clink-interg-skills

AdvisoryAudited by Static analysis on May 10, 2026.

Overview

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Findings (4)

critical

suspicious.dangerous_exec

Location
scripts/load_payment_skill_contexts.mjs:75
Finding
Shell command execution detected (child_process).
critical

suspicious.dangerous_exec

Location
tests/run_skill_runtime_tests.mjs:411
Finding
Shell command execution detected (child_process).
critical

suspicious.dangerous_exec

Location
tests/run_skill_tests.mjs:18
Finding
Shell command execution detected (child_process).
critical

suspicious.env_credential_access

Location
tests/run_llm_skill_tests.mjs:17
Finding
Environment variable access combined with network send.