SkillSpector · hearth

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

reference/shell-configs.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/shell-configs.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

reference/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

reference/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

reference/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

reference/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

reference/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

reference/vscode-editor-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/git-personal-config.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/vscode-editor-config.md

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

SKILL.md

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

SKILL.md

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

reference/environment-workflow-anti-patterns.md

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

reference/environment-workflow-anti-patterns.md

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

reference/git-personal-config.md

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

reference/shellfn-functions-env.md