ThinkOffApp/ide-agent-kit

Score 0. Found 35 critical, 18 medium findings.

Trust score

0/ 100

Score 0. Found 35 critical, 18 medium findings.

ThinkOffApp/ide-agent-kit · 50 of 148 files read

Critical35

bin/cli.mjs:1214 · shell_exec

Spawns a subprocess.

execSync('claude-mem --version', { stdio: 'ignore' });

src/utils.mjs:10 · shell_exec

Spawns a subprocess.

execSync(`tmux has-session -t ${JSON.stringify(session)} 2>/dev/null`);

src/utils.mjs:13 · shell_exec

Spawns a subprocess.

execSync(`tmux send-keys -t ${JSON.stringify(session)} -l ${JSON.stringify(text)}`);

src/utils.mjs:18 · shell_exec

Spawns a subprocess.

execSync(`tmux send-keys -t ${JSON.stringify(session)} Enter`);

src/watch.mjs:72 · shell_exec

Spawns a subprocess.

execSync(`tmux has-session -t ${JSON.stringify(session)} 2>/dev/null`);

src/watch.mjs:79 · shell_exec

Spawns a subprocess.

execSync(`tmux send-keys -t ${JSON.stringify(session)} -l ${JSON.stringify(text)}`);

src/watch.mjs:83 · shell_exec

Spawns a subprocess.

execSync(`tmux send-keys -t ${JSON.stringify(session)} Enter`);

Medium18

bin/cli.mjs:1430 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(outPath, JSON.stringify(preset.config, null, 2) + '\n');
```
bin/cli.mjs:1512 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
```
bin/cli.mjs:1571 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
```
bin/cli.mjs:1585 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(codexPath, JSON.stringify(codexSettings, null, 2) + '\n');
```
src/receipt.mjs:28 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
appendFileSync(receiptPath, JSON.stringify(receipt) + '\n');
```
src/openclaw-hooks.mjs:116 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(join(hookDir, 'HOOK.md'), hookMd);
```
src/openclaw-hooks.mjs:117 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(join(hookDir, 'handler.ts'), handlerTs);
```
src/openclaw-exec.mjs:42 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n');
```
+ 10 more