Weave

• Analyzed: May 14, 2026, 4:58 AM
• Findings: 1
• Version: 0.1.6
• Hash: 917f809404afd2163471cbfa84e2a2ff8bd90f29186128dc55fae78c72743582
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'weave' skill bundle is a well-documented and security-conscious implementation for managing crypto invoices via the Weave CLI. It includes explicit guardrails against exposing secrets, a 'Compliant Install Policy' that forbids pipe-to-shell patterns, and a dedicated security linter (scripts/security-check.sh) designed to detect and block common malicious patterns like obfuscated shell execution or URL shorteners. All code and instructions are strictly aligned with the stated purpose of crypto invoicing and payment tracking.