baoyu-danger-gemini-web

Warn

Audited by Runlayer on Mar 14, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
29
Flagged
7
Chunks
33
Flagged Files (7)
baoyu-danger-gemini-web/SKILL.mdMEDIUM
77.7%

Shadow Persistence

Supply Chain Compromise

baoyu-danger-gemini-web/scripts/gemini-webapi/constants.tsLOW
72.4%

Malicious tool definition detected

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/rotate-1psidts.tsLOW
70.5%

Malicious tool definition detected

const res = await fetch_with_timeout(Endpoint.ROTATE_COOKIES, { method: 'POST', headers: { ...Headers.ROTATE_COOKIES, Cookie: cookie_header(cookies) }, body: '[000,"-0000000000000000000"]', redirect: 'follow', timeout_ms: 30_000, }); if (res.status === 401) throw new AuthError('Failed to refresh cookies (401).'); if (!res.ok) throw new Error(`RotateCookies failed: ${res.status} ${res.statusText}`); const setCookie = res.headers.get('set-cookie'); const v = extract_set_cookie_value(setCookie, '__

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/paths.tsLOW
69.7%

Tool passed security scan

baoyu-danger-gemini-web/scripts/vendor/baoyu-chrome-cdp/src/index.tsLOW
67.8%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/client.tsLOW
66.6%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/load-browser-cookies.tsLOW
51.5%

Tool passed security scan

Passed Files (22)Click to expand
baoyu-danger-gemini-web/scripts/gemini-webapi/utils/get-access-token.tsOK
38.8%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/types/image.tsOK
35.3%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/index.tsOK
27.3%

Tool passed security scan

baoyu-danger-gemini-web/scripts/main.tsOK
23.5%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/http.tsOK
22.1%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/index.tsOK
21.6%

Tool passed security scan

baoyu-danger-gemini-web/scripts/vendor/baoyu-chrome-cdp/package.jsonOK
18.0%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/types/candidate.tsOK
17.4%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/upload-file.tsOK
15.8%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/logger.tsOK
15.3%

Tool passed security scan

baoyu-danger-gemini-web/scripts/bun.lockOK
13.9%

Tool passed security scan

baoyu-danger-gemini-web/scripts/package.jsonOK
13.9%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/components/gem-mixin.tsOK
9.1%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/components/index.tsOK
8.1%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/decorators.tsOK
6.1%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/cookie-file.tsOK
5.9%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/types/grpc.tsOK
5.4%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/utils/parsing.tsOK
4.7%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/types/index.tsOK
4.5%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/types/gem.tsOK
2.7%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/types/modeloutput.tsOK
1.8%

Tool passed security scan

baoyu-danger-gemini-web/scripts/gemini-webapi/exceptions.tsOK
1.0%

Tool passed security scan

Audit Metadata
Max File Score
78%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
29
Files Flagged
7
Chunks Analyzed
33
Analyzed
Mar 14, 2026, 02:32 PM
Security Audit — runlayer — baoyu-danger-gemini-web