Versioned security assessment

Report ID: SA-C82560F0

10/27/2026, 2:25:14 AM

feeling-search security assessment v2

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Historical report
Skill name
feeling-search
Version
v1.0.2
Maintainer
xixi048
Source
github.com/xixi048/feeling-search-skill/tree/e1f69931a1416ba91897ac66488d137d208729db/skills/feeling-search
Coverage
3 Files scanned · 869 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most alerts are false positives involving Markdown backticks, Chinese documentation, ordinary indexing, and expected cache operations. Confirmed risks involve quota-token forwarding across redirects and an endpoint override that permits plaintext HTTP. No evidence found of malware, prompt injection, or unrelated credential collection.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Attestation superseded

A newer attestation exists.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

3 Files scanned · 869 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 9 evidence locations

Filesystem access

May read or write local files.

Observed in 5 evidence locations

Env variables

May read values from the process environment.

Observed in 4 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 50 evidence locations

Capability review items (3)
Medium
scripts/fs_api.py:110
Python HTTP libraries
with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:
Authenticated style and image requests reach this urlopen with X-FS-Quota as a regular header. Default redirects can forward that credential across origins or to HTTP.
Medium
scripts/fs_api.py:135
Python HTTP libraries
with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:
Cloud analysis supplies X-FS-Quota as a regular header before this urlopen. Default POST redirects can forward that credential to a different origin.
Medium
scripts/fs_api.py:76
Python environment access
return (os.environ.get("FS_API_BASE") or DEFAULT_BASE).rstrip("/")
FS_API_BASE is accepted without HTTPS validation and feeds authenticated requests. A plaintext HTTP override exposes the quota token and cloud input to network interception.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Default urllib redirect handling can forward X-FS-Quota to another host or an HTTP destination.
    Reject redirects for authenticated requests, or permit only same-origin HTTPS redirects and strip quota tokens before any origin change.
  2. FIX-002
    Medium
    FS_API_BASE accepts plaintext HTTP endpoints for requests carrying quota tokens and cloud input.
    Validate the endpoint scheme before requests and require HTTPS when transmitting credentials or input; document trust requirements for custom hosts.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
c82560f0cf96396644b967b13dece3f27c3f8ddc
Content hash
0b545025b03cad1575b7bbc68b43345919912ef39e089f1731da7b7f5a2b4015
Tree hash
59f5a31675792c4c53a868ee1751eefe4da75424da366702d405a36bec5fb2f9
Skill path
skills/xixi048/feeling-search
Audit payload hash
2d7cd7f3d8a1b494d031f23191912225

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: superseded