{"data":{"skill":{"slug":"internet-court-internet-court","name":"internet-court","icon":"📦","repo":"https://github.com/internet-court/internet-court-skill/tree/main/","status":"approved","author":"internet-court","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"855cf7dd-5dd9-4833-a242-8ec32e99a92e","skill_id":"0a0bdc0b-0ca2-4752-8a9a-9280c250248d","version":2,"content_hash":"v3:3f6e026a3363e0954ede7bef0cfe88d4475de137:b3bbd91c0da8933660828dc9fc57c7c558662a81bd6f099b34e84c47fc6b995a:370a15e0720f135e57402e9fbddc3af4723c6f041cc94d225f4e1b42b995ec96:736b696c6c732f696e7465726e65742d636f7572742f696e7465726e65742d636f757274:f61c3faee9b5ee1e9fc53a2aecd0db0b","risk_level":"critical","is_blocked":true,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"blocked","manual_install_policy":"allowed_with_warning","summary":"The bundle contains confirmed critical remote installer pipelines, secret-retrieval commands, model-generated eval, plaintext private-key workflows, and silent global plugin installation. Many remaining matches are lexical false positives, but the confirmed supply-chain and credential risks prevent unattended use. Static review was capped at 400/6908 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.","remediation":[{"issue":"Static review capped","severity":"medium","suggestion":"Manually review the omitted 6508 static analyzer matches or reduce bundled generated/vendor/reference content before enabling automatic publication."},{"issue":"Remote installer responses are piped directly into shells.","severity":"critical","suggestion":"Download pinned releases, verify checksums or signatures, inspect scripts, and require explicit approval before execution."},{"issue":"Wallet secrets can be printed, exported, passed as arguments, or stored in plaintext files.","severity":"critical","suggestion":"Use wallet-provider signing, protected secret stores, restrictive permissions, redacted logs, and non-exportable test keys."},{"issue":"LLM-generated Python expressions are executed with eval.","severity":"high","suggestion":"Replace eval with a constrained rule schema and an AST interpreter that rejects attributes, calls, imports, and unknown operators."},{"issue":"A third-party plugin is installed globally and loaded without visible consent.","severity":"critical","suggestion":"Show the source, version, hash, permissions, and destination. Require explicit approval before every install or update."},{"issue":"Coverage-gap reporting can publish user goals and failure details automatically.","severity":"high","suggestion":"Prepare a redacted issue draft, show the exact content, and require approval before any external submission."},{"issue":"Untrusted peer messages and repositories can steer agent actions.","severity":"high","suggestion":"Authenticate senders, validate identifiers and schemas, isolate external content, and forbid embedded instructions from changing agent policy."},{"issue":"Privileged commands and predictable temporary paths appear in operational guidance.","severity":"medium","suggestion":"Require approval for sudo and process termination. Use securely created temporary directories with restrictive permissions and cleanup."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":8,"line_start":8},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":18,"line_start":12},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":27,"line_start":18},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":27,"line_start":27},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":71,"line_start":63},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":75,"line_start":71},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":76,"line_start":75},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":77,"line_start":76},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":77,"line_start":77},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":82,"line_start":81},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":82,"line_start":82},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":83,"line_start":83},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":106,"line_start":103},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":113,"line_start":106},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":114,"line_start":113},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":115,"line_start":114},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":120,"line_start":115},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":124,"line_start":120},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":127,"line_start":124},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":128,"line_start":127},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":129,"line_start":128},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":132,"line_start":129},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":138,"line_start":132},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":148,"line_start":138},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":159,"line_start":148},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":160,"line_start":159},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":161,"line_start":160},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":162,"line_start":161},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":162,"line_start":162},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":178,"line_start":163},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":179,"line_start":178},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":180,"line_start":179},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":193,"line_start":180},{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":202,"line_start":193},{"file":"integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md","line_end":41,"line_start":40},{"file":"integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md","line_end":44,"line_start":41},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":12,"line_start":12},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":23,"line_start":16},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":36,"line_start":23},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":36,"line_start":36},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":38,"line_start":38},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":70,"line_start":46},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":74,"line_start":70},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":77,"line_start":74},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":79,"line_start":77},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":80,"line_start":79},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":81,"line_start":80},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":82,"line_start":81},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":83,"line_start":82},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":84,"line_start":83}]},{"factor":"network","evidence":[{"file":"integrations/genlayer-erc7710-connector/SKILL.md","line_end":8,"line_start":8},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":3,"line_start":3},{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":12,"line_start":12},{"file":"README.md","line_end":135,"line_start":135},{"file":"README.md","line_end":148,"line_start":148},{"file":"README.md","line_end":158,"line_start":158},{"file":"README.md","line_end":177,"line_start":177},{"file":"SKILL.md","line_end":36,"line_start":36},{"file":"SKILL.md","line_end":47,"line_start":47},{"file":"SKILL.md","line_end":218,"line_start":218},{"file":"SKILL.md","line_end":363,"line_start":363},{"file":"skills-lock.json","line_end":138,"line_start":138},{"file":"skills-lock.json","line_end":257,"line_start":257},{"file":"skills-lock.json","line_end":280,"line_start":280},{"file":"skills-lock.json","line_end":711,"line_start":711},{"file":"vendored/0g/0g-compute/README.md","line_end":20,"line_start":20},{"file":"vendored/0g/0g-compute/README.md","line_end":23,"line_start":23},{"file":"vendored/0g/0g-compute/README.md","line_end":26,"line_start":26},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":218,"line_start":218},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":219,"line_start":219},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":568,"line_start":568},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":238,"line_start":238},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":114,"line_start":114},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":143,"line_start":143},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":277,"line_start":277},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":113,"line_start":113},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":144,"line_start":144},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":450,"line_start":450},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":188,"line_start":188},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":280,"line_start":280},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":440,"line_start":440},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":457,"line_start":457},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":67,"line_start":67},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":111,"line_start":111},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":138,"line_start":138},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":389,"line_start":389},{"file":"vendored/0g/0g-compute/references/inference.md","line_end":131,"line_start":131},{"file":"vendored/0g/0g-compute/references/inference.md","line_end":156,"line_start":156},{"file":"vendored/0g/0g-compute/references/inference.md","line_end":236,"line_start":236},{"file":"vendored/0g/0g-compute/references/inference.md","line_end":273,"line_start":273},{"file":"vendored/0g/0g-compute/references/inference.md","line_end":296,"line_start":296},{"file":"vendored/0g/0g-compute/references/inference.md","line_end":16,"line_start":16},{"file":"vendored/0g/0g-compute/references/inference.md","line_end":17,"line_start":17},{"file":"vendored/0g/0g-compute/SKILL.md","line_end":73,"line_start":73},{"file":"vendored/0g/0g-compute/SKILL.md","line_end":27,"line_start":27},{"file":"vendored/0g/0g-compute/SKILL.md","line_end":28,"line_start":28},{"file":"vendored/0g/0g-compute/SKILL.md","line_end":56,"line_start":56},{"file":"vendored/0g/0g-compute/SKILL.md","line_end":57,"line_start":57},{"file":"vendored/0g/0g-compute/SKILL.md","line_end":171,"line_start":171},{"file":"vendored/0g/0g-compute/SKILL.md","line_end":172,"line_start":172}]},{"factor":"filesystem","evidence":[{"file":"integrations/genlayer-intelligent-contracts/SKILL.md","line_end":38,"line_start":38},{"file":"README.md","line_end":135,"line_start":135},{"file":"README.md","line_end":148,"line_start":148},{"file":"README.md","line_end":158,"line_start":158},{"file":"README.md","line_end":161,"line_start":161},{"file":"README.md","line_end":177,"line_start":177},{"file":"README.md","line_end":135,"line_start":135},{"file":"README.md","line_end":148,"line_start":148},{"file":"README.md","line_end":158,"line_start":158},{"file":"README.md","line_end":161,"line_start":161},{"file":"README.md","line_end":177,"line_start":177},{"file":"SKILL.md","line_end":42,"line_start":42},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"vendored/0g/0g-compute/README.md","line_end":11,"line_start":11},{"file":"vendored/0g/0g-compute/README.md","line_end":12,"line_start":12},{"file":"vendored/0g/0g-compute/README.md","line_end":13,"line_start":13},{"file":"vendored/0g/0g-compute/README.md","line_end":20,"line_start":20},{"file":"vendored/0g/0g-compute/README.md","line_end":23,"line_start":23},{"file":"vendored/0g/0g-compute/README.md","line_end":26,"line_start":26},{"file":"vendored/0g/0g-compute/README.md","line_end":11,"line_start":11},{"file":"vendored/0g/0g-compute/README.md","line_end":12,"line_start":12},{"file":"vendored/0g/0g-compute/README.md","line_end":13,"line_start":13},{"file":"vendored/0g/0g-compute/README.md","line_end":20,"line_start":20},{"file":"vendored/0g/0g-compute/README.md","line_end":23,"line_start":23},{"file":"vendored/0g/0g-compute/README.md","line_end":26,"line_start":26},{"file":"vendored/0g/0g-compute/references/examples/README.md","line_end":145,"line_start":145},{"file":"vendored/0g/0g-compute/references/examples/README.md","line_end":146,"line_start":146},{"file":"vendored/0g/0g-compute/references/examples/README.md","line_end":147,"line_start":147},{"file":"vendored/0g/0g-compute/references/examples/README.md","line_end":163,"line_start":163},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":299,"line_start":299},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":383,"line_start":383},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":672,"line_start":672},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":287,"line_start":287},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":298,"line_start":298},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":303,"line_start":303},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":383,"line_start":383},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":225,"line_start":225},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":528,"line_start":528},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":341,"line_start":341},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":676,"line_start":676},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":250,"line_start":250},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":273,"line_start":273},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":645,"line_start":645},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":646,"line_start":646},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":194,"line_start":194},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":228,"line_start":228},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":325,"line_start":325},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":442,"line_start":442},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":446,"line_start":446},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":227,"line_start":227}]},{"factor":"env_access","evidence":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":217,"line_start":217},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":222,"line_start":222},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":569,"line_start":569},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":217,"line_start":217},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":222,"line_start":222},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":569,"line_start":569},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":222,"line_start":222},{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":569,"line_start":569},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":143,"line_start":143},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":144,"line_start":144},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":145,"line_start":145},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":149,"line_start":149},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":274,"line_start":274},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":311,"line_start":311},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":143,"line_start":143},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":144,"line_start":144},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":145,"line_start":145},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":149,"line_start":149},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":274,"line_start":274},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":311,"line_start":311},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":67,"line_start":67},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":136,"line_start":136},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":141,"line_start":141},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":117,"line_start":117},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":274,"line_start":274},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":275,"line_start":275},{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":311,"line_start":311},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":144,"line_start":144},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":148,"line_start":148},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":149,"line_start":149},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":189,"line_start":189},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":201,"line_start":201},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":144,"line_start":144},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":148,"line_start":148},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":149,"line_start":149},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":189,"line_start":189},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":201,"line_start":201},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":66,"line_start":66},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":138,"line_start":138},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":141,"line_start":141},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":116,"line_start":116},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":189,"line_start":189},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":190,"line_start":190},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":201,"line_start":201},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":574,"line_start":574},{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":578,"line_start":578},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":138,"line_start":138},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":139,"line_start":139},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":143,"line_start":143},{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":203,"line_start":203}]},{"factor":"scripts","evidence":[{"file":"vendored/arkhai/alkahest-developer/references/python-api.md","line_end":21,"line_start":16},{"file":"vendored/arkhai/alkahest-developer/references/python-api.md","line_end":192,"line_start":183},{"file":"vendored/arkhai/alkahest-developer/references/python-api.md","line_end":208,"line_start":202},{"file":"vendored/arkhai/alkahest-developer/references/python-api.md","line_end":241,"line_start":235},{"file":"vendored/genlayer/write-contract/SKILL.md","line_end":393,"line_start":393},{"file":"vendored/genlayer/write-contract/SKILL.md","line_end":407,"line_start":407},{"file":"vendored/genlayer/write-contract/SKILL.md","line_end":412,"line_start":412},{"file":"vendored/genlayer/write-contract/SKILL.md","line_end":178,"line_start":178},{"file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","line_end":107,"line_start":107},{"file":"vendored/okx/okx-agent-payments-protocol/SKILL.md","line_end":180,"line_start":180},{"file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","line_end":175,"line_start":175},{"file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","line_end":179,"line_start":179},{"file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","line_end":180,"line_start":180},{"file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","line_end":186,"line_start":186}]}],"critical_findings":[{"title":"Pipe to shell pattern","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":8,"line_start":8}],"confidence":0.99,"description":"curl -L https://foundry.paradigm.xyz | bash","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":123,"line_start":123}],"confidence":0.99,"description":"- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/nansen/nansen-mpp-payment/SKILL.md","line_end":34,"line_start":34}],"confidence":0.99,"description":"curl -fsSL https://tempo.xyz/install | bash","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/near/near-smart-contracts/SKILL.md","line_end":33,"line_start":33}],"confidence":0.99,"description":"curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/near/near-smart-contracts/SKILL.md","line_end":39,"line_start":39}],"confidence":0.99,"description":"curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/ca","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/near/near-smart-contracts/SKILL.md","line_end":42,"line_start":42}],"confidence":0.99,"description":"curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/n","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"macOS security command","locations":[{"file":"vendored/chaingpt/agent-wallet/SKILL.md","line_end":50,"line_start":50}],"confidence":0.97,"description":"> **Back up the passphrase either way.** Keychain entry: `service=chaingpt-mcp-agent-wallet account=","review_kind":"security","source_category":"sensitive","source_severity":"critical","confidence_reasoning":"The command retrieves a wallet passphrase from macOS Keychain and prints it. Agent context, terminal capture, or logs could expose the secret."},{"title":"Silent Third-Party Skill Installation","locations":[{"file":"vendored/okx/okx-dapp-discovery/SKILL.md","line_end":198,"line_start":184}],"confidence":0.99,"description":"The routing skill silently installs a global third-party plugin and immediately loads its instructions. This bypasses informed consent and creates a supply-chain execution path.","review_kind":"security","source_category":"semantic","source_severity":"critical","confidence_reasoning":"The instructions explicitly use a global install command with automatic confirmation, call the process invisible, and immediately apply the installed plugin."}],"high_findings":[{"title":"Certificate/key files","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":151,"line_start":151}],"confidence":0.96,"description":"- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds."},{"title":"Certificate/key files","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":214,"line_start":214}],"confidence":0.96,"description":"| `identity.key` | Raw 32-byte EVM private key for the buyer wallet. Fallback when `ANTSEED_IDENTITY","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds."},{"title":"Crypto seed/private key mention","locations":[{"file":"integrations/x402-erc7710/SKILL.md","line_end":119,"line_start":119}],"confidence":0.99,"description":"- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds."},{"title":"Crypto seed/private key mention","locations":[{"file":"integrations/x402-erc7710/SKILL.md","line_end":126,"line_start":126}],"confidence":0.99,"description":"The exported agent package is a bearer capability in demo form. Include explicit warnings, keep caps","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds."},{"title":"Crypto seed/private key mention","locations":[{"file":"integrations/x402-erc7710/SKILL.md","line_end":147,"line_start":147}],"confidence":0.99,"description":"- include private key in exported JSON or omit it;","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds."},{"title":"Crypto seed/private key mention","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":91,"line_start":91}],"confidence":0.74,"description":"# Login with wallet private key","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it."},{"title":"Crypto seed/private key mention","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":517,"line_start":517}],"confidence":0.74,"description":"# Enter private key when prompted","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it."},{"title":"Crypto seed/private key mention","locations":[{"file":"vendored/0g/0g-compute/references/examples/README.md","line_end":122,"line_start":122}],"confidence":0.96,"description":"2. **Environment configuration**: Setup `.env` file with private key","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds."},{"title":"Crypto seed/private key mention","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":116,"line_start":116}],"confidence":0.96,"description":"# Your wallet private key","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds."},{"title":"Crypto seed/private key mention","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":115,"line_start":115}],"confidence":0.96,"description":"# Your wallet private key (NEVER commit this file!)","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds."},{"title":"Crypto seed/private key mention","locations":[{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":113,"line_start":113}],"confidence":0.96,"description":"# Your wallet private key","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds."},{"title":"Environment file access","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":222,"line_start":222}],"confidence":0.94,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing."},{"title":"Environment file access","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":569,"line_start":569}],"confidence":0.94,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing."},{"title":"Environment file access","locations":[{"file":"vendored/0g/0g-compute/references/examples/README.md","line_end":122,"line_start":122}],"confidence":0.94,"description":"2. **Environment configuration**: Setup `.env` file with private key","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing."},{"title":"Environment file access","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":110,"line_start":110}],"confidence":0.94,"description":"Create `.env`:","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing."},{"title":"Environment file access","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":274,"line_start":274}],"confidence":0.94,"description":"if (!process.env.PRIVATE_KEY) {","review_kind":"security","source_category":"sensitive","source_severity":"high","confidence_reasoning":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing."},{"title":"Dynamic code evaluation with eval()","locations":[{"file":"vendored/genlayer/write-contract/SKILL.md","line_end":393,"line_start":393}],"confidence":0.99,"description":"LLMs can't reliably inspect characters in their input (they hallucinate em dashes, miscount characte","review_kind":"capability","source_category":"scripts","source_severity":"high","confidence_reasoning":"The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted."},{"title":"Dynamic code evaluation with eval()","locations":[{"file":"vendored/genlayer/write-contract/SKILL.md","line_end":407,"line_start":407}],"confidence":0.99,"description":"# Step 2: eval() all checks in one sandbox — deterministic, no hallucination","review_kind":"capability","source_category":"scripts","source_severity":"high","confidence_reasoning":"The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted."