Versioned security assessment

Report ID: SA-BF3D8323

6/30/2026, 12:38:03 PM

browser-extension-builder security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
browser-extension-builder
Version
v2
Maintainer
sickn33
Source
github.com/sickn33/antigravity-awesome-skills/tree/main/skills/browser-extension-builder
Coverage
1 Files scanned · 262 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The static command-execution, certificate, weak-crypto, reconnaissance, and combined critical heuristic findings are false positives caused by Markdown fences, placeholder text, and storage key examples. Two real documentation risks remain: the skill teaches direct innerHTML injection in a content script and starts with a broad <all_urls> content-script match, both of which need marketplace warning context.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 262 Lines analyzed

1 item shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Not recorded by this audit

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Not recorded by this audit

Capability review items (1)
Medium
SKILL.md:76
Broad Host Access in Manifest Template
SEMANTIC_FINDING: The Manifest V3 example uses a content script match pattern for all URLs. Broad host access increases privacy risk and extension review friction, even though the skill later shows a narrower site-specific match.
The all-URLs match pattern is directly present in the manifest example. The risk is guidance-level because this is documentation, not executable package code.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (7)
Medium
SKILL.md:132
Unsafe DOM Injection Pattern in Example
TRUE_POSITIVE: SKILL.md shows a content script assigning markup through innerHTML. The example uses static text, but browser extensions often combine page data and UI templates, so this pattern can lead users toward XSS-prone extension code.
The innerHTML assignment is real and appears inside content-script guidance. The immediate template is static, so exploitability is not confirmed, but the guidance pattern is risky.
Low
SKILL.md:35SKILL.md:39SKILL.md:57SKILL.md:60SKILL.md:84SKILL.md:87SKILL.md:91SKILL.md:92SKILL.md:100SKILL.md:104SKILL.md:124SKILL.md:127SKILL.md:139SKILL.md:148SKILL.md:151SKILL.md:159SKILL.md:160SKILL.md:168SKILL.md:172SKILL.md:192SKILL.md:201SKILL.md:218SKILL.md:219SKILL.md:261
Markdown Fences Misclassified as Shell Execution
FALSE_POSITIVE: The reported Ruby or shell backtick locations are Markdown code fences and documentation formatting. No evidence found of executable shell invocation, command interpolation, or runtime process execution.
The referenced lines are visible Markdown fences, diagrams, or inline skill names. There is no executable Ruby, shell, or command API in the skill file.
Low
SKILL.md:154
Placeholder URL Misclassified as Network Behavior
FALSE_POSITIVE: The hardcoded URL is a content-script match pattern for a placeholder website, not a network request. No evidence found of fetch, beacon, webhook, or data exfiltration behavior.
The line is inside a manifest match-pattern example. It does not initiate network access or transmit data.
Low
SKILL.md:180SKILL.md:188SKILL.md:189
Storage Key Examples Misclassified as Certificate Files
FALSE_POSITIVE: The reported certificate or key findings refer to a storage field named key in Chrome storage examples. No evidence found of private keys, certificate files, or credential material.
The context is Chrome storage documentation and a generic property name. It is not a path, file extension, or secret value.
Low
SKILL.md:3SKILL.md:65SKILL.md:232
Weak Cryptography Detector False Positives
FALSE_POSITIVE: The reported weak-cryptography lines contain skill description text, a manifest description field, and permission advice. No evidence found of MD5, SHA-1, DES, RC4, or custom cryptographic logic.
Manual context review shows no cryptographic API or algorithm at those lines. The static category does not match the visible content.
Low
SKILL.md:131
System Reconnaissance Detector False Positive
FALSE_POSITIVE: The reported reconnaissance line assigns a DOM element id for injected UI. No evidence found of host fingerprinting, OS checks, environment enumeration, or system information collection.
The reviewed line is a constant DOM id assignment. It has no connection to local system reconnaissance.
Low
SKILL.md:35SKILL.md:132SKILL.md:154SKILL.md:180
Combined Critical Heuristic Dismissed
FALSE_POSITIVE: The critical heuristic combines dismissed command-execution, network, and credential signals with a real but limited innerHTML documentation pattern. No evidence found of malicious intent, credential access, obfuscation, or exfiltration.
The underlying signals were reviewed in context and are mostly formatting or placeholder examples. The remaining concerns are documentation safety issues, not a confirmed malicious chain.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable