Hi Eunkwang,
I hope you're doing well! I recently ran Trustabl on your public repo, gracefullight/docusaurus-plugins, and found 23 high-severity issues. Some of the top categories include subagents being granted built-in Bash tools and filesystem-write or web-fetch capabilities.
These findings suggest there might be potential reliability and safety risks in your codebase that could use a closer look.
Best,
Joshua - Trustabl
Add Trustabl to your CI — trustabl/trustabl-action:
- name: Trustabl scan
uses: trustabl/trustabl-action@v1
More info: https://trustabl.ai
Hi Eunkwang,
I hope you're doing well! I recently ran Trustabl on your public repo, gracefullight/docusaurus-plugins, and found 23 high-severity issues. Some of the top categories include subagents being granted built-in Bash tools and filesystem-write or web-fetch capabilities.
These findings suggest there might be potential reliability and safety risks in your codebase that could use a closer look.
Best,
Joshua - Trustabl
Add Trustabl to your CI — trustabl/trustabl-action:
More info: https://trustabl.ai