yara-rule-authoring

skills-sh:trailofbits_skills__yara-rule-authoring

View source
A
100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

2

Score

100/100

LOW 2

Findings (2)

LOW
Cargo or gem install from remote
L53

Detects cargo install or gem install fetching packages from remote registries

cargo install y
FIX

Pin Cargo/Gem packages to specific versions (e.g., cargo install tool@0.1.0, gem install tool -v 1.2.3). Use lock files for reproducibility.

FP?

Likely FP if the matched text is a very short fragment (3 words or fewer) or uses placeholder package names.

LOW
System package manager install
L53

Detects system-level package installation via brew, apt, yum, or dnf

brew install y
FIX

Pin system packages to specific versions where the package manager supports it. Document the exact packages required and prefer containerized environments to avoid system-wide changes.

FP?

Likely FP if the match is standard setup documentation listing well-known system packages (e.g., apt install git curl) that are prerequisites.