Static analysis detected documentation patterns misidentified as code execution. All findings are markdown examples of legitimate Solana development commands (anchor, solana-test-validator). No actual shell execution, credential exfiltration, or malicious behavior exists. Risk factors represent standard dev tooling documentation.
Documentation Patterns Misidentified as Code Execution
Static scanner detected backtick syntax in markdown files as shell command execution. These are markdown code block formatting and documentation examples showing bash commands like `anchor keys list`, `anchor build`, `anchor deploy`. No actual code execution occurs.
Backticks are markdown syntax for code blocks, not Ruby/shell execution. All detected patterns are documentation of Solana development commands.
Detected hardcoded URL https://api.apr.dev (Solana registry) and localhost IP 127.0.0.1. These are legitimate configuration values for Solana development, not credential exfiltration or malicious network calls.
URLs are standard Solana registry API endpoint and localhost development endpoint. No sensitive data transmission occurs.
Path sequences like ../../../target/idl/ are legitimate relative import paths in generated project templates. These are proper relative paths for project structure, not path traversal vulnerabilities.
Templates use standard relative imports for generated project structure. No untrusted input or file system access vulnerabilities.