but

Warn

Audited by Runlayer on Mar 16, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
89%
Files
8
Flagged
7
Chunks
18
Flagged Files (7)
but/SKILL.with-link.mdMEDIUM
88.9%

Privilege Escalation

Shadow Persistence

Context Poisoning

Guardrail Bypass

Prompt Injection

but/references/reference.mdMEDIUM
83.1%

Tool passed security scan

Malicious tool definition detected

Requires forge integration to be configured via `but config forge auth`. ### `but merge <branch>` Merge branch into local target branch.

but/references/examples.mdMEDIUM
76.0%

Malicious tool definition detected

Implement auth and commit # (edit auth/login.js, auth/middleware.js) but status --json but stage <file-ids> bu --json --status-after # Stage changes to auth branch but commit bu --only -m "Add JWT authentication" --json --status-after # 4. Create stacked branch anchored on authentication but branch new user-profile -a bu # 5. Implement profile page (depends on auth) # (edit pages/profile.js) but status --json but stage <file-ids> bv --json --status-after # Stage changes to profile branch but com

Didn't mean to squash # Undo it but undo # Reverts the squash ``` ### Restore to Earlier Point ```bash # View operation history but oplog --json # Output: # s5: squash branch bu # s4: commit bu "message" # s3: stage files to bu # s2: create branch bu # s1: pull from remote # Restore to before squash but oplog restore s4 ``` ### Discard Uncommitted Changes ```bash # Changed a file but want to discard but status --json # Output: # Unstaged: # a1: bad-changes.js # Discard it but discard a1 ``` ## T

but/references/link.mdMEDIUM
75.5%

Prompt Injection

Privilege Escalation

Shadow Persistence

Context Poisoning

Guardrail Bypass

but/RESEARCH.mdLOW
73.7%

Tool passed security scan

Malicious tool definition detected

Track this score over time. Every SKILL.md change should improve or maintain the score. ## Statistical Considerations LLM outputs are non-deterministic. To

but/SKILL.mdLOW
53.7%

Tool passed security scan

but/README.mdLOW
51.8%

Tool passed security scan

Passed Files (1)Click to expand
but/references/concepts.mdOK
32.8%

Tool passed security scan

Audit Metadata
Max File Score
89%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
8
Files Flagged
7
Chunks Analyzed
18
Analyzed
Mar 16, 2026, 04:13 PM
Security Audit — runlayer — but