📦
Audit History
heurist-mesh-skill - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Jul 21, 2026, 03:18 AM
The skill documents legitimate cryptocurrency research and paid API access, but it handles API keys and wallet private keys. It also includes a remote installer piped to bash, an unsafe installation pattern, and a payment flow that can authorize USDC transfers. Most shell-backtick and reconnaissance detections are Markdown or descriptive false positives.
6
Files scanned
499
Lines analyzed
35
Review items
0
False positives ignored
Confirmed security concerns (14)
Critical
Pipe to shell pattern
curl -L https://foundry.paradigm.xyz | bash
The documentation instructs users to pipe a remotely fetched installer directly into bash. A compromised or substituted download would execute arbitrary code without inspection.
Critical
Pipe to shell pattern
- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)
The documentation instructs users to pipe a remotely fetched installer directly into bash. A compromised or substituted download would execute arbitrary code without inspection.
High
Environment file access
Store in `.env`:
No evidence was found to safely dismiss the detected pattern; it is retained for review.
High
Environment file access
Save from response: `data.userId` and `data.privateKey` into `.env`.
The workflow handles an Inflow private key and sends it as an authentication value to payment-related services. Compromise or unintended use of this credential can authorize activity.
High
Crypto seed/private key mention
Save from response: `data.userId` and `data.privateKey` into `.env`.
The workflow handles an Inflow private key and sends it as an authentication value to payment-related services. Compromise or unintended use of this credential can authorize activity.
High
Crypto seed/private key mention
"privateKey":"<INFLOW_PRIVATE_KEY>",
The workflow handles an Inflow private key and sends it as an authentication value to payment-related services. Compromise or unintended use of this credential can authorize activity.
High
Crypto seed/private key mention
Pay per tool call with USDC on Base. No account needed — just a private key with USDC balance and `c
The workflow requires a wallet private key to derive an address and sign a USDC payment authorization. This is sensitive financial capability and requires explicit user control.
High
Crypto seed/private key mention
- Private key with USDC balance on Base
The workflow requires a wallet private key to derive an address and sign a USDC payment authorization. This is sensitive financial capability and requires explicit user control.
High
Environment file access
- **API key (recommended):** Set `HEURIST_API_KEY` in `.env`. Setup and free-credit flow: [reference
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Environment file access
- **x402 on Base:** Set `WALLET_PRIVATE_KEY` in `.env`. Signed payment flow: [references/x402-paymen
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Environment file access
- **Inflow:** Set `INFLOW_USER_ID` and `INFLOW_PRIVATE_KEY` in `.env`. Buyer setup and approval flow
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Environment file access
### Step 2: Verify setup in `.env`
No evidence was found to safely dismiss the detected pattern; it is retained for review.
High
Environment file access
- `401`/`403`: Treat as credential issue; ask user to re-check `.env` values and do not continue cal
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Unbounded Cryptocurrency Payment Authorization
The x402 flow obtains payment metadata, signs a USDC transfer authorization with a wallet private key, and submits it without requiring a separate confirmation of recipient and amount.
The documented sequence explicitly receives payment terms, creates an EIP-712 transfer authorization, signs it with a private key, and sends the payment header. This enables real financial transactions.
Capability review items (17)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys
4. Returns `api_key`, `credits` (100), and `twitter_handle`. One claim per Twitter handle. Code expi
The documentation provisions and uses an API key for authenticated Mesh requests. The key is sensitive and should be scoped and handled only with user approval.
High
Generic API/secret keys
Authorization: Bearer <api_key>
The documentation provisions and uses an API key for authenticated Mesh requests. The key is sensitive and should be scoped and handled only with user approval.
High
Generic API/secret keys
INFLOW_PRIVATE_KEY=your-buyer-private-key
The workflow handles an Inflow private key and sends it as an authentication value to payment-related services. Compromise or unintended use of this credential can authorize activity.
