{"data":{"slug":"kraken-cli","verdict":"passed","scannedAt":"2026-10-26T04:30:47.016Z","scannerVersion":"1.2.1","latest":{"id":"f70eb0fe-b2da-4bf8-a02c-59c1ef0a840b","createdAt":"2026-10-26T02:49:59.030Z","version":"latest","trigger":"changed","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":1,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"…th Kraken's one-line installer (macOS and Linux; on Windows use WSL): curl --proto '=https' --tlsv1.2 -LsSf https://github.com/krakenfx/kraken-cli/releases/latest/download/kraken-cli-installer.sh | sh - In Gemini CLI: gemini extensions install https://github.com/krakenf…","location":"Description, line 11","severity":"low"}],"toolCount":null},"history":[{"id":"f70eb0fe-b2da-4bf8-a02c-59c1ef0a840b","createdAt":"2026-10-26T02:49:59.030Z","version":"latest","trigger":"changed","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":1,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"…th Kraken's one-line installer (macOS and Linux; on Windows use WSL): curl --proto '=https' --tlsv1.2 -LsSf https://github.com/krakenfx/kraken-cli/releases/latest/download/kraken-cli-installer.sh | sh - In Gemini CLI: gemini extensions install https://github.com/krakenf…","location":"Description, line 11","severity":"low"}],"toolCount":null},{"id":"61b02f9d-5c92-448f-9cfe-a61af394168f","createdAt":"2026-10-26T02:08:59.206Z","version":"latest","trigger":"changed","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":0,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[],"toolCount":null},{"id":"b93a207c-a55f-4cb4-a1a0-b09f4b6d6af7","createdAt":"2026-10-25T23:40:51.819Z","version":"0.4.1","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":0,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[],"toolCount":null}],"endpoint":null,"tools":[],"toolsHash":null,"toolsPinnedAt":null,"toolsLastSeenAt":null,"toolChanges":[]}}