},{"title":"Dynamic code evaluation with eval()","locations":[{"file":"vendored/genlayer/write-contract/SKILL.md","line_end":412,"line_start":412}],"confidence":0.99,"description":"ok = eval(c[\"expression\"], {","review_kind":"capability","source_category":"scripts","source_severity":"high","confidence_reasoning":"The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":222,"line_start":222}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":569,"line_start":569}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":117,"line_start":117}],"confidence":0.97,"description":"PRIVATE_KEY=your_private_key_here","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":274,"line_start":274}],"confidence":0.97,"description":"if (!process.env.PRIVATE_KEY) {","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":275,"line_start":275}],"confidence":0.97,"description":"throw new Error(\"PRIVATE_KEY not found in .env\");","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":311,"line_start":311}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":116,"line_start":116}],"confidence":0.97,"description":"PRIVATE_KEY=your_private_key_here","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":189,"line_start":189}],"confidence":0.97,"description":"if (!process.env.PRIVATE_KEY) {","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":190,"line_start":190}],"confidence":0.97,"description":"throw new Error(\"PRIVATE_KEY not found in environment variables\");","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":201,"line_start":201}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":574,"line_start":574}],"confidence":0.97,"description":"#### \"PRIVATE_KEY not found\"","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Generic API/secret keys","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":578,"line_start":578}],"confidence":0.97,"description":"PRIVATE_KEY=your_private_key_here","review_kind":"capability","source_category":"env_access","source_severity":"high","confidence_reasoning":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions."},{"title":"Hidden file in home directory","locations":[{"file":"vendored/altlayer/altllm-portal-auth/SKILL.md","line_end":38,"line_start":38}],"confidence":0.72,"description":"- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.","review_kind":"capability","source_category":"filesystem","source_severity":"high","confidence_reasoning":"The guide persists an authenticated session under the home directory. Weak permissions, backups, or unintended reads could expose reusable credentials."},{"title":"Hidden file in home directory","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":151,"line_start":151}],"confidence":0.96,"description":"- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.","review_kind":"capability","source_category":"filesystem","source_severity":"high","confidence_reasoning":"The cited hidden file is a raw funded-wallet private key. Local disclosure or unsafe backup would permit unauthorized signing."},{"title":"sudo privilege escalation","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":866,"line_start":866}],"confidence":0.87,"description":"sudo systemctl restart hermes","review_kind":"capability","source_category":"external_commands","source_severity":"high","confidence_reasoning":"The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval."},{"title":"sudo privilege escalation","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":868,"line_start":868}],"confidence":0.75,"description":"> Or whatever supervisor you use. Then check the journal: `sudo journalctl -u hermes --no-pager -n 3","review_kind":"capability","source_category":"external_commands","source_severity":"high","confidence_reasoning":"The guide invokes sudo to read service logs, which may expose sensitive runtime data. Elevated access should require explicit user approval."},{"title":"sudo privilege escalation","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":881,"line_start":881}],"confidence":0.87,"description":"- *Want to swap the routed model without restarting AntSeed* — Edit `model.default` (and `models:` i","review_kind":"capability","source_category":"external_commands","source_severity":"high","confidence_reasoning":"The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval."},{"title":"Automatic External Disclosure of User Context","locations":[{"file":"SKILL.md","line_end":376,"line_start":352}],"confidence":0.98,"description":"The skill requires opening a public repository issue and including the user goal and failure details. It does not require user approval or redaction.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The instructions mandate filing the issue directly when a GitHub tool exists and specify that user goals and failures must be included."},{"title":"Untrusted Peer Message Controls Priority Actions","locations":[{"file":"vendored/okx/okx-ai/references/task-user-sub-playbook.md","line_end":55,"line_start":39}],"confidence":0.93,"description":"A peer-controlled marker receives highest priority and causes raw message data to be written and passed to a CLI. Sender and job validation are not required.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The routing table explicitly prioritizes a peer marker before other actions and passes the complete untrusted message through a local file to the CLI."}],"medium_findings":[{"title":"SQLite database file","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":218,"line_start":218}],"confidence":0.64,"description":"| `metering.db` | SQLite log of every request the proxy served (model, peer, tokens, USDC). Used by ","review_kind":"security","source_category":"sensitive","source_severity":"medium","confidence_reasoning":"The local database retains request, peer, token, and payment history. Backups or weak file permissions could expose operational metadata."},{"title":"Hidden file access","locations":[{"file":"vendored/altlayer/altllm-portal-auth/references/cli-reference.md","line_end":20,"line_start":20}],"confidence":0.72,"description":"\"sessionFile\": \"/Users/<user>/.altllm/portal-cli-session.json\",","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials."},{"title":"Hidden file access","locations":[{"file":"vendored/altlayer/altllm-portal-auth/references/cli-reference.md","line_end":113,"line_start":113}],"confidence":0.72,"description":"\"sessionFile\": \"/Users/<user>/.altllm/portal-cli-session.json\",","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials."},{"title":"Hidden file access","locations":[{"file":"vendored/altlayer/altllm-portal-auth/SKILL.md","line_end":38,"line_start":38}],"confidence":0.72,"description":"- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The guide persists an authenticated session in a hidden home directory. Weak file permissions or backups could expose reusable credentials."},{"title":"Hidden file access","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":151,"line_start":151}],"confidence":0.96,"description":"- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The cited hidden file contains a raw funded-wallet private key. Unintended local access would permit unauthorized signing."},{"title":"Shell command substitution","locations":[{"file":"vendored/antseed/antseed-connect/SKILL.md","line_end":83,"line_start":83}],"confidence":0.66,"description":"export ANTSEED_IDENTITY_HEX=$(openssl rand -hex 32)","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The command creates a raw wallet key and exports it into the process environment. Child processes or environment capture could expose it."},{"title":"Shell command substitution","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":45,"line_start":45}],"confidence":0.79,"description":"WALLET=$(cast wallet address --private-key \"$PRIVATE_KEY\")","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret."},{"title":"Shell command substitution","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":85,"line_start":85}],"confidence":0.79,"description":"SIG=$(cast wallet sign --data --from-file --private-key \"$PRIVATE_KEY\" /tmp/eip712.json)","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret."},{"title":"Temp directory access","locations":[{"file":"vendored/arkhai/fulfill-git-escrow/SKILL.md","line_end":60,"line_start":60}],"confidence":0.78,"description":"2. Clone it to a temporary location: `git clone <url> /tmp/escrow-tests-<uid> && cd /tmp/escrow-test","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The guide clones an externally supplied repository into a predictable temporary path. Existing paths, symlinks, or crafted identifiers could redirect writes."},{"title":"Temp directory access","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":49,"line_start":49}],"confidence":0.81,"description":"cat > /tmp/eip712.json << EOF","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race."},{"title":"Temp directory access","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":85,"line_start":85}],"confidence":0.81,"description":"SIG=$(cast wallet sign --data --from-file --private-key \"$PRIVATE_KEY\" /tmp/eip712.json)","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race."},{"title":"Temp directory access","locations":[{"file":"vendored/okx/okx-ai/references/task-user-sub-playbook.md","line_end":47,"line_start":47}],"confidence":0.76,"description":"| 1 | Contains `[intent:deliver]` | **Highest priority — process THIS TURN before any other CLI call","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks."},{"title":"Temp directory access","locations":[{"file":"vendored/okx/okx-ai/references/task-user-sub-playbook.md","line_end":54,"line_start":54}],"confidence":0.76,"description":"1. Write its **raw JSON** to `/tmp/a2a_deliver_<jobId>.json` first.","review_kind":"capability","source_category":"filesystem","source_severity":"medium","confidence_reasoning":"The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks."},{"title":"xargs command (can execute arbitrary commands)","locations":[{"file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","line_end":37,"line_start":37}],"confidence":0.96,"description":"lsof -ti:7378 | xargs kill -9","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The command force-kills every process listening on a port without checking ownership or identity. It can terminate an unrelated process."},{"title":"Fetch API call","locations":[{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":188,"line_start":188}],"confidence":0.84,"description":"const response = await fetch(url);","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion."},{"title":"Fetch API call","locations":[{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":440,"line_start":440}],"confidence":0.84,"description":"const response = await fetch(imageUrl);","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion."},{"title":"Untrusted Repository Content Lacks an Instruction Boundary","locations":[{"file":"vendored/arkhai/fulfill-git-escrow/SKILL.md","line_end":65,"line_start":46}],"confidence":0.82,"description":"The workflow clones an escrow-selected repository and directs the agent to read its tests. It does not warn that repository instructions are untrusted data.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"The repository URL and commit come from external escrow data, then the agent reads test content without a prompt-injection or trust-boundary safeguard."}],"low_findings":[{"title":"dotenv library","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":141,"line_start":141}],"confidence":0.76,"description":"dotenv.config();","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys."},{"title":"dotenv library","locations":[{"file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","line_end":141,"line_start":141}],"confidence":0.76,"description":"dotenv.config();","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys."},{"title":"dotenv library","locations":[{"file":"vendored/0g/0g-compute/references/examples/text-to-image.md","line_end":136,"line_start":136}],"confidence":0.76,"description":"dotenv.config();","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys."},{"title":"dotenv library","locations":[{"file":"vendored/openserv/openserv-agent-sdk/examples/basic-agent.ts","line_end":9,"line_start":9}],"confidence":0.76,"description":"import 'dotenv/config'","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys."},{"title":"dotenv library","locations":[{"file":"vendored/openserv/openserv-agent-sdk/examples/haiku-poet-agent.ts","line_end":9,"line_start":9}],"confidence":0.76,"description":"import 'dotenv/config'","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys."},{"title":"Environment variable access (bracket notation)","locations":[{"file":"vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts","line_end":66,"line_start":66}],"confidence":0.95,"description":"for (const key of required) creds[key] = process.env[key];","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority."},{"title":"Environment variable access (bracket notation)","locations":[{"file":"vendored/starknet/starknet-js/scripts/account-example.ts","line_end":10,"line_start":10}],"confidence":0.95,"description":"const value = process.env[name]?.trim();","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority."},{"title":"Environment variable access (dot notation)","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":222,"line_start":222}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Environment variable access (dot notation)","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":569,"line_start":569}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Environment variable access (dot notation)","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":274,"line_start":274}],"confidence":0.97,"description":"if (!process.env.PRIVATE_KEY) {","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Environment variable access (dot notation)","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":311,"line_start":311}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Environment variable object","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":222,"line_start":222}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Environment variable object","locations":[{"file":"vendored/0g/0g-compute/references/account-management.md","line_end":569,"line_start":569}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Environment variable object","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":274,"line_start":274}],"confidence":0.97,"description":"if (!process.env.PRIVATE_KEY) {","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Environment variable object","locations":[{"file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","line_end":311,"line_start":311}],"confidence":0.97,"description":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations."},{"title":"Python environment access","locations":[{"file":"vendored/chaingpt/chaingpt/SKILL.md","line_end":322,"line_start":322}],"confidence":0.86,"description":"1. **Store API keys in environment variables** — never hardcode. Use `process.env.CHAINGPT_API_KEY` ","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service."},{"title":"Python environment access","locations":[{"file":"vendored/near/near-ai-cloud/references/private-vs-anonymised.md","line_end":87,"line_start":87}],"confidence":0.86,"description":"'Authorization': f'Bearer {os.environ[\"NEAR_API_KEY\"]}'","review_kind":"capability","source_category":"env_access","source_severity":"low","confidence_reasoning":"The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service."}],"dangerous_patterns":[{"title":"Pipe to shell pattern","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":8,"line_start":8}],"confidence":0.99,"description":"curl -L https://foundry.paradigm.xyz | bash","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","line_end":123,"line_start":123}],"confidence":0.99,"description":"- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/nansen/nansen-mpp-payment/SKILL.md","line_end":34,"line_start":34}],"confidence":0.99,"description":"curl -fsSL https://tempo.xyz/install | bash","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/near/near-smart-contracts/SKILL.md","line_end":33,"line_start":33}],"confidence":0.99,"description":"curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/near/near-smart-contracts/SKILL.md","line_end":39,"line_start":39}],"confidence":0.99,"description":"curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/ca","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"Pipe to shell pattern","locations":[{"file":"vendored/near/near-smart-contracts/SKILL.md","line_end":42,"line_start":42}],"confidence":0.99,"description":"curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/n","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code."},{"title":"macOS security command","locations":[{"file":"vendored/chaingpt/agent-wallet/SKILL.md","line_end":50,"line_start":50}],"confidence":0.97,"description":"> **Back up the passphrase either way.** Keychain entry: `service=chaingpt-mcp-agent-wallet account=","review_kind":"security","source_category":"sensitive","source_severity":"critical","confidence_reasoning":"The command retrieves a wallet passphrase from macOS Keychain and prints it. Agent context, terminal capture, or logs could expose the secret."}],"files_scanned":376,"total_lines":59995,"audit_model":"codex","audited_at":"2026-07-19T10:16:26.534+00:00","created_at":"2026-07-19T11:17:07.716062+00:00","static_findings":[{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:8:pipe-to-shell-pattern","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Pipe to shell pattern","snippet":"curl -L https://foundry.paradigm.xyz | bash","category":"blocker","line_end":8,"severity":"critical","line_start":8},{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:123:pipe-to-shell-pattern","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Pipe to shell pattern","snippet":"- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)","category":"blocker","line_end":123,"severity":"critical","line_start":123},{"id":"blocker:vendored/nansen/nansen-mpp-payment/SKILL.md:34:pipe-to-shell-pattern","file":"vendored/nansen/nansen-mpp-payment/SKILL.md","pattern":"Pipe to shell pattern","snippet":"curl -fsSL https://tempo.xyz/install | bash","category":"blocker","line_end":34,"severity":"critical","line_start":34},{"id":"blocker:vendored/near/near-smart-contracts/SKILL.md:33:pipe-to-shell-pattern","file":"vendored/near/near-smart-contracts/SKILL.md","pattern":"Pipe to shell pattern","snippet":"curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh","category":"blocker","line_end":33,"severity":"critical","line_start":33},{"id":"blocker:vendored/near/near-smart-contracts/SKILL.md:39:pipe-to-shell-pattern","file":"vendored/near/near-smart-contracts/SKILL.md","pattern":"Pipe to shell pattern","snippet":"curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/cargo-near/releases/latest/download/ca","category":"blocker","line_end":39,"severity":"critical","line_start":39},{"id":"blocker:vendored/near/near-smart-contracts/SKILL.md:42:pipe-to-shell-pattern","file":"vendored/near/near-smart-contracts/SKILL.md","pattern":"Pipe to shell pattern","snippet":"curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/n","category":"blocker","line_end":42,"severity":"critical","line_start":42},{"id":"sensitive:vendored/chaingpt/agent-wallet/SKILL.md:228:1password-data","file":"vendored/chaingpt/agent-wallet/SKILL.md","pattern":"1Password data","snippet":"- **Recover lost passphrases.** Lose `CHAINGPT_AGENT_WALLET_PASSPHRASE` → the keystore is unrecovera","category":"sensitive","line_end":228,"severity":"critical","line_start":228},{"id":"sensitive:vendored/0g/0g-compute/references/inference.md:31:cryptocurrency-wallet","file":"vendored/0g/0g-compute/references/inference.md","pattern":"Cryptocurrency wallet","snippet":"if (typeof window.ethereum === \"undefined\") {","category":"sensitive","line_end":31,"severity":"critical","line_start":31},{"id":"sensitive:vendored/0g/0g-compute/references/inference.md:35:cryptocurrency-wallet","file":"vendored/0g/0g-compute/references/inference.md","pattern":"Cryptocurrency wallet","snippet":"const provider = new BrowserProvider(window.ethereum);","category":"sensitive","line_end":35,"severity":"critical","line_start":35},{"id":"sensitive:vendored/kleros/kleros-curate/references/scout-registries.md:120:cryptocurrency-wallet","file":"vendored/kleros/kleros-curate/references/scout-registries.md","pattern":"Cryptocurrency wallet","snippet":"\"description\": \"The URL of the most popular user interface used to interact with the contract tagged","category":"sensitive","line_end":120,"severity":"critical","line_start":120},{"id":"sensitive:vendored/metamask/smart-accounts-kit/workflows/request-permissions.md:17:cryptocurrency-wallet","file":"vendored/metamask/smart-accounts-kit/workflows/request-permissions.md","pattern":"Cryptocurrency wallet","snippet":"transport: custom(window.ethereum),","category":"sensitive","line_end":17,"severity":"critical","line_start":17},{"id":"sensitive:vendored/near/near-smart-contracts/rules/chain-signatures.md:385:cryptocurrency-wallet","file":"vendored/near/near-smart-contracts/rules/chain-signatures.md","pattern":"Cryptocurrency wallet","snippet":"Available chain adapters: `evm.EVM`, `bitcoin.Bitcoin`, `solana.Solana`, `cosmos.Cosmos`, `xrp.XRP`,","category":"sensitive","line_end":385,"severity":"critical","line_start":385},{"id":"sensitive:vendored/privy/privy/SKILL.md:157:cryptocurrency-wallet","file":"vendored/privy/privy/SKILL.md","pattern":"Cryptocurrency wallet","snippet":"- **Server-side:** Call `privy.wallets().ethereum().sendTransaction()` or equivalent","category":"sensitive","line_end":157,"severity":"critical","line_start":157},{"id":"sensitive:vendored/starknet/starknet-identity/SKILL.md:319:cryptocurrency-wallet","file":"vendored/starknet/starknet-identity/SKILL.md","pattern":"Cryptocurrency wallet","snippet":"- [ERC-8004 EIP](https://eips.ethereum.org/EIPS/eip-8004)","category":"sensitive","line_end":319,"severity":"critical","line_start":319},{"id":"sensitive:vendored/chaingpt/agent-wallet/SKILL.md:50:macos-security-command","file":"vendored/chaingpt/agent-wallet/SKILL.md","pattern":"macOS security command","snippet":"> **Back up the passphrase either way.** Keychain entry: `service=chaingpt-mcp-agent-wallet account=","category":"sensitive","line_end":50,"severity":"critical","line_start":50},{"id":"blocker:vendored/0g/0g-compute/references/account-management.md:234:ransomware-file-extensions","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ransomware file extensions","snippet":"console.log(`Locked: ${ethers.formatEther(account.lockedBalance)} 0G`);","category":"blocker","line_end":234,"severity":"high","line_start":234},{"id":"blocker:vendored/openserv/openserv-launch/examples/agent-launcher.ts:79:ransomware-file-extensions","file":"vendored/openserv/openserv-launch/examples/agent-launcher.ts","pattern":"Ransomware file extensions","snippet":"- Locked Until: ${locker.lockedUntil}","category":"blocker","line_end":79,"severity":"high","line_start":79},{"id":"blocker:vendored/openserv/openserv-launch/examples/agent-launcher.ts:165:ransomware-file-extensions","file":"vendored/openserv/openserv-launch/examples/agent-launcher.ts","pattern":"Ransomware file extensions","snippet":"- Locked Until: ${locker.lockedUntil}","category":"blocker","line_end":165,"severity":"high","line_start":165},{"id":"blocker:vendored/openserv/openserv-launch/examples/launch-token.ts:118:ransomware-file-extensions","file":"vendored/openserv/openserv-launch/examples/launch-token.ts","pattern":"Ransomware file extensions","snippet":"console.log(`   Locked Until: ${result.locker.lockedUntil}`)","category":"blocker","line_end":118,"severity":"high","line_start":118},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:102:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"service:  $s.key,","category":"sensitive","line_end":102,"severity":"high","line_start":102},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:104:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"in:       (.providerPricing[$p.key].services[$s.key].inputUsdPerMillion       // .providerPricing[$p","category":"sensitive","line_end":104,"severity":"high","line_start":104},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:105:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"cachedIn: (.providerPricing[$p.key].services[$s.key].cachedInputUsdPerMillion // null),","category":"sensitive","line_end":105,"severity":"high","line_start":105},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:106:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"out:      (.providerPricing[$p.key].services[$s.key].outputUsdPerMillion      // .providerPricing[$p","category":"sensitive","line_end":106,"severity":"high","line_start":106},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:124:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"| (.matchingServices[] | select(.provider == $p.key and .service == $s.key)) as $m","category":"sensitive","line_end":124,"severity":"high","line_start":124},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:126:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"provider: $p.key,","category":"sensitive","line_end":126,"severity":"high","line_start":126},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:127:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"service: $s.key,","category":"sensitive","line_end":127,"severity":"high","line_start":127},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:151:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.","category":"sensitive","line_end":151,"severity":"high","line_start":151},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:214:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"| `identity.key` | Raw 32-byte EVM private key for the buyer wallet. Fallback when `ANTSEED_IDENTITY","category":"sensitive","line_end":214,"severity":"high","line_start":214},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:215:certificate-key-files","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Certificate/key files","snippet":"| `identity.enc` | Encrypted copy of `identity.key` (when the desktop app sets a passphrase). | yes ","category":"sensitive","line_end":215,"severity":"high","line_start":215},{"id":"sensitive:vendored/genlayer/write-contract/SKILL.md:361:certificate-key-files","file":"vendored/genlayer/write-contract/SKILL.md","pattern":"Certificate/key files","snippet":"raise gl.vm.UserError(f\"{ERROR_LLM} Missing 'score'. Keys: {list(analysis.keys())}\")","category":"sensitive","line_end":361,"severity":"high","line_start":361},{"id":"sensitive:vendored/kleros/kleros-curate/references/shared-item-json.md:33:certificate-key-files","file":"vendored/kleros/kleros-curate/references/shared-item-json.md","pattern":"Certificate/key files","snippet":"- `Object.keys(values)` must exactly equal `columns.map(c => c.label)` in the same order.","category":"sensitive","line_end":33,"severity":"high","line_start":33},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:119:crypto-seed-private-key-mention","file":"integrations/x402-erc7710/SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- The page generates a real agent EOA for the demo and exports a JSON package