score in the caution band · capabilities: processExec, network, fileWrite, packageInstall · relies on external code not in the reviewed commit, so safe-to-run is not checked: airportsdata (package, pypi), click (package, pypi), httpx (package, pypi), pydantic (package, pypi), requests (package, pypi), rich (package, pypi) +1 more
criteria
safe-to-run : not checked no-net : failed no-exec : failed no-persist : passed no-priv : passed no-obfusc : passed no-secrets : passed human : not checked
ai
no escalation
guard
canary control n/a tools schema
does
purpose
A bar widget with a flight-search panel that calls letsfg.co over XHR using the user's LetsFG token, with an anonymous install ID sent for analytics.
MCP 'letsfg.description' field carries hidden instructions / references to secrets — classic tool poisoning. [CG701/mcp-tool-poisoning]
Flight and hotel search & booking for AI agents. Server-side engine covers hundreds of airlines with per-flight reliability history, plus real bookable hotel ra…
ai: likely false positive
lowpackageopenapi.yaml:32opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
pip install letsfg
ai: likely false positive
lowsecretPanel.qml:1071ai · 60%
Reads the CLI's token file ~/.letsfg/config.json and sends the bearer token to letsfg.co. This is the plugin's stated purpose, and the file is read-only to the plugin.
Hidden-priority marker of the kind used in MCP tool-poisoning payloads. [CG105/instruction-override]
description: 'Complete workflow guide: authenticate -> search -> book, pricing, passenger rules, error handling, and search tips. Read this before using any tools.',
ai: likely false positive
lowothersdk/python/letsfg/cli.py:852bandit · 90%
blacklist: Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
851 try: 852 with urllib.request.urlopen(req, timeout=30) as resp: 853 result = json.loads(resp.read().decode())
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infoobfuscationAGENTS.md:5heckler · 100%
Variation Selector 16 (U+FE0F)
infonetworkAGENTS.md:120opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkAGENTS.md:126opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infopackageAGENTS.md:196opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageAGENTS.md:260opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infonetworkAGENTS.md:347opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkAGENTS.md:360opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretAGENTS.md:360gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkAGENTS.md:966opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkAGENTS.md:973opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkAGENTS.md:979opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkAGENTS.md:990opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkAGENTS.md:997opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkAGENTS.md:1000opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infootherassets/demo.gifmalcontent · 60%
copy files using cp [MEDIUM]
infootherassets/demo.gifmalcontent · 60%
Supports SSH (secure shell) [MEDIUM]
infootherassets/ranking.jsmalcontent · 60%
complex math with parseInt or fromCharCode conversions [MEDIUM]
infootherassets/ranking.jsmalcontent · 60%
performs math directly against parsed integers [MEDIUM]
infoexecassets/ranking.js:13eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:15eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:22eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:52eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:144eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:149eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:276eslint · 60%
Unsafe Regular Expression
infoexecassets/ranking.js:811eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:814eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:1000eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:1145eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:1162eslint · 60%
Variable Assigned to Object Injection Sink
infoexecassets/ranking.js:1164eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:1347eslint · 60%
Variable Assigned to Object Injection Sink
infoexecassets/ranking.js:1874eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:2042eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:2045eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:2046eslint · 60%
Generic Object Injection Sink
infoexecassets/ranking.js:2047eslint · 60%
Generic Object Injection Sink
infopackageCLAUDE.md:55opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageCLAUDE.md:152opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageCLAUDE.md:159opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageCLAUDE.md:167opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infonetworkcontext7.json:2textscan · 100%
URL literal: https://context7.com
infopackageCONTRIBUTING.md:52opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageCONTRIBUTING.md:60opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageCONTRIBUTING.md:69opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageDockerfile:31opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageDockerfile.python:26opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageDockerfile.python:38opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkdocs/agent-guide.md:157opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkdocs/agent-guide.md:163opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkdocs/agent-guide.md:169opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkdocs/agent-guide.md:176opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkdocs/agent-guide.md:188opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infoobfuscationdocs/api-errors.md:3heckler · 100%
Variation Selector 16 (U+FE0F)
infonetworkdocs/api-errors.md:46opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-errors.md:46gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infoobfuscationdocs/api-guide.md:3heckler · 100%
Variation Selector 16 (U+FE0F)
infonetworkdocs/api-guide.md:122opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-guide.md:122gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-guide.md:126opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-onboarding.md:33gitleaks · 70%
Possible hard-coded secret (Detected a Generic API Key, potentially exposing access to various services and sensitive operations.); value redacted, liveness not verified.
