hve-core-installer

Fail

Audited by Runlayer on Mar 13, 2026

Risk Level: HIGH
Scan Summary
Max Score
93%
Files
26
Flagged
24
Chunks
31
Flagged Files (24)
hve-core-installer/scripts/eject.shHIGH
92.6%

Destructive Action

hve-core-installer/scripts/agent-copy.shHIGH
91.2%

Destructive Action

Shadow Persistence

hve-core-installer/tests/file-status-check.Tests.ps1HIGH
90.5%

Risky tool definition detected

# SPDX-License-Identifier: MIT Describe 'file-status-check' -Tag 'Unit' { BeforeAll { $script:scriptPath = Join-Path $PSScriptRoot '../scripts/file-status-check.ps1' $script:testRoot = Join-Path ([System.IO.Path]::GetTempPath()) "hve-test-file-status-$([guid]::NewGuid().ToString('N'))" } BeforeEach { New-Item -ItemType Directory -Path $script:testRoot -Force | Out-Null Push-Location $script:testRoot } AfterEach { Pop-Location } AfterAll { if (Test-Path $script:testRoot) { Remove-Item $script:tes

hve-core-installer/scripts/file-status-check.shMEDIUM
87.7%

Destructive Action

hve-core-installer/tests/eject.Tests.ps1MEDIUM
87.2%

Risky tool definition detected

hve-core-installer/scripts/eject.ps1MEDIUM
85.9%

Destructive Action

hve-core-installer/scripts/agent-copy.ps1MEDIUM
85.8%

Destructive Action

Shadow Persistence

hve-core-installer/tests/agent-copy.Tests.ps1MEDIUM
85.0%

Risky tool definition detected

hve-core-installer/tests/upgrade-detection.Tests.ps1MEDIUM
83.1%

Risky tool definition detected

# SPDX-License-Identifier: MIT Describe 'upgrade-detection' -Tag 'Unit' { BeforeAll { $script:scriptPath = Join-Path $PSScriptRoot '../scripts/upgrade-detection.ps1' $script:testRoot = Join-Path ([System.IO.Path]::GetTempPath()) "hve-test-upgrade-$([guid]::NewGuid().ToString('N'))" $script:sourceRoot = Join-Path $script:testRoot 'source' } BeforeEach { New-Item -ItemType Directory -Path $script:testRoot -Force | Out-Null New-Item -ItemType Directory -Path $script:sourceRoot -Force | Out-Null Pus

hve-core-installer/tests/collision-detection.Tests.ps1MEDIUM
83.0%

Risky tool definition detected

hve-core-installer/scripts/validate-installation.shMEDIUM
83.0%

Risky tool definition detected

command -v jq >/dev/null 2>&1; then echo "⚠️ jq not installed - skipping workspace JSON validation" echo " Install jq for full validation, or manually verify hve-core.code-workspace has 2+ folders" elif [ -f "hve-core.code-workspace" ] && jq -e '.folders | length >= 2' hve-core.code-workspace >/dev/null 2>&1; then echo "✅ Multi-root configured" else echo "❌ Multi-root not configured"; valid=false fi fi # Method 6: submodule check [ "$method" = "6" ] && { grep -q "lib/hve-core" .gitmodules 2>/

hve-core-installer/SKILL.mdMEDIUM
80.0%

Tool passed security scan

Prompt Injection

Guardrail Bypass

Destructive Action

Context Poisoning

hve-core-installer/scripts/upgrade-detection.shMEDIUM
79.8%

Risky tool definition detected

hve-core-installer/scripts/validate-extension.shMEDIUM
78.0%

Risky tool definition detected

if "$code_cli" --list-extensions 2>/dev/null | grep -q "ise-hve-essentials.hve-core"; then echo "✅ HVE Core extension installed successfully" installed=true else echo "❌ Extension not found in installed extensions" installed=false fi # Verify version (optional) version=$("$code_cli" --list-extensions --show-versions 2>/dev/null | grep "ise-hve-essentials.hve-core" | sed 's/.*@//' || true) [ -n "$version" ] && echo "📌 Version: $version" echo "EXTENSION_INSTALLED=$installed"

hve-core-installer/scripts/detect-environment.shMEDIUM
76.6%

Risky tool definition detected

hve-core-installer/scripts/detect-environment.ps1LOW
74.7%

Risky tool definition detected

$is_devcontainer = $false if ($env:CODESPACES -eq "true") { $env_type = "codespaces" $is_codespaces = $true $is_devcontainer = $true } elseif ((Test-Path "/.dockerenv") -or ($env:REMOTE_CONTAINERS -eq "true")) { $env_type = "devcontainer" $is_devcontainer = $true } $has_devcontainer_json = Test-Path ".devcontainer/devcontainer.json" $has_workspace_file = (Get-ChildItem -Filter "*.code-workspace" -ErrorAction SilentlyContinue | Measure-Object).Count -gt 0 try { $is_hve_core_repo = (Split-Path (gi

hve-core-installer/scripts/upgrade-detection.ps1LOW
73.0%

Risky tool definition detected

param( [Parameter(Mandatory)] [ValidateScript({ Test-Path $_ })] [string]$HveCoreBasePath ) $ErrorActionPreference = 'Stop' $manifestPath = ".hve-tracking.json" if (Test-Path $manifestPath) { $manifest = Get-Content $manifestPath | ConvertFrom-Json -AsHashtable $sourceVersion = (Get-Content "$hveCoreBasePath/package.json" | ConvertFrom-Json).version Write-Host "UPGRADE_MODE=true" Write-Host "INSTALLED_VERSION=$($manifest.version)" Write-Host "SOURCE_VERSION=$sourceVersion" Write-Host "VERSION_CH

hve-core-installer/tests/detect-environment.Tests.ps1LOW
72.1%

Risky tool definition detected

# SPDX-License-Identifier: MIT Describe 'detect-environment' -Tag 'Unit' { BeforeAll { $script:scriptPath = Join-Path $PSScriptRoot '../scripts/detect-environment.ps1' $script:testRoot = Join-Path ([System.IO.Path]::GetTempPath()) "hve-test-detect-env-$([guid]::NewGuid().ToString('N'))" } BeforeEach { # Clean and recreate temp directory for full isolation between tests if (Test-Path $script:testRoot) { Remove-Item $script:testRoot -Recurse -Force -ErrorAction SilentlyContinue } New-Item -ItemTyp

hve-core-installer/scripts/validate-installation.ps1LOW
69.8%

Tool passed security scan

hve-core-installer/tests/validate-installation.Tests.ps1LOW
56.8%

Tool passed security scan

hve-core-installer/scripts/validate-extension.ps1LOW
53.7%

Tool passed security scan

hve-core-installer/scripts/file-status-check.ps1LOW
53.7%

Tool passed security scan

hve-core-installer/tests/validate-extension.Tests.ps1LOW
53.5%

Tool passed security scan

hve-core-installer/scripts/collision-detection.ps1LOW
52.4%

Tool passed security scan

Passed Files (2)Click to expand
hve-core-installer/scripts/collision-detection.shOK
49.5%

Tool passed security scan

hve-core-installer/examples/README.mdOK
46.7%

Tool passed security scan

Audit Metadata
Max File Score
93%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
26
Files Flagged
24
Chunks Analyzed
31
Analyzed
Mar 13, 2026, 08:46 PM
Security Audit — runlayer — hve-core-installer