containing the agent p","category":"sensitive","line_end":119,"severity":"high","line_start":119},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:126:crypto-seed-private-key-mention","file":"integrations/x402-erc7710/SKILL.md","pattern":"Crypto seed/private key mention","snippet":"The exported agent package is a bearer capability in demo form. Include explicit warnings, keep caps","category":"sensitive","line_end":126,"severity":"high","line_start":126},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:147:crypto-seed-private-key-mention","file":"integrations/x402-erc7710/SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- include private key in exported JSON or omit it;","category":"sensitive","line_end":147,"severity":"high","line_start":147},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:158:crypto-seed-private-key-mention","file":"integrations/x402-erc7710/SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- Never ask for private keys.","category":"sensitive","line_end":158,"severity":"high","line_start":158},{"id":"sensitive:SKILL.md:188:crypto-seed-private-key-mention","file":"SKILL.md","pattern":"Crypto seed/private key mention","snippet":"| Give an agent a wallet with a built-in policy gate (per-tx caps, velocity limits, session keys) in","category":"sensitive","line_end":188,"severity":"high","line_start":188},{"id":"sensitive:SKILL.md:306:crypto-seed-private-key-mention","file":"SKILL.md","pattern":"Crypto seed/private key mention","snippet":"- Never ask for a private key, seed phrase, or unrestricted bearer wallet.","category":"sensitive","line_end":306,"severity":"high","line_start":306},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:91:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Crypto seed/private key mention","snippet":"# Login with wallet private key","category":"sensitive","line_end":91,"severity":"high","line_start":91},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:370:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Crypto seed/private key mention","snippet":"- Never share private keys","category":"sensitive","line_end":370,"severity":"high","line_start":370},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:517:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Crypto seed/private key mention","snippet":"# Enter private key when prompted","category":"sensitive","line_end":517,"severity":"high","line_start":517},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:639:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Crypto seed/private key mention","snippet":"- ❌ Never share private keys","category":"sensitive","line_end":639,"severity":"high","line_start":639},{"id":"sensitive:vendored/0g/0g-compute/references/examples/README.md:122:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/examples/README.md","pattern":"Crypto seed/private key mention","snippet":"2. **Environment configuration**: Setup `.env` file with private key","category":"sensitive","line_end":122,"severity":"high","line_start":122},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:116:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Crypto seed/private key mention","snippet":"# Your wallet private key","category":"sensitive","line_end":116,"severity":"high","line_start":116},{"id":"sensitive:vendored/0g/0g-compute/references/examples/streaming-chat.md:115:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Crypto seed/private key mention","snippet":"# Your wallet private key (NEVER commit this file!)","category":"sensitive","line_end":115,"severity":"high","line_start":115},{"id":"sensitive:vendored/0g/0g-compute/references/examples/text-to-image.md:113:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Crypto seed/private key mention","snippet":"# Your wallet private key","category":"sensitive","line_end":113,"severity":"high","line_start":113},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:243:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/fine-tuning.md","pattern":"Crypto seed/private key mention","snippet":"- Decrypts the key using your private key","category":"sensitive","line_end":243,"severity":"high","line_start":243},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:432:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/fine-tuning.md","pattern":"Crypto seed/private key mention","snippet":"- Ensure you're using the correct private key","category":"sensitive","line_end":432,"severity":"high","line_start":432},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:438:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/fine-tuning.md","pattern":"Crypto seed/private key mention","snippet":"### Private Key Safety","category":"sensitive","line_end":438,"severity":"high","line_start":438},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:440:crypto-seed-private-key-mention","file":"vendored/0g/0g-compute/references/fine-tuning.md","pattern":"Crypto seed/private key mention","snippet":"- **Never share** your private key","category":"sensitive","line_end":440,"severity":"high","line_start":440},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:217:environment-file-access","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment file access","snippet":"const RPC_URL = process.env.NODE_ENV === 'production'","category":"sensitive","line_end":217,"severity":"high","line_start":217},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:222:environment-file-access","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment file access","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"sensitive","line_end":222,"severity":"high","line_start":222},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:569:environment-file-access","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment file access","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"sensitive","line_end":569,"severity":"high","line_start":569},{"id":"sensitive:vendored/0g/0g-compute/references/examples/README.md:122:environment-file-access","file":"vendored/0g/0g-compute/references/examples/README.md","pattern":"Environment file access","snippet":"2. **Environment configuration**: Setup `.env` file with private key","category":"sensitive","line_end":122,"severity":"high","line_start":122},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:27:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"└── .env","category":"sensitive","line_end":27,"severity":"high","line_start":27},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:110:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"Create `.env`:","category":"sensitive","line_end":110,"severity":"high","line_start":110},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"const RPC_URL = process.env.RPC_URL || \"https://evmrpc.0g.ai\";","category":"sensitive","line_end":143,"severity":"high","line_start":143},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:144:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"const AUDIO_DIR = process.env.AUDIO_DIR || \"./audio\";","category":"sensitive","line_end":144,"severity":"high","line_start":144},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:145:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"const TRANSCRIPT_DIR = process.env.TRANSCRIPT_DIR || \"./transcripts\";","category":"sensitive","line_end":145,"severity":"high","line_start":145},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:149:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"let providerAddress = process.env.PROVIDER_ADDRESS;","category":"sensitive","line_end":149,"severity":"high","line_start":149},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:172:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"--provider <address>    Provider address (default: from .env)","category":"sensitive","line_end":172,"severity":"high","line_start":172},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:environment-file-access","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment file access","snippet":"if (!process.env.PRIVATE_KEY) {","category":"sensitive","line_end":274,"severity":"high","line_start":274},{"id":"sensitive:vendored/intelligent-oracle/intelligent-oracle/SKILL.md:294:environment-variant-files","file":"vendored/intelligent-oracle/intelligent-oracle/SKILL.md","pattern":"Environment variant files","snippet":"This deploys a **fresh factory contract** (writing the new address to `.env.local`), not a new oracl","category":"sensitive","line_end":294,"severity":"high","line_start":294},{"id":"sensitive:vendored/lifi/lifi-stablecoin-swap/references/quickstart.md:18:environment-variant-files","file":"vendored/lifi/lifi-stablecoin-swap/references/quickstart.md","pattern":"Environment variant files","snippet":"# .env.local","category":"sensitive","line_end":18,"severity":"high","line_start":18},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:393:dynamic-code-evaluation-with-eval","file":"vendored/genlayer/write-contract/SKILL.md","pattern":"Dynamic code evaluation with eval()","snippet":"LLMs can't reliably inspect characters in their input (they hallucinate em dashes, miscount characte","category":"scripts","line_end":393,"severity":"high","line_start":393},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:407:dynamic-code-evaluation-with-eval","file":"vendored/genlayer/write-contract/SKILL.md","pattern":"Dynamic code evaluation with eval()","snippet":"# Step 2: eval() all checks in one sandbox — deterministic, no hallucination","category":"scripts","line_end":407,"severity":"high","line_start":407},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:412:dynamic-code-evaluation-with-eval","file":"vendored/genlayer/write-contract/SKILL.md","pattern":"Dynamic code evaluation with eval()","snippet":"ok = eval(c[\"expression\"], {","category":"scripts","line_end":412,"severity":"high","line_start":412},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:178:dynamic-function-constructor","file":"vendored/genlayer/write-contract/SKILL.md","pattern":"Dynamic function constructor","snippet":"### Custom Validator Function (most common)","category":"scripts","line_end":178,"severity":"high","line_start":178},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:222:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Generic API/secret keys","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"env_access","line_end":222,"severity":"high","line_start":222},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:569:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Generic API/secret keys","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"env_access","line_end":569,"severity":"high","line_start":569},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:117:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Generic API/secret keys","snippet":"PRIVATE_KEY=your_private_key_here","category":"env_access","line_end":117,"severity":"high","line_start":117},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Generic API/secret keys","snippet":"if (!process.env.PRIVATE_KEY) {","category":"env_access","line_end":274,"severity":"high","line_start":274},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:275:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Generic API/secret keys","snippet":"throw new Error(\"PRIVATE_KEY not found in .env\");","category":"env_access","line_end":275,"severity":"high","line_start":275},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:311:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Generic API/secret keys","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","category":"env_access","line_end":311,"severity":"high","line_start":311},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:116:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Generic API/secret keys","snippet":"PRIVATE_KEY=your_private_key_here","category":"env_access","line_end":116,"severity":"high","line_start":116},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:189:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Generic API/secret keys","snippet":"if (!process.env.PRIVATE_KEY) {","category":"env_access","line_end":189,"severity":"high","line_start":189},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:190:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Generic API/secret keys","snippet":"throw new Error(\"PRIVATE_KEY not found in environment variables\");","category":"env_access","line_end":190,"severity":"high","line_start":190},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:201:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Generic API/secret keys","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","category":"env_access","line_end":201,"severity":"high","line_start":201},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:574:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Generic API/secret keys","snippet":"#### \"PRIVATE_KEY not found\"","category":"env_access","line_end":574,"severity":"high","line_start":574},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:578:generic-api-secret-keys","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Generic API/secret keys","snippet":"PRIVATE_KEY=your_private_key_here","category":"env_access","line_end":578,"severity":"high","line_start":578},{"id":"filesystem:README.md:135:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.claude/skills/internet-court","category":"filesystem","line_end":135,"severity":"high","line_start":135},{"id":"filesystem:README.md:148:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.agents/skills/internet-court","category":"filesystem","line_end":148,"severity":"high","line_start":148},{"id":"filesystem:README.md:158:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.config/opencode/skills/internet-","category":"filesystem","line_end":158,"severity":"high","line_start":158},{"id":"filesystem:README.md:161:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"opencode also reads `~/.claude/skills/` and `~/.agents/skills/`, so a single","category":"filesystem","line_end":161,"severity":"high","line_start":161},{"id":"filesystem:README.md:177:hidden-file-in-home-directory","file":"README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.hermes/skills/internet-court","category":"filesystem","line_end":177,"severity":"high","line_start":177},{"id":"filesystem:vendored/0g/0g-compute/README.md:11:hidden-file-in-home-directory","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file in home directory","snippet":"- **Claude Code** — `~/.claude/skills/0g-compute/`","category":"filesystem","line_end":11,"severity":"high","line_start":11},{"id":"filesystem:vendored/0g/0g-compute/README.md:12:hidden-file-in-home-directory","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file in home directory","snippet":"- **OpenAI Codex** — `~/.agents/skills/0g-compute/`","category":"filesystem","line_end":12,"severity":"high","line_start":12},{"id":"filesystem:vendored/0g/0g-compute/README.md:13:hidden-file-in-home-directory","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file in home directory","snippet":"- **OpenClaw** — `~/.openclaw/skills/0g-compute/`","category":"filesystem","line_end":13,"severity":"high","line_start":13},{"id":"filesystem:vendored/0g/0g-compute/README.md:20:hidden-file-in-home-directory","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.claude/skills/0g-compute","category":"filesystem","line_end":20,"severity":"high","line_start":20},{"id":"filesystem:vendored/0g/0g-compute/README.md:23:hidden-file-in-home-directory","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.agents/skills/0g-compute","category":"filesystem","line_end":23,"severity":"high","line_start":23},{"id":"filesystem:vendored/0g/0g-compute/README.md:26:hidden-file-in-home-directory","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file in home directory","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.openclaw/skills/0g-compute","category":"filesystem","line_end":26,"severity":"high","line_start":26},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/SKILL.md:38:hidden-file-in-home-directory","file":"vendored/altlayer/altllm-portal-auth/SKILL.md","pattern":"Hidden file in home directory","snippet":"- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.","category":"filesystem","line_end":38,"severity":"high","line_start":38},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:57:hidden-file-in-home-directory","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file in home directory","snippet":"`~/.antseed/buyer.state.json` and applies to every request until you change it.","category":"filesystem","line_end":57,"severity":"high","line_start":57},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:151:hidden-file-in-home-directory","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file in home directory","snippet":"- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.","category":"filesystem","line_end":151,"severity":"high","line_start":151},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:183:hidden-file-in-home-directory","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file in home directory","snippet":"`~/.antseed/buyer.state.json` (`pinnedPeerId`) and applies to every request","category":"filesystem","line_end":183,"severity":"high","line_start":183},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:206:hidden-file-in-home-directory","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file in home directory","snippet":"## Files the CLI creates in `~/.antseed/`","category":"filesystem","line_end":206,"severity":"high","line_start":206},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:208:hidden-file-in-home-directory","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file in home directory","snippet":"Knowing what lives in `~/.antseed/` matters for backups, container deploys,","category":"filesystem","line_end":208,"severity":"high","line_start":208},{"id":"filesystem:integrations/genlayer-intelligent-contracts/SKILL.md:38:path-traversal-sequence","file":"integrations/genlayer-intelligent-contracts/SKILL.md","pattern":"Path traversal sequence","snippet":"- For ERC-7710, load `../genlayer-erc7710-connector/SKILL.md` to specify how a `revoke` or `constrai","category":"filesystem","line_end":38,"severity":"high","line_start":38},{"id":"filesystem:SKILL.md:42:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"- **Installed as a whole** (normal case — `git clone .../internet-court-skill","category":"filesystem","line_end":42,"severity":"high","line_start":42},{"id":"filesystem:SKILL.md:48:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"— e.g. `.../main/vendored/genlayer/write-contract/SKILL.md` — or clone the repo","category":"filesystem","line_end":48,"severity":"high","line_start":48},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:145:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/README.md","pattern":"Path traversal sequence","snippet":"- **API Reference**: See [inference.md](../inference.md) for detailed API documentation","category":"filesystem","line_end":145,"severity":"high","line_start":145},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:146:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/README.md","pattern":"Path traversal sequence","snippet":"- **Account Management**: See [account-management.md](../account-management.md) for fund management","category":"filesystem","line_end":146,"severity":"high","line_start":146},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:147:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/README.md","pattern":"Path traversal sequence","snippet":"- **SDK Documentation**: See [SKILL.md](../../SKILL.md) for quick SDK reference","category":"filesystem","line_end":147,"severity":"high","line_start":147},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:163:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/README.md","pattern":"Path traversal sequence","snippet":"- **Fine-tuning**: [fine-tuning.md](../fine-tuning.md) - Train custom models","category":"filesystem","line_end":163,"severity":"high","line_start":163},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:341:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Path traversal sequence","snippet":"console.log(\\`\\n🎙️  Transcribing...\\`);","category":"filesystem","line_end":341,"severity":"high","line_start":341},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:676:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Path traversal sequence","snippet":"console.log(\\`Processing \\${file}...\\`);","category":"filesystem","line_end":676,"severity":"high","line_start":676},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:250:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Path traversal sequence","snippet":"console.warn(\"Continuing anyway...\\\\n\");","category":"filesystem","line_end":250,"severity":"high","line_start":250},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:273:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Path traversal sequence","snippet":"console.log(\\`\\\\n💬 Sending streaming chat request to \\${model}...\\`);","category":"filesystem","line_end":273,"severity":"high","line_start":273},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:645:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Path traversal sequence","snippet":"- **API Reference**: [../inference.md](../inference.md) - Detailed SDK documentation","category":"filesystem","line_end":645,"severity":"high","line_start":645},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:646:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Path traversal sequence","snippet":"- **Fine-tuning**: [../fine-tuning.md](../fine-tuning.md) - Train custom models","category":"filesystem","line_end":646,"severity":"high","line_start":646},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:263:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Path traversal sequence","snippet":"console.log(\\`\\n🎨 Generating \\${numImages} image(s)...\\`);","category":"filesystem","line_end":263,"severity":"high","line_start":263},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:271:path-traversal-sequence","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Path traversal sequence","snippet":"console.log(\\`\\n[\\${i + 1}/\\${numImages}] Generating...\\`);","category":"filesystem","line_end":271,"severity":"high","line_start":271},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:866:sudo-privilege-escalation","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"sudo privilege escalation","snippet":"sudo systemctl restart hermes","category":"external_commands","line_end":866,"severity":"high","line_start":866},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:868:sudo-privilege-escalation","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"sudo privilege escalation","snippet":"> Or whatever supervisor you use. Then check the journal: `sudo journalctl -u hermes --no-pager -n 3","category":"external_commands","line_end":868,"severity":"high","line_start":868},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:881:sudo-privilege-escalation","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"sudo privilege escalation","snippet":"- *Want to swap the routed model without restarting AntSeed* — Edit `model.default` (and `models:` i","category":"external_commands","line_end":881,"severity":"high","line_start":881},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:204:symlink-creation","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Symlink creation","snippet":"**Step A — detect** any of: a `# BINARY_INSTALL:` marker; `curl ... github.com/.*/releases/`; downlo","category":"filesystem","line_end":204,"severity":"high","line_start":204},{"id":"blocker:vendored/intelligent-oracle/intelligent-oracle/SKILL.md:145:at-command-scheduling","file":"vendored/intelligent-oracle/intelligent-oracle/SKILL.md","pattern":"at command scheduling","snippet":"\"description\": \"Resolves YES if BTC/USDT spot price on Binance is at or above $75,000 at 23:59:59 UT","category":"blocker","line_end":145,"severity":"medium","line_start":145},{"id":"blocker:vendored/intelligent-oracle/intelligent-oracle/SKILL.md:148:at-command-scheduling","file":"vendored/intelligent-oracle/intelligent-oracle/SKILL.md","pattern":"at command scheduling","snippet":"\"Use api.binance.com BTC/USDT spot price at 23:59:59 UTC on 2026-12-31.