social-favorites-to-obsidian

• Analyzed: May 16, 2026, 2:01 PM
• Findings: 2
• Version: 1.0.1
• Reason codes:
  suspicious.dangerous_execsuspicious.exposed_secret_literal
• Engine: v2.4.24

Overview

Detected: suspicious.dangerous_exec, suspicious.exposed_secret_literal

Findings (2)

critical

suspicious.dangerous_exec

• Location: bin/social-favorites-to-obsidian.js:30
• Finding: Shell command execution detected (child_process).

critical

suspicious.exposed_secret_literal

• Location: scripts/setup.py:50
• Finding: File appears to expose a hardcoded API secret or token.