garrytan/gbrain

Score 40. Found 1 critical, 5 medium findings.

https://github.com/garrytan/gbrainScanned April 27, 2026 at 4:21 PM

Scan another skill →

Trust score

40/ 100

Score 40. Found 1 critical, 5 medium findings.

garrytan/gbrain · 50 of 598 files read

Critical1

src/cli.ts:397 · shell_exec

Spawns a subprocess.

execSync(`bash "${scriptPath}"`, { stdio: 'inherit', env: { ...process.env } });

Medium5

package.json · unpinned_dep
Dependency has no upper version bound — installs may drift.
```
"@types/bun": "latest"
```
scripts/build-llms.ts:163 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(llmsPath, llmsTxt);
```
scripts/build-llms.ts:164 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(llmsFullPath, llmsFullTxt);
```
src/commands/export.ts:32 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(filePath, md);
```
src/commands/export.ts:46 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(rawPath, JSON.stringify(rawObj, null, 2) + '\n');
```

Verified by Novingly

Fix the findings. Earn the badge.

Skills scoring 90+ qualify for the Verified badge — a signed, embeddable trust signal for your README. Your score has room to move. We offer a done-for-you audit that files PRs directly against your repo.

View pricing→Request a DFY audit →