Why this verdict
- inconclusive: gap skill_frontmatter_invalid at skills/canvas/SKILL.md
Security findings 0
No individual findings recorded
The inconclusive verdict rests on the coverage gaps below; 2 candidate findings were refuted on review.
Refuted findings 2
Candidates the review stage examined and rejected, kept for transparency.
Credential access
criticalRefutedlow confidenceThe Setup section instructs the agent to write the Notion API key to the plaintext file ~/.config/notion/api_key, an at-rest credential file mechanism that the skill frontmatter does not declare (it declares only the env var NOTION_API_KEY).
echo
Why it was refuted
The instructed write stores the user's own Notion integration key (copied by the user from notion.so) into a conventional user-owned config path as an openly documented step of the declared Notion API setup, with no sink other than the wrapped service; that is wrapped-service credential setup within the declared core capability, so the harm gate fails and the frontmatter mismatch is a consistency wrinkle, not concealment or established harm.
Credential access
criticalRefutedlow confidenceThe skill instructs the agent to store the user's Notion API key at ~/.config/notion/api_key, read it into the shell variable NOTION_KEY, and transmit it as a Bearer Authorization header to https://api.notion.com, a connected credential-to-network chain whose only destination is the official Notion API the skill declares it wraps and which is therefore plausibly honest setup rather than established harm.
NOTION_KEY=$(cat ~/.config/notion/api_key)
Why it was refuted
The credential-to-network chain's only sink is https://api.notion.com, the official endpoint of the service the skill declares it wraps; transmitting the wrapped service's own API key as a Bearer header to that service is the declared core capability and the wrapped-service-credential carve-out, openly documented, and the finding's own claim concedes it is 'plausibly honest setup rather than established harm'.
Coverage gaps 2
Parts of the artifact the static analysis could not fully examine.
context:unanalyzable_binary binary content is only byte-scanned
data/17monipdb.dat
skill_frontmatter_invalid missing name/description frontmatter
skills/canvas/SKILL.md
