{"data":{"slug":"ads-setup","verdict":"passed","scannedAt":"2026-10-26T10:54:32.712Z","scannerVersion":"1.2.1","latest":{"id":"fc418138-aecd-4555-be8a-8068a9ac5180","createdAt":"2026-10-25T23:22:55.428Z","version":"eabbf08","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":2,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"…or commit them. Refuse remote pipe-to-shell installation, including `curl | bash` and `wget | sh`. Prefer the host-native plugin installer. Otherwise …","location":"SKILL.md, line 36","severity":"low"},{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"…efuse remote pipe-to-shell installation, including `curl | bash` and `wget | sh`. Prefer the host-native plugin installer. Otherwise use an authentic…","location":"SKILL.md, line 36","severity":"low"}],"toolCount":null},"history":[{"id":"fc418138-aecd-4555-be8a-8068a9ac5180","createdAt":"2026-10-25T23:22:55.428Z","version":"eabbf08","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":2,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"…or commit them. Refuse remote pipe-to-shell installation, including `curl | bash` and `wget | sh`. Prefer the host-native plugin installer. Otherwise …","location":"SKILL.md, line 36","severity":"low"},{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"…efuse remote pipe-to-shell installation, including `curl | bash` and `wget | sh`. Prefer the host-native plugin installer. Otherwise use an authentic…","location":"SKILL.md, line 36","severity":"low"}],"toolCount":null}],"endpoint":null,"tools":[],"toolsHash":null,"toolsPinnedAt":null,"toolsLastSeenAt":null,"toolChanges":[]}}