cli-self-check
Fail
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The script
scan.mjsis vulnerable to shell command injection. The--sincecommand-line argument is retrieved fromprocess.argvand directly interpolated into a template literal used as a shell command inchild_process.execSyncwithout any sanitization or escaping. - Evidence:
execSync(git diff --name-only ${SINCE}...HEAD -- src/commands skills README.md README.zh.md, ...)inscan.mjs. - Impact: Arbitrary shell commands can be executed by appending metacharacters (e.g.,
;,&,|) to the--sinceflag value. - [REMOTE_CODE_EXECUTION]: The command injection vulnerability enables the execution of arbitrary code, including downloading and running malicious scripts from remote servers.
- [DATA_EXFILTRATION]: An attacker could leverage the command injection vulnerability to exfiltrate sensitive files, such as private SSH keys, environment variables, or cloud provider credentials, from the local developer environment where the skill is executed.
Recommendations
- AI detected serious security threats
Audit Metadata