{
  "identity": {
    "name": "voltcx-security-auditor",
    "version": "latest",
    "publisher": {
      "name": "VoltAgent",
      "verified": false
    },
    "source": "https://github.com/VoltAgent/awesome-codex-subagents/tree/main/categories/04-quality-security",
    "license": "unknown",
    "type": "skill",
    "subtype": "sub_agent",
    "git_sha": "5f855c11f9117541da31e7274b738cc396d4d3c7"
  },
  "description": {
    "summary": "A specialized security auditing agent that analyzes code for vulnerabilities, generates structured finding reports, and performs dependency analysis using Codex framework configuration.",
    "semantic": {
      "capabilities": [
        "security_auditing",
        "vulnerability_detection",
        "dependency_analysis",
        "structured_reporting",
        "code_analysis",
        "toml_configuration",
        "codex_integration"
      ],
      "constraints": {
        "format": "TOML configuration format required",
        "framework": "Native Codex agent implementation",
        "output": "Structured finding reports"
      }
    },
    "categories": [
      "security",
      "code_analysis",
      "auditing",
      "vulnerability_assessment",
      "agent_configuration"
    ],
    "solves": "I need to automatically audit my codebase for security vulnerabilities and get structured reports on potential threats and dependency risks."
  },
  "dependencies": [],
  "supply_chain": {
    "sbom": {
      "format": "N/A",
      "version": "N/A",
      "generated_at": "2026-03-29T02:49:11.102Z",
      "component_count": 0,
      "direct_dependencies": 0,
      "transitive_dependencies": 0,
      "vulnerability_summary": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "none": 0
      },
      "flagged_components": []
    },
    "last_dependency_audit": "2026-03-29T02:49:11.102Z"
  },
  "provenance": {
    "license_present": true,
    "license_file": "LICENSE",
    "security_md_present": false,
    "readme_present": true,
    "readme_empty": false,
    "namespace_match": true,
    "last_commit_date": "2026-03-20T09:43:41+03:00",
    "contributor_count": 1,
    "repo_age_days": 8,
    "template_description": true
  },
  "owasp_mcp_coverage": [
    {
      "id": "MCP01",
      "name": "Excessive Agency & Permissions",
      "covered_by": [
        {
          "stage": "security",
          "description": "Cisco scanner behavioral analysis of permission scope"
        }
      ],
      "status": "covered"
    },
    {
      "id": "MCP02",
      "name": "Unauthorized Data Access",
      "covered_by": [
        {
          "stage": "adversarial",
          "description": "Category 3 (data exfiltration) attack patterns"
        }
      ],
      "status": "covered"
    },
    {
      "id": "MCP03",
      "name": "Tool Poisoning",
      "covered_by": [
        {
          "stage": "adversarial",
          "description": "Category 1 (prompt injection) and Category 5 (context poisoning) attack patterns"
        }
      ],
      "status": "covered"
    },
    {
      "id": "MCP04",
      "name": "Supply Chain Vulnerabilities",
      "covered_by": [
        {
          "stage": "sbom",
          "description": "SBOM generation (syft/cdxgen) and vulnerability scanning (grype/osv-scanner/npm audit)"
        }
      ],
      "status": "gap"
    },
    {
      "id": "MCP05",
      "name": "Command Injection",
      "covered_by": [
        {
          "stage": "adversarial",
          "description": "Category 2 (privilege escalation) and Category 6 (repo config injection) attack patterns"
        }
      ],
      "status": "covered"
    },
    {
      "id": "MCP06",
      "name": "Intent Subversion",
      "covered_by": [
        {
          "stage": "adversarial",
          "description": "Category 1 (prompt injection) and Category 4 (capability squatting) attack patterns"
        }
      ],
      "status": "covered"
    },
    {
      "id": "MCP07",
      "name": "Insecure Data Handling",
      "covered_by": [
        {
          "stage": "security",
          "description": "Cisco scanner data flow and sensitive data handling analysis"
        }
      ],
      "status": "covered"
    },
    {
      "id": "MCP08",
      "name": "Insufficient Logging",
      "covered_by": [],
      "status": "gap",
      "gap_note": "Not directly tested — logging adequacy requires runtime observation beyond current pipeline scope"
    },
    {
      "id": "MCP09",
      "name": "Resource Exhaustion",
      "covered_by": [
        {
