gtasks-cli

clawhub:gtasks-cli

View source
A
92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

4

Score

92/100

MEDIUM 1
LOW 3

Findings (4)

MEDIUM
Shell profile modification for persistence
L70

Detects instructions to modify shell config files for environment persistence

add these to your shell profile (`~/.bashrc`, `~/.zshrc
FIX

Avoid modifying shell profiles (.bashrc, .zshrc, .profile) programmatically. Instruct users to add PATH entries manually, or use a version manager (nvm, pyenv) instead.

FP?

Likely FP if the match is documentation showing how to add a tool to PATH manually, especially if it only appends to PATH without modifying other settings.

LOW
Runtime URL controlling behavior
L41

Detects URLs fetched at runtime that control or influence agent behavior without pinning

Download the binary for your system from [GitHub Releases](https:// + Prompt
FIX

Avoid loading configuration or behavior-controlling content from runtime URLs. Bundle required configurations locally or pin remote config to versioned, integrity-verified endpoints.

FP?

Likely FP if the URL in the match is a documentation link or example URL (e.g., example.com) rather than an actual runtime-fetched configuration endpoint.

LOW
Shell profile modification for persistence
L73

Detects instructions to modify shell config files for environment persistence

echo 'export GTASKS_CLIENT_ID="your-client-id"' >> ~/.bashrc
FIX

Avoid modifying shell profiles (.bashrc, .zshrc, .profile) programmatically. Instruct users to add PATH entries manually, or use a version manager (nvm, pyenv) instead.

FP?

Likely FP if the match is documentation showing how to add a tool to PATH manually, especially if it only appends to PATH without modifying other settings.

LOW
Shell profile modification for persistence
L74

Detects instructions to modify shell config files for environment persistence

echo 'export GTASKS_CLIENT_SECRET="your-client-secret"' >> ~/.bashrc
FIX

Avoid modifying shell profiles (.bashrc, .zshrc, .profile) programmatically. Instruct users to add PATH entries manually, or use a version manager (nvm, pyenv) instead.

FP?

Likely FP if the match is documentation showing how to add a tool to PATH manually, especially if it only appends to PATH without modifying other settings.