registry  /  gentle-pi  /  0.10.9

gentle-pi@0.10.9

Turn Pi into el Gentleman: a senior-architect development harness with SDD/OpenSpec, subagents, strict TDD evidence, review guardrails, and skill discovery.

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStrings
Manifest
WildcardDependency
scanned 27 file(s), 367 KB of source

Source & flagged code

1 flagged · loading source
extensions/skill-registry.tsView file
54function userSkillDirs(): string[] { L55: const home = homedir(); L56: return [ ... L120: L121: function parseFrontmatter(source: string): { name?: string; description?: string; body: string } { L122: const normalized = source.replace(/\r\n?/g, "\n"); ... L377: try { L378: const parsed: unknown = JSON.parse(await readFile(cachePath, "utf8")); L379: cached = isCacheFile(parsed) ? parsed.fingerprint : undefined; ... L420: argv = process.argv.slice(2), L421: env = process.env, L422: ): boolean {
Low
Weak Crypto

Package source references weak cryptographic algorithms.

extensions/skill-registry.tsView on unpkg · L54

Findings

2 Medium4 Low
MediumEnvironment Vars
MediumWildcard Dependency
LowScripts Present
LowWeak Cryptoextensions/skill-registry.ts
LowFilesystem
LowHigh Entropy Strings