Static repository check
- Checked commit
5af03a68c072- Evidence Score
- 62/100
- Static risk
- High risk
- Files scanned
- 8
- Findings
- 5
Evidence breakdown
Source provenance22/25
Install documentation15/25
Maintenance13/20
Compatibility evidence9/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (2)
dsh-plugin/package.json#prepackpnpm run buildopenclaw-plugin/package.json#prepacknpm run build
Findings (5)
- High
install.scriptdsh-plugin/package.jsoninstall-time"prepack": "pnpm run build" - High
install.scriptopenclaw-plugin/package.jsoninstall-time"prepack": "npm run build" - High
shell.rm-rfopenclaw-plugin/package.json:37dangerous-shell"build": "rm -rf ./dist && tsc -p ./tsconfig.build.json", - High
shell.rm-rfopenclaw-plugin/package.json:39dangerous-shell"test": "rm -rf ./dist-test && tsc -p ./tsconfig.test.json && node --test ./dist-test/*.test.js", - Medium
deps.core-package-installeddsh-plugin/package.jsondependencies"@deepseek-ai/schemastery": "^3.18.1"
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
