claw-sync

clawhub:claw-sync

View source
A
100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

17

Score

100/100

LOW 17

Findings (17)

LOW
Mutable GitHub raw content reference
L15

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/SKILL.md
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L17

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/README.md
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L19

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/index.js
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L21

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/package.json
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L23

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/config.example.env
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L25

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/push.js
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L27

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/pull.js
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L29

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/status.js
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L31

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/setup-cron.js
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L61

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/SKILL.md)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L62

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/README.md)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L63

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/index.js)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L64

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/package.json)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L65

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/push.js)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L66

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/pull.js)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L67

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/status.js)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.

LOW
Mutable GitHub raw content reference
L68

Detects references to raw.githubusercontent.com on mutable branches like main/master

github.com/arakichanxd/Claw-Sync/blob/main/scripts/setup-cron.js)
FIX

Replace GitHub raw.githubusercontent.com references with pinned commit SHAs instead of branch names (e.g., /commit-sha/file instead of /main/file). Branch references are mutable.

FP?

Likely FP if the raw GitHub URL points to a versioned release tag in a well-known repository, though even tags are technically mutable.