clerk-backend-api

Fail

Audited by Runlayer on Mar 3, 2026

Risk Level: HIGH
Scan Summary
Max Score
92%
Files
7
Flagged
3
Chunks
7
Flagged Files (3)
clerk-backend-api/scripts/api-specs-context.shHIGH
92.5%

Malicious tool definition detected

set -euo pipefail API_URL="https://api.github.com/repos/clerk/openapi-specs/contents/bapi" RAW_BASE="https://raw.githubusercontent.com/clerk/openapi-specs/main/bapi" # Fetch version list, parse dates, sort, pick latest versions=$(curl -s "$API_URL" | node -e " let d=''; process.stdin.on('data',c=>d+=c); process.stdin.on('end',()=>{

clerk-backend-api/scripts/execute-request.shLOW
66.3%

Tool passed security scan

clerk-backend-api/scripts/extract-endpoint-detail.shLOW
56.6%

Tool passed security scan

Passed Files (4)Click to expand
clerk-backend-api/SKILL.mdOK
46.9%

Tool passed security scan

clerk-backend-api/scripts/extract-tags.jsOK
43.9%

Tool passed security scan

clerk-backend-api/scripts/extract-tag-endpoints.shOK
24.5%

Tool passed security scan

clerk-backend-api/.claude-plugin/plugin.jsonOK
15.0%

Tool passed security scan

Audit Metadata
Max File Score
92%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
7
Files Flagged
3
Chunks Analyzed
7
Analyzed
Mar 3, 2026, 05:36 PM
Security Audit — runlayer — clerk-backend-api