{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"fectivnfy112357-github-explore","slug":"fectivnfy112357-github-explore","rank":920,"url":"https://github.com/Fectivnfy112357/github-explore","name":"Fectivnfy112357/github-explore","category":"git","description":{"zh":"基于 gh CLI 的 GitHub 搜索/发现/审计技能包（SKILL.md 打包）：仓库搜索、多轴探索、趋势、仓库概览、相似项目、代码搜索、issue/PR 搜索与组织审计；以 dsh bundle 形式安装（并已发布 npm）。","en":"GitHub search, discovery and audit scripts wrapped as a SKILL.md pack around the gh CLI: repo search, multi-axis explore, trending, repo summaries, similar projects, code search, issue/PR search and org audits; ships as a dsh bundle (and on npm)."},"stars":2,"starsCheckedAt":"2026-08-21","repository":{"owner":"Fectivnfy112357","repo":"github-explore","requestedRef":null,"subpath":""},"npm":"github-explore","downloads":22,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add github-explore","tarball":null,"added":"2026-08-16","page":"https://awesome-dsh-plugin.com/p/Fectivnfy112357/github-explore/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"fectivnfy112357-github-explore","slug":"fectivnfy112357-github-explore","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:29:56.828Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"e362c8c43b663083d496357c21ec5fb996fd5359","commitDate":"2026-08-20T13:09:28+08:00","artifactDigest":"sha256:c6b80d12a3cb20a469eeb8aedc9f8f2d1e46b84b0aa56b17965babe67fa3c07d","downloadUrl":"https://github.com/Fectivnfy112357/github-explore/archive/e362c8c43b663083d496357c21ec5fb996fd5359.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add github-explore","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"github-explore","packageVersion":"3.1.0","bundle":{"patch":"./cordis.patch.yml"},"client":null,"lifecycleScripts":{},"peerDependencies":[]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"github-explore","manifestName":"github-explore","nameMatch":true,"npm":{"name":"github-explore","latestVersion":"3.1.0","publishedAt":"2026-08-16T13:13:40.311Z","createdAt":"2026-08-16T13:13:40.088Z","versionCount":1,"maintainers":1,"repository":"git+https://github.com/Fectivnfy112357/github-explore.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"none","tarballHost":null,"versionMatch":"match"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"github-explore-skill","name":"github-explore","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":null,"parseErrors":[]},"capabilities":["browser-ui","filesystem","host-bundle","subprocess"],"outboundHosts":[{"host":"cli.github.com","count":2}],"findings":[{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/github-explore/scripts/_lib.py","pathClass":"source","line":34,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"a6b44d7977febfc9e34ec1a2"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/github-explore/scripts/_lib.py","pathClass":"source","line":288,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"a6b44d7977febfc9e34ec1a2"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/github-explore/scripts/explore.py","pathClass":"source","line":277,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"9153ee2bc13a9b7d1e601f5e"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"skills/github-explore/scripts/explore.py","pathClass":"source","line":531,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"9153ee2bc13a9b7d1e601f5e"}],"counts":{"critical":0,"high":0,"medium":0,"low":4},"rawCounts":{"critical":0,"high":0,"medium":0,"low":4},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":27,"bytesScanned":192295,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":8,"cordis":1,"source":13,"manifest":1,"data":4}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:29:56.828Z","commit":"e362c8c43b663083d496357c21ec5fb996fd5359","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:32:46.156Z","commit":"e362c8c43b663083d496357c21ec5fb996fd5359","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:01:43.482Z","commit":"e362c8c43b663083d496357c21ec5fb996fd5359","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"e362c8c43b663083d496357c21ec5fb996fd5359","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:29:56.828Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"e362c8c43b663083d496357c21ec5fb996fd5359","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:32:46.156Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"e362c8c43b663083d496357c21ec5fb996fd5359","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T11:01:43.482Z"}]}