registry / @ericrisco/rsc / 0.1.40

@ericrisco/rsc@0.1.40

Eric Risco's agent-skills catalog as a granular, self-recommending CLI installer.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 141 KB of source, external domains: mcp.context7.com, registry.npmjs.org, staging.example.com

Source & flagged code

6 flagged

skills/google-workspace/scripts/verify.shView file

Lines 1-37shell

1#!/usr/bin/env bash

3# verify.sh — credential + scope preflight linter for Google Workspace

4# integration code. NO network. Scans a target dir for the dangerous/wrong

5# patterns this skill bans, and exits non-zero on any hit.

7# Read-only. Never writes, edits, or sends anything.

9# Checks:

Source & flagged code

6 flagged · loading source

skills/google-workspace/scripts/verify.shView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code