gepetto

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
7
Flagged
7
Chunks
10
Flagged Files (7)
README.mdHIGH
78.3%

Malicious tool definition detected

If neither CLI is available, gepetto will skip the external review step and continue with the workflow. ## Resuming If the workflow is interrupted (context limit, need a break), just re-run with the same spec: ``` /gepetto @planning/auth-spec.md ``` gepetto detects existing files and resumes from where it left off.

references/external-review.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/external-review.md Description: # External Review Protocol This step sends `claude-plan.md` to external LLMs (Gemini and Codex) for independent review using CLI subagents.

references/research-protocol.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/research-protocol.md Description: # Research Protocol This document defines the research decision and execution flow.

references/section-index.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/section-index.md Description: # Section Index Creation Create `<planning_dir>/sections/index.md` to define implementation sections.

references/section-splitting.mdHIGH
78.3%

Malicious tool definition detected

``` ## Parallel Execution Strategy **Launch one subagent per section in a single message** for maximum parallelization: ``` ┌─────────────────────────────────────────────────────┐ │ PARALLEL SUBAGENT APPROACH │ │ │ │ 1.

SKILL.mdHIGH
70.7%

Tool passed security scan

Malicious tool definition detected

Tool: SKILL.md [2/2] Description: (what must be true when complete) - Dependencies (requires/blocks) - Implementation details (from the plan) - Acceptance criteria (checkboxes) - Files to create/modify The implementer should NOT need to reference any other document.

references/interview-protocol.mdLOW
35.3%

Tool passed security scan

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
7
Files Flagged
7
Chunks Analyzed
10
Analyzed
Feb 21, 2026, 06:14 PM
Security Audit — runlayer — gepetto