golang-cli-cobra-viper

skills-sh:bobmatnyc_claude-mpm-skills__golang-cli-cobra-viper

View source
C
53/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

5

Score

53/100

HIGH 1
MEDIUM 4

Findings (5)

HIGH
PowerShell command execution
L1602

Detects PowerShell Invoke-Expression, Start-Process, and related execution commands

Invoke-Expression
FIX

Restrict PowerShell execution to specific allowlisted commands. Use -ExecutionPolicy Restricted and avoid Invoke-Expression with dynamic strings.

FP?

Likely FP if the match is in documentation showing PowerShell setup for a legitimate tool (e.g., installing a module via Install-Module).

MEDIUM
Shell profile modification for persistence
L1591

Detects instructions to modify shell config files for environment persistence

add to ~/.bashrc
FIX

Avoid modifying shell profiles (.bashrc, .zshrc, .profile) programmatically. Instruct users to add PATH entries manually, or use a version manager (nvm, pyenv) instead.

FP?

Likely FP if the match is documentation showing how to add a tool to PATH manually, especially if it only appends to PATH without modifying other settings.

MEDIUM
Shell profile modification for persistence
L1592

Detects instructions to modify shell config files for environment persistence

echo 'source <(myapp completion bash)' >> ~/.bashrc
FIX

Avoid modifying shell profiles (.bashrc, .zshrc, .profile) programmatically. Instruct users to add PATH entries manually, or use a version manager (nvm, pyenv) instead.

FP?

Likely FP if the match is documentation showing how to add a tool to PATH manually, especially if it only appends to PATH without modifying other settings.

MEDIUM
Shell profile modification for persistence
L1595

Detects instructions to modify shell config files for environment persistence

add to ~/.zshrc
FIX

Avoid modifying shell profiles (.bashrc, .zshrc, .profile) programmatically. Instruct users to add PATH entries manually, or use a version manager (nvm, pyenv) instead.

FP?

Likely FP if the match is documentation showing how to add a tool to PATH manually, especially if it only appends to PATH without modifying other settings.

MEDIUM
Shell profile modification for persistence
L1596

Detects instructions to modify shell config files for environment persistence

echo 'source <(myapp completion zsh)' >> ~/.zshrc
FIX

Avoid modifying shell profiles (.bashrc, .zshrc, .profile) programmatically. Instruct users to add PATH entries manually, or use a version manager (nvm, pyenv) instead.

FP?

Likely FP if the match is documentation showing how to add a tool to PATH manually, especially if it only appends to PATH without modifying other settings.