Versioned security assessment

Report ID: SA-1E22A7C9

10/27/2026, 8:17:01 PM

feeling-search security assessment v3

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Historical report
Skill name
feeling-search
Version
v1.1.0
Maintainer
xixi048
Source
github.com/xixi048/feeling-search-skill/tree/e1f69931a1416ba91897ac66488d137d208729db/skills/feeling-search
Coverage
3 Files scanned · 1,066 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

Medium

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static alerts are false positives from Markdown backticks, multilingual documentation, normal cache operations, and documented API access. Quota tokens lack explicit restrictive file permissions, appear in request URLs, and lack transport origin protections. No evidence found of malicious exfiltration intent, prompt injection, hidden command execution, or code obfuscation.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Attestation superseded

A newer attestation exists.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

3 Files scanned · 1,066 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 10 evidence locations

Filesystem access

May read or write local files.

Observed in 8 evidence locations

Env variables

May read values from the process environment.

Observed in 4 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 50 evidence locations

Capability review items (1)
Medium
scripts/fs_api.py:117
Python file write/append
with open(tmp, "w", encoding="utf-8") as fh:
Quota tokens are written in plaintext without restrictive permissions; common umasks create files readable by other local users.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Medium
scripts/fs_api.py:392-406references/api-contract.md:135-137
Quota Credentials Exposed in Request URLs
Quota setup and balance checks put the bearer token in the URL query. Reverse proxies and access logs can retain this spendable credential.
Both quota request paths concatenate the token into the URL. The API contract supports header authentication, so URL exposure is avoidable.
RISK-002 Medium
scripts/fs_api.py:75-76scripts/fs_api.py:148-158scripts/fs_api.py:171-183scripts/fs_api.py:495-498scripts/fs_api.py:518-534
Quota Credentials Lack HTTPS Origin Protection
FS_API_BASE accepts HTTP, and default urllib redirects can forward X-FS-Quota headers across origins. Misconfigured endpoints or unsafe redirects can expose quota credentials.
Endpoint configuration has no scheme validation, and both transports use urllib defaults without redirect restrictions. Exploitation requires unsafe configuration or a cross-origin redirect.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Saved quota credentials lack explicit restrictive file permissions.
    Create the credential directory with mode 0700 and a securely created temporary credential file with mode 0600 before atomic replacement.
  2. FIX-002
    Medium
    Quota validation and balance requests place spendable tokens in URL queries.
    Send quota credentials through the supported X-FS-Quota header instead of query parameters, and redact credentials from diagnostic logs.
  3. FIX-003
    Medium
    Configurable endpoints and automatic redirects do not protect the credential origin.
    Require HTTPS for credential-bearing requests and reject cross-origin redirects or remove quota headers before following them.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
1e22a7c9000672c440acafc13dc0c17f8ae8d00a
Content hash
9bafb3067a66e8c36e4a01d1ef919ffdb91c56f0e6df7b1d8fe43b62a6e4fdea
Tree hash
09efb9f9f1618a8d4ea15cf17691f8cd56ad9b17b774f0f3385cedded298afe4
Skill path
skills/xixi048/feeling-search
Audit payload hash
8ce8354a40381a232ef53d928d13225b

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: superseded