Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
- Skill content
const child = spawn(target.command, target.args, createTargetSpawnOptions());
Security checks across static analysis, malware telemetry, and agentic risk
No risk analysis has been recorded yet.
const child = spawn(target.command, target.args, createTargetSpawnOptions());
const match = /^\s*(?<pid>\d+)\s+(?<ppid>\d+)\s+(?<command>.+?)\s*$/.exec(line);
const assignment = /^(?<key>"(?:\\.|[^"\\])*"|'[^']*'|[A-Za-z0-9_\-/.~:]+)\s*=\s*(?<value>.+)$/.exec(line);
62/62 vendors flagged this plugin as clean.
No visible risk-analysis findings were reported for this release.