Versioned security assessment

Report ID: SA-0AABDCAA

6/30/2026, 10:16:09 PM

brand-landingpage security assessment v3

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
brand-landingpage
Version
v3
Maintainer
wshobson
Source
github.com/wshobson/agents/tree/main/plugins/brand-landingpage/skills/brand-landingpage/
Coverage
4 Files scanned · 841 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

3 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many high-severity patterns, but review found most were Markdown false positives from backticked terms, color hex values, and examples. The confirmed risks are legitimate workflow actions: installing or using the Stitch SDK, checking an API key environment variable, making external Stitch calls, writing project files, opening local HTML in a browser, and creating a zip bundle.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

4 Files scanned · 841 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Observed in 4 evidence locations

Env variables

May read values from the process environment.

Observed in 1 evidence location

External commands

May invoke commands or programs outside the Skill.

Observed in 3 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (3)

RISK-001 Medium
SKILL.md:31-36SKILL.md:248-249references/stitch-architecture.md:13-14
External Stitch SDK and Network Workflow
The skill instructs the agent to verify SDK installation, make a minimal authenticated SDK call, and rely on Stitch documentation and generated download URLs. This is expected for the skill, but it requires third-party network access and should be disclosed to users.
The workflow clearly depends on an external SDK, documentation, authentication check, and generated download URLs. No evidence shows credential exfiltration, so the risk is operational rather than malicious.
RISK-002 Medium
SKILL.md:31-36
Environment Variable Check for API Key
The skill tells the agent to verify that the Stitch API key environment variable is set and to help the user export it if missing. It also instructs the agent not to display or echo the key, which reduces but does not remove secret-handling risk.
The file explicitly references checking an API key environment variable and user export flow. The same section includes a protective instruction not to echo the key, so this is a managed medium risk.
RISK-003 Medium
SKILL.md:69SKILL.md:110SKILL.md:167-169SKILL.md:236-241
Filesystem Writes, Browser Opening, and Zip Creation
The skill writes state, generated HTML, user-provided assets, design documentation, and deployment bundles. It also opens saved HTML through OS browser commands and creates a zip archive, which are legitimate delivery steps but can affect the local workspace.
The documented workflow intentionally creates and copies files, opens local HTML, and runs zip packaging. These actions are scoped to generated project artifacts and do not show malicious intent.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
SKILL.md:40references/state-and-pitfalls.md:5-36references/stitch-architecture.md:232-254
Markdown Backtick Command Alerts Are Mostly False Positives
Many external command findings come from Markdown inline code, code fences, tool names, enum names, and template examples. They describe the workflow and API shapes rather than executable code embedded in the skill.
The cited lines are Markdown documentation and examples, not script files or runtime code. The only real command usage is separately captured in the medium findings.
Low
references/interview-framework.md:123-137references/stitch-architecture.md:115-126references/state-and-pitfalls.md:20-31
Weak Cryptography Alerts Are Color and Identifier False Positives
The weak-cryptography alerts map to color hex values, typography names, state fields, and design-system identifiers. No evidence found of cryptographic operations or weak crypto algorithms being used.
The cited context is color mapping and metadata schema content. There is no hashing, encryption, signing, or password-storage logic in these files.
Low
references/interview-framework.md:130references/stitch-architecture.md:119SKILL.md:62
C2 and SAM Keyword Alerts Are Scanner Noise
The C2 and Windows SAM alerts appear to be substring matches inside harmless design documentation. No evidence found of command-and-control behavior, system database access, or credential dumping intent.
The referenced lines are color rows or a workflow diagram line. They do not contain code, URLs for control servers, or operating-system credential paths.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable