Versioned security assessment

Report ID: SA-7B4E023F

7/1/2026, 3:45:53 AM

github-release-assistant security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
github-release-assistant
Version
v2
Maintainer
ZhanlinCui
Source
github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/github-release-assistant
Coverage
7 Files scanned · 671 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

4 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported high-risk crypto, reconnaissance, and shell execution patterns, but review found these are mostly Markdown text, regex literals, and fenced-code formatting. The skill does include a Python generator that reads repository files and can overwrite README files, plus documented git commit and push guidance that requires explicit user confirmation. No malicious intent, credential access, prompt injection, or data exfiltration evidence was found.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

7 Files scanned · 671 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Observed in 4 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 2 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (4)

RISK-001 Medium
scripts/generate_release_readme.py:468-473scripts/generate_release_readme.py:491-501
README overwrite capability
The generator writes README.md and README.zh.md in the selected output directory, and --overwrite permits replacement of existing files. This is legitimate for release documentation, but users should review diffs before committing.
The write paths and overwrite flag are explicit in the script. The behavior is purposeful documentation generation, not malicious file tampering.
RISK-002 Medium
SKILL.md:24-27
Optional git publishing workflow
The skill can guide git status, diff, add, commit, and push actions after user confirmation. This can publish generated files to a remote repository if the user approves.
The git workflow is documented plainly and requires confirmation. The risk is operational rather than hidden command execution.
RISK-003 Medium
SKILL.md:12-13scripts/generate_release_readme.py:340-343scripts/generate_release_readme.py:360-369
Local filesystem metadata collection
The script reads README, config, project structure, license, requirements, and docs-derived metadata from the target project. This is expected for README generation but should be limited to intended repositories.
The listed repository files are read directly to build README content. No evidence shows secret harvesting or transmission.
RISK-004 Low
SKILL.md:21
Absolute local skill path in quick start
The quick-start command uses a specific /Users path into a .codex skill directory. This is not malicious, but it is non-portable and exposes an author-local path pattern.
The absolute path is visible and references a hidden .codex directory. It is a portability and hygiene issue, not a confirmed compromise vector.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
scripts/generate_release_readme.py:182-184scripts/generate_release_readme.py:306-307
Hardcoded URLs are generated README links
The flagged URLs are shields.io badge image links, a python.org reference, and localhost quick-start text. They do not create runtime network requests from the script.
The URLs are embedded into Markdown output strings. There is no HTTP client, fetch call, or upload path in the reviewed code.
Low
SKILL.md:3references/redmax_style.md:7-9references/redmax_style.md:29scripts/generate_release_readme.py:76scripts/generate_release_readme.py:232-237scripts/generate_release_readme.py:467
Static crypto and reconnaissance matches are text false positives
The flagged weak-crypto and reconnaissance locations are words in descriptions, reference prose, CJK regex handling, or argparse help text. No cryptographic algorithm or reconnaissance command is implemented there.
Manual review shows these lines contain documentation text, variable names, regex character ranges, or CLI descriptions. None performs cryptography or system probing.
Low
SKILL.md:9-13SKILL.md:19-27SKILL.md:30-34scripts/generate_release_readme.py:72scripts/generate_release_readme.py:202scripts/generate_release_readme.py:409scripts/generate_release_readme.py:433
Backtick execution matches are Markdown and string formatting
The flagged backticks in SKILL.md and the script are Markdown command examples or generated fenced code blocks. The Python script does not call subprocess, shell, eval, or os.system.
The relevant lines are Markdown inline code, regex for fenced code blocks, or strings that render Markdown fences. No executable shell sink is present in those lines.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable