github Go analyzed 26325c4

frankieramirez/ripen

Fail-closed image updates for Portainer and Compose. A digest ripens. You apply.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 26325c4 · analyzer v33 · 4d ago

suspicious bundled script suspicious bundled script frankieramirez-ripen-26325c4/.agents/skills/attune/scripts/tickets.sh :280 encoded=$(python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))' "$label")
suspicious bundled script suspicious bundled script frankieramirez-ripen-26325c4/.agents/skills/cast/scripts/tickets.sh :280 encoded=$(python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))' "$label")
suspicious bundled script suspicious bundled script frankieramirez-ripen-26325c4/.agents/skills/conjure/scripts/tickets.sh :280 encoded=$(python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))' "$label")
suspicious bundled script suspicious bundled script frankieramirez-ripen-26325c4/.agents/skills/scan/scripts/tickets.sh :280 encoded=$(python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))' "$label")
suspicious bundled script suspicious bundled script frankieramirez-ripen-26325c4/.agents/skills/setup-mana/scripts/tickets.sh :280 encoded=$(python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))' "$label")
suspicious bundled script suspicious bundled script frankieramirez-ripen-26325c4/.agents/skills/sift/scripts/tickets.sh :280 encoded=$(python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))' "$label")

code evidence vv1.2.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 91

net frankieramirez-ripen-26325c4/.github/ci/site-notify.cjs :22 const response = await fetch(`https://api.github.com/repos/${siteRepo}/actions/workflows/${workflow}/dispatches`, {
net frankieramirez-ripen-26325c4/internal/webui/static/app.js :80 fetch("/api/status", { headers: { Accept: "application/json" } })

show 15 more