Static Scan Results
scanned 8h ago · by rust-scannerStatic analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Decision evidence
public snapshotSource & flagged code
4 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
skills/didi-ride/scripts/didi.pyView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
skills/reddit/tests/test_reddit.pyView on unpkg