Security Report
Security Audit Pipeline
Summary
Detected
- Services:
- Permissions: shell:execute
- Data Handling: pii
Undeclared
All items declared
Warnings
No warnings
Findings (12)
Data Handling
pii declared "user data"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
pii declared "PII"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.
Compliance
GDPR undeclared "Note any findings relevant to compliance frameworks (SOC 2, GDPR, PCI-DSS, HIPAA, ISO 27001). State "
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
HIPAA undeclared "Note any findings relevant to compliance frameworks (SOC 2, GDPR, PCI-DSS, HIPAA, ISO 27001). State "
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
SOC-2 undeclared "Note any findings relevant to compliance frameworks (SOC 2, GDPR, PCI-DSS, HIPAA, ISO 27001). State "
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
PCI-DSS undeclared "Note any findings relevant to compliance frameworks (SOC 2, GDPR, PCI-DSS, HIPAA, ISO 27001). State "
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
GDPR undeclared "5. **Compliance Implications** — any findings that may affect compliance with relevant frameworks (S"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
HIPAA undeclared "5. **Compliance Implications** — any findings that may affect compliance with relevant frameworks (S"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
SOC-2 undeclared "5. **Compliance Implications** — any findings that may affect compliance with relevant frameworks (S"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
PCI-DSS undeclared "5. **Compliance Implications** — any findings that may affect compliance with relevant frameworks (S"
This content references a regulatory or compliance framework. This is informational — no action needed unless the skrpt processes regulated data.
Permissions
shell:execute declared "System ("
This content references shell command execution. If intentional, declare shell:execute in requires.permissions. This is the highest risk permission.
shell:execute declared "child_process"
This content references shell command execution. If intentional, declare shell:execute in requires.permissions. This is the highest risk permission.