High
Generic API/secret keys
"privateKey":"<INFLOW_PRIVATE_KEY>",
The workflow handles an Inflow private key and sends it as an authentication value to payment-related services. Compromise or unintended use of this credential can authorize activity.
High
Generic API/secret keys
curl -sS -H "X-API-Key: $INFLOW_PRIVATE_KEY" \
The workflow handles an Inflow private key and sends it as an authentication value to payment-related services. Compromise or unintended use of this credential can authorize activity.
High
Generic API/secret keys
WALLET=$(cast wallet address --private-key "$PRIVATE_KEY")
The workflow requires a wallet private key to derive an address and sign a USDC payment authorization. This is sensitive financial capability and requires explicit user control.
High
Generic API/secret keys
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The workflow requires a wallet private key to derive an address and sign a USDC payment authorization. This is sensitive financial capability and requires explicit user control.
High
Generic API/secret keys
- **API key (recommended):** Set `HEURIST_API_KEY` in `.env`. Setup and free-credit flow: [reference
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Generic API/secret keys
- **x402 on Base:** Set `WALLET_PRIVATE_KEY` in `.env`. Signed payment flow: [references/x402-paymen
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Generic API/secret keys
- **Inflow:** Set `INFLOW_USER_ID` and `INFLOW_PRIVATE_KEY` in `.env`. Buyer setup and approval flow
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Generic API/secret keys
- API key path: `HEURIST_API_KEY` is set and non-empty
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Generic API/secret keys
- x402 path: `WALLET_PRIVATE_KEY` is set, starts with `0x`, and is 66 characters
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Generic API/secret keys
- Inflow path: `INFLOW_USER_ID` and `INFLOW_PRIVATE_KEY` are set and non-empty
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Generic API/secret keys
-H "Authorization: Bearer $HEURIST_API_KEY" \
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
High
Generic API/secret keys
- `402`: Payment required; follow the selected payment path (`HEURIST_API_KEY`, x402 flow, or Inflow
The skill directs use of API or wallet credentials from .env, including an authenticated request to the Mesh service. Credential access and paid requests require explicit user authorization.
Medium
Temp directory access
cat > /tmp/eip712.json << EOF
The payment workflow writes a predictable file in /tmp before signing it. Another local process can race or replace that path, changing the signed payload or causing an unintended file overwrite.
Medium
Temp directory access
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The payment workflow writes a predictable file in /tmp before signing it. Another local process can race or replace that path, changing the signed payload or causing an unintended file overwrite.
Risk Factors
🌐 Network access (17)
references/discover-agents.md:21 references/discover-agents.md:24 references/discover-agents.md:27 references/heurist-api-key.md:13 references/inflow-payment.md:20 references/inflow-payment.md:32 references/inflow-payment.md:54 references/inflow-payment.md:82 references/x402-payment.md:8 references/x402-payment.md:15 references/x402-payment.md:103 references/x402-payment.md:113 SKILL.md:7 SKILL.md:89 SKILL.md:98 SKILL.md:136 SKILL.md:137
🔑 Env variables (15)
references/heurist-api-key.md:15 references/heurist-api-key.md:23 references/inflow-payment.md:10 references/inflow-payment.md:35 references/inflow-payment.md:81 references/x402-payment.md:45 references/x402-payment.md:85 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:99 SKILL.md:127
⚙️ External commands (49)
references/x402-payment.md:45 references/x402-payment.md:46 references/x402-payment.md:47 references/x402-payment.md:85 references/x402-payment.md:91-92 SKILL.md:22 SKILL.md:27 SKILL.md:28 SKILL.md:31 SKILL.md:32 SKILL.md:35 SKILL.md:36 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:44 SKILL.md:45 SKILL.md:48 SKILL.md:51 SKILL.md:52 SKILL.md:55 SKILL.md:56 SKILL.md:59 SKILL.md:60 SKILL.md:63 SKILL.md:64 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:76 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:86 SKILL.md:88-90 SKILL.md:90-92 SKILL.md:92 SKILL.md:96-105 SKILL.md:105-113 SKILL.md:113-114 SKILL.md:114-121 SKILL.md:121-122 SKILL.md:122-126 SKILL.md:126 SKILL.md:127 SKILL.md:128-129 SKILL.md:129 SKILL.md:130-136 SKILL.md:136-137
📁 Filesystem access (2)
Detected Patterns
Pipe to shell patternPipe to shell pattern
Audited by: claude
Jul 9, 2026, 11:50 PM
The skill is an expected networked crypto research connector, and many Markdown backtick findings are false positives. Real risks remain: private key and API key handling, paid payment flows, external command examples, temporary signing files, and pipe-to-shell Foundry install commands. No prompt injection text was found in the reviewed files.