          "stage": "fingerprint",
          "description": "Resource profiling (CPU, memory) during functional and adversarial testing"
        }
      ],
      "status": "covered"
    },
    {
      "id": "MCP10",
      "name": "Context Injection",
      "covered_by": [
        {
          "stage": "adversarial",
          "description": "Category 5 (context poisoning) attack patterns"
        }
      ],
      "status": "covered"
    }
  ],
  "composability": {
    "tested_with": [],
    "known_conflicts": [],
    "certified_workflows": []
  },
  "trust": {
    "score": 79,
    "grade": "C",
    "maturity": "Initial",
    "scheme_version": "2.0",
    "verified_at": "2026-03-29T02:49:11.105Z",
    "consumer_confirmations": {
      "total": 0,
      "confirmation_rate": 0,
      "last_30_days": {
        "consumptions": 0,
        "confirmations": 0,
        "disputes": 0,
        "dispute_categories": {}
      }
    },
    "provenance": {
      "hash": "sha256:aa446c98bed1c79ba2a409ad986ad3199568e1bdceb42efaf1cf9214b4c5771f",
      "signed_by": "fidensa.com",
      "signature": "see .cert.json artifact",
      "source_verified": true,
      "last_source_audit": "2026-03-29T02:49:11.105Z",
      "attestation_url": "https://fidensa.com/v1/attestation/"
    },
    "history": {
      "first_verified": "2026-03-29T02:49:11.105Z",
      "total_versions_verified": 1,
      "breaking_changes_detected": 0
    },
    "behavioral_fingerprint": {
      "fingerprint_version": "1.0",
      "baseline_created_at": "2026-03-29T02:49:06.622Z",
      "baseline_sample_size": 8,
      "signals": {
        "response_time_ms": {
          "p50": 8920,
          "p95": 36153,
          "p99": 36153
        },
        "error_rate": 0,
        "output_size_bytes": {
          "p50": 1708,
          "p95": 7245,
          "mean": 2805.75
        },
        "skill_specific": {
          "trigger_timing_ms": {
            "min": 6767,
            "max": 36153,
            "mean": 18044,
            "p50": 10329,
            "p95": 36153,
            "p99": 36153,
            "sample_count": 5
          },
          "trigger_activation_rate": 0.4,
          "negative_rejection_rate": 1
        }
      },
      "drift_status": "baseline"
    },
    "score_breakdown": [
      {
        "signal": "security_scan",
        "score": 1,
        "weight": 0.15,
        "contribution": 0.15,
        "source": "stage2b-security",
        "rationale": "No security findings"
      },
      {
        "signal": "supply_chain",
        "score": 1,
        "weight": 0.1,
        "contribution": 0.1,
        "source": "stage2a-sbom",
        "rationale": "Skills have no dependency tree — supply chain N/A, scored as clean"
      },
      {
        "signal": "adversarial",
        "score": 1,
        "weight": 0.25,
        "contribution": 0.25,
        "source": "stage3b-adversarial",
        "rationale": "No adversarial findings — clean"
      },
      {
        "signal": "provenance",
        "score": 0.8,
        "weight": 0.2,
        "contribution": 0.16,
        "source": "stage1-ingest",
        "rationale": "source hash present, publisher identified, build succeeded, extraction method: llm_assisted"
      },
      {
        "signal": "consumer_confirm",
        "score": 0.4,
        "weight": 0.1,
        "contribution": 0.04000000000000001,
        "source": "stage3a-functional",
        "rationale": "Pipeline-derived baseline: 2/5 triggers activated (no external reports yet)"
      },
      {
        "signal": "behavioral_pass",
        "score": 0.4,
        "weight": 0.1,
        "contribution": 0.04000000000000001,
        "source": "stage3a-functional",
        "rationale": "2/5 triggers activated (40.0%)"
      },
      {
        "signal": "contract_accuracy",
        "score": 1,
        "weight": 0.06,
        "contribution": 0.06,
        "source": "stage3a-functional",
        "rationale": "3/3 negative tests passed (100.0%)"
      },
      {
        "signal": "uptime",
        "score": 1,
        "weight": 0.04,
        "contribution": 0.04,
        "source": "pipeline-derived",
        "rationale": "Static instruction text — uptime N/A, scored as available"
      }
    ],
    "max_achievable_score": 100,
    "review_flags": [
      {
        "category": "content",
        "severity": "medium",
        "source": "stage4-assembler",
        "description": "Description section was synthesized by LLM from stage data — verify accuracy",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "publisher",