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-onboarding.md:45gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-onboarding.md:54gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-onboarding.md:65gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-onboarding.md:74gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-polling.md:31gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-polling.md:61opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-polling.md:61gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-sandbox.md:53gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-sandbox.md:104opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-sandbox.md:104gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-sandbox.md:132opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-sandbox.md:132gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infoobfuscationdocs/api-search.md:3heckler · 100%
Variation Selector 16 (U+FE0F)
infonetworkdocs/api-search.md:42opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-search.md:42gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-search.md:74opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-search.md:74gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-search.md:231opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-search.md:231gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-search.md:273opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-search.md:273gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/api-search.md:293opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretdocs/api-search.md:293gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkdocs/hotels.md:56opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkdocs/hotels.md:59opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infoobfuscationdocs/index.md:6heckler · 100%
Variation Selector 16 (U+FE0F)
infopackagedocs/index.md:22opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infoobfuscationdocs/openapi.md:3heckler · 100%
Variation Selector 16 (U+FE0F)
infonetworkdocs/openapi.md:53opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkdocs/openapi.md:59opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infoobfuscationdocs/packages.md:3heckler · 100%
Variation Selector 16 (U+FE0F)
infopackagedocs/packages.md:22opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackagedocs/packages.md:23opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackagedocs/packages.md:33opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackagedocs/packages.md:58opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackagedocs/self-hosting.md:15opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infonetworkdocs/self-hosting.md:68opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infoobfuscationdocs/tutorials.md:3heckler · 100%
Variation Selector 16 (U+FE0F)
infonetworkglama.json:2textscan · 100%
URL literal: https://glama.ai
infootherlighthouserc.jsmalcontent · 60%
executes a command [MEDIUM]
infonetworklighthouserc.js:6textscan · 100%
URL literal: http://localhost
infonetworkmkdocs.yml:2textscan · 100%
URL literal: https://letsfg.co
infonetworkmkdocs.yml:6textscan · 100%
URL literal: https://github.com
infootherModel.jsmalcontent · 60%
charAt/substr operations with long strings [MEDIUM]
infootherModel.jsmalcontent · 60%
complex math with parseInt or fromCharCode conversions [MEDIUM]
infootherModel.jsmalcontent · 60%
references an 'agent' [MEDIUM]
infootherModel.jsmalcontent · 60%
Invokes curl [MEDIUM]
infootherModel.jsmalcontent · 60%
submits content to websites [MEDIUM]
infootherModel.jsmalcontent · 60%
connects to an arbitrary hostname:port [MEDIUM]
infootherModel.jsmalcontent · 60%
references spoofing [MEDIUM]
infootherModel.jsmalcontent · 60%
References 'malicious' [MEDIUM]
infonetworkModel.js:36textscan · 100%
URL literal: https://letsfg.co
infonetworkModel.js:171textscan · 100%
URL literal: https://pics.avs.io
infonetworkModel.js:187textscan · 100%
URL literal: https://images.kiwi.com
infoexecModel.js:199eslint · 60%
Generic Object Injection Sink
infoexecModel.js:234eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:241eslint · 60%
Generic Object Injection Sink
infoexecModel.js:362eslint · 60%
Unsafe Regular Expression
infonetworkModel.js:403textscan · 100%
URL literal: https://checkout.stripe.com.evil.com
infonetworkModel.js:504textscan · 100%
URL literal: https://checkout.stripe.com
infoexecModel.js:670eslint · 60%
Generic Object Injection Sink
infoexecModel.js:849eslint · 60%
Generic Object Injection Sink
infoexecModel.js:854eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1008eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1015eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1021eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1022eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1024eslint · 60%
Function Call Object Injection Sink
