highx0xSTATIC_DYNAMIC_CODE_EXECUTION · SKILL.md:605
Dynamic code or shell execution is present
No human verdict recordedSecurity Review Queue
High and Critical static signals enter this queue. Decisions are made outside the public site, signed by a trusted reviewer, and bound to one fixed release, scan report, and finding.
85High/Critical signals
85pending decisions
0confirmed findings
0signed decisions
Awaiting human decision
63highx0xSTATIC_OBFUSCATED_EXECUTION · SKILL.md:206
Encoded content is decoded and executed
No human verdict recordedhighprovision-dropletSTATIC_SENSITIVE_CREDENTIAL_ACCESS · scripts/configure_ssh.py:5
Instructions or code access sensitive credential locations
No human verdict recordedhighcode-reviewSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:24
Remote content is piped directly to a shell
No human verdict recordedhighagent-guildSTATIC_DOWNLOAD_PIPE_TO_SHELL · scripts/install.sh:7
Remote content is piped directly to a shell
No human verdict recordedhighagent-guildSTATIC_DOWNLOAD_PIPE_TO_SHELL · docs/adapters/_template.md:21
Remote content is piped directly to a shell
No human verdict recordedhighagent-guildSTATIC_DOWNLOAD_PIPE_TO_SHELL · docs/ONBOARDING.md:136
Remote content is piped directly to a shell
No human verdict recordedhighagent-guildSTATIC_DOWNLOAD_PIPE_TO_SHELL · docs/README_CN.md:109
Remote content is piped directly to a shell
No human verdict recordedhighagent-guildSTATIC_DOWNLOAD_PIPE_TO_SHELL · docs/README.md:108
Remote content is piped directly to a shell
No human verdict recordedhighheygen-videoSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:83
Remote content is piped directly to a shell
No human verdict recordedhighstipendSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:37
Remote content is piped directly to a shell
No human verdict recordedhighstipendSTATIC_DYNAMIC_CODE_EXECUTION · SKILL.md:131
Dynamic code or shell execution is present
No human verdict recordedhighgitlab-cli-skillsSTATIC_SENSITIVE_CREDENTIAL_ACCESS · SKILL.md:5278
Instructions or code access sensitive credential locations
No human verdict recordedhighTWZRD TrustSTATIC_DYNAMIC_CODE_EXECUTION · plugin-trustgate/dist/faremeter.d.ts:8
Dynamic code or shell execution is present
No human verdict recordedhighTWZRD TrustSTATIC_DYNAMIC_CODE_EXECUTION · plugin-trustgate/dist/faremeter.js:8
Dynamic code or shell execution is present
No human verdict recordedhighTWZRD TrustSTATIC_OBFUSCATED_EXECUTION · SKILL.md:362
Encoded content is decoded and executed
No human verdict recordedhighhuggingface-community-evalsSTATIC_SENSITIVE_FILE_IN_PACKAGE · examples/.env.example
Package contains a path commonly used for secrets
No human verdict recordedhighspexSTATIC_DYNAMIC_CODE_EXECUTION · scripts/open.py:40
Dynamic code or shell execution is present
No human verdict recordedhighspexSTATIC_DYNAMIC_CODE_EXECUTION · scripts/show.py:27
Dynamic code or shell execution is present
No human verdict recordedhighsolo-missionSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:204
Remote content is piped directly to a shell
No human verdict recordedhighsolo-missionSTATIC_DOWNLOAD_PIPE_TO_SHELL · references/wallet-setup.md:29
Remote content is piped directly to a shell
No human verdict recordedhighllm-verifySTATIC_DOWNLOAD_PIPE_TO_SHELL · README.md:12
Remote content is piped directly to a shell
No human verdict recordedhighboltz-structure-and-bindingSTATIC_OBFUSCATED_EXECUTION · SKILL.md:78
Encoded content is decoded and executed
No human verdict recordedhighvideo-workflow-builderSTATIC_SENSITIVE_FILE_IN_PACKAGE · .env.example
Package contains a path commonly used for secrets
No human verdict recordedhighhuawei-cloud-skill-auditSTATIC_DOWNLOAD_PIPE_TO_SHELL · scripts/skill_audit.py:129
Remote content is piped directly to a shell
No human verdict recordedhighhuawei-cloud-skill-auditSTATIC_DYNAMIC_CODE_EXECUTION · SKILL.md:210
Dynamic code or shell execution is present
No human verdict recordedhighhuawei-cloud-skill-auditSTATIC_DYNAMIC_CODE_EXECUTION · scripts/skill_audit.py:132
Dynamic code or shell execution is present
No human verdict recordedhighhuawei-cloud-skill-auditSTATIC_DYNAMIC_CODE_EXECUTION · references/security-audit-guide.md:51
Dynamic code or shell execution is present
No human verdict recordedhighhuawei-cloud-skill-auditSTATIC_OBFUSCATED_EXECUTION · scripts/skill_audit.py:142
Encoded content is decoded and executed
No human verdict recordedhighJob Agent for AgentMesh360STATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:58
Remote content is piped directly to a shell
No human verdict recordedhighskill-publisherSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:65
Remote content is piped directly to a shell
No human verdict recordedhighskill-publisherSTATIC_DOWNLOAD_PIPE_TO_SHELL · references/skillhub.md:54
Remote content is piped directly to a shell