\",","category":"blocker","line_end":148,"severity":"medium","line_start":148},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:218:sqlite-database-file","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"SQLite database file","snippet":"| `metering.db` | SQLite log of every request the proxy served (model, peer, tokens, USDC). Used by ","category":"sensitive","line_end":218,"severity":"medium","line_start":218},{"id":"obfuscation:vendored/okx/okx-agent-payments-protocol/SKILL.md:123:base64-decode","file":"vendored/okx/okx-agent-payments-protocol/SKILL.md","pattern":"Base64 decode","snippet":"decoded = JSON.parse(atob(raw_402))              // v2; for v1 it's already JSON: JSON.parse(respons","category":"obfuscation","line_end":123,"severity":"medium","line_start":123},{"id":"obfuscation:vendored/0g/0g-compute/references/examples/text-to-image.md:325:buffer-base64-decode","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Buffer base64 decode","snippet":"fs.writeFileSync(filepath, Buffer.from(base64Data, \"base64\"));","category":"obfuscation","line_end":325,"severity":"medium","line_start":325},{"id":"obfuscation:vendored/0g/0g-compute/references/examples/text-to-image.md:446:buffer-base64-decode","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Buffer base64 decode","snippet":"fs.writeFileSync(filepath, Buffer.from(base64Data, \"base64\"));","category":"obfuscation","line_end":446,"severity":"medium","line_start":446},{"id":"obfuscation:vendored/near/near-api-js/references/nep413.md:41:buffer-base64-decode","file":"vendored/near/near-api-js/references/nep413.md","pattern":"Buffer base64 decode","snippet":"signature: new Uint8Array(Buffer.from(walletReturn.signature, \"base64\")),","category":"obfuscation","line_end":41,"severity":"medium","line_start":41},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:16:dynamic-import-expression","file":"vendored/arkhai/alkahest-developer/references/python-api.md","pattern":"Dynamic import() expression","snippet":"from alkahest_py import (","category":"scripts","line_end":21,"severity":"medium","line_start":16},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:183:dynamic-import-expression","file":"vendored/arkhai/alkahest-developer/references/python-api.md","pattern":"Dynamic import() expression","snippet":"from alkahest_py import (","category":"scripts","line_end":192,"severity":"medium","line_start":183},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:202:dynamic-import-expression","file":"vendored/arkhai/alkahest-developer/references/python-api.md","pattern":"Dynamic import() expression","snippet":"from alkahest_py import (","category":"scripts","line_end":208,"severity":"medium","line_start":202},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:235:dynamic-import-expression","file":"vendored/arkhai/alkahest-developer/references/python-api.md","pattern":"Dynamic import() expression","snippet":"from alkahest_py import (","category":"scripts","line_end":241,"severity":"medium","line_start":235},{"id":"scripts:vendored/kleros/kleros-ipfs-upload/SKILL.md:107:dynamic-import-expression","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Dynamic import() expression","snippet":"node -e \"import('viem/accounts').then(m => console.log(m.generatePrivateKey()))\"","category":"scripts","line_end":107,"severity":"medium","line_start":107},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:175:dynamic-import-expression","file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","pattern":"Dynamic import() expression","snippet":"**If you must use CommonJS** (no `\"type\": \"module\"`), use dynamic `import()`:","category":"scripts","line_end":175,"severity":"medium","line_start":175},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:179:dynamic-import-expression","file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","pattern":"Dynamic import() expression","snippet":"const { Agent, run } = await import('@openserv-labs/sdk')","category":"scripts","line_end":179,"severity":"medium","line_start":179},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:180:dynamic-import-expression","file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","pattern":"Dynamic import() expression","snippet":"const { provision, triggers } = await import('@openserv-labs/client')","category":"scripts","line_end":180,"severity":"medium","line_start":180},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:186:dynamic-require-with-variable","file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","pattern":"Dynamic require with variable","snippet":"**Do not** mix `require()` with ESM-only packages. If you see `ERR_REQUIRE_ESM`, switch to `\"type\": ","category":"scripts","line_end":186,"severity":"medium","line_start":186},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:225:file-stream-creation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"File stream creation","snippet":"const fileStream = fs.createReadStream(audioFilePath);","category":"filesystem","line_end":225,"severity":"medium","line_start":225},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:528:file-stream-creation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"File stream creation","snippet":"const fileStream = fs.createReadStream(audioFilePath);","category":"filesystem","line_end":528,"severity":"medium","line_start":528},{"id":"filesystem:vendored/kleros/kleros-curate/references/scout-registries.md:249:hard-link-creation","file":"vendored/kleros/kleros-curate/references/scout-registries.md","pattern":"Hard link creation","snippet":"POST https://scout-api.kleros.link/api/address-tags","category":"filesystem","line_end":249,"severity":"medium","line_start":249},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-ipfs-upload.md:44:hard-link-creation","file":"vendored/kleros/kleros-curate/references/shared-ipfs-upload.md","pattern":"Hard link creation","snippet":"Never use a full gateway URL (`https://cdn.kleros.link/ipfs/...`, `https://ipfs.io/ipfs/...`).","category":"filesystem","line_end":44,"severity":"medium","line_start":44},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-ipfs-upload.md:53:hard-link-creation","file":"vendored/kleros/kleros-curate/references/shared-ipfs-upload.md","pattern":"Hard link creation","snippet":"\"https://cdn.kleros.link\" + cid      ✓","category":"filesystem","line_end":53,"severity":"medium","line_start":53},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-ipfs-upload.md:54:hard-link-creation","file":"vendored/kleros/kleros-curate/references/shared-ipfs-upload.md","pattern":"Hard link creation","snippet":"\"https://cdn.kleros.link/ipfs/\" + cid  ✗  (double-slash)","category":"filesystem","line_end":54,"severity":"medium","line_start":54},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-metaevidence.md:70:hard-link-creation","file":"vendored/kleros/kleros-curate/references/shared-metaevidence.md","pattern":"Hard link creation","snippet":"https://cdn.kleros.link/ipfs/<CID>","category":"filesystem","line_end":70,"severity":"medium","line_start":70},{"id":"filesystem:vendored/kleros/kleros-curate/references/stake-curate.md:86:hard-link-creation","file":"vendored/kleros/kleros-curate/references/stake-curate.md","pattern":"Hard link creation","snippet":"URI from the IPFS gateway (typically `https://cdn.kleros.link/ipfs/<CID>/metaEvidence.json`).","category":"filesystem","line_end":86,"severity":"medium","line_start":86},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:176:hard-link-creation","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Hard link creation","snippet":"\"urls\": [\"https://cdn.kleros.link/ipfs/QmXXX...\"],","category":"filesystem","line_end":176,"severity":"medium","line_start":176},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:181:hard-link-creation","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Hard link creation","snippet":"- **Prefer `urls[i]`** — the gateway pre-builds a ready-to-use HTTP URL using the canonical Kleros I","category":"filesystem","line_end":181,"severity":"medium","line_start":181},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:187:hard-link-creation","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Hard link creation","snippet":"| Kleros HTTP gateway URL | `\"https://cdn.kleros.link\" + cid` (or just use `urls[i]`) |","category":"filesystem","line_end":187,"severity":"medium","line_start":187},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:191:hard-link-creation","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Hard link creation","snippet":"Do **not** write `https://cdn.kleros.link/ipfs/${cid}` — that produces a double-slash path because `","category":"filesystem","line_end":191,"severity":"medium","line_start":191},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:243:hard-link-creation","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Hard link creation","snippet":"curl -sS https://cdn.kleros.link/ipfs/QmAbc...   # paste the bare CID","category":"filesystem","line_end":243,"severity":"medium","line_start":243},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:258:hard-link-creation","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Hard link creation","snippet":"3. The script prints the CID on stdout (e.g. `/ipfs/QmXXX...`) and the pre-built URL on stderr as `u","category":"filesystem","line_end":258,"severity":"medium","line_start":258},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:146:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"antseed payments  # opens portal at 127.0.0.1:3118?token=<hex> — connect a wallet, deposit USDC","category":"network","line_end":146,"severity":"medium","line_start":146},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:153:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"- Keep the buyer proxy bound to `127.0.0.1` / `localhost`. Do not expose","category":"network","line_end":153,"severity":"medium","line_start":153},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:452:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"> The buyer dashboard at http://localhost:3118 is the authoritative real-time signal: a non-zero `Re","category":"network","line_end":452,"severity":"medium","line_start":452},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:685:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"**TL;DR for agents:** Edit ~/.openclaw/openclaw.json: under models.providers, add an `antseed` entry","category":"network","line_end":685,"severity":"medium","line_start":685},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:689:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"**How AntSeed plugs in.** Add a provider entry called `antseed` that points at `http://127.0.0.1:837","category":"network","line_end":689,"severity":"medium","line_start":689},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:708:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"\"baseUrl\": \"http://127.0.0.1:8377\",","category":"network","line_end":708,"severity":"medium","line_start":708},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:742:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"Each `id` under `models[]` must match a service id from `curl http://127.0.0.1:8377/v1/models`. `api","category":"network","line_end":742,"severity":"medium","line_start":742},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:748:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"curl -s http://127.0.0.1:8377/v1/models | jq '.data[].id'","category":"network","line_end":748,"severity":"medium","line_start":748},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:799:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"**TL;DR for agents:** Edit ~/.hermes/config.yaml: add a `custom_providers` entry named `antseed` wit","category":"network","line_end":799,"severity":"medium","line_start":799},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:803:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"**How AntSeed plugs in.** Add an entry under `custom_providers` with `base_url: http://127.0.0.1:837","category":"network","line_end":803,"severity":"medium","line_start":803},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:824:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"base_url: http://127.0.0.1:8377/v1","category":"network","line_end":824,"severity":"medium","line_start":824},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:848:hardcoded-ip-address","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hardcoded IP address","snippet":"Only ids listed under `models:` show up in Hermes' picker — mirror it against `curl http://127.0.0.1","category":"network","line_end":848,"severity":"medium","line_start":848},{"id":"filesystem:README.md:135:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.claude/skills/internet-court","category":"filesystem","line_end":135,"severity":"medium","line_start":135},{"id":"filesystem:README.md:148:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.agents/skills/internet-court","category":"filesystem","line_end":148,"severity":"medium","line_start":148},{"id":"filesystem:README.md:158:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.config/opencode/skills/internet-","category":"filesystem","line_end":158,"severity":"medium","line_start":158},{"id":"filesystem:README.md:161:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"opencode also reads `~/.claude/skills/` and `~/.agents/skills/`, so a single","category":"filesystem","line_end":161,"severity":"medium","line_start":161},{"id":"filesystem:README.md:177:hidden-file-access","file":"README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.hermes/skills/internet-court","category":"filesystem","line_end":177,"severity":"medium","line_start":177},{"id":"filesystem:vendored/0g/0g-compute/README.md:11:hidden-file-access","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file access","snippet":"- **Claude Code** — `~/.claude/skills/0g-compute/`","category":"filesystem","line_end":11,"severity":"medium","line_start":11},{"id":"filesystem:vendored/0g/0g-compute/README.md:12:hidden-file-access","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file access","snippet":"- **OpenAI Codex** — `~/.agents/skills/0g-compute/`","category":"filesystem","line_end":12,"severity":"medium","line_start":12},{"id":"filesystem:vendored/0g/0g-compute/README.md:13:hidden-file-access","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file access","snippet":"- **OpenClaw** — `~/.openclaw/skills/0g-compute/`","category":"filesystem","line_end":13,"severity":"medium","line_start":13},{"id":"filesystem:vendored/0g/0g-compute/README.md:20:hidden-file-access","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.claude/skills/0g-compute","category":"filesystem","line_end":20,"severity":"medium","line_start":20},{"id":"filesystem:vendored/0g/0g-compute/README.md:23:hidden-file-access","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.agents/skills/0g-compute","category":"filesystem","line_end":23,"severity":"medium","line_start":23},{"id":"filesystem:vendored/0g/0g-compute/README.md:26:hidden-file-access","file":"vendored/0g/0g-compute/README.md","pattern":"Hidden file access","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.openclaw/skills/0g-compute","category":"filesystem","line_end":26,"severity":"medium","line_start":26},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/references/cli-reference.md:20:hidden-file-access","file":"vendored/altlayer/altllm-portal-auth/references/cli-reference.md","pattern":"Hidden file access","snippet":"\"sessionFile\": \"/Users/<user>/.altllm/portal-cli-session.json\",","category":"filesystem","line_end":20,"severity":"medium","line_start":20},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/references/cli-reference.md:113:hidden-file-access","file":"vendored/altlayer/altllm-portal-auth/references/cli-reference.md","pattern":"Hidden file access","snippet":"\"sessionFile\": \"/Users/<user>/.altllm/portal-cli-session.json\",","category":"filesystem","line_end":113,"severity":"medium","line_start":113},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/SKILL.md:38:hidden-file-access","file":"vendored/altlayer/altllm-portal-auth/SKILL.md","pattern":"Hidden file access","snippet":"- Save the resulting session to `~/.altllm/portal-cli-session.json` unless overridden.","category":"filesystem","line_end":38,"severity":"medium","line_start":38},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:57:hidden-file-access","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file access","snippet":"`~/.antseed/buyer.state.json` and applies to every request until you change it.","category":"filesystem","line_end":57,"severity":"medium","line_start":57},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:151:hidden-file-access","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file access","snippet":"- Treat `ANTSEED_IDENTITY_HEX` / `~/.antseed/identity.key` as a hot wallet key.","category":"filesystem","line_end":151,"severity":"medium","line_start":151},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:183:hidden-file-access","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Hidden file access","snippet":"`~/.antseed/buyer.state.json` (`pinnedPeerId`) and applies to every request","category":"filesystem","line_end":183,"severity":"medium","line_start":183},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:299:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Node.js fs operations","snippet":"fs.mkdirSync(TRANSCRIPT_DIR, { recursive: true });","category":"filesystem","line_end":299,"severity":"medium","line_start":299},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:383:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Node.js fs operations","snippet":"fs.writeFileSync(outputFile, outputContent);","category":"filesystem","line_end":383,"severity":"medium","line_start":383},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:672:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Node.js fs operations","snippet":"const audioFiles = fs.readdirSync(AUDIO_DIR)","category":"filesystem","line_end":672,"severity":"medium","line_start":672},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:194:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Node.js fs operations","snippet":"fs.writeFileSync(filepath, Buffer.from(buffer));","category":"filesystem","line_end":194,"severity":"medium","line_start":194},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:228:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Node.js fs operations","snippet":"fs.mkdirSync(OUTPUT_DIR, { recursive: true });","category":"filesystem","line_end":228,"severity":"medium","line_start":228},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:325:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Node.js fs operations","snippet":"fs.writeFileSync(filepath, Buffer.from(base64Data, \"base64\"));","category":"filesystem","line_end":325,"severity":"medium","line_start":325},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:442:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Node.js fs operations","snippet":"fs.writeFileSync(filepath, Buffer.from(buffer));","category":"filesystem","line_end":442,"severity":"medium","line_start":442},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:446:node-js-fs-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Node.js fs operations","snippet":"fs.writeFileSync(filepath, Buffer.from(base64Data, \"base64\"));","category":"filesystem","line_end":446,"severity":"medium","line_start":446},{"id":"filesystem:vendored/near/near-kit/references/keys-and-testing.md:269:node-js-fs-operations","file":"vendored/near/near-kit/references/keys-and-testing.md","pattern":"Node.js fs operations","snippet":"const contractWasm = await fs.readFile(\"./contract.wasm\");","category":"filesystem","line_end":269,"severity":"medium","line_start":269},{"id":"filesystem:vendored/near/near-kit/references/transactions.md:75:node-js-fs-operations","file":"vendored/near/near-kit/references/transactions.md","pattern":"Node.js fs operations","snippet":"const wasm = await fs.readFile(\"./contract.wasm\")","category":"filesystem","line_end":75,"severity":"medium","line_start":75},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:8:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use this skill after the mandate, ERC-7710 policy, and GenLayer Intelligent Contract review flow exi","category":"external_commands","line_end":8,"severity":"medium","line_start":8},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:12:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":18,"severity":"medium","line_start":12},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:18:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":27,"severity":"medium","line_start":18},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:27:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `mandateId`, `permissionHash`, delegator, delegate, delegation manager, target EVM chain, and curr","category":"external_commands","line_end":27,"severity":"medium","line_start":27},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:63:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":71,"severity":"medium","line_start":63},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:71:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":75,"severity":"medium","line_start":71},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:75:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Base Sepolia chain id: `84532`.","category":"external_commands","line_end":76,"severity":"medium","line_start":75},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:76:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Base Sepolia LayerZero endpoint id: `40245`.","category":"external_commands","line_end":77,"severity":"medium","line_start":76},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:77:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- GenLayer source chain id emitted by `BridgeSender.py`: `61998`.","category":"external_commands","line_end":77,"severity":"medium","line_start":77},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:81:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- a reporter such as `WalletSpendReporter` that sends snapshots to GenLayer;","category":"external_commands","line_end":82,"severity":"medium","line_start":81},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:82:ruby-shell-backtick-execution","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- a decision receiver such as `GenLayerDecisionReceiver` that is allowlisted as a relayer on `Revoca","category":"external_commands","line_end":82,"severity":"medium","line_start":82},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```text","category":"external_commands","line_end":22,"severity":"medium","line_start":18},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":26,"severity":"medium","line_start":22},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Vendored protocol skills** (`vendored/`) — official, publicly published","category":"external_commands","line_end":29,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Connector skills** (`integrations/genlayer-erc7710-connector/`,","category":"external_commands","line_end":30,"severity":"medium","line_start":29},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`integrations/genlayer-intelligent-contracts/`, `integrations/x402-erc7710/`) — the Internet","category":"external_commands","line_end":30,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**`https://github.com/internet-court/internet-court-skill`**. Every path this","category":"external_commands","line_end":37,"severity":"medium","line_start":36},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"file routes to — `vendored/<owner>/<skill>/SKILL.md`,","category":"external_commands","line_end":38,"severity":"medium","line_start":37},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`integrations/<connector>/SKILL.md` — is relative to that repository root.","category":"external_commands","line_end":42,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":".claude/skills/internet-court`): read the path directly from disk.","category":"external_commands","line_end":44,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Only this `SKILL.md` is present** (the master skill was loaded on its","category":"external_commands","line_end":47,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`https://raw.githubusercontent.com/internet-court/internet-court-skill/main/<path>`","category":"external_commands","line_end":48,"severity":"medium","line_start":47},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:232:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Total Balance: ${ethers.formatEther(account.totalBalance)} 0G`);","category":"external_commands","line_end":233,"severity":"medium","line_start":232},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:233:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Available: ${ethers.formatEther(account.availableBalance)} 0G`);","category":"external_commands","line_end":234,"severity":"medium","line_start":233},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:234:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Locked: ${ethers.formatEther(account.lockedBalance)} 0G`);","category":"external_commands","line_end":235,"severity":"medium","line_start":234},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:266:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Sub-account balance: ${ethers.formatEther(subAccount.balance)} 0G`);","category":"external_commands","line_end":271,"severity":"medium","line_start":266},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:271:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Refund ${index + 1}:`);","category":"external_commands","line_end":272,"severity":"medium","line_start":271},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:272:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`  Amount: ${ethers.formatEther(refund.amount)} 0G`);","category":"external_commands","line_end":273,"severity":"medium","line_start":272},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:273:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`  Unlock time: ${new Date(refund.unlockTime * 1000)}`);","category":"external_commands","line_end":280,"severity":"medium","line_start":273},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:280:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Fine-tuning sub-account balance: ${ethers.formatEther(ftSubAccount.balance)} 0G`);","category":"external_commands","line_end":281,"severity":"medium","line_start":280},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:574:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Initial balance: ${ethers.formatEther(account.totalBalance)} 0G`);","category":"external_commands","line_end":588,"severity":"medium","line_start":574},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:588:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Sub-account balance: ${ethers.formatEther(subAccount.balance)} 0G`);","category":"external_commands","line_end":602,"severity":"medium","line_start":588},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:602:ruby-shell-backtick-execution","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Final balance: ${ethers.formatEther(account.totalBalance)} 0G`);","category":"external_commands","line_end":606,"severity":"medium","line_start":602},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:83:shell-command-substitution","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Shell command substitution","snippet":"export ANTSEED_IDENTITY_HEX=$(openssl rand -hex 32)","category":"external_commands","line_end":83,"severity":"medium","line_start":83},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:45:shell-command-substitution","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Shell command substitution","snippet":"WALLET=$(cast wallet address --private-key \"$PRIVATE_KEY\")","category":"external_commands","line_end":45,"severity":"medium","line_start":45},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:46:shell-command-substitution","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Shell command substitution","snippet":"NONCE=0x$(openssl rand -hex 32)","category":"external_commands","line_end":46,"severity":"medium","line_start":46},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:47:shell-command-substitution","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Shell command substitution","snippet":"VALID_BEFORE=$(( $(date +%s) + 120 ))","category":"external_commands","line_end":47,"severity":"medium","line_start":47},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:85:shell-command-substitution","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Shell command substitution","snippet":"SIG=$(cast wallet sign --data --from-file --private-key \"$PRIVATE_KEY\" /tmp/eip712.json)","category":"external_commands","line_end":85,"severity":"medium","line_start":85},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:91:shell-command-substitution","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Shell command substitution","snippet":"X_PAYMENT=$(printf '{\"x402Version\":1,\"scheme\":\"exact\",\"network\":\"base\",\"payload\":{\"signature\":\"%s\",\"","category":"external_commands","line_end":92,"severity":"medium","line_start":91},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts:32:shell-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts","pattern":"Shell command substitution","snippet":"*            with $(npx tsx pay-and-upload-cdp.ts ...) works the same way).","category":"external_commands","line_end":32,"severity":"medium","line_start":32},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:48:shell-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Shell command substitution","snippet":"On success the script