Versioned security assessment

Report ID: SA-DB47AFCA

6/30/2026, 11:24:54 AM

agent-manager-skill security assessment v2

Skill Security Certification Report

Audit History

Audit model: codex Historical report

Skill name: agent-manager-skill
Version: v2
Maintainer: sickn33
Source: github.com/sickn33/antigravity-awesome-skills/tree/main/skills/agent-manager-skill
Coverage: 1 Files scanned · 41 Lines analyzed
Policy version: Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The Ruby shell backtick and weak cryptography alerts are false positives caused by Markdown backticks and the word cron in SKILL.md. The meaningful risk is that the skill instructs users to clone an external GitHub repository and run Python scripts from it, which is legitimate for an agent manager but requires trust in unaudited external code.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 41 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

Source

Binding unavailable
Artifact

Identity incomplete
Audit

Complete
Install contract

Open manifest to verify
Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 1 evidence location

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 3 evidence locations

Capability review items (2)

Medium

SKILL.md:21-23 SKILL.md:27-35

External Repository Execution Workflow

SKILL.md instructs users to clone https://github.com/fractalmind-ai/agent-manager-skill.git and then run python3 agent-manager scripts. This is useful for the stated purpose, but the executable Python code is not included in the audited skill package, so users must trust external code before running agent management commands.

The commands are directly shown in SKILL.md and the workflow clearly depends on running external Python scripts. There is no evidence of malicious intent, but the unaudited execution path is a real supply chain risk.

Low

SKILL.md:22

Hardcoded GitHub URL Requires Trust Review

The hardcoded URL is a public GitHub clone command, not evidence of data exfiltration. It still creates a dependency on an external repository that can change outside this audited package.

The network reference is visible and limited to a GitHub clone URL. The risk is supply chain exposure, not confirmed malicious network behavior.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit: Unavailable
Content hash: Unavailable
Tree hash: Unavailable
Skill path: Unavailable
Audit payload hash: Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)

Low

SKILL.md:19-23 SKILL.md:27-35 SKILL.md:39

Static Analyzer False Positive: Markdown Backticks

The reported Ruby shell backtick execution locations are Markdown inline code and fenced code blocks, not executable Ruby code. The code block contains shell commands, but the backticks themselves do not execute anything in this skill file.

The file content shows Markdown formatting around installation and command examples. No Ruby file or Ruby execution context is present.

Low

SKILL.md:3

Static Analyzer False Positive: Weak Cryptography

The high-severity weak cryptographic algorithm alert points to the description line, which only says the skill is cron-friendly. No cryptographic algorithm or cryptographic API use appears at that location.

Line 3 contains descriptive metadata and no cryptographic operation. The finding appears to be a keyword collision rather than a security issue.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable