registry / @qatrolabs/qatro / 0.1.1

@qatrolabs/qatro@0.1.1

Qatrolabs engineering harness: scaffold and operate Spec-Driven-Development projects for AI coding tools

Static Scan Results

scanned 16d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 18 file(s), 42.1 KB of source

2 flagged

scripts/verify-state.shView file

•path = scripts/verify-state.sh kind = build_helper sizeBytes = 14454 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/verify-state.shView on unpkg

templates/stacks/python-cli/tests/test_smoke.pyView file

•path = templates/stacks/python-cli/tests/test_smoke.py kind = payload_in_excluded_dir sizeBytes = 236 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/stacks/python-cli/tests/test_smoke.pyView on unpkg

2 flagged · loading source

scripts/verify-state.shView file

•path = scripts/verify-state.sh kind = build_helper sizeBytes = 14454 magicHex = [redacted]