First Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
7
Score
100/100
Findings (7)
Detects system-level package installation via brew, apt, yum, or dnf
brew install sPin system packages to specific versions where the package manager supports it. Document the exact packages required and prefer containerized environments to avoid system-wide changes.
Likely FP if the match is standard setup documentation listing well-known system packages (e.g., apt install git curl) that are prerequisites.
Detects CLI tools granting unrestricted send/read access to email or messaging
gmail search "is:unread" --maxRestrict email and messaging API access to user-initiated actions. Prevent automated sending that could exfiltrate data via email body or attachments.
Likely FP if the skill is an email client or messaging tool whose documented purpose is to send messages on behalf of the user.
Detects CLI tools granting unrestricted send/read access to email or messaging
gmail send --toRestrict email and messaging API access to user-initiated actions. Prevent automated sending that could exfiltrate data via email body or attachments.
Likely FP if the skill is an email client or messaging tool whose documented purpose is to send messages on behalf of the user.
Detects CLI tools granting unrestricted send/read access to email or messaging
gmail send --toRestrict email and messaging API access to user-initiated actions. Prevent automated sending that could exfiltrate data via email body or attachments.
Likely FP if the skill is an email client or messaging tool whose documented purpose is to send messages on behalf of the user.
Detects CLI tools granting unrestricted send/read access to email or messaging
gmail send --toRestrict email and messaging API access to user-initiated actions. Prevent automated sending that could exfiltrate data via email body or attachments.
Likely FP if the skill is an email client or messaging tool whose documented purpose is to send messages on behalf of the user.
Detects CLI tools granting unrestricted send/read access to email or messaging
gmail send --toRestrict email and messaging API access to user-initiated actions. Prevent automated sending that could exfiltrate data via email body or attachments.
Likely FP if the skill is an email client or messaging tool whose documented purpose is to send messages on behalf of the user.
Detects system-level package installation via brew, apt, yum, or dnf
brew install sPin system packages to specific versions where the package manager supports it. Document the exact packages required and prefer containerized environments to avoid system-wide changes.
Likely FP if the match is standard setup documentation listing well-known system packages (e.g., apt install git curl) that are prerequisites.