infoexecModel.js:1025eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1101eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1102eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1104eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1113eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1142eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1198eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1199eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1206eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1207eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1240eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1272eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1277eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1287eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1288eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1292eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1293eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1303eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1314eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1320eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1328eslint · 60%
Variable Assigned to Object Injection Sink
infonetworkModel.js:1345textscan · 100%
URL literal: https://basemaps.cartocdn.com
infoexecModel.js:1430eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1458eslint · 60%
Variable Assigned to Object Injection Sink
infonetworkModel.js:1502opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infoexecModel.js:1560eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1563eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1653eslint · 60%
Generic Object Injection Sink
infonetworkModel.js:1681textscan · 100%
URL literal: https://i.travelapi.com
infonetworkModel.js:1682textscan · 100%
URL literal: https://q-xx.bstatic.com
infoexecModel.js:1690eslint · 60%
Function Call Object Injection Sink
infoexecModel.js:1706eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1763eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1769eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1779eslint · 60%
Function Call Object Injection Sink
infonetworkModel.js:1839textscan · 100%
URL literal: https://images.pexels.com
infonetworkModel.js:1840textscan · 100%
URL literal: https://upload.wikimedia.org
infoexecModel.js:1857eslint · 60%
Function Call Object Injection Sink
infoexecModel.js:1876eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1877eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1937eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:1975eslint · 60%
Unsafe Regular Expression
infoexecModel.js:1987eslint · 60%
Generic Object Injection Sink
infoexecModel.js:1988eslint · 60%
Generic Object Injection Sink
infoexecModel.js:2105eslint · 60%
Generic Object Injection Sink
infoexecModel.js:2118eslint · 60%
Generic Object Injection Sink
infoexecModel.js:2121eslint · 60%
Generic Object Injection Sink
infoexecModel.js:2123eslint · 60%
Function Call Object Injection Sink
infoexecModel.js:2144eslint · 60%
Function Call Object Injection Sink
infoexecModel.js:2149eslint · 60%
Function Call Object Injection Sink
infoexecModel.js:2174eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:2206eslint · 60%
Variable Assigned to Object Injection Sink
infoexecModel.js:2212eslint · 60%
Generic Object Injection Sink
infoexecModel.js:2214eslint · 60%
Generic Object Injection Sink
infoexecModel.js:2223eslint · 60%
Generic Object Injection Sink
infoothermodels/flights.pymalcontent · 60%
references an 'agent' [MEDIUM]
infootherOMARCHY-PLUGIN.md:37opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infopackageOMARCHY-PLUGIN.md:56opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infootherOMARCHY-PLUGIN.md:69opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherOMARCHY-PLUGIN.md:132opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherOMARCHY-PLUGIN.md:133opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherOMARCHY-PLUGIN.md:275opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherOMARCHY-PLUGIN.md:397opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infopackageOMARCHY-PLUGIN.md:413opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infootherOMARCHY-PLUGIN.md:431opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infonetworkopenapi.yaml:24opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkopenapi.yaml:24textscan · 100%
URL literal: https://letsfg.co
infonetworkopenapi.yaml:26opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infootherPanel.qmlmalcontent · 60%
references an 'agent' [MEDIUM]
infootherPanel.qmlmalcontent · 60%
upload content via HTTP form [MEDIUM]
infootherPanel.qmlmalcontent · 60%
submits content to websites [MEDIUM]
infootherPanel.qmlmalcontent · 60%
requests resources via URL [MEDIUM]
infootherPanel.qmlmalcontent · 60%
References 'malicious' [MEDIUM]
infootherPanel.qml:96opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherPanel.qml:130opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infofilesystemPanel.qml:152opengrep · 90%
Writes files from QML (FileView.setText / JsonAdapter writeAdapter).
infootherPanel.qml:276opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherPanel.qml:345opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherPanel.qml:736opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherPanel.qml:873opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infonetworkPanel.qml:1025ai · 60%
Generates a random anonymous install ID and sends it to the server as an analytics header (X-LetsFG-Install). It is disclosed in the code comments.
infofilesystemPanel.qml:1046opengrep · 90%
Writes files from QML (FileView.setText / JsonAdapter writeAdapter).
infofilesystemPanel.qml:1053opengrep · 90%
Writes files from QML (FileView.setText / JsonAdapter writeAdapter).
infonetworkPanel.qml:1277opengrep · 90%
HTTP request from QML/JS (XMLHttpRequest / fetch).
infonetworkPanel.qml:1284opengrep · 90%
HTTP request from QML/JS (XMLHttpRequest / fetch).
infonetworkPanel.qml:2643textscan · 100%
URL literal: https://letsfg.co
infootherpreview/run.pymalcontent · 60%
Detects writing executable files or changing file permissions to executable [MEDIUM]
infootherpreview/run.pymalcontent · 60%
possible hidden file path [MEDIUM]
infootherpreview/run.pymalcontent · 60%
references path within /Users [MEDIUM]
infootherpreview/run.pymalcontent · 60%
modifies file permissions [MEDIUM]
infoobfuscationREADME.md:11heckler · 100%
Variation Selector 16 (U+FE0F)
infopackageREADME.md:43opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infoobfuscationREADME.md:55heckler · 100%
Variation Selector 16 (U+FE0F)
infopackageREADME.md:289opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageREADME.md:292opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infoobfuscationREADME.md:403heckler · 100%
Variation Selector 16 (U+FE0F)
infopackageREADME.md:406opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infonetworkREADME.md:426opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkREADME.md:432opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkREADME.md:437opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infonetworkREADME.md:451opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infosecretREADME.md:451gitleaks · 85%
Possible hard-coded secret (Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.); value redacted, liveness not verified.
infonetworkREADME.md:455opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
infoobfuscationREADME.md:560heckler · 100%
Variation Selector 16 (U+FE0F)
infootherREADME.md:573opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infootherREADME.md:584opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infopackageREADME.md:606opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackageREADME.md:608opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infootherREADME.md:612opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
infoobfuscationREADME.md:781heckler · 100%
Variation Selector 16 (U+FE0F)
infoothersdk/js/package-lock.jsonmalcontent · 60%
references multiple operating systems [MEDIUM]
infoothersdk/js/package.jsonmalcontent · 60%
references an 'agent' [MEDIUM]
infonetworksdk/js/package.json:44textscan · 100%
URL literal: https://github.com
infonetworksdk/js/package.json:46textscan · 100%
URL literal: https://letsfg.co
infopackagesdk/js/README.md:15opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackagesdk/js/README.md:22opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infopackagesdk/js/README.md:109opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infoothersdk/js/src/auth.test.tsmalcontent · 60%
references and possibly executes relative path [MEDIUM]
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
infonetworksmithery.yaml:5textscan · 100%
URL literal: https://smithery.ai
infoothertest/model-test.jsmalcontent · 60%
Detects access to sensitive files (credentials, configs, keys) [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
Detects unicode homoglyphs and uncommon characters used for obfuscation [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
complex math with parseInt or fromCharCode conversions [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
contains hardcoded endpoint with a question mark [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
Contains HTML content [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
assembles strings from UTF-16 code units [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
path reference within /root [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
references an 'agent' [MEDIUM]
infoothertest/model-test.jsmalcontent · 60%
submits content to websites [MEDIUM]
infosecrettest/model-test.js:79gitleaks · 70%
Possible hard-coded secret (Detected a Generic API Key, potentially exposing access to various services and sensitive operations.); value redacted, liveness not verified.
infonetworktools/build-icons.py:16textscan · 100%
URL literal: https://lucide.dev
infoothertools/build-ranking.pymalcontent · 60%
execute external program [MEDIUM]
infoexectools/build-ranking.py:23bandit · 90%
blacklist: Consider possible security implications associated with the subprocess module.
Calls Omarchy commands or touches Omarchy shell state.
infoothertools/validate.sh:6opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
ai
escalate-only
pass 1okcontext pack, read-only
turns6
cost$0.14
pass 216findings re-checked
modelsonnet+fable
escalateno
Bar widget and panel only. Panel.qml uses XHR to letsfg.co and spawns no processes. It reads ~/.letsfg/config.json for the token and writes its own state files. Scanner hits are in SDK/tools files the shell doesn't load. Panel.qml and Model.js were only grepped.
escalate-only: the ai may add findings and raise one level; it never lowers a verdict and never clears a hard fail.
marketplace baseline
cautionunsigned
marketplace baseline: review-required
outcome
review-required (marketplace automated baseline)
caps
package-managerinstaller
mode
selective
commit
26b1fa8
checked
2026-08-27
counts as
≤caution
the marketplace publishes no findings, no score and no signature. it is the source of truth for metadata; for verdicts it can only raise combined to caution, never make it safe.
does
marketplace listing
Search hundreds of airlines from the bar. Uses your own LetsFG token; no keys are bundled.