todo-management

clawhub:todo-management

View source

100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

Score

100/100

LOW 19

Findings (19)

LOW

Shell script file execution CMDEXEC_013

command-execution L16

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L70

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L71

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L73

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L74

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L75

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L76

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L78

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L80

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L82

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L84

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L85

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L87

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L91

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L92

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L94

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L95

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L98

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L100

Detects execution of shell script files via bash/sh command or direct invocation

bash {baseDir}/scripts/todo.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.