github.com / virgiliojr94
virgiliojr94/ book-to-skill
Python·85 files·commit a08859f·scanned 10d ago·cached ✓
15/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
score capped at 15 — 22,874+ stars — findings likely false positives
verdict accurate?
22,874 stars
threat-state: lowlive
FINDINGS ░▒▓
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.book_to_skill/parsers/rtf.py+3
warningHigh-entropy string literalsFound 14 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.book_to_skill/utils.py+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.book_to_skill/utils.py+3
warningHigh-entropy string literalsFound 21 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.tests/test_book_to_skill.py+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.tests/test_book_to_skill.py+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
46 files scanned @ a08859f | 8/19/2026 | heuristic scan — always review manually
risk by category
code execution2
network & exfiltration0
file system access0
obfuscation15
supply chain0
owasp / injection0
telemetry
files 46/85rules hit 6engine v5commit a08859f
github
virgiliojr94/book-to-skill
Turn any technical book PDF into a Claude Code skill — ready to study, reference, and use while you work.
22874
2423
121d
85 files
46 scanned(54%)
a08859f
architecture░▒▓
entry (0) flagged (4) pkg (52)
98 nodes · 154 edgesscroll to zoom · click node to jump to finding