registry / skill-ledger / 0.3.4

skill-ledger@0.3.4

Cross-harness skill usage auditing with Chinese Markdown reports

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 89.6 KB of source, external domains: github.com, opencode.ai

1 flagged

hooks/run-hook.cmdView file

•path = hooks/run-hook.cmd kind = build_helper sizeBytes = 590 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/run-hook.cmdView on unpkg

1 flagged · loading source

hooks/run-hook.cmdView file

•path = hooks/run-hook.cmd kind = build_helper sizeBytes = 590 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/run-hook.cmdView on unpkg

3 Medium4 Low

MediumEnvironment Vars

MediumShips Build Helperhooks/run-hook.cmd

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings