gettr-transcribe-summarize

clawhub:gettr-transcribe-summarize

View source
A
100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 21, 2026

Findings

5

Score

100/100

LOW 5

Findings (5)

LOW
Shell script file execution
L25

Detects execution of shell script files via bash/sh command or direct invocation

bash scripts/run_pipeline.sh
FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW
Shell script file execution
L30

Detects execution of shell script files via bash/sh command or direct invocation

bash scripts/run_pipeline.sh
FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW
System package manager install
L59

Detects system-level package installation via brew, apt, yum, or dnf

brew install f
FIX

Pin system packages to specific versions where the package manager supports it. Document the exact packages required and prefer containerized environments to avoid system-wide changes.

FP?

Likely FP if the match is standard setup documentation listing well-known system packages (e.g., apt install git curl) that are prerequisites.

LOW
Shell script file execution
L109

Detects execution of shell script files via bash/sh command or direct invocation

bash scripts/run_pipeline.sh
FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW
Shell script file execution
L114

Detects execution of shell script files via bash/sh command or direct invocation

bash scripts/run_pipeline.sh
FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.