Rank#4800
Security Findings
3pull_request_target with secrets
MaliciousLineage[.github/workflows/auto-response.yml] pull_request_target with secrets
Unpinned dependencies
SuspiciousLineage2 unpinned: @openclaw/ai, @openclaw/session-url-contract
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/mantis-slack-desktop-smoke.yml] curl -fsS --connect-timeout 5 --max-time 15 https://checkip.amazonaws.com
Editions
2- 2026.9.4Scanned Sep 11, 2026, 08:03 PMMedium
- 2026.7.1Scanned Aug 4, 2026, 03:33 PMMedium