git-stats
Warn
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/git-stats.shcontains a command injection vulnerability. The variable$RANGEis derived from the first argument passed to the script. This variable is later used inside anevalstatement:eval "git log $RANGE $author_args --oneline". An attacker could provide a malicious range argument like; touch /tmp/pwned; #to execute arbitrary shell commands on the system.
Audit Metadata