Back to skill
Skillv0.1.1

Static analysis security

Lista Lending · Deterministic local checks for risky code patterns and metadata mismatches.

Scanner verdict

SuspiciousApr 30, 2026, 5:11 AM
Summary
Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration
Reason codes
suspicious.dangerous_execsuspicious.env_credential_accesssuspicious.potential_exfiltration
Engine
v2.4.5

Evidence

criticaldist/cli/cli.bundle.mjs:776
Shell command execution detected (child_process).
suspicious.dangerous_exec
criticaldist/executor.js:27
Shell command execution detected (child_process).
suspicious.dangerous_exec
criticalsrc/executor.ts:42
Shell command execution detected (child_process).
suspicious.dangerous_exec
criticaldist/cli/cli.bundle.mjs:191
Environment variable access combined with network send.
suspicious.env_credential_access
warndist/cli/cli.bundle.mjs:322
File read combined with network send (possible exfiltration).
suspicious.potential_exfiltration