Static Scanner Calibration

63eligible findings

10rule/source strata

25selected samples

Not measuredpublishable precision

Stratified cohort

STATIC_DOWNLOAD_PIPE_TO_SHELLclawhub4 selected / 28 eligible

STATIC_DOWNLOAD_PIPE_TO_SHELLgithub4 selected / 6 eligible

STATIC_DYNAMIC_CODE_EXECUTIONclawhub4 selected / 15 eligible

STATIC_DYNAMIC_CODE_EXECUTIONgithub1 selected / 1 eligible

STATIC_OBFUSCATED_EXECUTIONclawhub3 selected / 3 eligible

STATIC_OBFUSCATED_EXECUTIONgithub2 selected / 2 eligible

STATIC_SENSITIVE_CREDENTIAL_ACCESSclawhub4 selected / 5 eligible

STATIC_SENSITIVE_CREDENTIAL_ACCESSgithub1 selected / 1 eligible

STATIC_SENSITIVE_FILE_IN_PACKAGEclawhub1 selected / 1 eligible

STATIC_SENSITIVE_FILE_IN_PACKAGEgithub1 selected / 1 eligible

Iterate Skill PubSTATIC_DOWNLOAD_PIPE_TO_SHELL · clawhubtests/test_validate.py:119 · unlabelled

x402 ComputeSTATIC_DOWNLOAD_PIPE_TO_SHELL · clawhubSKILL.md:525 · unlabelled

Atlas Flight BookingSTATIC_DOWNLOAD_PIPE_TO_SHELL · clawhubSKILL.md:32 · unlabelled

alibabacloud-ecs-code-deploySTATIC_DOWNLOAD_PIPE_TO_SHELL · clawhubreferences/script-templates.md:90 · unlabelled

code-reviewSTATIC_DOWNLOAD_PIPE_TO_SHELL · githubSKILL.md:24 · unlabelled

boltz-cli-setupSTATIC_DOWNLOAD_PIPE_TO_SHELL · githubreferences/sandbox.md:24 · unlabelled

heygen-videoSTATIC_DOWNLOAD_PIPE_TO_SHELL · githubSKILL.md:83 · unlabelled

boltz-cli-setupSTATIC_DOWNLOAD_PIPE_TO_SHELL · githubSKILL.md:31 · unlabelled

AGI数字伙伴STATIC_DYNAMIC_CODE_EXECUTION · clawhubscripts/toolnode.py:531 · unlabelled

huawei-cloud-skill-auditSTATIC_DYNAMIC_CODE_EXECUTION · clawhubscripts/skill_audit.py:132 · unlabelled

huawei-cloud-skill-auditSTATIC_DYNAMIC_CODE_EXECUTION · clawhubSKILL.md:210 · unlabelled

spexSTATIC_DYNAMIC_CODE_EXECUTION · clawhubscripts/show.py:27 · unlabelled

sandbox-sdkSTATIC_DYNAMIC_CODE_EXECUTION · githubSKILL.md:109 · unlabelled

huawei-cloud-skill-auditSTATIC_OBFUSCATED_EXECUTION · clawhubscripts/skill_audit.py:142 · unlabelled

TWZRD TrustSTATIC_OBFUSCATED_EXECUTION · clawhubSKILL.md:362 · unlabelled

x0xSTATIC_OBFUSCATED_EXECUTION · clawhubSKILL.md:206 · unlabelled

boltz-protein-screenSTATIC_OBFUSCATED_EXECUTION · githubSKILL.md:53 · unlabelled

boltz-structure-and-bindingSTATIC_OBFUSCATED_EXECUTION · githubSKILL.md:78 · unlabelled

code-reviewSTATIC_SENSITIVE_CREDENTIAL_ACCESS · clawhubreferences/repository_access.md:14 · unlabelled

SKILL SonarSTATIC_SENSITIVE_CREDENTIAL_ACCESS · clawhubpreflight/preflight-guard.md:317 · unlabelled

gitlab-cli-skillsSTATIC_SENSITIVE_CREDENTIAL_ACCESS · clawhubSKILL.md:5278 · unlabelled

x402 ComputeSTATIC_SENSITIVE_CREDENTIAL_ACCESS · clawhubscripts/provision.py:233 · unlabelled

provision-dropletSTATIC_SENSITIVE_CREDENTIAL_ACCESS · githubscripts/configure_ssh.py:5 · unlabelled

video-workflow-builderSTATIC_SENSITIVE_FILE_IN_PACKAGE · clawhub.env.example · unlabelled

huggingface-community-evalsSTATIC_SENSITIVE_FILE_IN_PACKAGE · githubexamples/.env.example · unlabelled

The cohort covers only current High/Critical static findings and is not a recall measurement.
Only valid signed confirm and clear_false_positive decisions contribute to precision.
Accepted-risk decisions are governance outcomes and are excluded from precision.
A precision value is withheld until the configured label threshold is met.