Grade B− — exceptionally disciplined design, but one CRITICAL zero-interaction RCE (F-1) plus two HIGH shell/path sinks. PUSH PARKED pending responsible-disclosure decision. Part of the marketplace-wide review (config-audit v5.4.0 + llm-security + structure + version). Read-only; this file is the only artifact. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ter3E2JSi1Khgmuf2kady8 |
||
|---|---|---|
| .. | ||
| plans | ||
| ci-cd-guide.md | ||
| critical-review-2026-04-20.md | ||
| defense-philosophy.md | ||
| review-2026-06-20.md | ||
| scanner-reference.md | ||
| security-hardening-guide.md | ||
| version-history.md | ||