prints each CID on its own line (so you can capture them with `$(npx tsx pay-a","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:165:shell-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Shell command substitution","snippet":"test \"$(stat -f%z /path/to/file)\" -le 4194304 || echo \"too big for the Kleros gateway\"","category":"external_commands","line_end":165,"severity":"medium","line_start":165},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:224:shell-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Shell command substitution","snippet":"echo \"kleros gateway smoke test $(date -u +%Y-%m-%dT%H:%M:%SZ)\" > hello-world.txt","category":"external_commands","line_end":224,"severity":"medium","line_start":224},{"id":"external_commands:vendored/near/near-ai-cloud/references/model-verification.md:29:shell-command-substitution","file":"vendored/near/near-ai-cloud/references/model-verification.md","pattern":"Shell command substitution","snippet":"NONCE=$(openssl rand -hex 32)","category":"external_commands","line_end":29,"severity":"medium","line_start":29},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:383:synchronous-file-operations","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Synchronous file operations","snippet":"fs.writeFileSync(outputFile, outputContent);","category":"filesystem","line_end":383,"severity":"medium","line_start":383},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:194:synchronous-file-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Synchronous file operations","snippet":"fs.writeFileSync(filepath, Buffer.from(buffer));","category":"filesystem","line_end":194,"severity":"medium","line_start":194},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:325:synchronous-file-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Synchronous file operations","snippet":"fs.writeFileSync(filepath, Buffer.from(base64Data, \"base64\"));","category":"filesystem","line_end":325,"severity":"medium","line_start":325},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:442:synchronous-file-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Synchronous file operations","snippet":"fs.writeFileSync(filepath, Buffer.from(buffer));","category":"filesystem","line_end":442,"severity":"medium","line_start":442},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:446:synchronous-file-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Synchronous file operations","snippet":"fs.writeFileSync(filepath, Buffer.from(base64Data, \"base64\"));","category":"filesystem","line_end":446,"severity":"medium","line_start":446},{"id":"filesystem:vendored/arkhai/fulfill-git-escrow/SKILL.md:60:temp-directory-access","file":"vendored/arkhai/fulfill-git-escrow/SKILL.md","pattern":"Temp directory access","snippet":"2. Clone it to a temporary location: `git clone <url> /tmp/escrow-tests-<uid> && cd /tmp/escrow-test","category":"filesystem","line_end":60,"severity":"medium","line_start":60},{"id":"filesystem:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:49:temp-directory-access","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Temp directory access","snippet":"cat > /tmp/eip712.json << EOF","category":"filesystem","line_end":49,"severity":"medium","line_start":49},{"id":"filesystem:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:85:temp-directory-access","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Temp directory access","snippet":"SIG=$(cast wallet sign --data --from-file --private-key \"$PRIVATE_KEY\" /tmp/eip712.json)","category":"filesystem","line_end":85,"severity":"medium","line_start":85},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:253:temp-directory-access","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Temp directory access","snippet":"> User: \"I have a screenshot at /tmp/exhibit-a.png that I want to attach to a Kleros dispute. Pin it","category":"filesystem","line_end":253,"severity":"medium","line_start":253},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:257:temp-directory-access","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Temp directory access","snippet":"2. Run the bundled script: `EVM_PRIVATE_KEY=0x... npx tsx pay-and-upload.ts /tmp/exhibit-a.png`.","category":"filesystem","line_end":257,"severity":"medium","line_start":257},{"id":"filesystem:vendored/okx/okx-ai/references/chat-cli-reference.md:39:temp-directory-access","file":"vendored/okx/okx-ai/references/chat-cli-reference.md","pattern":"Temp directory access","snippet":"onchainos agent file-upload --file /tmp/encrypted_photo.bin --agent-id agent_123 --job-id task_001","category":"filesystem","line_end":39,"severity":"medium","line_start":39},{"id":"filesystem:vendored/okx/okx-ai/references/chat-cli-reference.md:77:temp-directory-access","file":"vendored/okx/okx-ai/references/chat-cli-reference.md","pattern":"Temp directory access","snippet":"\"outputPath\": \"/tmp/downloaded.bin\",","category":"filesystem","line_end":77,"severity":"medium","line_start":77},{"id":"filesystem:vendored/okx/okx-ai/references/chat-cli-reference.md:92:temp-directory-access","file":"vendored/okx/okx-ai/references/chat-cli-reference.md","pattern":"Temp directory access","snippet":"onchainos agent file-download --file-key \"task_001-3f2a7b1c-8d4e-4a5f-9c6b-2e1d0f8a7b3c\" --agent-id ","category":"filesystem","line_end":92,"severity":"medium","line_start":92},{"id":"filesystem:vendored/okx/okx-ai/references/task-user-sub-playbook.md:47:temp-directory-access","file":"vendored/okx/okx-ai/references/task-user-sub-playbook.md","pattern":"Temp directory access","snippet":"| 1 | Contains `[intent:deliver]` | **Highest priority — process THIS TURN before any other CLI call","category":"filesystem","line_end":47,"severity":"medium","line_start":47},{"id":"filesystem:vendored/okx/okx-ai/references/task-user-sub-playbook.md:54:temp-directory-access","file":"vendored/okx/okx-ai/references/task-user-sub-playbook.md","pattern":"Temp directory access","snippet":"1. Write its **raw JSON** to `/tmp/a2a_deliver_<jobId>.json` first.","category":"filesystem","line_end":54,"severity":"medium","line_start":54},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:77:template-literal-with-command-substitution","file":"vendored/antseed/antseed-connect/SKILL.md","pattern":"Template literal with command substitution","snippet":"```bash","category":"external_commands","line_end":92,"severity":"medium","line_start":77},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts:8:template-literal-with-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts","pattern":"Template literal with command substitution","snippet":"* `signTypedData()`, which is exactly what `x402-fetch.wrapFetchWithPayment`","category":"external_commands","line_end":82,"severity":"medium","line_start":8},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:48:template-literal-with-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Template literal with command substitution","snippet":"On success the script prints each CID on its own line (so you can capture them with `$(npx tsx pay-a","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:164:template-literal-with-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Template literal with command substitution","snippet":"```bash","category":"external_commands","line_end":166,"severity":"medium","line_start":164},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:223:template-literal-with-command-substitution","file":"vendored/kleros/kleros-ipfs-upload/SKILL.md","pattern":"Template literal with command substitution","snippet":"```bash","category":"external_commands","line_end":225,"severity":"medium","line_start":223},{"id":"external_commands:vendored/okx/okx-dapp-discovery/SKILL.md:167:template-literal-with-command-substitution","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Template literal with command substitution","snippet":"```bash","category":"external_commands","line_end":182,"severity":"medium","line_start":167},{"id":"external_commands:vendored/okx/okx-dapp-discovery/SKILL.md:275:template-literal-with-command-substitution","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Template literal with command substitution","snippet":"```bash","category":"external_commands","line_end":302,"severity":"medium","line_start":275},{"id":"scripts:vendored/okx/okx-agent-payments-protocol/SKILL.md:180:with-statement-deprecated-scope-confusion","file":"vendored/okx/okx-agent-payments-protocol/SKILL.md","pattern":"with statement (deprecated, scope confusion)","snippet":"| `input.method` | Method to replay with (may differ from the original). `GET`/`HEAD`/`DELETE` → par","category":"scripts","line_end":180,"severity":"medium","line_start":180},{"id":"external_commands:vendored/openserv/openserv-agent-sdk/troubleshooting.md:37:xargs-command-can-execute-arbitrary-commands","file":"vendored/openserv/openserv-agent-sdk/troubleshooting.md","pattern":"xargs command (can execute arbitrary commands)","snippet":"lsof -ti:7378 | xargs kill -9","category":"external_commands","line_end":37,"severity":"medium","line_start":37},{"id":"blocker:vendored/altlayer/altllm-portal-cli/SKILL.md:34:network-reconnaissance","file":"vendored/altlayer/altllm-portal-cli/SKILL.md","pattern":"Network reconnaissance","snippet":"## Plan Awareness","category":"blocker","line_end":36,"severity":"low","line_start":34},{"id":"blocker:vendored/arkhai/nla-fulfill/SKILL.md:28:network-reconnaissance","file":"vendored/arkhai/nla-fulfill/SKILL.md","pattern":"Network reconnaissance","snippet":"- Oracle address","category":"blocker","line_end":29,"severity":"low","line_start":28},{"id":"blocker:vendored/bnb-chain/bnbchain-mcp/SKILL.md:90:network-reconnaissance","file":"vendored/bnb-chain/bnbchain-mcp/SKILL.md","pattern":"Network reconnaissance","snippet":"- **analyze_address** — Analyze an EVM address","category":"blocker","line_end":91,"severity":"low","line_start":90},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:211:network-reconnaissance","file":"vendored/coinbase/agentic-wallet/references/balance.md","pattern":"Network reconnaissance","snippet":"npx awal@2.12.0 address --json","category":"blocker","line_end":211,"severity":"low","line_start":211},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:214:network-reconnaissance","file":"vendored/coinbase/agentic-wallet/references/balance.md","pattern":"Network reconnaissance","snippet":"npx awal@2.12.0 address --chain base","category":"blocker","line_end":214,"severity":"low","line_start":214},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:219:network-reconnaissance","file":"vendored/coinbase/agentic-wallet/references/balance.md","pattern":"Network reconnaissance","snippet":"- `address --json` (no `--chain`) does **not** return a structured per-chain object. It returns a si","category":"blocker","line_end":219,"severity":"low","line_start":219},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:227:network-reconnaissance","file":"vendored/coinbase/agentic-wallet/references/balance.md","pattern":"Network reconnaissance","snippet":"- `address --chain <chain>` prints just the raw address for that chain with no label or JSON wrapper","category":"blocker","line_end":227,"severity":"low","line_start":227},{"id":"blocker:vendored/coinbase/agentic-wallet/references/send-usdc.md:84:network-reconnaissance","file":"vendored/coinbase/agentic-wallet/references/send-usdc.md","pattern":"Network reconnaissance","snippet":"- \"Invalid recipient\" - Must be valid 0x address, ENS name, or Solana Base58 address","category":"blocker","line_end":85,"severity":"low","line_start":84},{"id":"blocker:vendored/coinbase/agentic-wallet/references/trade.md:104:network-reconnaissance","file":"vendored/coinbase/agentic-wallet/references/trade.md","pattern":"Network reconnaissance","snippet":"- \"Invalid token\" - Use a valid alias (usdc, eth, pol) or 0x address","category":"blocker","line_end":105,"severity":"low","line_start":104},{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/inflow-payment.md:90:network-reconnaissance","file":"vendored/heurist/heurist-mesh-skill/references/inflow-payment.md","pattern":"Network reconnaissance","snippet":"- Tool result payload → success","category":"blocker","line_end":91,"severity":"low","line_start":90},{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:45:network-reconnaissance","file":"vendored/heurist/heurist-mesh-skill/references/x402-payment.md","pattern":"Network reconnaissance","snippet":"WALLET=$(cast wallet address --private-key \"$PRIVATE_KEY\")","category":"blocker","line_end":45,"severity":"low","line_start":45},{"id":"blocker:integrations/genlayer-erc7710-connector/references/connector-patterns.md:63:system-reconnaissance","file":"integrations/genlayer-erc7710-connector/references/connector-patterns.md","pattern":"System reconnaissance","snippet":"- Base decision receiver checks GenLayer source chain id and supervisor IC address;","category":"blocker","line_end":63,"severity":"low","line_start":63},{"id":"blocker:integrations/genlayer-erc7710-connector/SKILL.md:77:system-reconnaissance","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"System reconnaissance","snippet":"- GenLayer source chain id emitted by `BridgeSender.py`: `61998`.","category":"blocker","line_end":77,"severity":"low","line_start":77},{"id":"blocker:integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:52:system-reconnaissance","file":"integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md","pattern":"System reconnaissance","snippet":"- Active: a controller can revoke by mandate id or permission hash after a GenLayer decision.","category":"blocker","line_end":52,"severity":"low","line_start":52},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:5:system-reconnaissance","file":"integrations/x402-erc7710/references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"Goal: demonstrate an agent making repeated paid HTTP calls without asking the user to approve every ","category":"blocker","line_end":5,"severity":"low","line_start":5},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:10:system-reconnaissance","file":"integrations/x402-erc7710/references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"- Buyer agent: calls the paid API and holds the delegated permission context.","category":"blocker","line_end":10,"severity":"low","line_start":10},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:39:system-reconnaissance","file":"integrations/x402-erc7710/references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"- Paid but malformed report: evidence package goes to dispute.","category":"blocker","line_end":39,"severity":"low","line_start":39},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:49:system-reconnaissance","file":"integrations/x402-erc7710/references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"2. Resolver calls paid data APIs through x402.","category":"blocker","line_end":49,"severity":"low","line_start":49},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:62:system-reconnaissance","file":"integrations/x402-erc7710/references/demo-blueprints.md","pattern":"System reconnaissance","snippet":"4. Fulfillment attestation records successful paid request and response.","category":"blocker","line_end":62,"severity":"low","line_start":62},{"id":"blocker:integrations/x402-erc7710/SKILL.md:20:system-reconnaissance","file":"integrations/x402-erc7710/SKILL.md","pattern":"System reconnaissance","snippet":"When the user has only asked to use or inspect a paid HTTP service, stay in discovery mode:","category":"blocker","line_end":20,"severity":"low","line_start":20},{"id":"blocker:integrations/x402-erc7710/SKILL.md:25:system-reconnaissance","file":"integrations/x402-erc7710/SKILL.md","pattern":"System reconnaissance","snippet":"4. State that no paid request has been made.","category":"blocker","line_end":25,"severity":"low","line_start":25},{"id":"blocker:integrations/x402-erc7710/SKILL.md:33:system-reconnaissance","file":"integrations/x402-erc7710/SKILL.md","pattern":"System reconnaissance","snippet":"I found the paid endpoint and its x402 requirements.","category":"blocker","line_end":33,"severity":"low","line_start":33},{"id":"blocker:SKILL.md:3:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"description: Entry point for Internet Court — the trust layer for agent-to-agent commerce. Use whene","category":"blocker","line_end":3,"severity":"low","line_start":3},{"id":"blocker:SKILL.md:178:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| Pay for an HTTP resource that returns **402** (pay-per-call), search x402 bazaars, or monetize you","category":"blocker","line_end":178,"severity":"low","line_start":178},{"id":"blocker:SKILL.md:181:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| Run a payment *through* a bounded permission (spend/subscription policy on the rail) | `integratio","category":"blocker","line_end":181,"severity":"low","line_start":181},{"id":"blocker:SKILL.md:260:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"payee is paid — if they differ, the plan also needs the value-movement","category":"blocker","line_end":260,"severity":"low","line_start":260},{"id":"blocker:vendored/0g/0g-compute/references/account-management.md:465:system-reconnaissance","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"System reconnaissance","snippet":"- Avoid submitting multiple transactions simultaneously","category":"blocker","line_end":465,"severity":"low","line_start":465},{"id":"blocker:vendored/0g/0g-compute/references/examples/speech-to-text.md:294:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"System reconnaissance","snippet":"throw new Error(\\`Invalid format. Must be one of: \\${validFormats.join(\", \")}\\`);","category":"blocker","line_end":294,"severity":"low","line_start":294},{"id":"blocker:vendored/0g/0g-compute/references/examples/speech-to-text.md:372:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"System reconnaissance","snippet":"throw new Error(\"Invalid output format\");","category":"blocker","line_end":372,"severity":"low","line_start":372},{"id":"blocker:vendored/0g/0g-compute/references/examples/speech-to-text.md:707:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"System reconnaissance","snippet":"5. **Caching**: Store transcriptions to avoid reprocessing","category":"blocker","line_end":707,"severity":"low","line_start":707},{"id":"blocker:vendored/0g/0g-compute/references/examples/streaming-chat.md:345:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"System reconnaissance","snippet":"// Skip invalid JSON","category":"blocker","line_end":345,"severity":"low","line_start":345},{"id":"blocker:vendored/0g/0g-compute/references/examples/streaming-chat.md:363:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"System reconnaissance","snippet":"const isValid = await broker.inference.processResponse(","category":"blocker","line_end":363,"severity":"low","line_start":363},{"id":"blocker:vendored/0g/0g-compute/references/examples/text-to-image.md:218:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"System reconnaissance","snippet":"throw new Error(\\`Invalid size. Must be one of: \\${validSizes.join(\", \")}\\`);","category":"blocker","line_end":218,"severity":"low","line_start":218},{"id":"blocker:vendored/0g/0g-compute/references/examples/text-to-image.md:515:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"System reconnaissance","snippet":"### \"Invalid size\"","category":"blocker","line_end":515,"severity":"low","line_start":515},{"id":"blocker:vendored/0g/0g-compute/references/examples/text-to-image.md:590:system-reconnaissance","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"System reconnaissance","snippet":"5. **Caching**: Store prompts to avoid duplicate generations","category":"blocker","line_end":590,"severity":"low","line_start":590},{"id":"blocker:vendored/0g/0g-compute/references/fine-tuning.md:91:system-reconnaissance","file":"vendored/0g/0g-compute/references/fine-tuning.md","pattern":"System reconnaissance","snippet":"- Valid encoding","category":"blocker","line_end":91,"severity":"low","line_start":91},{"id":"blocker:vendored/0g/0g-compute/references/fine-tuning.md:216:system-reconnaissance","file":"vendored/0g/0g-compute/references/fine-tuning.md","pattern":"System reconnaissance","snippet":"--task-id <TASK_ID> \\","category":"blocker","line_end":216,"severity":"low","line_start":216},{"id":"obfuscation:vendored/okx/okx-agent-payments-protocol/references/accepts-schemes.md:48:base64-encode","file":"vendored/okx/okx-agent-payments-protocol/references/accepts-schemes.md","pattern":"Base64 encode","snippet":"X-PAYMENT: btoa(JSON.stringify(paymentPayload))","category":"obfuscation","line_end":48,"severity":"low","line_start":48},{"id":"obfuscation:vendored/arkhai/fulfill-git-escrow/SKILL.md:18:unicode-escape-sequence","file":"vendored/arkhai/fulfill-git-escrow/SKILL.md","pattern":"Unicode escape sequence","snippet":"emoji: \"\\U0001F3AF\"","category":"obfuscation","line_end":18,"severity":"low","line_start":18},{"id":"obfuscation:vendored/arkhai/make-git-escrow/SKILL.md:18:unicode-escape-sequence","file":"vendored/arkhai/make-git-escrow/SKILL.md","pattern":"Unicode escape sequence","snippet":"emoji: \"\\U0001F512\"","category":"obfuscation","line_end":18,"severity":"low","line_start":18},{"id":"env_access:vendored/okx/okx-dex/_shared/payment-notifications.md:115:configuration-library","file":"vendored/okx/okx-dex/_shared/payment-notifications.md","pattern":"Configuration library","snippet":"On confirmation, still run `onchainos payment default set --asset <entry.asset> --chain <entry.chain","category":"env_access","line_end":115,"severity":"low","line_start":115},{"id":"env_access:vendored/starknet/starknet-js/SKILL.md:495:configuration-library","file":"vendored/starknet/starknet-js/SKILL.md","pattern":"Configuration library","snippet":"config.get('transactionVersion');","category":"env_access","line_end":495,"severity":"low","line_start":495},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:67:dotenv-library","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"dotenv library","snippet":"\"dotenv\": \"^17.2.3\",","category":"env_access","line_end":67,"severity":"low","line_start":67},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:136:dotenv-library","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"dotenv library","snippet":"import * as dotenv from \"dotenv\";","category":"env_access","line_end":136,"severity":"low","line_start":136},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:141:dotenv-library","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"dotenv library","snippet":"dotenv.config();","category":"env_access","line_end":141,"severity":"low","line_start":141},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:66:dotenv-library","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"dotenv library","snippet":"\"dotenv\": \"^17.2.3\",","category":"env_access","line_end":66,"severity":"low","line_start":66},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:138:dotenv-library","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"dotenv library","snippet":"import * as dotenv from \"dotenv\";","category":"env_access","line_end":138,"severity":"low","line_start":138},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:141:dotenv-library","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"dotenv library","snippet":"dotenv.config();","category":"env_access","line_end":141,"severity":"low","line_start":141},{"id":"env_access:vendored/0g/0g-compute/references/examples/text-to-image.md:65:dotenv-library","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"dotenv library","snippet":"\"dotenv\": \"^17.2.3\",","category":"env_access","line_end":65,"severity":"low","line_start":65},{"id":"env_access:vendored/0g/0g-compute/references/examples/text-to-image.md:132:dotenv-library","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"dotenv library","snippet":"import * as dotenv from \"dotenv\";","category":"env_access","line_end":132,"severity":"low","line_start":132},{"id":"env_access:vendored/0g/0g-compute/references/examples/text-to-image.md:136:dotenv-library","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"dotenv library","snippet":"dotenv.config();","category":"env_access","line_end":136,"severity":"low","line_start":136},{"id":"env_access:vendored/openserv/openserv-agent-sdk/examples/basic-agent.ts:9:dotenv-library","file":"vendored/openserv/openserv-agent-sdk/examples/basic-agent.ts","pattern":"dotenv library","snippet":"import 'dotenv/config'","category":"env_access","line_end":9,"severity":"low","line_start":9},{"id":"env_access:vendored/openserv/openserv-agent-sdk/examples/haiku-poet-agent.ts:9:dotenv-library","file":"vendored/openserv/openserv-agent-sdk/examples/haiku-poet-agent.ts","pattern":"dotenv library","snippet":"import 'dotenv/config'","category":"env_access","line_end":9,"severity":"low","line_start":9},{"id":"env_access:vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts:66:environment-variable-access-bracket-notation","file":"vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts","pattern":"Environment variable access (bracket notation)","snippet":"for (const key of required) creds[key] = process.env[key];","category":"env_access","line_end":66,"severity":"low","line_start":66},{"id":"env_access:vendored/starknet/starknet-js/scripts/account-example.ts:10:environment-variable-access-bracket-notation","file":"vendored/starknet/starknet-js/scripts/account-example.ts","pattern":"Environment variable access (bracket notation)","snippet":"const value = process.env[name]?.trim();","category":"env_access","line_end":10,"severity":"low","line_start":10},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:217:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment variable access (dot notation)","snippet":"const RPC_URL = process.env.NODE_ENV === 'production'","category":"env_access","line_end":217,"severity":"low","line_start":217},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:222:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment variable access (dot notation)","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"env_access","line_end":222,"severity":"low","line_start":222},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:569:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment variable access (dot notation)","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"env_access","line_end":569,"severity":"low","line_start":569},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable access (dot notation)","snippet":"const RPC_URL = process.env.RPC_URL || \"https://evmrpc.0g.ai\";","category":"env_access","line_end":143,"severity":"low","line_start":143},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:144:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable access (dot notation)","snippet":"const AUDIO_DIR = process.env.AUDIO_DIR || \"./audio\";","category":"env_access","line_end":144,"severity":"low","line_start":144},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:145:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable access (dot notation)","snippet":"const TRANSCRIPT_DIR = process.env.TRANSCRIPT_DIR || \"./transcripts\";","category":"env_access","line_end":145,"severity":"low","line_start":145},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:149:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable access (dot notation)","snippet":"let providerAddress = process.env.PROVIDER_ADDRESS;","category":"env_access","line_end":149,"severity":"low","line_start":149},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable access (dot notation)","snippet":"if (!process.env.PRIVATE_KEY) {","category":"env_access","line_end":274,"severity":"low","line_start":274},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:311:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable access (dot notation)","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","category":"env_access","line_end":311,"severity":"low","line_start":311},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:144:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Environment variable access (dot notation)","snippet":"const RPC_URL = process.env.RPC_URL || \"https://evmrpc.0g.ai\";","category":"env_access","line_end":144,"severity":"low","line_start":144},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:148:environment-variable-access-dot-notation","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Environment variable access (dot notation)","snippet":"let providerAddress = process.env.PROVIDER_ADDRESS;","category":"env_access","line_end":148,"severity":"low","line_start":148},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:217:environment-variable-object","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment variable object","snippet":"const RPC_URL = process.env.NODE_ENV === 'production'","category":"env_access","line_end":217,"severity":"low","line_start":217},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:222:environment-variable-object","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment variable object","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"env_access","line_end":222,"severity":"low","line_start":222},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:569:environment-variable-object","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Environment variable object","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);","category":"env_access","line_end":569,"severity":"low","line_start":569},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable object","snippet":"const RPC_URL = process.env.RPC_URL || \"https://evmrpc.0g.ai\";","category":"env_access","line_end":143,"severity":"low","line_start":143},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:144:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable object","snippet":"const AUDIO_DIR = process.env.AUDIO_DIR || \"./audio\";","category":"env_access","line_end":144,"severity":"low","line_start":144},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:145:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable object","snippet":"const TRANSCRIPT_DIR = process.env.TRANSCRIPT_DIR || \"./transcripts\";","category":"env_access","line_end":145,"severity":"low","line_start":145},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:149:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable object","snippet":"let providerAddress = process.env.PROVIDER_ADDRESS;","category":"env_access","line_end":149,"severity":"low","line_start":149},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable object","snippet":"if (!process.env.PRIVATE_KEY) {","category":"env_access","line_end":274,"severity":"low","line_start":274},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:311:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Environment variable object","snippet":"const wallet = new ethers.Wallet(process.env.PRIVATE_KEY, provider);","category":"env_access","line_end":311,"severity":"low","line_start":311},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:144:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Environment variable object","snippet":"const RPC_URL = process.env.RPC_URL || \"https://evmrpc.0g.ai\";","category":"env_access","line_end":144,"severity":"low","line_start":144},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:148:environment-variable-object","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Environment variable object","snippet":"let providerAddress = process.env.PROVIDER_ADDRESS;","category":"env_access","line_end":148,"severity":"low","line_start":148},{"id":"network:vendored/0g/0g-compute/references/examples/speech-to-text.md:238:fetch-api-call","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Fetch API call","snippet":"const response = await fetch(\\`\\${endpoint}/audio/transcriptions\\`, {","category":"network","line_end":238,"severity":"low","line_start":238},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:277:fetch-api-call","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Fetch API call","snippet":"const response = await fetch(\\`\\${endpoint}/chat/completions\\`, {","category":"network","line_end":277,"severity":"low","line_start":277},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:188:fetch-api-call","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Fetch API call","snippet":"const response = await fetch(url);","category":"network","line_end":188,"severity":"low","line_start":188},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:280:fetch-api-call","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Fetch API call","snippet":"const response = await fetch(\\`\\${endpoint}/images/generations\\`, {","category":"network","line_end":280,"severity":"low","line_start":280},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:440:fetch-api-call","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Fetch API call","snippet":"const response = await fetch(imageUrl);","category":"network","line_end":440,"severity":"low","line_start":440},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:457:fetch-api-call","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Fetch API call","snippet":"const response = await fetch(...);","category":"network","line_end":457,"severity":"low","line_start":457},{"id":"network:vendored/0g/0g-compute/references/inference.md:131:fetch-api-call","file":"vendored/0g/0g-compute/references/inference.md","pattern":"Fetch API call","snippet":"const response = await fetch(`${endpoint}/chat/completions`, {","category":"network","line_end":131,"severity":"low","line_start":131},{"id":"network:vendored/0g/0g-compute/references/inference.md:156:fetch-api-call","file":"vendored/0g/0g-compute/references/inference.md","pattern":"Fetch API call","snippet":"const response = await fetch(`${endpoint}/chat/completions`, {","category":"network","line_end":156,"severity":"low","line_start":156},{"id":"network:vendored/0g/0g-compute/references/inference.md:236:fetch-api-call","file":"vendored/0g/0g-compute/references/inference.md","pattern":"Fetch API call","snippet":"const response = await fetch(`${endpoint}/images/generations`, {","category":"network","line_end":236,"severity":"low","line_start":236},{"id":"network:vendored/0g/0g-compute/references/inference.md:273:fetch-api-call","file":"vendored/0g/0g-compute/references/inference.md","pattern":"Fetch API call","snippet":"const response = await fetch(`${endpoint}/audio/transcriptions`, {","category":"network","line_end":273,"severity":"low","line_start":273},{"id":"network:vendored/0g/0g-compute/references/inference.md:296:fetch-api-call","file":"vendored/0g/0g-compute/references/inference.md","pattern":"Fetch API call","snippet":"const response = await fetch(`${endpoint}/audio/transcriptions`, {","category":"network","line_end":296,"severity":"low","line_start":296},{"id":"network:integrations/genlayer-erc7710-connector/SKILL.md:8:hardcoded-url","file":"integrations/genlayer-erc7710-connector/SKILL.md","pattern":"Hardcoded URL","snippet":"Use this skill after the mandate, ERC-7710 policy, and GenLayer Intelligent Contract review flow exi","category":"network","line_end":8,"severity":"low","line_start":8},{"id":"network:integrations/genlayer-intelligent-contracts/SKILL.md:3:hardcoded-url","file":"integrations/genlayer-intelligent-contracts/SKILL.md","pattern":"Hardcoded URL","snippet":"description: Internet Court adapter for GenLayer Intelligent Contract supervision. Use to specify ag","category":"network","line_end":3,"severity":"low","line_start":3},{"id":"network:integrations/genlayer-intelligent-contracts/SKILL.md:12:hardcoded-url","file":"integrations/genlayer-intelligent-contracts/SKILL.md","pattern":"Hardcoded URL","snippet":"This skill is also not the GenLayer deployment skill. For writing, deploying, testing, and interacti","category":"network","line_end":12,"severity":"low","line_start":12},{"id":"network:README.md:135:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.claude/skills/internet-court","category":"network","line_end":135,"severity":"low","line_start":135},{"id":"network:README.md:148:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.agents/skills/internet-court","category":"network","line_end":148,"severity":"low","line_start":148},{"id":"network:README.md:158:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.config/opencode/skills/internet-","category":"network","line_end":158,"severity":"low","line_start":158},{"id":"network:README.md:177:hardcoded-url","file":"README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/internet-court/internet-court-skill ~/.hermes/skills/internet-court","category":"network","line_end":177,"severity":"low","line_start":177},{"id":"network:SKILL.md:36:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"**`https://github.com/internet-court/internet-court-skill`**. Every path this","category":"network","line_end":36,"severity":"low","line_start":36},{"id":"network:SKILL.md:47:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"`https://raw.githubusercontent.com/internet-court/internet-court-skill/main/<path>`","category":"network","line_end":47,"severity":"low","line_start":47},{"id":"network:SKILL.md:218:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"| Settle a narrow binary question from public web evidence (prediction market / factual oracle) | `v","category":"network","line_end":218,"severity":"low","line_start":218},{"id":"network:SKILL.md:363:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"**`https://github.com/internet-court/internet-court-skill/issues`**. If you","category":"network","line_end":363,"severity":"low","line_start":363},{"id":"network:skills-lock.json:138:hardcoded-url","file":"skills-lock.json","pattern":"Hardcoded URL","snippet":"\"source\": \"https://antseed.com/skill.md\",","category":"network","line_end":138,"severity":"low","line_start":138},{"id":"network:skills-lock.json:257:hardcoded-url","file":"skills-lock.json","pattern":"Hardcoded URL","snippet":"\"source\": \"https://agentlink.id/skill.md\",","category":"network","line_end":257,"severity":"low","line_start":257},{"id":"network:skills-lock.json:280:hardcoded-url","file":"skills-lock.json","pattern":"Hardcoded URL","snippet":"\"source\": \"https://www.intelligentoracle.com/skill.md\",","category":"network","line_end":280,"severity":"low","line_start":280},{"id":"network:skills-lock.json:711:hardcoded-url","file":"skills-lock.json","pattern":"Hardcoded URL","snippet":"\"source\": \"https://docs.privy.io/skill.md\",","category":"network","line_end":711,"severity":"low","line_start":711},{"id":"network:vendored/0g/0g-compute/README.md:20:hardcoded-url","file":"vendored/0g/0g-compute/README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.claude/skills/0g-compute","category":"network","line_end":20,"severity":"low","line_start":20},{"id":"network:vendored/0g/0g-compute/README.md:23:hardcoded-url","file":"vendored/0g/0g-compute/README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.agents/skills/0g-compute","category":"network","line_end":23,"severity":"low","line_start":23},{"id":"network:vendored/0g/0g-compute/README.md:26:hardcoded-url","file":"vendored/0g/0g-compute/README.md","pattern":"Hardcoded URL","snippet":"git clone https://github.com/0gfoundation/0g-compute-skills ~/.openclaw/skills/0g-compute","category":"network","line_end":26,"severity":"low","line_start":26},{"id":"network:vendored/0g/0g-compute/references/account-management.md:218:hardcoded-url","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Hardcoded URL","snippet":"? \"https://evmrpc.0g.ai\"  // Mainnet","category":"network","line_end":218,"severity":"low","line_start":218},{"id":"network:vendored/0g/0g-compute/references/account-management.md:219:hardcoded-url","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Hardcoded URL","snippet":": \"https://evmrpc-testnet.0g.ai\";  // Testnet","category":"network","line_end":219,"severity":"low","line_start":219},{"id":"network:vendored/0g/0g-compute/references/account-management.md:568:hardcoded-url","file":"vendored/0g/0g-compute/references/account-management.md","pattern":"Hardcoded URL","snippet":"const provider = new ethers.JsonRpcProvider(\"https://evmrpc-testnet.0g.ai\");","category":"network","line_end":568,"severity":"low","line_start":568},{"id":"network:vendored/0g/0g-compute/references/examples/speech-to-text.md:114:hardcoded-url","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Hardcoded URL","snippet":"RPC_URL=https://evmrpc.0g.ai","category":"network","line_end":114,"severity":"low","line_start":114},{"id":"network:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:hardcoded-url","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Hardcoded URL","snippet":"const RPC_URL = process.env.RPC_URL || \"https://evmrpc.0g.ai\";","category":"network","line_end":143,"severity":"low","line_start":143},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:113:hardcoded-url","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Hardcoded URL","snippet":"RPC_URL=https://evmrpc.0g.ai","category":"network","line_end":113,"severity":"low","line_start":113},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:144:hardcoded-url","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Hardcoded URL","snippet":"const RPC_URL = process.env.RPC_URL || \"https://evmrpc.0g.ai\";","category":"network","line_end":144,"severity":"low","line_start":144},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:450:hardcoded-url","file":"vendored/0g/0g-compute/references/examples/streaming-chat.md","pattern":"Hardcoded URL","snippet":"📡 Endpoint: https://provider-endpoint.example.com/v1/proxy","category":"network","line_end":450,"severity":"low","line_start":450},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:67:http-client-library","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"HTTP client library","snippet":"\"node-fetch\": \"^3.3.2\"","category":"network","line_end":67,"severity":"low","line_start":67},{"id":"network:vendored/humanode/humanode-agentlink/SKILL.md:118:http-client-library","file":"vendored/humanode/humanode-agentlink/SKILL.md","pattern":"HTTP client library","snippet":"To build just the header value for use with curl, axios, or any HTTP client, `buildAgentLinkHeader` ","category":"network","line_end":118,"severity":"low","line_start":118},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/browse-ideas.ts:12:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/browse-ideas.ts","pattern":"HTTP client library","snippet":"import axios from \"axios\";","category":"network","line_end":12,"severity":"low","line_start":12},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/browse-ideas.ts:14:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/browse-ideas.ts","pattern":"HTTP client library","snippet":"const api = axios.create({","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/get-api-key.ts:14:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/get-api-key.ts","pattern":"HTTP client library","snippet":"import axios from \"axios\";","category":"network","line_end":14,"severity":"low","line_start":14},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/get-api-key.ts:18:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/get-api-key.ts","pattern":"HTTP client library","snippet":"const api = axios.create({","category":"network","line_end":18,"severity":"low","line_start":18},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:15:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts","pattern":"HTTP client library","snippet":"import axios from \"axios\";","category":"network","line_end":15,"severity":"low","line_start":15},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:24:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts","pattern":"HTTP client library","snippet":"const api = axios.create({","category":"network","line_end":24,"severity":"low","line_start":24},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:84:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts","pattern":"HTTP client library","snippet":"if (axios.isAxiosError(error) && error.response?.status === 409) {","category":"network","line_end":84,"severity":"low","line_start":84},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:86:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts","pattern":"HTTP client library","snippet":"} else if (axios.isAxiosError(error)) {","category":"network","line_end":86,"severity":"low","line_start":86},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:115:http-client-library","file":"vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts","pattern":"HTTP client library","snippet":"if (axios.isAxiosError(error)) {","category":"network","line_end":115,"severity":"low","line_start":115},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:287:node-js-fs-stat-operations","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Node.js fs stat operations","snippet":"if (!fs.existsSync(audioFile)) {","category":"filesystem","line_end":287,"severity":"low","line_start":287},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:298:node-js-fs-stat-operations","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Node.js fs stat operations","snippet":"if (!fs.existsSync(TRANSCRIPT_DIR)) {","category":"filesystem","line_end":298,"severity":"low","line_start":298},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:303:node-js-fs-stat-operations","file":"vendored/0g/0g-compute/references/examples/speech-to-text.md","pattern":"Node.js fs stat operations","snippet":"const fileStat = fs.statSync(audioFile);","category":"filesystem","line_end":303,"severity":"low","line_start":303},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:227:node-js-fs-stat-operations","file":"vendored/0g/0g-compute/references/examples/text-to-image.md","pattern":"Node.js fs stat operations","snippet":"if (!fs.existsSync(OUTPUT_DIR)) {","category":"filesystem","line_end":227,"severity":"low","line_start":227},{"id":"env_access:vendored/chaingpt/chaingpt/SKILL.md:322:python-environment-access","file":"vendored/chaingpt/chaingpt/SKILL.md","pattern":"Python environment access","snippet":"1. **Store API keys in environment variables** — never hardcode. Use `process.env.CHAINGPT_API_KEY` ","category":"env_access","line_end":322,"severity":"low","line_start":322},{"id":"env_access:vendored/near/near-ai-cloud/references/private-vs-anonymised.md:87:python-environment-access","file":"vendored/near/near-ai-cloud/references/private-vs-anonymised.md","pattern":"Python environment access","snippet":"'Authorization': f'Bearer {os.environ[\"NEAR_API_KEY\"]}'","category":"env_access","line_end":87,"severity":"low","line_start":87},{"id":"network:vendored/genlayer/write-contract/SKILL.md:176:python-http-libraries","file":"vendored/genlayer/write-contract/SKILL.md","pattern":"Python HTTP libraries","snippet":"Never use for LLM calls or web pages that change between requests.","category":"network","line_end":176,"severity":"low","line_start":176},{"id":"network:vendored/lifi/lifi/SKILL.md:251:python-http-libraries","file":"vendored/lifi/lifi/SKILL.md","pattern":"Python HTTP libraries","snippet":"r = requests.get(f\"{BASE_URL}/quote\", params=params, headers=HEADERS)","category":"network","line_end":251,"severity":"low","line_start":251},{"id":"network:vendored/lifi/lifi/SKILL.md:258:python-http-libraries","file":"vendored/lifi/lifi/SKILL.md","pattern":"Python HTTP libraries","snippet":"return requests.get(f\"{BASE_URL}/status\", params=params, headers=HEADERS).json()","category":"network","line_end":258,"severity":"low","line_start":258},{"id":"network:vendored/near/near-ai-cloud/references/model-verification.md:63:python-http-libraries","file":"vendored/near/near-ai-cloud/references/model-verification.md","pattern":"Python HTTP libraries","snippet":"response = requests.get(","category":"network","line_end":63,"severity":"low","line_start":63},{"id":"network:vendored/near/near-ai-cloud/references/private-vs-anonymised.md:83:python-http-libraries","file":"vendored/near/near-ai-cloud/references/private-vs-anonymised.md","pattern":"Python HTTP libraries","snippet":"response = requests.post(","category":"network","line_end":83,"severity":"low","line_start":83},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:35:python-http-libraries","file":"vendored/near/near-smart-contracts/rules/yield-resume.md","pattern":"Python HTTP libraries","snippet":"self.pending_requests.remove(&request_id);  // Only cleanup on success","category":"network","line_end":35,"severity":"low","line_start":35},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:130:python-http-libraries","file":"vendored/near/near-smart-contracts/rules/yield-resume.md","pattern":"Python HTTP libraries","snippet":"self.pending_requests.insert(request_id, PendingRequest {","category":"network","line_end":130,"severity":"low","line_start":130},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:155:python-http-libraries","file":"vendored/near/near-smart-contracts/rules/yield-resume.md","pattern":"Python HTTP libraries","snippet":"let request = self.pending_requests.get(&request_id)","category":"network","line_end":155,"severity":"low","line_start":155},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:179:python-http-libraries","file":"vendored/near/near-smart-contracts/rules/yield-resume.md","pattern":"Python HTTP libraries","snippet":"self.pending_requests.remove(&request_id);","category":"network","line_end":179,"severity":"low","line_start":179},{"id":"network:vendored/okx/okx-agentic-wallet/references/swap.md:35:python-http-libraries","file":"vendored/okx/okx-agentic-wallet/references/swap.md","pattern":"Python HTTP libraries","snippet":"- Slippage: omit for autoSlippage. Pass `--slippage <pct>` only if the user explicitly requests. Nev","category":"network","line_end":35,"severity":"low","line_start":35},{"id":"network:vendored/openserv/openserv-ideaboard-api/reference.md:216:python-http-libraries","file":"vendored/openserv/openserv-ideaboard-api/reference.md","pattern":"Python HTTP libraries","snippet":"\"description\": \"An agent that reviews pull requests...\",","category":"network","line_end":216,"severity":"low","line_start":216},{"id":"filesystem:vendored/okx/okx-ai/references/chat-comm-init.md:12:standard-device-file-access","file":"vendored/okx/okx-ai/references/chat-comm-init.md","pattern":"Standard device file access","snippet":"command -v okx-a2a >/dev/null 2>&1 || npm i -g @okxweb3/a2a-node","category":"filesystem","line_end":12,"severity":"low","line_start":12},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:168:standard-device-file-access","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Standard device file access","snippet":"SKILLS_LIST=$(npx skills list 2>/dev/null)","category":"filesystem","line_end":168,"severity":"low","line_start":168},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:279:standard-device-file-access","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Standard device file access","snippet":"CATALOG=$(curl -fsSL --max-time 5 \"https://api.github.com/repos/okx/plugin-store/contents/skills\" 2>","category":"filesystem","line_end":279,"severity":"low","line_start":279},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:280:standard-device-file-access","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Standard device file access","snippet":"| python3 -c \"import sys,json; print('\\n'.join(p['name'] for p in json.load(sys.stdin)))\" 2>/dev/nul","category":"filesystem","line_end":280,"severity":"low","line_start":280},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:285:standard-device-file-access","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Standard device file access","snippet":"COUNT=$(echo \"$MATCHES\" | grep -c . 