6
Files scanned
499
Lines analyzed
54
Review items
0
False positives ignored
Confirmed security concerns (14)
Critical
Pipe to shell pattern
curl -L https://foundry.paradigm.xyz | bash
The documentation instructs users to download a remote installer and pipe it directly to a shell. This can execute arbitrary remote code if the endpoint, transport, or local environment is compromised.
Critical
Pipe to shell pattern
- `cast` from Foundry (`curl -L https://foundry.paradigm.xyz | bash && foundryup`)
The documentation instructs users to download a remote installer and pipe it directly to a shell. This can execute arbitrary remote code if the endpoint, transport, or local environment is compromised.
High
Environment file access
Store in `.env`:
The line directs credential storage or checks in a .env file. This is common but sensitive because agents, logs, or shared workspaces can expose secret values.
High
Environment file access
Save from response: `data.userId` and `data.privateKey` into `.env`.
The line instructs users to handle a crypto or payment private key. Private key exposure can directly authorize payments or compromise funds.
High
Crypto seed/private key mention
Save from response: `data.userId` and `data.privateKey` into `.env`.
The line instructs users to handle a crypto or payment private key. Private key exposure can directly authorize payments or compromise funds.
High
Crypto seed/private key mention
"privateKey":"<INFLOW_PRIVATE_KEY>",
The line instructs users to handle a crypto or payment private key. Private key exposure can directly authorize payments or compromise funds.
High
Crypto seed/private key mention
Pay per tool call with USDC on Base. No account needed — just a private key with USDC balance and `c
The line instructs users to handle a crypto or payment private key. Private key exposure can directly authorize payments or compromise funds.
High
Crypto seed/private key mention
- Private key with USDC balance on Base
The line instructs users to handle a crypto or payment private key. Private key exposure can directly authorize payments or compromise funds.
High
Environment file access
- **API key (recommended):** Set `HEURIST_API_KEY` in `.env`. Setup and free-credit flow: [reference
The line directs credential storage or checks in a .env file. This is common but sensitive because agents, logs, or shared workspaces can expose secret values.
High
Environment file access
- **x402 on Base:** Set `WALLET_PRIVATE_KEY` in `.env`. Signed payment flow: [references/x402-paymen
The line instructs users to handle a crypto or payment private key. Private key exposure can directly authorize payments or compromise funds.
High
Environment file access
- **Inflow:** Set `INFLOW_USER_ID` and `INFLOW_PRIVATE_KEY` in `.env`. Buyer setup and approval flow
The line instructs users to handle a crypto or payment private key. Private key exposure can directly authorize payments or compromise funds.
High
Environment file access
### Step 2: Verify setup in `.env`
The line directs credential storage or checks in a .env file. This is common but sensitive because agents, logs, or shared workspaces can expose secret values.
High
Environment file access
- `401`/`403`: Treat as credential issue; ask user to re-check `.env` values and do not continue cal
The line directs credential storage or checks in a .env file. This is common but sensitive because agents, logs, or shared workspaces can expose secret values.
High
Agent-Mediated Paid Transaction Flow
The skill instructs agents to configure API keys, wallet private keys, or Inflow credentials before calling paid Mesh APIs. The x402 path signs and submits USDC payment headers, so missing spend caps or per-call consent can cause unintended charges.
