cross-platform-compatibility
skills-sh:aj-geddes_useful-ai-prompts__cross-platform-compatibility
View sourceFirst Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
3
Score
92/100
Findings (3)
Detects conditional execution based on CI environment variables combined with dangerous commands
if running in CI
+ child_processPin all dependencies to exact versions with integrity hashes. Use lock files (package-lock.json, poetry.lock) and enable checksum verification in your package manager.
Likely FP if the match is documentation about dependency management best practices rather than actual unpinned dependency declarations.
Detects subprocess calls with shell=True which enables shell injection
shell: trueReplace shell=True with shell=False and pass command arguments as a list. Validate and sanitize all inputs before passing to the shell.
Likely FP if the match is in documentation describing how subprocess works, or in a comment explaining shell risks rather than actual code.
Detects subprocess calls with shell=True which enables shell injection
shell: trueReplace shell=True with shell=False and pass command arguments as a list. Validate and sanitize all inputs before passing to the shell.
Likely FP if the match is in documentation describing how subprocess works, or in a comment explaining shell risks rather than actual code.