live · scanning repos
Scanrepo
github.com
github.com / kryptamine

kryptamine/herdr-auto-title

Go·111 files·commit d01fe9f·scanned 14m ago·cached ✓
9/100
SAFE
No malicious patterns found. Repo signals are consistent with a legitimate project.
verdict accurate?
threat-state: safelive

FINDINGS ░▒▓

warningGo unsafe package usageunsafe package bypasses Go's type safety. Malware uses it for memory tricks, pointer casts, and hiding behavior.internal/herdr/listen_windows_test.go
	"testing"
	"unsafe"
)
+3
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2
infoAuthor has no other public repositoriesGitHub user "github-actions[bot]" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

76 files scanned @ d01fe9f | 9/25/2026 | heuristic scan — always review manually

risk by category
code execution5
network & exfiltration0
file system access0
obfuscation0
supply chain2
owasp / injection0
telemetry
files 76/111rules hit 3engine v6commit d01fe9f

github

kryptamine/herdr-auto-title

Automatically name Herdr tabs and panes from your current work, Git branch, terminal activity, and Claude Code sessions.

Go
200
19
32d
111 files
76 scanned(68%)
d01fe9f

architecture░▒▓

entry (0) flagged (1) pkg (34)
108 nodes · 191 edgesscroll to zoom · click node to jump to finding
SAFE (9/100) — kryptamine/herdr-auto-title — ScanRepo