critical
suspicious.dangerous_exec
- Location
- opencode/plugins/inner-os.js:106
- Finding
- Shell command execution detected (child_process).
- Evidence
return execSync(`node ${JSON.stringify(script)} ${name}`, {
AdvisoryAudited by Static analysis on May 10, 2026.
Detected: suspicious.dangerous_exec
return execSync(`node ${JSON.stringify(script)} ${name}`, {