The cited files explicitly require payment setup and describe signed or approved paid request flows. Inflow includes approval, but x402 relies on signing with a private key and needs stronger spend controls.
Capability review items (36)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys
4. Returns `api_key`, `credits` (100), and `twitter_handle`. One claim per Twitter handle. Code expi
The line handles an API credential used to authorize Heurist Mesh calls. Credentials in prompts, headers, or environment files must be protected from disclosure and logging.
High
Generic API/secret keys
Authorization: Bearer <api_key>
The line handles an API credential used to authorize Heurist Mesh calls. Credentials in prompts, headers, or environment files must be protected from disclosure and logging.
High
Generic API/secret keys
INFLOW_PRIVATE_KEY=your-buyer-private-key
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
"privateKey":"<INFLOW_PRIVATE_KEY>",
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
curl -sS -H "X-API-Key: $INFLOW_PRIVATE_KEY" \
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
WALLET=$(cast wallet address --private-key "$PRIVATE_KEY")
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
- **API key (recommended):** Set `HEURIST_API_KEY` in `.env`. Setup and free-credit flow: [reference
The line handles an API credential used to authorize Heurist Mesh calls. Credentials in prompts, headers, or environment files must be protected from disclosure and logging.
High
Generic API/secret keys
- **x402 on Base:** Set `WALLET_PRIVATE_KEY` in `.env`. Signed payment flow: [references/x402-paymen
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
- **Inflow:** Set `INFLOW_USER_ID` and `INFLOW_PRIVATE_KEY` in `.env`. Buyer setup and approval flow
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
- API key path: `HEURIST_API_KEY` is set and non-empty
The line handles an API credential used to authorize Heurist Mesh calls. Credentials in prompts, headers, or environment files must be protected from disclosure and logging.
High
Generic API/secret keys
- x402 path: `WALLET_PRIVATE_KEY` is set, starts with `0x`, and is 66 characters
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
- Inflow path: `INFLOW_USER_ID` and `INFLOW_PRIVATE_KEY` are set and non-empty
The line handles a wallet or Inflow private key used for payment authorization. Exposure or misuse of this value can spend funds or compromise the payment account.
High
Generic API/secret keys
-H "Authorization: Bearer $HEURIST_API_KEY" \
The line handles an API credential used to authorize Heurist Mesh calls. Credentials in prompts, headers, or environment files must be protected from disclosure and logging.
Medium
Shell command substitution
WALLET=$(cast wallet address --private-key "$PRIVATE_KEY")
This is an executable shell snippet in the x402 payment signing flow. The commands are mostly fixed, but running local tools with payment keys creates real command and transaction-signing risk.
Medium
Shell command substitution
NONCE=0x$(openssl rand -hex 32)
This is an executable shell snippet in the x402 payment signing flow. The commands are mostly fixed, but running local tools with payment keys creates real command and transaction-signing risk.
Medium
Shell command substitution
VALID_BEFORE=$(( $(date +%s) + 120 ))
This is an executable shell snippet in the x402 payment signing flow. The commands are mostly fixed, but running local tools with payment keys creates real command and transaction-signing risk.
Medium
Shell command substitution
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
This is an executable shell snippet in the x402 payment signing flow. The commands are mostly fixed, but running local tools with payment keys creates real command and transaction-signing risk.
Medium
Shell command substitution
X_PAYMENT=$(printf '{"x402Version":1,"scheme":"exact","network":"base","payload":{"signature":"%s","
This is an executable shell snippet in the x402 payment signing flow. The commands are mostly fixed, but running local tools with payment keys creates real command and transaction-signing risk.
Medium
Temp directory access
cat > /tmp/eip712.json << EOF
The payment signing flow writes and later reads an EIP-712 payload under /tmp. A predictable shared temp path can expose transaction details or be clobbered without secure permissions and cleanup.
