Versioned security assessment

Report ID: SA-9E952417

7/24/2026, 1:40:57 AM

video-edit security assessment v4

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Latest published report
Skill name
video-edit
Version
v4
Maintainer
skills-collective
Source
github.com/skills-collective/skills/tree/main/video-edit/
Coverage
1 Files scanned · 226 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

High

3 confirmed security findings require attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

All 67 static findings are false positives caused by Markdown formatting, example URLs, or documentation of credential storage. Separate review found shell-construction, unpinned dependency, and third-party media disclosure risks that require clear safeguards.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Active attestation

A public attestation is available for this exact report.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 226 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 10 evidence locations

Filesystem access

May read or write local files.

Observed in 8 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 47 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (3)

RISK-001 High
SKILL.md:77-84SKILL.md:222
Unsafe Shell Construction for Generated Prompts
The examples embed generated prompt text inside single-quoted JSON passed through a shell. The skill lacks a mandatory serialization rule for arbitrary user-controlled characters.
The command examples directly place prompt text inside shell-quoted JSON, while line 222 asserts safety after shell parsing. Robust argument construction is not required.
RISK-002 Medium
SKILL.md:49
Unpinned Global CLI Installation
The prerequisite installs the latest RunComfy CLI globally without a version pin. Package compromise or incompatible updates could execute code with user permissions.
Line 49 explicitly uses a global npm installation with no version. This is a clear dependency integrity and update risk.
RISK-003 Medium
SKILL.md:217SKILL.md:223-224
Third-Party Prompt and Media Disclosure
The CLI sends prompts to RunComfy and its servers fetch user-provided media URLs. Sensitive content may leave the user's controlled environment.
Lines 217 and 223 explicitly describe API submission and server-side retrieval of user media. The external data flow is documented and unambiguous.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    Generated prompts are embedded in shell-quoted JSON without a mandatory safe serialization procedure.
    Build input with a JSON serializer and execute the CLI with an argument array. Never concatenate user-controlled text into a shell command.
  2. FIX-002
    Medium
    The prerequisite installs an unversioned CLI package globally.
    Pin a reviewed CLI version and document package provenance and integrity verification before installation.
  3. FIX-003
    Medium
    Prompts and media URLs are sent to RunComfy, and its servers fetch referenced media.
    Require user approval before transfer, warn against sensitive media, and recommend short-lived access-controlled URLs.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2
Content hash
e7886a19ebdd2558e4a2965a779ca72e2a867fdbf7ec89de11288cd94d45aa44
Tree hash
fc2dc31b1adc54fbb4d78f93dde1d703c23f65ad04131a5b037ec9c53cef00f1
Skill path
skills/skills-collective/video-edit
Audit payload hash
672b73e714b0441b8bc085e5d4927d59

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: active