scanned
335
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude