| MEDIUM | join_resolve_path_traversal | Path constructed with user input can result in Path Traversal. Ensure that user input does not reach `join()` or `resolve()`. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/bin/install.js:0 → |
| MEDIUM | join_resolve_path_traversal | Path constructed with user input can result in Path Traversal. Ensure that user input does not reach `join()` or `resolve()`. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/generate-pages-redirect-bridge.js:0 → |
| HIGH | node_password | A hardcoded password in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/playwright-skill/lib/helpers.js:0 → |
| HIGH | node_password | A hardcoded password in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/playwright-skill/lib/helpers.js:0 → |
| HIGH | node_password | A hardcoded password in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-bundle-aas-accessibility-inclusive-ux/skills/playwright-skill/lib/helpers.js:0 → |
| HIGH | node_password | A hardcoded password in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-bundle-aas-qa-test-automation/skills/playwright-skill/lib/helpers.js:0 → |
| HIGH | node_password | A hardcoded password in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/playwright-skill/lib/helpers.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/aas_v1_evidence.test.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/aas_v1_runtime_config.test.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/copy_security.test.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/copy_security.test.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/copy_security.test.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/copy_security.test.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/installer_update_sync.test.js:0 → |
| HIGH | node_secret | A hardcoded secret is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/symlink_safety.test.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-audience-analysis/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-brand-reputation-monitoring/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-competitor-intelligence/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-content-analytics/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-ecommerce/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-influencer-discovery/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-lead-generation/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-market-research/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-trend-analysis/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/apify-ultimate-scraper/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-audience-analysis/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-brand-reputation-monitoring/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-competitor-intelligence/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-content-analytics/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-influencer-discovery/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-lead-generation/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-market-research/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-trend-analysis/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/apify-ultimate-scraper/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-bundle-aas-localization-international-growth/skills/apify-market-research/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-audience-analysis/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-brand-reputation-monitoring/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-competitor-intelligence/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-content-analytics/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-ecommerce/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-influencer-discovery/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-lead-generation/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-market-research/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-trend-analysis/reference/scripts/run_actor.js:0 → |
| MEDIUM | node_username | A hardcoded username in plain text is identified. Store it properly in an environment variable. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/apify-ultimate-scraper/reference/scripts/run_actor.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/prerender-routes.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/prerender-routes.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/prerender-routes.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/prerender-routes.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/prerender-routes.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/verify-seo-assets.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/verify-seo-assets.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/verify-seo-assets.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/verify-seo-assets.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/apps/web-app/scripts/verify-seo-assets.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills-claude/skills/hyperexecute-skill/scripts/validate-config.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/plugins/agentic-awesome-skills/skills/hyperexecute-skill/scripts/validate-config.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/skills/hyperexecute-skill/scripts/validate-config.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/bin/install.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/bin/install.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/cache/runtime.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/cli/main.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/evidence.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/evidence.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/mcp/strict-json.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/mcp/strict-json.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/stack/manifest.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/stack/plan.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/stack/plan.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/aas-v1/stack/plan.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/reviewed-fork-skills.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/workflow-contract.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/lib/workflow-contract.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/sync-readme-stats.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/docs_security_content.test.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/tests/run-test-suite.js:0 → |
| MEDIUM | regex_dos | Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service. | sickn33_antigravity-awesome-skills_prometheus-configuration-83940ad2/tools/scripts/validate-skills.js:0 → |