2>/dev/null || echo 0)","category":"filesystem","line_end":285,"severity":"low","line_start":285},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:296:standard-device-file-access","file":"vendored/okx/okx-dapp-discovery/SKILL.md","pattern":"Standard device file access","snippet":"if npx skills add okx/plugin-store --skill \"${DAPP_LOWER}-plugin\" --yes --global 2>/dev/null; then","category":"filesystem","line_end":296,"severity":"low","line_start":296}],"finding_verdicts":[{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:8:pipe-to-shell-pattern","reason":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.","verdict":"confirmed","severity":"critical","confidence":0.99},{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:123:pipe-to-shell-pattern","reason":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.","verdict":"confirmed","severity":"critical","confidence":0.99},{"id":"blocker:vendored/nansen/nansen-mpp-payment/SKILL.md:34:pipe-to-shell-pattern","reason":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.","verdict":"confirmed","severity":"critical","confidence":0.99},{"id":"blocker:vendored/near/near-smart-contracts/SKILL.md:33:pipe-to-shell-pattern","reason":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.","verdict":"confirmed","severity":"critical","confidence":0.99},{"id":"blocker:vendored/near/near-smart-contracts/SKILL.md:39:pipe-to-shell-pattern","reason":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.","verdict":"confirmed","severity":"critical","confidence":0.99},{"id":"blocker:vendored/near/near-smart-contracts/SKILL.md:42:pipe-to-shell-pattern","reason":"The guide pipes an unpinned remote response directly into a shell. A compromised server or redirected download would execute arbitrary code.","verdict":"confirmed","severity":"critical","confidence":0.99},{"id":"sensitive:vendored/chaingpt/agent-wallet/SKILL.md:228:1password-data","reason":"This line recommends an out-of-band password manager or hardware safe for backup. It does not access or expose 1Password data.","verdict":"false_positive","confidence":0.98},{"id":"sensitive:vendored/0g/0g-compute/references/inference.md:31:cryptocurrency-wallet","reason":"The snippet references a standard wallet provider, adapter, transaction API, or EIP. It does not extract credentials or bypass wallet approval.","verdict":"false_positive","confidence":0.96},{"id":"sensitive:vendored/0g/0g-compute/references/inference.md:35:cryptocurrency-wallet","reason":"The snippet references a standard wallet provider, adapter, transaction API, or EIP. It does not extract credentials or bypass wallet approval.","verdict":"false_positive","confidence":0.96},{"id":"sensitive:vendored/kleros/kleros-curate/references/scout-registries.md:120:cryptocurrency-wallet","reason":"The snippet references a standard wallet provider, adapter, transaction API, or EIP. It does not extract credentials or bypass wallet approval.","verdict":"false_positive","confidence":0.96},{"id":"sensitive:vendored/metamask/smart-accounts-kit/workflows/request-permissions.md:17:cryptocurrency-wallet","reason":"The snippet references a standard wallet provider, adapter, transaction API, or EIP. It does not extract credentials or bypass wallet approval.","verdict":"false_positive","confidence":0.96},{"id":"sensitive:vendored/near/near-smart-contracts/rules/chain-signatures.md:385:cryptocurrency-wallet","reason":"The snippet references a standard wallet provider, adapter, transaction API, or EIP. It does not extract credentials or bypass wallet approval.","verdict":"false_positive","confidence":0.96},{"id":"sensitive:vendored/privy/privy/SKILL.md:157:cryptocurrency-wallet","reason":"The snippet references a standard wallet provider, adapter, transaction API, or EIP. It does not extract credentials or bypass wallet approval.","verdict":"false_positive","confidence":0.96},{"id":"sensitive:vendored/starknet/starknet-identity/SKILL.md:319:cryptocurrency-wallet","reason":"The snippet references a standard wallet provider, adapter, transaction API, or EIP. It does not extract credentials or bypass wallet approval.","verdict":"false_positive","confidence":0.96},{"id":"sensitive:vendored/chaingpt/agent-wallet/SKILL.md:50:macos-security-command","reason":"The command retrieves a wallet passphrase from macOS Keychain and prints it. Agent context, terminal capture, or logs could expose the secret.","verdict":"confirmed","severity":"critical","confidence":0.97},{"id":"blocker:vendored/0g/0g-compute/references/account-management.md:234:ransomware-file-extensions","reason":"The word locked describes blockchain balances or token-lock expiration. No file extension, encryption behavior, or ransomware activity is present.","verdict":"false_positive","confidence":0.99},{"id":"blocker:vendored/openserv/openserv-launch/examples/agent-launcher.ts:79:ransomware-file-extensions","reason":"The word locked describes blockchain balances or token-lock expiration. No file extension, encryption behavior, or ransomware activity is present.","verdict":"false_positive","confidence":0.99},{"id":"blocker:vendored/openserv/openserv-launch/examples/agent-launcher.ts:165:ransomware-file-extensions","reason":"The word locked describes blockchain balances or token-lock expiration. No file extension, encryption behavior, or ransomware activity is present.","verdict":"false_positive","confidence":0.99},{"id":"blocker:vendored/openserv/openserv-launch/examples/launch-token.ts:118:ransomware-file-extensions","reason":"The word locked describes blockchain balances or token-lock expiration. No file extension, encryption behavior, or ransomware activity is present.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:102:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:104:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:105:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:106:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:124:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:126:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:127:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:151:certificate-key-files","reason":"The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:214:certificate-key-files","reason":"The guide identifies a raw EVM private-key file used by a funded hot wallet. Disclosure, weak permissions, or unsafe backup would compromise funds.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:215:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/genlayer/write-contract/SKILL.md:361:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:vendored/kleros/kleros-curate/references/shared-item-json.md:33:certificate-key-files","reason":"The match is a data-field name, collection key, encrypted-copy description, or safe validation example. It is not certificate or private-key access.","verdict":"false_positive","confidence":0.97},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:119:crypto-seed-private-key-mention","reason":"The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:126:crypto-seed-private-key-mention","reason":"The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:147:crypto-seed-private-key-mention","reason":"The demo exports or offers to export a real agent private key in a JSON bearer package. Disclosure would grant signing authority and access to funds.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"sensitive:integrations/x402-erc7710/SKILL.md:158:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:SKILL.md:188:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:SKILL.md:306:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:91:crypto-seed-private-key-mention","reason":"The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.","verdict":"confirmed","severity":"high","confidence":0.74},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:370:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:517:crypto-seed-private-key-mention","reason":"The workflow asks the user to enter a wallet private key into a third-party CLI. A compromised CLI or captured terminal could steal it.","verdict":"confirmed","severity":"high","confidence":0.74},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:639:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/examples/README.md:122:crypto-seed-private-key-mention","reason":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:116:crypto-seed-private-key-mention","reason":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"sensitive:vendored/0g/0g-compute/references/examples/streaming-chat.md:115:crypto-seed-private-key-mention","reason":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"sensitive:vendored/0g/0g-compute/references/examples/text-to-image.md:113:crypto-seed-private-key-mention","reason":"The example stores a wallet private key in a plaintext environment file. File disclosure or accidental source control inclusion could compromise funds.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:243:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:432:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:438:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/fine-tuning.md:440:crypto-seed-private-key-mention","reason":"The line gives protective key-safety guidance or describes legitimate wallet behavior. It does not request, print, export, or transmit a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:217:environment-file-access","reason":"The match is a file-tree entry or non-secret configuration such as RPC URLs, directories, provider addresses, or a deployed contract address.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:222:environment-file-access","reason":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/account-management.md:569:environment-file-access","reason":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/examples/README.md:122:environment-file-access","reason":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:27:environment-file-access","reason":"The match is a file-tree entry or non-secret configuration such as RPC URLs, directories, provider addresses, or a deployed contract address.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:110:environment-file-access","reason":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:environment-file-access","reason":"The match is a file-tree entry or non-secret configuration such as RPC URLs, directories, provider addresses, or a deployed contract address.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:144:environment-file-access","reason":"The match is a file-tree entry or non-secret configuration such as RPC URLs, directories, provider addresses, or a deployed contract address.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:145:environment-file-access","reason":"The match is a file-tree entry or non-secret configuration such as RPC URLs, directories, provider addresses, or a deployed contract address.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:149:environment-file-access","reason":"The match is a file-tree entry or non-secret configuration such as RPC URLs, directories, provider addresses, or a deployed contract address.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:172:environment-file-access","reason":"The match is a file-tree entry or non-secret configuration such as RPC URLs, directories, provider addresses, or a deployed contract address.","verdict":"false_positive","confidence":0.95},{"id":"sensitive:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:environment-file-access","reason":"The example loads a wallet private key from a plaintext environment file or process environment. Secret exposure would permit unauthorized signing.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"sensitive:vendored/intelligent-oracle/intelligent-oracle/SKILL.md:294:environment-variant-files","reason":"The environment file stores a public integrator identifier or deployed contract address. The cited line does not contain or load a secret.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:vendored/lifi/lifi-stablecoin-swap/references/quickstart.md:18:environment-variant-files","reason":"The environment file stores a public integrator identifier or deployed contract address. The cited line does not contain or load a secret.","verdict":"false_positive","confidence":0.94},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:393:dynamic-code-evaluation-with-eval","reason":"The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:407:dynamic-code-evaluation-with-eval","reason":"The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:412:dynamic-code-evaluation-with-eval","reason":"The guide generates Python expressions with an LLM and executes them through eval. Restricted builtins reduce risk but do not make model output trusted.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"scripts:vendored/genlayer/write-contract/SKILL.md:178:dynamic-function-constructor","reason":"The phrase is a documentation heading for a custom validator function. It does not invoke JavaScript Function or construct executable code dynamically.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:222:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:569:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:117:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:275:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:311:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:116:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:189:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:190:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:201:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:574:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:578:generic-api-secret-keys","reason":"The example reads a wallet private key from environment variables and uses it for signing. Environment disclosure could lead to unauthorized transactions.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"filesystem:README.md:135:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:148:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:158:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:161:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:177:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:11:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:12:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:13:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:20:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:23:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:26:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/SKILL.md:38:hidden-file-in-home-directory","reason":"The guide persists an authenticated session under the home directory. Weak permissions, backups, or unintended reads could expose reusable credentials.","verdict":"confirmed","severity":"high","confidence":0.72},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:57:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:151:hidden-file-in-home-directory","reason":"The cited hidden file is a raw funded-wallet private key. Local disclosure or unsafe backup would permit unauthorized signing.","verdict":"confirmed","severity":"high","confidence":0.96},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:183:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:206:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:208:hidden-file-in-home-directory","reason":"The path is a documented skill installation directory or non-secret application state. Hidden home-directory syntax alone is not malicious access.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:integrations/genlayer-intelligent-contracts/SKILL.md:38:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:42:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:SKILL.md:48:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:145:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:146:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:147:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/README.md:163:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:341:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:676:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:250:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:273:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:645:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/streaming-chat.md:646:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:263:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:271:path-traversal-sequence","reason":"The sequence appears in a relative documentation link, repository routing path, or escaped output text. No untrusted path is used for filesystem traversal.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:866:sudo-privilege-escalation","reason":"The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.","verdict":"confirmed","severity":"high","confidence":0.87},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:868:sudo-privilege-escalation","reason":"The guide invokes sudo to read service logs, which may expose sensitive runtime data. Elevated access should require explicit user approval.","verdict":"confirmed","severity":"high","confidence":0.75},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:881:sudo-privilege-escalation","reason":"The guide directs the agent to restart a system service with sudo. This privileged and disruptive operation requires explicit user approval.","verdict":"confirmed","severity":"high","confidence":0.87},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:204:symlink-creation","reason":"The line tells the agent to detect symlink installation behavior and explicitly forbids running it without consent. It does not create a symlink.","verdict":"false_positive","confidence":0.99},{"id":"blocker:vendored/intelligent-oracle/intelligent-oracle/SKILL.md:145:at-command-scheduling","reason":"The word at introduces a future market-resolution timestamp in prose. It is not the operating-system at scheduler command.","verdict":"false_positive","confidence":0.99},{"id":"blocker:vendored/intelligent-oracle/intelligent-oracle/SKILL.md:148:at-command-scheduling","reason":"The word at introduces a future market-resolution timestamp in prose. It is not the operating-system at scheduler command.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:vendored/antseed/antseed-connect/SKILL.md:218:sqlite-database-file","reason":"The local database retains request, peer, token, and payment history. Backups or weak file permissions could expose operational metadata.","verdict":"confirmed","severity":"medium","confidence":0.64},{"id":"obfuscation:vendored/okx/okx-agent-payments-protocol/SKILL.md:123:base64-decode","reason":"Base64 decoding handles a documented payment response, image payload, or signature representation. It is data-format conversion, not hidden code execution.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:vendored/0g/0g-compute/references/examples/text-to-image.md:325:buffer-base64-decode","reason":"Base64 decoding handles a documented payment response, image payload, or signature representation. It is data-format conversion, not hidden code execution.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:vendored/0g/0g-compute/references/examples/text-to-image.md:446:buffer-base64-decode","reason":"Base64 decoding handles a documented payment response, image payload, or signature representation. It is data-format conversion, not hidden code execution.","verdict":"false_positive","confidence":0.97},{"id":"obfuscation:vendored/near/near-api-js/references/nep413.md:41:buffer-base64-decode","reason":"Base64 decoding handles a documented payment response, image payload, or signature representation. It is data-format conversion, not hidden code execution.","verdict":"false_positive","confidence":0.97},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:16:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:183:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:202:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/arkhai/alkahest-developer/references/python-api.md:235:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/kleros/kleros-ipfs-upload/SKILL.md:107:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:175:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:179:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:180:dynamic-import-expression","reason":"The match is a normal Python import, a fixed JavaScript module import, or compatibility guidance. No user-controlled module name is evaluated.","verdict":"false_positive","confidence":0.98},{"id":"scripts:vendored/openserv/openserv-agent-sdk/troubleshooting.md:186:dynamic-require-with-variable","reason":"The line warns against require with ESM-only packages. It does not call require with a variable or execute a dynamic module.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:225:file-stream-creation","reason":"The example opens a user-selected audio file for an intended transcription upload. It does not scan unrelated files or conceal access.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:528:file-stream-creation","reason":"The example opens a user-selected audio file for an intended transcription upload. It does not scan unrelated files or conceal access.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:vendored/kleros/kleros-curate/references/scout-registries.md:249:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-ipfs-upload.md:44:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-ipfs-upload.md:53:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-ipfs-upload.md:54:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-curate/references/shared-metaevidence.md:70:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-curate/references/stake-curate.md:86:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:176:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:181:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:187:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:191:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:243:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:258:hard-link-creation","reason":"The word link appears in the kleros.link domain or ordinary URL documentation. No filesystem hard-link operation is present.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:146:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:153:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:452:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:685:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:689:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:708:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:742:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:748:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:799:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:803:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:824:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"network:vendored/antseed/antseed-connect/SKILL.md:848:hardcoded-ip-address","reason":"Every cited address is the loopback interface used to keep a local proxy private. This configuration reduces network exposure.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:README.md:135:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:148:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:158:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:161:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:README.md:177:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:11:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:12:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:13:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:20:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:23:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/README.md:26:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/references/cli-reference.md:20:hidden-file-access","reason":"The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.","verdict":"confirmed","severity":"medium","confidence":0.72},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/references/cli-reference.md:113:hidden-file-access","reason":"The configuration points to a persisted authenticated session file. Weak file permissions or unintended reads could expose reusable credentials.","verdict":"confirmed","severity":"medium","confidence":0.72},{"id":"filesystem:vendored/altlayer/altllm-portal-auth/SKILL.md:38:hidden-file-access","reason":"The guide persists an authenticated session in a hidden home directory. Weak file permissions or backups could expose reusable credentials.","verdict":"confirmed","severity":"medium","confidence":0.72},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:57:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:151:hidden-file-access","reason":"The cited hidden file contains a raw funded-wallet private key. Unintended local access would permit unauthorized signing.","verdict":"confirmed","severity":"medium","confidence":0.96},{"id":"filesystem:vendored/antseed/antseed-connect/SKILL.md:183:hidden-file-access","reason":"The path is a documented skill installation directory or ordinary application state. The line does not perform covert hidden-file discovery.","verdict":"false_positive","confidence":0.97},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:299:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:383:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:672:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:194:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:228:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:325:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:442:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:446:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/near/near-kit/references/keys-and-testing.md:269:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/near/near-kit/references/transactions.md:75:node-js-fs-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:8:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:12:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:18:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:27:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:63:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:71:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:75:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:76:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:77:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:81:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:integrations/genlayer-erc7710-connector/SKILL.md:82:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:232:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:233:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:234:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:266:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:271:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:272:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:273:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:280:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:574:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:588:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/0g/0g-compute/references/account-management.md:602:ruby-shell-backtick-execution","reason":"The backticks are Markdown code formatting or JavaScript template literals. No Ruby or shell backtick command execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:83:shell-command-substitution","reason":"The command creates a raw wallet key and exports it into the process environment. Child processes or environment capture could expose it.","verdict":"confirmed","severity":"medium","confidence":0.66},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:45:shell-command-substitution","reason":"The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.","verdict":"confirmed","severity":"medium","confidence":0.79},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:46:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:47:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:85:shell-command-substitution","reason":"The command expands a wallet private key into a process argument. Process inspection, debugging output, or shell tracing could expose the secret.","verdict":"confirmed","severity":"medium","confidence":0.79},{"id":"external_commands:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:91:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts:32:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:48:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:165:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:224:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"external_commands:vendored/near/near-ai-cloud/references/model-verification.md:29:shell-command-substitution","reason":"The substitution runs a fixed local formatting, timestamp, nonce, or output-capture command. No untrusted value controls the executed command.","verdict":"false_positive","confidence":0.93},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:383:synchronous-file-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:194:synchronous-file-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:325:synchronous-file-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:442:synchronous-file-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:446:synchronous-file-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/arkhai/fulfill-git-escrow/SKILL.md:60:temp-directory-access","reason":"The guide clones an externally supplied repository into a predictable temporary path. Existing paths, symlinks, or crafted identifiers could redirect writes.","verdict":"confirmed","severity":"medium","confidence":0.78},{"id":"filesystem:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:49:temp-directory-access","reason":"The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.","verdict":"confirmed","severity":"medium","confidence":0.81},{"id":"filesystem:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:85:temp-directory-access","reason":"The payment flow writes or reads a fixed temporary filename. Another local process could replace it through a symlink or race.","verdict":"confirmed","severity":"medium","confidence":0.81},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:253:temp-directory-access","reason":"The path identifies an explicit user file or expected temporary output in the documented workflow. The cited line does not create an unsafe temporary file.","verdict":"false_positive","confidence":0.91},{"id":"filesystem:vendored/kleros/kleros-ipfs-upload/SKILL.md:257:temp-directory-access","reason":"The path identifies an explicit user file or expected temporary output in the documented workflow. The cited line does not create an unsafe temporary file.","verdict":"false_positive","confidence":0.91},{"id":"filesystem:vendored/okx/okx-ai/references/chat-cli-reference.md:39:temp-directory-access","reason":"The path identifies an explicit user file or expected temporary output in the documented workflow. The cited line does not create an unsafe temporary file.","verdict":"false_positive","confidence":0.91},{"id":"filesystem:vendored/okx/okx-ai/references/chat-cli-reference.md:77:temp-directory-access","reason":"The path identifies an explicit user file or expected temporary output in the documented workflow. The cited line does not create an unsafe temporary file.","verdict":"false_positive","confidence":0.91},{"id":"filesystem:vendored/okx/okx-ai/references/chat-cli-reference.md:92:temp-directory-access","reason":"The path identifies an explicit user file or expected temporary output in the documented workflow. The cited line does not create an unsafe temporary file.","verdict":"false_positive","confidence":0.91},{"id":"filesystem:vendored/okx/okx-ai/references/task-user-sub-playbook.md:47:temp-directory-access","reason":"The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.","verdict":"confirmed","severity":"medium","confidence":0.76},{"id":"filesystem:vendored/okx/okx-ai/references/task-user-sub-playbook.md:54:temp-directory-access","reason":"The workflow stores untrusted peer JSON in a predictable path derived from a job identifier. Missing validation creates overwrite and symlink risks.","verdict":"confirmed","severity":"medium","confidence":0.76},{"id":"external_commands:vendored/antseed/antseed-connect/SKILL.md:77:template-literal-with-command-substitution","reason":"The match is a Markdown fence or documentation describing fixed shell output capture. It is not an executable template containing untrusted command text.