Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

hyprwm/Hyprland

https://github.com/hyprwm/Hyprland · scanned 2026-07-23 10:39 UTC (5 days, 6 hours ago)

83 raw signals (0 security + 83 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 6 hours ago · v5 · last Δ +8.2 (diff) · 75 actionable findings from 1 signal source. 8 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
51.3
/100
Security checks
51
0 findings
System graph
51
50.0% cov · 75 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 30 Medium 33 Low 11 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 75 Crowd 0 Layer: Security 66 Cicd 5 Quality 4
Scan summary Repository scanned at 51.3/100 with 50.0% coverage. It contains 1109 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 83 findings — concentrated in security (66), cicd (13), quality (4). Risk profile is high: 0 critical, 30 high, 36 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 71 of 75 actionable findings. 83 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph cicd CI/CD security conf 1.00 GitHub Action tracks a moving branch
hyprwm/actions/.github/workflows/nix.yml@main can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/nix-ci.yml:13 CI/CD securitySupply chainGithub actions
high System graph cicd CI/CD security conf 1.00 GitHub Action tracks a moving branch
pozetroninc/github-action-get-latest-release@master can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/release.yaml:50 CI/CD securitySupply chainGithub actions
high System graph cicd CI/CD security conf 1.00 pull_request_target workflow appears to check out untrusted PR code
pull_request_target runs with base-repo privileges. Checking out PR head code in that context can expose repository tokens or secrets to attacker-controlled code.
.github/workflows/codeownersplus.yml CI/CD securitySupply chainGithub actions
high System graph security Skillspector conf 0.80 SkillSpector E4 (data-exfil) in src/xwayland/XWM.cpp
send state to Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions. Skill: unknown Rule: E4 Category: data-exfil Severity: HIGH Confidence: 0.80 Remediation: Remove any code that sends prompts, responses, or session da…
src/xwayland/XWM.cpp:553 Mcp skillData exfilE4
high System graph security Skillspector conf 0.80 SkillSpector MP3 (memory-poisoning) in src/protocols/BackgroundEffect.cpp
clear state Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior. Skill: unknown Rule: MP3 Category: memory-poisoning Severity: HIGH Confidence: 0.80 Remediation: Protect agent memory and state…
src/protocols/BackgroundEffect.cpp:47 Mcp skillMemory poisoningMp3
high System graph security Skillspector conf 0.70 SkillSpector P2 (prompt-injection) in protocols/wayland-drm.xml
<!-- drm support. This object is created by the server and published using the display's global event. --> <interface name="wl_drm" version="2"> <enum name="error"> <entry name="aut Hidden instructions were detected in comments or invisible text. These could contain malicious di…
protocols/wayland-drm.xml:30 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.70 SkillSpector P2 (prompt-injection) in protocols/wlr-layer-shell-unstable-v1.xml
<!-- Version 3 additions --> <request name="destroy" type="destructor" since="3"> <description summary="destroy the layer_shell object"> This request indicates that the client will Hidden instructions were detected in comments or invisible text. These could contain malicious dir…
protocols/wlr-layer-shell-unstable-v1.xml:92 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.70 SkillSpector P2 (prompt-injection) in protocols/wlr-output-management-unstable-v1.xml
<!-- Version 2 additions --> <event name="make" since="2"> <description summary="head manufacturer"> This event describes the manufacturer of the head. This must report the Hidden instructions were detected in comments or invisible text. These could contain malicious di…
protocols/wlr-output-management-unstable-v1.xml:261 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.70 SkillSpector P2 (prompt-injection) in README.md
<!-----------------------------------------------------------------------------> [Configure]: https://wiki.hypr.land/Configuring/ [Stars]: https://starchart.cc/hyprwm/Hyprland [Hypr]: https://github. Hidden instructions were detected in comments or invisible text. These could contain malicious di…
README.md:101 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.60 SkillSpector P2 (prompt-injection) in src/i18n/Engine.cpp
‌ Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended. Skill: unknown Rule: P2 Category: prompt-injection Severity: HIGH Confidence: 0.60 Remediation: Audit all comments and invisible characters. Remove any ins…
