Oh My Claudecode AI Agent

Findings (200)

• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  exfiltration issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  bridge/mcp-server.cjs:9
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  bridge/team-bridge.cjs:8
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  bridge/team.js:5639
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  bridge/team.js:17656
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/release.ts:107
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/release.ts:120
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/cli/tmux-utils.ts:122
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/features/auto-update.ts:76
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/features/auto-update.ts:116
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/features/auto-update.ts:166
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/features/auto-update.ts:475
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/features/auto-update.ts:779
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/features/auto-update.ts:1088
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/features/auto-update.ts:1127
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/installer/index.ts:529
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/installer/index.ts:1799
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/featured-contributors.ts:87
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/team/worker-commit-cadence.ts:277
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/tools/python-repl/bridge-manager.ts:334
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/utils/resolve-node.ts:60
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  httpcore2@2.9.1: 1 known vulnerability

  PYSEC-2026-3844

  benchmark/requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  httpx2@2.9.1: 5 known vulnerabilities

  PYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849

  benchmark/requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  virtualenv@21.9.1: 15 known vulnerabilities

  GHSA-394h-qwmc-48pf, GHSA-43mp-35q3-x3fq, GHSA-494p-63j8-28p3, GHSA-558c-9hv2-4prj, GHSA-5vjq-rrrf-7h2q +10 more

  benchmark/requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.26.0: 12 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +7 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.3.0: 2 known vulnerabilities

  GHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@1.1.18: 6 known vulnerabilities

  GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@2.1.4: 6 known vulnerabilities

  GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 2 known vulnerabilities

  GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.2.2: 12 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +7 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@3.25.76: 2 known vulnerabilities

  GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  benchmarks/run-all.ts:257
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/__tests__/ast-tools-path-restriction.test.ts:57
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-config-stop-callback.test.ts:121
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-config-stop-callback.test.ts:166
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-config-stop-callback.test.ts:171
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:51
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:62
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:120
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:144
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:152
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:157
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:159
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:171
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:195
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:213
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/__tests__/cli-notify-profile.test.ts:229
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/hooks.test.ts:540
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/hooks.test.ts:955
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/hooks.test.ts:1499
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/hud/stdin.test.ts:369
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/hud/stdin.test.ts:561
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/hud/stdin.test.ts:744
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/__tests__/permission-enforcement.test.ts:187
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/post-tool-verifier.test.mjs:77
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/rate-limit-wait/daemon-cache-context.test.ts:31
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:115
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:116
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:117
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:120
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:121
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:122
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:125
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:126
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/release-generation.test.ts:127
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/resolve-transcript-path.test.ts:171
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/resolve-transcript-path.test.ts:172
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/resolve-transcript-path.test.ts:185
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/__tests__/resolve-transcript-path.test.ts:209
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/__tests__/ssrf-guard.test.ts:29
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/__tests__/ssrf-guard.test.ts:30
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/__tests__/ssrf-guard.test.ts:39
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/__tests__/ssrf-guard.test.ts:73
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/cli/__tests__/ralph-afk.test.ts:340
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/cli/__tests__/tmux-no-raw-calls.test.ts:27
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/hooks/__tests__/bridge-security.test.ts:298
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/__tests__/stop-hook-openclaw-cooldown.test.ts:31
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/hooks/permission-handler/__tests__/index.test.ts:142
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/hooks/permission-handler/__tests__/index.test.ts:163
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/hooks/permission-handler/__tests__/index.test.ts:179
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/__tests__/prompt-truncation.test.ts:42
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/persistent-mode/__tests__/ralph-hard-max-script.test.ts:174
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/__tests__/ralph-verification-flow.test.ts:20
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/session-isolation.test.ts:47
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/session-isolation.test.ts:397
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/session-isolation.test.ts:699
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/session-isolation.test.ts:849
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/stop-hook-blocking.test.ts:269
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/stop-hook-blocking.test.ts:886
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/stop-hook-blocking.test.ts:906
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/stop-hook-blocking.test.ts:933
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/stop-hook-blocking.test.ts:1765
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/hooks/persistent-mode/stop-hook-blocking.test.ts:1785
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/action-runner.test.ts:179
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/action-runner.test.ts:186
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/callbacks.test.ts:244
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/callbacks.test.ts:311
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/callbacks.test.ts:320
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/callbacks.test.ts:340
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/callbacks.test.ts:427
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/callbacks.test.ts:458
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/duplicate-notifications.test.ts:104
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/duplicate-notifications.test.ts:118
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/duplicate-notifications.test.ts:149
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/duplicate-notifications.test.ts:161
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/duplicate-notifications.test.ts:171
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/hooks/session-end/__tests__/duplicate-notifications.test.ts:184
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/interop/__tests__/shared-state-workspace.test.ts:46
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:122
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:244
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:245
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:250
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:251
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:256
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:331
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/mode-state-io.test.ts:557
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:252
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:292
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:319
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:320
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:325
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:326
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:331
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:439
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:440
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:452
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:453
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:475
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:506
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:507
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:511
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:518
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:531
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:546
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:547
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:554
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:555
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:560
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:583
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/lib/__tests__/worktree-paths.test.ts:820
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:70
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:78
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:90
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:102
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:118
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:130
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:147
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:168
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:274
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:295
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:316
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:348
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:353
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:359
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:363
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:375
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:380
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:383
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:394
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config-merge.test.ts:413
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:358
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:362
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:379
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:383
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:389
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:396
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:403
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:491
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/config.test.ts:504
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:144
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:183
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:196
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:206
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:218
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:231
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:244
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:258
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:271
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:287
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:304
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:756
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:779
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:791
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:805
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:818
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notifications/__tests__/dispatcher.test.ts:830

Network activity