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts:8:template-literal-with-command-substitution","reason":"The match is a Markdown fence or documentation describing fixed shell output capture. It is not an executable template containing untrusted command text.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:48:template-literal-with-command-substitution","reason":"The match is a Markdown fence or documentation describing fixed shell output capture. It is not an executable template containing untrusted command text.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:164:template-literal-with-command-substitution","reason":"The match is a Markdown fence or documentation describing fixed shell output capture. It is not an executable template containing untrusted command text.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/kleros/kleros-ipfs-upload/SKILL.md:223:template-literal-with-command-substitution","reason":"The match is a Markdown fence or documentation describing fixed shell output capture. It is not an executable template containing untrusted command text.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/okx/okx-dapp-discovery/SKILL.md:167:template-literal-with-command-substitution","reason":"The match is a Markdown fence or documentation describing fixed shell output capture. It is not an executable template containing untrusted command text.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/okx/okx-dapp-discovery/SKILL.md:275:template-literal-with-command-substitution","reason":"The match is a Markdown fence or documentation describing fixed shell output capture. It is not an executable template containing untrusted command text.","verdict":"false_positive","confidence":0.99},{"id":"scripts:vendored/okx/okx-agent-payments-protocol/SKILL.md:180:with-statement-deprecated-scope-confusion","reason":"The word with appears in a prose table describing an HTTP method. No JavaScript with statement exists.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:vendored/openserv/openserv-agent-sdk/troubleshooting.md:37:xargs-command-can-execute-arbitrary-commands","reason":"The command force-kills every process listening on a port without checking ownership or identity. It can terminate an unrelated process.","verdict":"confirmed","severity":"medium","confidence":0.96},{"id":"blocker:vendored/altlayer/altllm-portal-cli/SKILL.md:34:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/arkhai/nla-fulfill/SKILL.md:28:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/bnb-chain/bnbchain-mcp/SKILL.md:90:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:211:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:214:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:219:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/coinbase/agentic-wallet/references/balance.md:227:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/coinbase/agentic-wallet/references/send-usdc.md:84:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/coinbase/agentic-wallet/references/trade.md:104:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/inflow-payment.md:90:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/heurist/heurist-mesh-skill/references/x402-payment.md:45:network-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/genlayer-erc7710-connector/references/connector-patterns.md:63:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/genlayer-erc7710-connector/SKILL.md:77:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/genlayer-intelligent-contracts/references/agent-supervisor-contract.md:52:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:5:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:10:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:39:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:49:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/references/demo-blueprints.md:62:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/SKILL.md:20:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/SKILL.md:25:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:integrations/x402-erc7710/SKILL.md:33:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:3:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:178:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:181:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:260:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/account-management.md:465:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/speech-to-text.md:294:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/speech-to-text.md:372:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/speech-to-text.md:707:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/streaming-chat.md:345:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/streaming-chat.md:363:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/text-to-image.md:218:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/text-to-image.md:515:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/examples/text-to-image.md:590:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/fine-tuning.md:91:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"blocker:vendored/0g/0g-compute/references/fine-tuning.md:216:system-reconnaissance","reason":"The lexical match refers to wallet addresses, protocol validity, payment requests, or ordinary status checks. It does not probe hosts, ports, or system details.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:vendored/okx/okx-agent-payments-protocol/references/accepts-schemes.md:48:base64-encode","reason":"The encoding serializes a documented payment header. It is transparent protocol formatting, not obfuscation of executable content.","verdict":"false_positive","confidence":0.98},{"id":"obfuscation:vendored/arkhai/fulfill-git-escrow/SKILL.md:18:unicode-escape-sequence","reason":"The escape encodes an emoji in skill metadata. It does not conceal commands, URLs, or instructions.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:vendored/arkhai/make-git-escrow/SKILL.md:18:unicode-escape-sequence","reason":"The escape encodes an emoji in skill metadata. It does not conceal commands, URLs, or instructions.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/okx/okx-dex/_shared/payment-notifications.md:115:configuration-library","reason":"The match reads an ordinary transaction-version setting or documents a confirmed payment preference. It does not enumerate or export secrets.","verdict":"false_positive","confidence":0.98},{"id":"env_access:vendored/starknet/starknet-js/SKILL.md:495:configuration-library","reason":"The match reads an ordinary transaction-version setting or documents a confirmed payment preference. It does not enumerate or export secrets.","verdict":"false_positive","confidence":0.98},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:67:dotenv-library","reason":"The line declares the dotenv package dependency. A dependency declaration alone does not read environment variables or secrets.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:136:dotenv-library","reason":"The line declares the dotenv package dependency. A dependency declaration alone does not read environment variables or secrets.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:141:dotenv-library","reason":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.","verdict":"confirmed","severity":"low","confidence":0.76},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:66:dotenv-library","reason":"The line declares the dotenv package dependency. A dependency declaration alone does not read environment variables or secrets.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:138:dotenv-library","reason":"The line declares the dotenv package dependency. A dependency declaration alone does not read environment variables or secrets.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:141:dotenv-library","reason":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.","verdict":"confirmed","severity":"low","confidence":0.76},{"id":"env_access:vendored/0g/0g-compute/references/examples/text-to-image.md:65:dotenv-library","reason":"The line declares the dotenv package dependency. A dependency declaration alone does not read environment variables or secrets.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/0g/0g-compute/references/examples/text-to-image.md:132:dotenv-library","reason":"The line declares the dotenv package dependency. A dependency declaration alone does not read environment variables or secrets.","verdict":"false_positive","confidence":0.99},{"id":"env_access:vendored/0g/0g-compute/references/examples/text-to-image.md:136:dotenv-library","reason":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.","verdict":"confirmed","severity":"low","confidence":0.76},{"id":"env_access:vendored/openserv/openserv-agent-sdk/examples/basic-agent.ts:9:dotenv-library","reason":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.","verdict":"confirmed","severity":"low","confidence":0.76},{"id":"env_access:vendored/openserv/openserv-agent-sdk/examples/haiku-poet-agent.ts:9:dotenv-library","reason":"The example loads all variables from a local environment file into the process. In these wallet workflows, that environment can include private keys.","verdict":"confirmed","severity":"low","confidence":0.76},{"id":"env_access:vendored/kleros/kleros-ipfs-upload/scripts/pay-and-upload-cdp.ts:66:environment-variable-access-bracket-notation","reason":"The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.","verdict":"confirmed","severity":"low","confidence":0.95},{"id":"env_access:vendored/starknet/starknet-js/scripts/account-example.ts:10:environment-variable-access-bracket-notation","reason":"The code reads named credentials or a wallet private key from the process environment. Environment compromise would expose signing or API authority.","verdict":"confirmed","severity":"low","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:217:environment-variable-access-dot-notation","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:222:environment-variable-access-dot-notation","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:569:environment-variable-access-dot-notation","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:environment-variable-access-dot-notation","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:144:environment-variable-access-dot-notation","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:145:environment-variable-access-dot-notation","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:149:environment-variable-access-dot-notation","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:environment-variable-access-dot-notation","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:311:environment-variable-access-dot-notation","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:144:environment-variable-access-dot-notation","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:148:environment-variable-access-dot-notation","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:217:environment-variable-object","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:222:environment-variable-object","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/account-management.md:569:environment-variable-object","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:environment-variable-object","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:144:environment-variable-object","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:145:environment-variable-object","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:149:environment-variable-object","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:274:environment-variable-object","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/speech-to-text.md:311:environment-variable-object","reason":"The code accesses a wallet private key through the process environment. Secret exposure would enable unauthorized wallet operations.","verdict":"confirmed","severity":"low","confidence":0.97},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:144:environment-variable-object","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"env_access:vendored/0g/0g-compute/references/examples/streaming-chat.md:148:environment-variable-object","reason":"The environment access reads non-secret network, directory, provider, or application settings. The cited line does not expose credentials.","verdict":"false_positive","confidence":0.95},{"id":"network:vendored/0g/0g-compute/references/examples/speech-to-text.md:238:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:277:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:188:fetch-api-call","reason":"The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.","verdict":"confirmed","severity":"medium","confidence":0.84},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:280:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:440:fetch-api-call","reason":"The example fetches an unvalidated image URL without host or size limits. A malicious provider response could cause SSRF or resource exhaustion.","verdict":"confirmed","severity":"medium","confidence":0.84},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:457:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/inference.md:131:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/inference.md:156:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/inference.md:236:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/inference.md:273:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:vendored/0g/0g-compute/references/inference.md:296:fetch-api-call","reason":"The request targets the selected inference provider for the documented operation. No unrelated destination or concealed data exfiltration is shown.","verdict":"false_positive","confidence":0.9},{"id":"network:integrations/genlayer-erc7710-connector/SKILL.md:8:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:integrations/genlayer-intelligent-contracts/SKILL.md:3:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:integrations/genlayer-intelligent-contracts/SKILL.md:12:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:README.md:135:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:README.md:148:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:README.md:158:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:README.md:177:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:36:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:47:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:218:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:SKILL.md:363:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:skills-lock.json:138:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:skills-lock.json:257:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:skills-lock.json:280:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:skills-lock.json:711:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/README.md:20:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/README.md:23:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/README.md:26:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/account-management.md:218:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/account-management.md:219:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/account-management.md:568:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/examples/speech-to-text.md:114:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/examples/speech-to-text.md:143:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:113:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:144:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/examples/streaming-chat.md:450:hardcoded-url","reason":"The URL is documented project metadata, an installation source, a public RPC endpoint, or an example address. It is not a concealed destination.","verdict":"false_positive","confidence":0.97},{"id":"network:vendored/0g/0g-compute/references/examples/text-to-image.md:67:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/humanode/humanode-agentlink/SKILL.md:118:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/browse-ideas.ts:12:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/browse-ideas.ts:14:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/get-api-key.ts:14:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/get-api-key.ts:18:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:15:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:24:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:84:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:86:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"network:vendored/openserv/openserv-ideaboard-api/examples/pick-up-and-ship.ts:115:http-client-library","reason":"The line imports or uses a standard HTTP client for the documented service API. No suspicious destination or secret transmission is shown.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:287:node-js-fs-stat-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:298:node-js-fs-stat-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/speech-to-text.md:303:node-js-fs-stat-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:vendored/0g/0g-compute/references/examples/text-to-image.md:227:node-js-fs-stat-operations","reason":"The operation handles an explicit input, output, transcript, image, or contract artifact in the documented workflow. No unrelated path is accessed.","verdict":"false_positive","confidence":0.94},{"id":"env_access:vendored/chaingpt/chaingpt/SKILL.md:322:python-environment-access","reason":"The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.","verdict":"confirmed","severity":"low","confidence":0.86},{"id":"env_access:vendored/near/near-ai-cloud/references/private-vs-anonymised.md:87:python-environment-access","reason":"The example reads an API credential from the process environment for authentication. Environment disclosure would expose access to the external service.","verdict":"confirmed","severity":"low","confidence":0.86},{"id":"network:vendored/genlayer/write-contract/SKILL.md:176:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/lifi/lifi/SKILL.md:251:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/lifi/lifi/SKILL.md:258:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/near/near-ai-cloud/references/model-verification.md:63:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/near/near-ai-cloud/references/private-vs-anonymised.md:83:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:35:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:130:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:155:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/near/near-smart-contracts/rules/yield-resume.md:179:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/okx/okx-agentic-wallet/references/swap.md:35:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"network:vendored/openserv/openserv-ideaboard-api/reference.md:216:python-http-libraries","reason":"The match is a documented request to a named service, a warning against requests, or a variable named request. It is not covert network activity.","verdict":"false_positive","confidence":0.96},{"id":"filesystem:vendored/okx/okx-ai/references/chat-comm-init.md:12:standard-device-file-access","reason":"The command redirects diagnostics to the standard null device. It does not read a sensitive device or arbitrary filesystem content.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:168:standard-device-file-access","reason":"The command redirects diagnostics to the standard null device. It does not read a sensitive device or arbitrary filesystem content.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:279:standard-device-file-access","reason":"The command redirects diagnostics to the standard null device. It does not read a sensitive device or arbitrary filesystem content.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:280:standard-device-file-access","reason":"The command redirects diagnostics to the standard null device. It does not read a sensitive device or arbitrary filesystem content.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:285:standard-device-file-access","reason":"The command redirects diagnostics to the standard null device. It does not read a sensitive device or arbitrary filesystem content.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:vendored/okx/okx-dapp-discovery/SKILL.md:296:standard-device-file-access","reason":"The command redirects diagnostics to the standard null device. It does not read a sensitive device or arbitrary filesystem content.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[{"title":"Silent Third-Party Skill Installation","severity":"critical","locations":[{"file":"vendored/okx/okx-dapp-discovery/SKILL.md","line_end":198,"line_start":184}],"confidence":0.99,"description":"The routing skill silently installs a global third-party plugin and immediately loads its instructions. This bypasses informed consent and creates a supply-chain execution path.","confidence_reasoning":"The instructions explicitly use a global install command with automatic confirmation, call the process invisible, and immediately apply the installed plugin."},{"title":"Automatic External Disclosure of User Context","severity":"high","locations":[{"file":"SKILL.md","line_end":376,"line_start":352}],"confidence":0.98,"description":"The skill requires opening a public repository issue and including the user goal and failure details. It does not require user approval or redaction.","confidence_reasoning":"The instructions mandate filing the issue directly when a GitHub tool exists and specify that user goals and failures must be included."},{"title":"Untrusted Peer Message Controls Priority Actions","severity":"high","locations":[{"file":"vendored/okx/okx-ai/references/task-user-sub-playbook.md","line_end":55,"line_start":39}],"confidence":0.93,"description":"A peer-controlled marker receives highest priority and causes raw message data to be written and passed to a CLI. Sender and job validation are not required.","confidence_reasoning":"The routing table explicitly prioritizes a peer marker before other actions and passes the complete untrusted message through a local file to the CLI."},{"title":"Untrusted Repository Content Lacks an Instruction Boundary","severity":"medium","locations":[{"file":"vendored/arkhai/fulfill-git-escrow/SKILL.md","line_end":65,"line_start":46}],"confidence":0.82,"description":"The workflow clones an escrow-selected repository and directs the agent to read its tests. It does not warn that repository instructions are untrusted data.","confidence_reasoning":"The repository URL and commit come from external escrow data, then the agent reads test content without a prompt-injection or trust-boundary safeguard."}],"subject_marketplace_commit_sha":"3f6e026a3363e0954ede7bef0cfe88d4475de137","subject_content_hash":"b3bbd91c0da8933660828dc9fc57c7c558662a81bd6f099b34e84c47fc6b995a","subject_tree_hash":"370a15e0720f135e57402e9fbddc3af4723c6f041cc94d225f4e1b42b995ec96","subject_plugin_path":"skills/internet-court/internet-court","audit_payload_hash":"f61c3faee9b5ee1e9fc53a2aecd0db0b","confirmed_risk_level":"critical","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"3f6e026a3363e0954ede7bef0cfe88d4475de137","contentHash":"b3bbd91c0da8933660828dc9fc57c7c558662a81bd6f099b34e84c47fc6b995a","treeHash":"370a15e0720f135e57402e9fbddc3af4723c6f041cc94d225f4e1b42b995ec96","pluginPath":"skills/internet-court/internet-court","auditPayloadHash":"f61c3faee9b5ee1e9fc53a2aecd0db0b"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"unavailable","url":null,"status":null},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"critical","confirmedFindingCount":28,"capabilityReviewCount":52,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"blocked","manualInstallPolicy":"allowed_with_warning","artifactSignatureState":"available","attestationState":"unavailable","verificationState":"not_verified"},"isLatest":true}}