src/i18n/Engine.cpp:468 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/config/lua/bindings/LuaBindingsConfigRules.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/config/lua/bindings/LuaBindingsConfigRules.cpp:1123 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/config/lua/bindings/LuaBindingsDispatchers.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/config/lua/bindings/LuaBindingsDispatchers.cpp:155 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/config/lua/bindings/LuaBindingsInternal.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/config/lua/bindings/LuaBindingsInternal.cpp:500 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/config/lua/bindings/LuaBindingsToplevel.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/config/lua/bindings/LuaBindingsToplevel.cpp:330 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/config/shared/monitor/MonitorRuleManager.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/config/shared/monitor/MonitorRuleManager.cpp:48 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/config/shared/workspace/WorkspaceRuleManager.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/config/shared/workspace/WorkspaceRuleManager.cpp:64 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/desktop/rule/Rule.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/desktop/rule/Rule.cpp:50 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/desktop/rule/RuleWithEffects.hpp
return RULE Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/desktop/rule/RuleWithEffects.hpp:20 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.85 SkillSpector P6 (prompt-injection) in src/layout/supplementary/WorkspaceAlgoMatcher.cpp
return rule Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties. Skill: unknown Rule: P6 Category: prompt-injection Severity: HIGH Confidence: 0.85 Remediation: Remove any instructions that reveal, print, or…
src/layout/supplementary/WorkspaceAlgoMatcher.cpp:108 Mcp skillPrompt injectionP6
high System graph security Skillspector conf 0.75 SkillSpector TM1 (tool-misuse) in .github/actions/setup_base/action.yml
--noconfirm Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Validate all tool…
.github/actions/setup_base/action.yml:16 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.75 SkillSpector TM1 (tool-misuse) in .github/workflows/ci.yaml
--noconfirm Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Validate all tool…
.github/workflows/ci.yaml:57 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in hyprpm/src/core/PluginManager.cpp
rm subprojects/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remediation: Validate all …
hyprpm/src/core/PluginManager.cpp:572 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in Makefile
rm -f ./protocols/*.h ./protocols/*.c ./protocols/*.cpp ./protocols/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severit…
Makefile:20 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in src/render/OpenGL.cpp
RMOD_TYPE_ROTATE: /* TODO */ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remediation: …
src/render/OpenGL.cpp:2711 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in src/render/types.hpp
RMOD_TYPE_SCALE, /* scale by a float */ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0…
src/render/types.hpp:56 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.75 SkillSpector TM2 (tool-misuse) in hyprpm/src/core/PluginManager.cpp
&& chmod -R Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: unknown Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Limit tool chaining depth and validate the output of each too…
hyprpm/src/core/PluginManager.cpp:629 Mcp skillTool misuseTm2
high System graph security Skillspector conf 0.75 SkillSpector TM2 (tool-misuse) in Makefile
&& sudo Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: unknown Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Limit tool chaining depth and validate the output of each tool be…
Makefile:34 Mcp skillTool misuseTm2
high System graph security Skillspector conf 0.75 SkillSpector TM2 (tool-misuse) in src/i18n/Engine.cpp
; su Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: unknown Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Limit tool chaining depth and validate the output of each tool befor…
src/i18n/Engine.cpp:449 Mcp skillTool misuseTm2
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing tests. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern
medium System graph quality Tests conf 1.00 CI is configured but no tests are detected
A CI pipeline exists, but the scan found no test files to gate. Opus labeled this generated-code pattern as config theater: release machinery exists, but it has little behavioral signal.
