github.com / Fission-AI

Fission-AI/openspec

TypeScript·1306 files·commit 56ef0ac·scanned 5d ago·cached ✓

15/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 15 — 72,780+ stars — findings likely false positives

verdict accurate?

72,780 stars

38% file coverage

Partial architecture graph

CLI tool detected

threat-state: lowlive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/telemetry/index.ts, src/core/templates/workflows/explore.ts. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry2 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

warningSSH/credential path accessAccessing .ssh, .aws/credentials, or .env files to steal authentication credentials..devcontainer/devcontainer.json

  "mounts": [
    "source=${localEnv:HOME}${localEnv:USERPROFILE}/.ssh,target=/home/node/.ssh,readonly,type=bind,consistency=cached"
  ],

warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/core/templates/workflows/explore.ts+4

infoAuthor has no other public repositoriesGitHub user "dependabot[bot]" has no other public repositories, common for burner accounts used in scams.+2

warningHardcoded secret/credentialAPI keys, passwords, or tokens hardcoded in source code. Should be in environment variables.src/telemetry/index.ts

// This is safe to embed as it only allows sending events, not reading data
const POSTHOG_API_KEY = 'phc_Hthu8YvaIJ9QaFKyTG4TbVwkbd5ktcAFzVTKeMmoW2g';
// Using reverse proxy to avoid ad blockers and k...

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

492 files scanned @ 56ef0ac | 10/23/2026 | heuristic scan — always review manually

risk by category

code execution13

network & exfiltration0

file system access5

obfuscation4

supply chain2

owasp / injection3

telemetry

files 492/1306rules hit 6engine v7commit 56ef0ac

github

Fission-AI/openspec

Spec-driven development (SDD) for AI coding assistants.

TypeScript

72780

4967

449d

1306 files

492 scanned(38%)

56ef0ac

architecture░▒▓

entry (3) flagged (2) pkg (26)

426 nodes · 1456 edgesscroll to zoom · click node to jump to finding