No human verdict recordedhighx402 ComputeSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:525
Remote content is piped directly to a shell
No human verdict recordedhighx402 ComputeSTATIC_DOWNLOAD_PIPE_TO_SHELL · references/node-operator.md:49
Remote content is piped directly to a shell
No human verdict recordedhighx402 ComputeSTATIC_SENSITIVE_CREDENTIAL_ACCESS · scripts/provision.py:233
Instructions or code access sensitive credential locations
No human verdict recordedhighhf-cliSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:6
Remote content is piped directly to a shell
No human verdict recordedhighLYGO SkillSpectorSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:3
Remote content is piped directly to a shell
No human verdict recordedhighLYGO SkillSpectorSTATIC_DOWNLOAD_PIPE_TO_SHELL · scripts/skill_spector.py:9
Remote content is piped directly to a shell
No human verdict recordedhighLYGO SkillSpectorSTATIC_DYNAMIC_CODE_EXECUTION · scripts/self_check.py:21
Dynamic code or shell execution is present
No human verdict recordedhighShieldCortexSTATIC_DYNAMIC_CODE_EXECUTION · SKILL.md:174
Dynamic code or shell execution is present
No human verdict recordedhighAGI数字伙伴STATIC_DYNAMIC_CODE_EXECUTION · scripts/perception_node.py:244
Dynamic code or shell execution is present
No human verdict recordedhighAGI数字伙伴STATIC_DYNAMIC_CODE_EXECUTION · scripts/toolnode.py:531
Dynamic code or shell execution is present
No human verdict recordedhighboltz-protein-screenSTATIC_OBFUSCATED_EXECUTION · SKILL.md:53
Encoded content is decoded and executed
No human verdict recordedhighSKILL SonarSTATIC_SENSITIVE_CREDENTIAL_ACCESS · preflight/preflight-guard.md:317
Instructions or code access sensitive credential locations
No human verdict recordedhighIterate Skill PubSTATIC_DOWNLOAD_PIPE_TO_SHELL · tests/test_onboarding.py:3730
Remote content is piped directly to a shell
No human verdict recordedhighIterate Skill PubSTATIC_DOWNLOAD_PIPE_TO_SHELL · tests/test_validate.py:119
Remote content is piped directly to a shell
No human verdict recordedhighcargoSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:79
Remote content is piped directly to a shell
No human verdict recordedhighwebclaw3 — Browser Automation with Your Own Logged-in ChromeSTATIC_DOWNLOAD_PIPE_TO_SHELL · scripts/webclaw3.mjs:41
Remote content is piped directly to a shell
No human verdict recordedhighwebclaw3 — Browser Automation with Your Own Logged-in ChromeSTATIC_DOWNLOAD_PIPE_TO_SHELL · references/setup.md:20
Remote content is piped directly to a shell
No human verdict recordedhighwebclaw3 — Browser Automation with Your Own Logged-in ChromeSTATIC_DYNAMIC_CODE_EXECUTION · SKILL.md:239
Dynamic code or shell execution is present
No human verdict recordedhighSKILLSTATIC_DOWNLOAD_PIPE_TO_SHELL · harness/entry-gate.md:20
Remote content is piped directly to a shell
No human verdict recordedhighcode-reviewSTATIC_DOWNLOAD_PIPE_TO_SHELL · references/frontend_dependency_installation/node_environment.md:56
Remote content is piped directly to a shell
No human verdict recordedhighcode-reviewSTATIC_SENSITIVE_CREDENTIAL_ACCESS · references/repository_access.md:14
Instructions or code access sensitive credential locations
No human verdict recordedhighheygen-avatarSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:97
Remote content is piped directly to a shell
No human verdict recordedhighboltz-cli-setupSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:31
Remote content is piped directly to a shell
No human verdict recordedhighboltz-cli-setupSTATIC_DOWNLOAD_PIPE_TO_SHELL · references/sandbox.md:24
Remote content is piped directly to a shell
No human verdict recordedhighAtlas Flight BookingSTATIC_DOWNLOAD_PIPE_TO_SHELL · SKILL.md:32
Remote content is piped directly to a shell
No human verdict recordedhighalibabacloud-ecs-code-deploySTATIC_DOWNLOAD_PIPE_TO_SHELL · references/script-templates.md:90
Remote content is piped directly to a shell
No human verdict recordedhighcode-reviewSTATIC_DYNAMIC_CODE_EXECUTION · references/confidence-scoring.md:106
Dynamic code or shell execution is present
No human verdict recordedhighalibabacloud-polardbx-opsSTATIC_DOWNLOAD_PIPE_TO_SHELL · references/cli-installation-guide.md:28
Remote content is piped directly to a shell
No human verdict recordedhighSkill VitalsSTATIC_DOWNLOAD_PIPE_TO_SHELL · README.md:46
Remote content is piped directly to a shell
No human verdict recordedhighkeelwrightSTATIC_SENSITIVE_CREDENTIAL_ACCESS · qa-results/20260722T082559Z.results.jsonl:29
Instructions or code access sensitive credential locations
No human verdict recordedhighsandbox-sdkSTATIC_DYNAMIC_CODE_EXECUTION · SKILL.md:109
Dynamic code or shell execution is present
No human verdict recordedConfirmed finding
0No entries in this state.
Cleared as false positive
0No entries in this state.
Accepted risk
0No entries in this state.