        "severity": "medium",
        "source": "stage1-ingest",
        "description": "Publisher \"VoltAgent\" is not verified — first certification from this publisher",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "No SECURITY.md or SECURITY.txt file found — no published vulnerability reporting process",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "Single contributor — no peer review evidence in commit history",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "Repository is 8 days old — recently created",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "Package description appears to be boilerplate or template text",
        "blocks_certification": false,
        "kind": "note"
      }
    ]
  },
  "skill": {
    "interface": {
      "format": "toml",
      "agent_context": {
        "required_capabilities": [
          "filesystem:read"
        ],
        "required_tools": [],
        "expected_context": "Code, configuration files, authentication flows, or infrastructure components that need security review and risk assessment"
      },
      "triggers": {
        "activation": "Activates when a task needs focused security review of code, auth flows, secrets handling, input validation, or infrastructure configuration",
        "scope": "Handles security auditing of application and infrastructure components with evidence-driven risk assessment and actionable remediation guidance"
      },
      "instruction_count": 35,
      "file_count": 17
    },
    "behavioral_guarantees": {
      "does": [
        "Map changed or affected behavior boundary and failure surface",
        "Separate confirmed evidence from hypotheses before recommending action",
        "Focus on authentication/authorization boundaries and privilege-escalation opportunities",
        "Analyze input validation and injection resistance in externally reachable paths",
        "Review secret handling across code, config, runtime, and logging surfaces",
        "Examine cryptographic usage correctness and insecure default detection",
        "Assess network/config exposure that increases attack surface",
        "Evaluate supply-chain dependencies and build/deploy trust assumptions",
        "Provide risk ranking with practical remediation sequencing",
        "Verify each finding states attack path, impact, and exploitation prerequisites",
        "Ensure mitigation guidance is specific and operationally feasible",
        "Include immediate containment options for high-severity items",
        "Return exact scope analyzed and key findings with supporting evidence"
      ],
      "does_not": [
        "Claim full security assurance from static review alone unless explicitly requested",
        "Perform checklist theater instead of evidence-driven quality assessment",
        "Recommend actions without separating confirmed evidence from hypotheses"
      ],
      "scope_boundaries": {
        "modifies_files": false,
        "creates_files": false,
        "deletes_files": false,
        "makes_network_requests": false,
        "accesses_env_variables": false,
        "invokes_external_tools": false
      },
      "failure_modes": [
        {
          "condition": "when runtime or environment verification is needed",
          "behavior": "the agent clearly identifies what still needs runtime/environment verification"
        },
        {
          "condition": "when static analysis limitations are reached",
          "behavior": "the agent acknowledges limitations and specifies residual risk and follow-up actions"
        }
      ]
    },
    "security": {
      "risk_profile": "medium",
      "threat_analysis": {},
      "scan_results": {
        "cisco_skill_scanner": {
          "status": "FAIL",
          "findings": {
            "critical": 0,
            "high": 0,
            "medium": 0,
            "low": 0
          },
          "analyzers": [
            "static",
            "behavioral",
            "llm",
            "meta"
          ],
          "scanned_at": "2026-03-29T02:46:44.698Z",
          "details": []
        }
      },
      "adversarial_testing": {
        "methodology_version": "1.0",
        "categories_tested": [
          "prompt_injection_chains",
          "privilege_escalation",
          "capability_squatting",
          "context_poisoning",
          "dependency_confusion"
        ],
        "findings": [],
        "tested_at": "2026-03-29T02:49:11.102Z"
      }
    }
  }
}