CI/CDConfig theaterRepo hardening
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph cicd CI/CD security conf 1.00 4 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/checkout@v7 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
4 files, 4 locations
.github/workflows/codeownersplus.yml:23
.github/workflows/nix-update-inputs.yml:16
.github/workflows/release.yaml:13
.github/workflows/security-checks.yml:16
CI/CD securitySupply chainGithub actions
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing.
auth
medium System graph security Skillspector conf 0.60 SkillSpector E1 (data-exfil) in .github/workflows/translation-ai-check.yml
curl -sS -X POST \ -H "Authorization: token $GITHUB_TOKEN" \ -H "Content-Type: application/json" \ "https://api.github.com/repos/${{ github.repository }}/issues/$PR Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. M…
.github/workflows/translation-ai-check.yml:85 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.85 SkillSpector EA1 (excessive-agency) in src/config/values/ConfigValues.cpp
tool: * Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution. Skill: unknown Rule: EA1 Category: excessive-agency Severity: MEDIUM Conf…
src/config/values/ConfigValues.cpp:378 Mcp skillExcessive agencyEa1
medium System graph security Skillspector conf 0.65 SkillSpector EA2 (excessive-agency) in .github/actions/setup_base/action.yml
--noconfirm Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: unknown Rule: EA2 Category: excessive-agency Severity: MEDIUM Co…
.github/actions/setup_base/action.yml:16 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.65 SkillSpector EA2 (excessive-agency) in .github/workflows/ci.yaml
--noconfirm Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: unknown Rule: EA2 Category: excessive-agency Severity: MEDIUM Co…
.github/workflows/ci.yaml:57 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.80 SkillSpector EA2 (excessive-agency) in hyprctl/src/main.cpp
auto run Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: unknown Rule: EA2 Category: excessive-agency Severit…
hyprctl/src/main.cpp:144 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.80 SkillSpector EA2 (excessive-agency) in hyprpm/src/main.cpp
auto RUN Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: unknown Rule: EA2 Category: excessive-agency Severity: MEDIUM Confi…
hyprpm/src/main.cpp:111 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.80 SkillSpector EA2 (excessive-agency) in src/config/lua/ConfigManager.cpp
auto remove Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: unknown Rule: EA2 Category: excessive-agency Severity: MEDIUM Co…
src/config/lua/ConfigManager.cpp:1311 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.80 SkillSpector EA2 (excessive-agency) in src/protocols/ServerDecorationKDE.cpp
auto send Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: unknown Rule: EA2 Category: excessive-agency Severity: MEDIUM Conf…
src/protocols/ServerDecorationKDE.cpp:14 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.80 SkillSpector EA2 (excessive-agency) in src/protocols/XDGDecoration.cpp
auto send Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: unknown Rule: EA2 Category: excessive-agency Severity: MEDIUM Conf…
src/protocols/XDGDecoration.cpp:20 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.80 SkillSpector MP1 (memory-poisoning) in src/i18n/Engine.cpp
persistent rule Skill injects content designed to persist in agent memory or context across interactions. Persistent injection can alter agent behavior long after the initial interaction. Skill: unknown Rule: MP1 Category: memory-poisoning Severity: MEDIUM Confidence: 0.80 Remediation: Do not …
src/i18n/Engine.cpp:228 Mcp skillMemory poisoningMp1
medium System graph security Skillspector conf 0.80 SkillSpector MP2 (memory-poisoning) in hyprctl/hyprctl.fish
3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries. Skill: unknown Rule: MP2 C…
hyprctl/hyprctl.fish:159 Mcp skillMemory poisoningMp2
medium System graph security Skillspector conf 0.75 SkillSpector OH3 (output-handling) in src/render/Shader.cpp
maxLength = 0 Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing. Skill: unknown Rule: OH3 Category: output-handling Severity: MEDIUM Confidence: 0.75 Remediation: Set explicit limits o…
src/render/Shader.cpp:30 Mcp skillOutput handlingOh3
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in .github/workflows/man-update.yaml
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: unknown Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, do…
.github/workflows/man-update.yaml:17 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.80 SkillSpector PE2 (priv-esc) in hyprpm/src/core/DataState.cpp
chmod 755 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: unknown Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.80 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is neede…
hyprpm/src/core/DataState.cpp:105 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in hyprpm/src/helpers/Sys.cpp
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: unknown Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, do…
hyprpm/src/helpers/Sys.cpp:108 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in Makefile
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: unknown Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, do…
Makefile:34 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in src/main.cpp
Sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: unknown Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, do…
src/main.cpp:76 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in hyprpm/src/core/DataState.cpp
write the state to a file Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: unknown Rule: RA2 Category: rogue-agent Severity: MEDIUM Confiden…
hyprpm/src/core/DataState.cpp:27 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.80 SkillSpector RA2 (rogue-agent) in src/Compositor.cpp
SYSTEMD if (NSystemd::sdBooted() > 0 && !Env::envEnable Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: unknown Rule: RA2 Category: rogu…
src/Compositor.cpp:574 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in src/xwayland/Server.cpp
create socket dir"); return false; } } return true; } static std::string getSocketPath(int display, bool isLinux) { if (isLinux) return std::format("/tmp/.X11 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
src/xwayland/Server.cpp:115 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.80 SkillSpector TM3 (tool-misuse) in src/Compositor.cpp
safeMode = false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.80 Remediation: Override unsaf…
src/Compositor.cpp:930 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.80 SkillSpector TM3 (tool-misuse) in src/Compositor.hpp
safeMode = false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.80 Remediation: Override un…
src/Compositor.hpp:48 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.80 SkillSpector TM3 (tool-misuse) in src/config/ConfigManager.hpp
safeMode = false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.80 Remediation: Override unsaf…
src/config/ConfigManager.hpp:64 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.80 SkillSpector TM3 (tool-misuse) in src/main.cpp
safeMode = false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.80 Remediation: Override unsaf…
src/main.cpp:76 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.80 SkillSpector TM3 (tool-misuse) in start/src/core/Instance.hpp
safeMode = false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.80 Remediation: Override unsaf…
start/src/core/Instance.hpp:17 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.80 SkillSpector TM3 (tool-misuse) in start/src/main.cpp
safeMode = false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.80 Remediation: Override un…
start/src/main.cpp:104 Mcp skillTool misuseTm3
medium System graph quality Tests conf 1.00 Very low test-to-source ratio
0 test file(s) for 1 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths.
Coverage
low System graph cicd CI/CD security conf 1.00 6 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
6 files, 6 locations
.github/workflows/ci.yaml:13
.github/workflows/close-issues.yml:18
.github/workflows/man-update.yaml:20
.github/workflows/new-pr-comment.yml:32
.github/workflows/nix-test.yml:28
.github/workflows/translation-ai-check.yml:31
CI/CD securitySupply chainGithub actions
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in CODE_OF_CONDUCT.md
not limited to Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
CODE_OF_CONDUCT.md:20 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in hyprctl/hw-protocols/hyprpaper_core.xml
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
hyprctl/hw-protocols/hyprpaper_core.xml:23 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in LICENSE
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
LICENSE:21 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in protocols/input-method-unstable-v2.xml
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
protocols/input-method-unstable-v2.xml:25 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in protocols/vicinae-hotkey-v1.xml
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
protocols/vicinae-hotkey-v1.xml:18 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in protocols/virtual-keyboard-unstable-v1.xml
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
protocols/virtual-keyboard-unstable-v1.xml:21 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in protocols/wlr-output-power-management-unstable-v1.xml
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
protocols/wlr-output-power-management-unstable-v1.xml:18 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in protocols/wlr-screencopy-unstable-v1.xml
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
protocols/wlr-screencopy-unstable-v1.xml:19 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in protocols/wlr-virtual-pointer-unstable-v1.xml
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
protocols/wlr-virtual-pointer-unstable-v1.xml:18 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in src/managers/KeybindManager.cpp
handle anything Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remedia…
src/managers/KeybindManager.cpp:818 Mcp skillExcessive agencyEa3
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/ff30dc1d-b426-4d1a-9adc-ba27c676c634/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/ff30dc1d-b426-4d1a-9adc-ba27c676c634/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.