Medium
Temp directory access
SIG=$(cast wallet sign --data --from-file --private-key "$PRIVATE_KEY" /tmp/eip712.json)
The payment signing flow writes and later reads an EIP-712 payload under /tmp. A predictable shared temp path can expose transaction details or be clobbered without secure permissions and cleanup.
Low
Hardcoded URL
curl -sS https://mesh.heurist.ai/metadata.json
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl -sS https://mesh.heurist.xyz/x402/agents
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl -sS "https://mesh.heurist.xyz/mesh_schema?agent_id=TokenResolverAgent&agent_id=DefiLlamaAgent&a
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl -sS -X POST "https://mesh.heurist.xyz/mesh_signup_inflow" \
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl -sS -X POST "https://mesh.heurist.xyz/mesh_signup_inflow_attach" \
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl -sS -X POST "https://mesh.heurist.xyz/mesh_request" \
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
"https://app.inflowpay.ai/v1/requests/<REQUEST_ID>"
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl -L https://foundry.paradigm.xyz | bash
The URL is used in a curl command that is piped to a shell. The network endpoint is part of a dangerous installer path, with critical risk captured by the pipe-to-shell finding.
Low
Hardcoded URL
POST https://mesh.heurist.xyz/x402/agents/{AgentId}/{toolName}
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl https://mesh.heurist.xyz/x402/agents
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
url: 'https://mesh.heurist.xyz/x402/agents/TrendingTokenAgent/get_trending_tokens',
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
GET https://mesh.heurist.xyz/mesh_schema?agent_id=TokenResolverAgent&agent_id=TrendingTokenAgent
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
curl -X POST https://mesh.heurist.xyz/mesh_request \
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
- All agents: `https://mesh.heurist.ai/metadata.json`
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Low
Hardcoded URL
- x402-enabled agents: `https://mesh.heurist.xyz/x402/agents`
The line directs calls to external Heurist or Inflow service endpoints. This is intended functionality, but it exposes user queries, wallet data, or payment metadata to third-party services.
Risk Factors
🌐 Network access (17)
references/discover-agents.md:21 references/discover-agents.md:24 references/discover-agents.md:27 references/heurist-api-key.md:13 references/inflow-payment.md:20 references/inflow-payment.md:32 references/inflow-payment.md:54 references/inflow-payment.md:82 references/x402-payment.md:8 references/x402-payment.md:15 references/x402-payment.md:103 references/x402-payment.md:113 SKILL.md:7 SKILL.md:89 SKILL.md:98 SKILL.md:136 SKILL.md:137
🔑 Env variables (15)
references/heurist-api-key.md:15 references/heurist-api-key.md:23 references/inflow-payment.md:10 references/inflow-payment.md:35 references/inflow-payment.md:81 references/x402-payment.md:45 references/x402-payment.md:85 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:99 SKILL.md:127
⚙️ External commands (49)
references/x402-payment.md:45 references/x402-payment.md:46 references/x402-payment.md:47 references/x402-payment.md:85 references/x402-payment.md:91-92 SKILL.md:22 SKILL.md:27 SKILL.md:28 SKILL.md:31 SKILL.md:32 SKILL.md:35 SKILL.md:36 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:44 SKILL.md:45 SKILL.md:48 SKILL.md:51 SKILL.md:52 SKILL.md:55 SKILL.md:56 SKILL.md:59 SKILL.md:60 SKILL.md:63 SKILL.md:64 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:76 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:86 SKILL.md:88-90 SKILL.md:90-92 SKILL.md:92 SKILL.md:96-105 SKILL.md:105-113 SKILL.md:113-114 SKILL.md:114-121 SKILL.md:121-122 SKILL.md:122-126 SKILL.md:126 SKILL.md:127 SKILL.md:128-129 SKILL.md:129 SKILL.md:130-136 SKILL.md:136-137
📁 Filesystem access (2)
Detected Patterns
Pipe to shell patternPipe to shell pattern
Audited by: codex