EvilFreelancer/openapi-to-cli

Score 26. Found 1 critical, 7 medium findings.

https://github.com/EvilFreelancer/openapi-to-cliScanned April 29, 2026 at 12:19 PM

Scan another skill →

Trust score

26/ 100

Score 26. Found 1 critical, 7 medium findings.

EvilFreelancer/openapi-to-cli · 15 of 40 files read

Critical1

scripts/generate-version.js:7 · shell_exec
Spawns a subprocess.
```
const tag = execSync("git describe --tags --abbrev=0", {
```

Medium7

scripts/generate-version.js:44 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
fs.writeFileSync(targetPath, content, { encoding: "utf-8" });
```
src/profile-store.ts:23 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(pathToWrite: string, data: string): void;
```
src/profile-store.ts:125 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
this.fs.writeFileSync(configPaths.profilesIniPath, serialized);
```
src/profile-store.ts:167 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
this.fs.writeFileSync(configPaths.profilesIniPath, serialized);
```
src/profile-store.ts:176 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
this.fs.writeFileSync(currentPath, name);
```
src/openapi-loader.ts:11 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(pathToWrite: string, data: string): void;
```
src/openapi-loader.ts:43 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
this.fs.writeFileSync(cachePath, serialized);
```

Verified by Novingly

Fix the findings. Earn the badge.

Skills scoring 90+ qualify for the Verified badge — a signed, embeddable trust signal for your README. Your score has room to move. We offer a done-for-you audit that files PRs directly against your repo.

View pricing→Request a DFY audit →