Security review
⚠ Flagged1 finding(s); flagged for manual review. · v2.0.2 · scanned 2026-06-27 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Dangerous shell/eval execution.
What it can access
- ● Network access Used
- ● Filesystem access Used
- ● Shell / process execution Used
- ● Environment & secrets Used
- ● Dynamic code execution Used
From automated source analysis of v2.0.2. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
What this report covers
- Prompt injection, instructions hidden in tool descriptions or outputs that try to hijack the agent.
- Secret exfiltration, code paths that read credentials or environment and send them off-box.
- Dangerous tool calls, unguarded shell, filesystem, or network access.
Automated scanning runs on every published version before it can list publicly. Full methodology →