registry  /  solmate-skills  /  2.0.14

solmate-skills@2.0.14

AI agent harness and workflow skills for context-aware planning, implementation, verification, docs, and QA

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 32 file(s), 252 KB of source, external domains: apis.data.go.kr, m.map.kakao.com, place-api.map.kakao.com, place.map.kakao.com, swopenapi.seoul.go.kr, www.bluer.co.kr, www.daisomall.co.kr, www.dhlottery.co.kr, www.kleague.com, www.skdirect.co.kr

Source & flagged code

3 flagged · loading source
bin/harness-artifact.jsView file
1const fs = require('fs'); L2: const path = require('path');
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/harness-artifact.jsView on unpkg · L1
rules-react/scripts/fetch-stitch.shView file
•path = rules-react/scripts/fetch-stitch.sh kind = build_helper sizeBytes = 1009 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

rules-react/scripts/fetch-stitch.shView on unpkg
bin/cli.jsView file
•matchType = previous_version_dangerous_delta matchedPackage = solmate-skills@2.0.13 matchedIdentity = npm:c29sbWF0ZS1za2lsbHM:2.0.13 similarity = 0.938 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.jsView on unpkg

Findings

1 High5 Medium4 Low
HighPrevious Version Dangerous Deltabin/cli.js
MediumDynamic Requirebin/harness-artifact.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperrules-react/scripts/fetch-stitch.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings