Versioned security assessment

Report ID: SA-5ADE2A84

7/15/2026, 3:42:48 PM

security-engineer security assessment v2

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Historical report
Skill name
security-engineer
Version
v2
Maintainer
zl2023github
Source
github.com/zl2023github/software-engineer-skills/tree/main/software-engineering/security-engineer
Coverage
2 Files scanned · 416 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

High

7 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most detections are false positives caused by Markdown code spans, defensive payload examples, and links to recognized security references. Confirmed risks include an unaudited home-directory script and active Nmap commands; semantic review also found destructive deletion, process-argument credential exposure, and a broad offensive workflow. Authorization guidance is present, but high-impact actions still need enforceable scope and confirmation controls.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Attestation superseded

A newer attestation exists.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

2 Files scanned · 416 Lines analyzed

9 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 7 evidence locations

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 50 evidence locations

Capability review items (2)
High
references/pdf-guide.md:31
Hidden file in home directory
python3 ~/.hermes/skills/software-engineering/security-engineer/scripts/generate_pdf.py
The guide instructs Python to execute a generator under ~/.hermes, but the audited file tree contains no such script. A planted or stale file at that unaudited path could run with the agent's privileges.
High
references/pdf-guide.md:31
Hidden file access
python3 ~/.hermes/skills/software-engineering/security-engineer/scripts/generate_pdf.py
This accesses a hidden home-directory path outside the audited files and immediately passes it to Python. The package provides no file whose contents can be verified at that path.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (7)

RISK-001 High
SKILL.md:40
Network scanning tools
- `nmap -sV -sC -O <target>` — 端口扫描+服务指纹+OS检测
The Nmap command performs active service, script, and operating-system probes against a target. The authorization guidance reduces misuse intent, but an incorrect scope can still disrupt or scan third-party systems.
RISK-002 High
SKILL.md:272
Network scanning tools
nmap -sV -sC -O -A -T4 <target> -oA scan_result
This ready-to-run Nmap command enables aggressive detection, scripts, and operating-system fingerprinting. It can create substantial target traffic and expose services if executed outside the authorized scope.
RISK-003 High
SKILL.md:275
Network scanning tools
nmap -p- --min-rate=1000 <target> -oG all_ports.txt
The command scans every TCP port at a minimum rate of 1,000 packets per second. This is an intrusive operation that can affect production systems or trigger defensive controls.
RISK-004 High
SKILL.md:278
Network scanning tools
nmap -sV -p <ports> <target>
This command actively probes selected ports for service versions. It is legitimate within written scope, but remains a real network action with operational and authorization risk.
RISK-005 High
SKILL.md:49-60
Broad Offensive Intrusion Workflow
The workflow directs agents through exploitation, privilege escalation, lateral movement, and password attacks. Prose authorization checks do not enforce targets or phase-specific approval.
The offensive stages and Burp Intruder password attack guidance are explicit. Authorization is required elsewhere, but no enforceable scope control is defined.
RISK-006 High
SKILL.md:168
Destructive Malware Scan Option
The ClamAV example uses --remove during recursive scanning. False positives or an incorrect path could delete important files without quarantine or recovery.
The documented command explicitly combines recursive scanning with automatic removal. The line provides no confirmation, quarantine, backup, or recovery step.
RISK-007 Medium
SKILL.md:95
Credential Exposure in Process Arguments
The OpenVAS example supplies a password through a command-line flag. Real credentials can remain visible in process listings, terminal logs, or shell history.
The --gmp-password flag is explicit, although the value is a placeholder. Replacing it with a real secret creates a well-known local exposure path.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    The PDF guide executes a generator from an unaudited hidden home-directory path.
    Bundle the generator in the audited package, verify its integrity, and use a package-relative path. Remove the command if the generator is unavailable.
  2. FIX-002
    High
    Active scanning and offensive stages rely only on prose authorization checks.
    Require a target allowlist, written scope, rate limits, and separate approval before exploitation. Default to passive and non-destructive actions.
  3. FIX-003
    High
    The ClamAV example deletes detected files automatically.
    Use report-only or quarantine behavior by default. Require explicit confirmation, backups, and a recovery plan before deleting any file.
  4. FIX-004
    Medium
    The OpenVAS example places a password in command arguments.
    Use a protected credential file or interactive secret prompt. Ensure secrets do not enter shell history, logs, or process arguments.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
5ade2a84777b60880ba0b1bc63058ec140d7aac3
Content hash
a2b2ad42ce197e1fb9d7686e137c526fed7af39c3cded0eedaaccedae60e1481
Tree hash
995b2118c312bbead381edb2369e84034f4aded2f47e364079b75a1a37baf9dc
Skill path
skills/zl2023github/security-engineer
Audit payload hash
e88b5f4d03ff5826f9ecba5e36d34319

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: superseded