Versioned security assessment

Report ID: SA-83352E13

7/1/2026, 3:09:15 AM

awesome-repo-builder security assessment v2

Skill Security Certification Report

Audit History

Audit model: codex Historical report

Skill name: awesome-repo-builder
Version: v2
Maintainer: zjsxply
Source: github.com/zjsxply/skills/tree/main/awesome-repo-builder/
Coverage: 3 Files scanned · 704 Lines analyzed
Policy version: Unavailable

Highest confirmed finding severity

Medium

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Manual review dismissed the critical static heuristic: there is no confirmed malicious intent, prompt injection, credential exfiltration, shell execution, or weak cryptography. The real risks are expected for this skill: it runs a bundled repository generator, writes files under a chosen output path, and creates a URL checker that can make outbound HTTP requests when executed.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

3 Files scanned · 704 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

Source

Binding unavailable
Artifact

Identity incomplete
Audit

Complete
Install contract

Open manifest to verify
Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Observed in 2 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 1 evidence location

Capability review items (1)

Medium

scripts/create_awesome_repo.py:498-518 scripts/create_awesome_repo.py:521-531

User-Selected Output Directory Receives Generated Files

The generator creates directories and writes README, contribution, license, gitignore, URL-checker, and template files under the user-provided output path. This is expected for a repository scaffold, but users should choose the output path carefully, especially when using --force.

The file writes are explicit and central to the skill purpose. Risk depends on the chosen path and whether --force is used, so the concern is moderate rather than high.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Medium

scripts/create_awesome_repo.py:39 scripts/create_awesome_repo.py:55-62 scripts/create_awesome_repo.py:103-115

Generated URL Checker Makes Outbound Requests

The bundled generator writes a verify_urls.py script that extracts HTTP(S) links from README.md and opens each URL with urllib. This is legitimate link-checking behavior, but it can send requests to arbitrary URLs from generated or edited README content if the checker is run.

The script template directly imports urllib.request and calls urlopen on URLs parsed from README.md. The behavior is transparent and task-related, but it is real outbound network access.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit: Unavailable
Content hash: Unavailable
Tree hash: Unavailable
Skill path: Unavailable
Audit payload hash: Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)

Low

SKILL.md:33-35 references/awesome-repo-structure.md:7-17 scripts/create_awesome_repo.py:136-140

Static Command-Execution Findings Are Mostly False Positives

The static analyzer matched Markdown backticks, inline file names, and generated template text as shell execution. No evidence found of subprocess, os.system, eval, shell=True, or backtick execution in the Python generator; the only command is a documented manual Python invocation.

Manual review found formatting backticks and ordinary string rendering, not runtime shell execution. The documented command runs the bundled Python script with user-selected paths.

Low

scripts/create_awesome_repo.py:375-380

Environment File Access Finding Is a False Positive

The .env reference appears inside generated .gitignore content so scaffolded repositories ignore local environment files. No evidence found that the skill reads, parses, transmits, or writes secrets from environment files.

The referenced .env string is only emitted into .gitignore. There is no code path that opens or reads an environment file.

Low

SKILL.md:43-58 references/awesome-repo-structure.md:7-12 scripts/create_awesome_repo.py:187-210

Weak Cryptography Findings Are False Positives

The analyzer appears to have matched substrings in Markdown file names, text, or generated README content. No evidence found of MD5, SHA1, DES, insecure random generation, password hashing, or cryptographic operations.

Manual review found documentation and Markdown generation at the cited locations, not cryptographic API usage. The script imports only standard parsing, path, and typing modules outside the generated URL checker.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable