https://github.com/ComposioHQ/awesome-codex-skills.git ·
lang: python ·
LOC: ·
source: user_submitted
| Rule | Severity | Count |
|---|---|---|
SEC015 Insecure Randomness for Security |
medium | 2 |
SEC012 ZipSlip — Archive Path Traversal |
medium | 2 |
SEC005 Command Injection Risk |
high | 1 |
SEC005
Command Injection Risk
webapp-testing/scripts/with_server.py:69
· conf 0.50
[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input.SEC012
ZipSlip — Archive Path Traversal
skill-installer/scripts/install-skill-from-github.py:112
· conf 1.00
[SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation allows writing files outside the target directory.SEC012
ZipSlip — Archive Path Traversal
skill-installer/scripts/install-skill-from-github.py:128
· conf 1.00
[SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation allows writing files outside the target directory.SEC015
Insecure Randomness for Security
slack-gif-creator/core/visual_effects.py:164
· conf 0.25
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.SEC015
Insecure Randomness for Security
slack-gif-creator/templates/explode.py:67
· conf 0.25
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/28eb09ce-accb-4997-acbd-105126a9e802/.